$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20788088-a23e-345a-b68d-a28ca6bcb9c5.roa File: 20788088-a23e-345a-b68d-a28ca6bcb9c5.roa (raw, json) Hash identifier: 5IJuqX32R7koSxLSnhW0GDuCArtCS9C4gv2r+XkzdBs= Subject key identifier: 1E:74:43:46:FD:2B:8F:33:9E:81:54:97:6E:C1:72:3D:86:47:11:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE9B08586EC8972788891C714 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20788088-a23e-345a-b68d-a28ca6bcb9c5.roa Signing time: Fri 22 May 2026 01:00:24 +0000 ROA not before: Fri 22 May 2026 01:00:24 +0000 ROA not after: Thu 20 Aug 2026 01:00:24 +0000 asID: 63949 IP address blocks: 172.235.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e9:b0:85:86:ec:89:72:78:88:91:c7:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 22 01:00:24 2026 GMT Not After : Aug 20 01:00:24 2026 GMT Subject: CN=74df814e-5ed1-4d3a-9619-e3a119607e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:71:aa:cc:93:06:c3:9b:8f:62:52:d7:6e:12: 7f:af:5b:76:e9:96:7c:f6:56:6f:00:9a:23:19:98: d9:5b:1f:bf:a7:8a:6c:31:a0:25:e8:36:b2:34:3b: 0e:4d:a6:ed:d2:9b:62:c5:0c:fc:de:24:c9:6d:c0: 3e:5a:4b:39:d4:75:67:ba:81:85:9a:57:fc:a2:2f: de:e2:a6:95:bd:1e:f5:ee:8c:f8:05:45:4c:9f:bd: 4a:08:03:99:c1:8f:28:13:f4:b7:2f:b2:d2:45:65: 49:88:81:ef:ad:8b:65:94:26:57:8b:63:42:76:6d: 5a:10:eb:df:d6:98:cb:cd:ee:7d:b2:75:93:1d:01: d2:d2:e6:69:ab:1f:4c:f8:e0:b4:4b:07:fc:cc:81: 10:bd:5e:d8:28:56:5e:f3:b2:1a:7a:e9:ac:84:9c: 7d:6e:65:41:b0:5f:2b:da:41:3a:a7:73:1f:b3:db: ab:cf:63:24:29:34:43:5d:a8:de:1e:ad:45:5d:ad: 68:3f:3b:51:7c:cc:10:bc:fe:83:f6:3a:aa:39:1c: d1:c4:97:eb:2a:0c:02:1c:99:86:62:1a:d7:64:b1: 9e:b6:cd:e5:fc:c2:08:30:26:07:ce:c5:3b:cf:4c: 8b:15:29:6a:32:bd:56:e6:b8:ed:70:c0:ed:5d:ec: 31:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:74:43:46:FD:2B:8F:33:9E:81:54:97:6E:C1:72:3D:86:47:11:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/20788088-a23e-345a-b68d-a28ca6bcb9c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f4:6d:1b:12:d2:81:14:1d:21:5d:2c:94:3f:67:4e:1e:77: 28:3c:f7:6a:88:e3:32:6c:b6:f8:87:e2:fa:a6:09:1f:46:d8: 09:51:b7:fb:35:21:a3:4c:fa:a4:2e:cf:0e:31:8e:c4:cf:d8: 4f:ca:c6:4f:95:00:2c:34:c1:31:c2:23:02:1a:aa:23:b3:99: 7b:ac:3e:0a:a4:d3:52:72:07:74:6d:35:9d:d4:fc:57:78:a1: 90:73:07:86:13:3f:cb:a6:fa:95:bb:4c:21:56:9d:17:0c:95: b4:93:92:65:7f:bc:19:cc:56:67:57:ea:dd:4b:42:a7:67:47: d0:dd:40:64:78:54:ae:1a:d7:8f:77:20:a8:f6:cc:7b:92:b2: f0:e6:36:cd:a0:80:26:30:c6:41:63:2f:60:cc:e6:69:83:05: d7:9e:ae:99:f5:46:a2:5d:61:dd:aa:c4:d5:ca:5a:36:96:56: ab:df:bf:c6:3d:55:3f:f3:92:05:6d:8f:23:28:e5:bf:59:85: 12:6b:17:4e:1e:78:bb:dc:de:09:cd:4c:b2:96:ca:c8:f9:c5: 50:0f:03:1c:05:32:99:a4:75:d4:ed:61:30:64:77:8b:20:01: 11:87:1b:1f:ed:7b:e4:a1:2a:fb:64:e3:45:9d:18:c6:4a:8b: 66:12:be:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3psIWG7IlyeIiRxxQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUyMjAxMDAyNFoXDTI2MDgyMDAxMDAyNFowLzEtMCsGA1UEAxMk NzRkZjgxNGUtNWVkMS00ZDNhLTk2MTktZTNhMTE5NjA3ZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3GqzJMGw5uPYlLXbhJ/r1t26ZZ89lZvAJoj GZjZWx+/p4psMaAl6DayNDsOTabt0ptixQz83iTJbcA+Wks51HVnuoGFmlf8oi/e 4qaVvR717oz4BUVMn71KCAOZwY8oE/S3L7LSRWVJiIHvrYtllCZXi2NCdm1aEOvf 1pjLze59snWTHQHS0uZpqx9M+OC0Swf8zIEQvV7YKFZe87IaeumshJx9bmVBsF8r 2kE6p3Mfs9urz2MkKTRDXajeHq1FXa1oPztRfMwQvP6D9jqqORzRxJfrKgwCHJmG YhrXZLGets3l/MIIMCYHzsU7z0yLFSlqMr1W5rjtcMDtXewxkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB50Q0b9K48znoFUl27Bcj2GRxFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjA3ODgwODgtYTIzZS0z NDVhLWI2OGQtYTI4Y2E2YmNiOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErOvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL0bRsS0oEUHSFdLJQ/Z04edyg892qI4zJstviH4vqmCR9G2AlRt/s1 IaNM+qQuzw4xjsTP2E/Kxk+VACw0wTHCIwIaqiOzmXusPgqk01JyB3RtNZ3U/Fd4 oZBzB4YTP8um+pW7TCFWnRcMlbSTkmV/vBnMVmdX6t1LQqdnR9DdQGR4VK4a1493 IKj2zHuSsvDmNs2ggCYwxkFjL2DM5mmDBdeerpn1RqJdYd2qxNXKWjaWVqvfv8Y9 VT/zkgVtjyMo5b9ZhRJrF04eeLvc3gnNTLKWysj5xVAPAxwFMpmkddTtYTBkd4sg ARGHGx/te+ShKvtk40WdGMZKi2YSvmg= -----END CERTIFICATE-----Generated at Sat Jun 6 08:25:52 2026 by rpki-client