$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4975aade-55e2-3700-bfa0-ae1cc1df8ba2.roa File: 4975aade-55e2-3700-bfa0-ae1cc1df8ba2.roa (raw, json) Hash identifier: a26YjX2NAEtQx/OIu8UthJ4x8/cQxXylGo5E06YMJNc= Subject key identifier: AA:22:0C:B9:0C:D4:4D:AD:D7:B2:F1:E6:03:01:56:56:FF:F5:3F:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D8EF983846BB61113606CD240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4975aade-55e2-3700-bfa0-ae1cc1df8ba2.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 36183 IP address blocks: 172.224.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f9:83:84:6b:b6:11:13:60:6c:d2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=e7f83cf3-de55-4677-be1e-35a6cf0ee4e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:d5:a2:62:a8:ae:ec:db:bd:d6:21:69:5a: 32:fb:02:87:24:6d:b7:cf:47:2b:5e:29:0d:83:a4: 80:bc:7a:94:c2:e5:83:47:78:6c:77:e6:2b:81:dd: 9c:84:bb:1c:d2:fa:35:57:7e:2f:aa:f2:a0:63:b9: eb:96:c3:a4:b1:28:b8:3e:75:74:04:14:c3:89:6b: 1a:a9:3e:63:9f:99:2b:6a:58:91:af:ed:0a:bc:17: 0d:a1:2e:66:30:29:2a:3e:6e:33:5e:78:81:b5:9b: c9:0a:6d:b7:a9:6d:20:78:68:47:43:ec:72:09:14: 85:64:ec:13:4b:80:84:d6:21:d2:49:72:59:ab:dc: 9e:90:da:6b:c1:f7:8a:cc:60:9e:a9:98:48:a4:0c: 69:c3:3a:c3:73:be:9c:0f:23:04:e5:ec:5e:57:23: a1:77:42:89:28:d8:37:92:7c:10:8e:3e:61:d6:92: 17:ff:27:ed:a4:7c:e4:26:f1:0c:04:92:e6:71:e6: 4b:4d:b9:0f:3a:6c:0f:ee:ad:00:1a:a8:74:ad:65: 1a:2b:5d:ba:8c:f9:41:1c:9e:eb:7a:90:e7:01:5d: 72:34:d4:c8:72:4d:a0:e6:5b:c9:43:ad:ad:88:9d: 47:29:c3:f0:94:68:5c:62:7d:a9:d2:b0:c4:c5:6c: 0e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:22:0C:B9:0C:D4:4D:AD:D7:B2:F1:E6:03:01:56:56:FF:F5:3F:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4975aade-55e2-3700-bfa0-ae1cc1df8ba2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:45:62:6b:57:8d:cf:4f:63:01:5c:5b:7a:23:a1:aa:d8:30: 87:88:22:18:97:37:23:e4:3f:eb:e9:54:7d:ca:c0:e4:1b:8f: ef:3d:36:55:f0:0e:35:8b:9e:d1:72:53:3c:db:df:b7:2d:16: 4d:bb:c2:22:e9:e0:0e:5b:70:0d:2f:ae:c6:ed:69:82:d9:2f: 02:68:5a:a4:4e:1c:9f:9b:d2:ee:9d:ad:75:98:e5:3b:a0:78: 52:d9:4c:0d:3a:1d:57:74:88:be:ed:d8:1c:a4:9b:18:f7:e7: b1:54:9b:21:4c:af:99:8d:ab:be:db:dd:95:ab:e3:a0:07:90: 0f:74:a8:88:4e:c9:14:95:cf:e4:f9:9b:b8:d1:e9:24:25:f7: 30:ef:15:6b:da:41:8f:f7:61:8a:9d:9d:f8:97:53:81:03:4d: 7e:4b:42:24:ba:d4:bb:a5:e2:c5:f2:fd:af:c4:7b:f0:1b:36: 5a:73:7a:95:3b:c2:e4:3e:6e:d7:97:a9:ba:80:ea:97:a8:8e: bb:44:9c:77:83:08:79:87:38:21:a7:b4:44:42:bb:5b:3d:ba: ab:bc:2e:24:e5:05:8c:75:ad:ed:3f:02:55:fd:d0:d1:41:35: ed:4d:ca:8a:76:3b:86:23:e0:13:53:19:3c:a7:27:25:51:04: f3:08:cb:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O+YOEa7YRE2Bs0kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk ZTdmODNjZjMtZGU1NS00Njc3LWJlMWUtMzVhNmNmMGVlNGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdnVomKoruzbvdYhaVoy+wKHJG23z0crXikN g6SAvHqUwuWDR3hsd+Yrgd2chLsc0vo1V34vqvKgY7nrlsOksSi4PnV0BBTDiWsa qT5jn5kraliRr+0KvBcNoS5mMCkqPm4zXniBtZvJCm23qW0geGhHQ+xyCRSFZOwT S4CE1iHSSXJZq9yekNprwfeKzGCeqZhIpAxpwzrDc76cDyME5exeVyOhd0KJKNg3 knwQjj5h1pIX/yftpHzkJvEMBJLmceZLTbkPOmwP7q0AGqh0rWUaK126jPlBHJ7r epDnAV1yNNTIck2g5lvJQ62tiJ1HKcPwlGhcYn2p0rDExWwOTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoiDLkM1E2t17Lx5gMBVlb/9T8FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDk3NWFhZGUtNTVlMi0z NzAwLWJmYTAtYWUxY2MxZGY4YmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVFYmtXjc9PYwFcW3ojoarYMIeIIhiXNyPkP+vpVH3KwOQbj+89NlXw DjWLntFyUzzb37ctFk27wiLp4A5bcA0vrsbtaYLZLwJoWqROHJ+b0u6drXWY5Tug eFLZTA06HVd0iL7t2Bykmxj357FUmyFMr5mNq77b3ZWr46AHkA90qIhOyRSVz+T5 m7jR6SQl9zDvFWvaQY/3YYqdnfiXU4EDTX5LQiS61Lul4sXy/a/Ee/AbNlpzepU7 wuQ+bteXqbqA6peojrtEnHeDCHmHOCGntERCu1s9uqu8LiTlBYx1re0/AlX90NFB Ne1Nyop2O4Yj4BNTGTynJyVRBPMIy/s= -----END CERTIFICATE-----Generated at Tue Apr 21 21:48:13 2026 by rpki-client