$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/509af3ed-f05d-3176-b7c4-d2dc5ed2f893.roa File: 509af3ed-f05d-3176-b7c4-d2dc5ed2f893.roa (raw, json) Hash identifier: Vsubj0lTdmNSiyOVtQLzKMOpa4jSC334iOXbArcaZ5Y= Subject key identifier: 14:27:17:A5:C0:08:1F:85:AE:EB:E2:FE:8D:FD:36:DD:61:C5:D9:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DE150A42483A0FF4BED9C2D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/509af3ed-f05d-3176-b7c4-d2dc5ed2f893.roa Signing time: Tue 19 May 2026 01:00:24 +0000 ROA not before: Tue 19 May 2026 01:00:24 +0000 ROA not after: Mon 17 Aug 2026 01:00:24 +0000 asID: 63949 IP address blocks: 172.237.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:e1:50:a4:24:83:a0:ff:4b:ed:9c:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 19 01:00:24 2026 GMT Not After : Aug 17 01:00:24 2026 GMT Subject: CN=81f403b7-fa5f-44fe-85ab-6053e6261716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e3:2b:7a:bf:09:7f:36:4a:93:17:96:a7:33: 7f:82:b5:5d:82:84:83:bc:22:b1:48:63:15:18:c6: 02:b9:3d:1d:94:2c:15:f6:73:73:54:e5:3b:96:7f: 8f:ad:95:45:2f:15:1b:b5:39:3d:15:ce:b8:37:e0: f8:07:33:f3:c9:b0:ee:5e:fa:cf:88:91:b9:10:51: dd:09:66:6f:95:c4:bd:43:83:f0:c8:5a:e3:04:3f: 9b:94:2f:3b:de:e8:72:e9:4d:26:db:26:4d:4a:0e: 0a:c3:c0:74:1c:3b:40:d4:04:c0:73:46:4d:89:0f: 72:5c:1e:34:d0:bf:29:27:ba:b6:22:e3:df:b1:a9: 0e:fe:b3:83:15:17:32:7d:ef:d7:3d:a7:00:59:23: 57:5f:d7:2b:67:9d:44:c8:8b:ed:54:64:a1:21:9d: f6:a2:27:3b:a1:32:18:f0:d0:da:2a:28:85:f9:c3: c6:03:17:cd:8a:f7:ea:c0:68:28:2b:5e:ab:2d:66: 1f:16:e3:01:98:52:12:b2:a6:21:63:fc:e2:fb:31: 28:15:84:b0:87:a0:18:f6:82:90:d5:ef:fe:6c:31: 6c:c7:a9:ce:c4:74:aa:40:0b:42:80:09:62:1c:2f: 58:3e:91:bc:46:37:fc:cb:5f:95:fb:0e:16:84:be: 93:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:27:17:A5:C0:08:1F:85:AE:EB:E2:FE:8D:FD:36:DD:61:C5:D9:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/509af3ed-f05d-3176-b7c4-d2dc5ed2f893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.237.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:b5:e2:cc:87:33:b9:1e:70:72:56:7a:98:b1:28:ec:56:a8: 2b:2d:af:a2:40:90:02:17:fc:95:74:33:4c:d9:d1:0e:d8:c6: a0:5e:74:5d:c6:9c:bd:28:95:c9:46:e3:1d:e3:48:b4:79:87: 03:3a:76:0f:8a:bb:28:8e:21:1f:81:c5:97:7b:6c:fc:2e:cd: a0:15:a1:25:de:ff:27:73:c1:89:fb:54:db:13:32:3e:44:37: e2:70:8a:5b:97:e7:22:4f:57:ef:4c:65:7a:62:24:2b:14:0e: e9:39:f5:54:a9:42:a3:7a:9b:d7:79:95:5c:bf:b6:d8:b0:da: 46:03:b0:89:55:3d:d7:37:2a:43:65:98:8c:b9:96:e9:0d:44: dd:20:8f:e1:97:7d:31:a0:ba:77:f0:ee:74:98:58:3b:39:3d: ae:62:4c:08:70:ea:36:e0:52:46:34:f9:04:aa:8d:1a:34:a8: cc:ee:6b:51:d6:38:48:40:23:3a:75:b2:89:0f:e6:fb:1f:03: a3:70:71:53:ee:69:82:0c:aa:81:42:71:1f:95:0b:b6:4f:e0: 4d:e9:8f:04:c2:ea:b7:54:35:2a:36:05:b5:28:03:cf:bc:37: 91:ec:5b:a7:20:a6:78:f0:0c:93:7e:67:9c:d9:02:29:98:4c: 7c:23:c4:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3hUKQkg6D/S+2cLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUxOTAxMDAyNFoXDTI2MDgxNzAxMDAyNFowLzEtMCsGA1UEAxMk ODFmNDAzYjctZmE1Zi00NGZlLTg1YWItNjA1M2U2MjYxNzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleMrer8JfzZKkxeWpzN/grVdgoSDvCKxSGMV GMYCuT0dlCwV9nNzVOU7ln+PrZVFLxUbtTk9Fc64N+D4BzPzybDuXvrPiJG5EFHd CWZvlcS9Q4PwyFrjBD+blC873uhy6U0m2yZNSg4Kw8B0HDtA1ATAc0ZNiQ9yXB40 0L8pJ7q2IuPfsakO/rODFRcyfe/XPacAWSNXX9crZ51EyIvtVGShIZ32oic7oTIY 8NDaKiiF+cPGAxfNivfqwGgoK16rLWYfFuMBmFISsqYhY/zi+zEoFYSwh6AY9oKQ 1e/+bDFsx6nOxHSqQAtCgAliHC9YPpG8Rjf8y1+V+w4WhL6TgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQnF6XACB+Fruvi/o39Nt1hxdn7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTA5YWYzZWQtZjA1ZC0z MTc2LWI3YzQtZDJkYzVlZDJmODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErO0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJW14syHM7kecHJWepixKOxWqCstr6JAkAIX/JV0M0zZ0Q7YxqBedF3G nL0olclG4x3jSLR5hwM6dg+KuyiOIR+BxZd7bPwuzaAVoSXe/ydzwYn7VNsTMj5E N+JwiluX5yJPV+9MZXpiJCsUDuk59VSpQqN6m9d5lVy/ttiw2kYDsIlVPdc3KkNl mIy5lukNRN0gj+GXfTGgunfw7nSYWDs5Pa5iTAhw6jbgUkY0+QSqjRo0qMzua1HW OEhAIzp1sokP5vsfA6NwcVPuaYIMqoFCcR+VC7ZP4E3pjwTC6rdUNSo2BbUoA8+8 N5HsW6cgpnjwDJN+Z5zZAimYTHwjxB8= -----END CERTIFICATE-----Generated at Sat Jun 6 08:30:28 2026 by rpki-client