$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eb8b41b-e5d0-3769-8f11-0d84e80c7640.roa File: 5eb8b41b-e5d0-3769-8f11-0d84e80c7640.roa (raw, json) Hash identifier: TvtN7PdPnaHpJ4b1nHR6Mw4bqWhVLzZ4w5HW19eQXn8= Subject key identifier: A6:9E:43:F1:36:0D:74:E4:54:71:F5:D0:28:81:E8:CB:1E:EF:6D:C7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E4C548C60D218B791F91F9500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eb8b41b-e5d0-3769-8f11-0d84e80c7640.roa Signing time: Fri 26 Jun 2026 09:00:12 +0000 ROA not before: Fri 26 Jun 2026 09:00:12 +0000 ROA not after: Thu 24 Sep 2026 09:00:12 +0000 asID: 36183 IP address blocks: 172.225.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4c:54:8c:60:d2:18:b7:91:f9:1f:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 26 09:00:12 2026 GMT Not After : Sep 24 09:00:12 2026 GMT Subject: CN=cf53ca0a-1fee-4099-b8de-f35ab943a1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:3f:2a:47:cc:5f:b7:90:5d:96:95:f6:02:b2: 85:c7:99:cd:b5:51:35:34:4d:00:c2:65:20:8e:5a: 0a:b1:e6:86:a6:12:95:9a:8d:af:7e:f6:25:ea:c4: ce:b1:67:bf:53:29:57:b0:13:2a:d9:a8:7c:1c:00: a5:9c:75:3f:80:8c:12:78:e7:a7:4c:ad:4a:bf:5b: ac:92:f6:c5:9b:33:f0:e7:25:a9:7d:0c:7c:c7:8f: a3:49:b9:ad:90:99:ad:69:f7:cb:7f:68:45:28:f6: 5f:de:ce:61:eb:c0:66:89:5c:71:ce:06:fe:2a:de: 94:cc:bf:18:98:89:d6:1e:a5:f0:be:e3:24:cc:05: 63:a4:c8:5b:dd:e7:3b:9e:f9:8f:ef:1c:e9:da:bf: af:38:81:8a:59:50:66:88:23:78:76:3b:2c:c5:a9: bd:8b:d1:f1:9e:92:45:62:58:1b:63:b4:f5:67:7e: 24:36:97:f3:9c:83:58:58:a2:00:50:5d:df:43:73: 21:c1:88:11:83:07:80:21:bb:19:48:0d:78:18:a4: 10:3c:18:56:d3:61:fd:f5:25:d3:79:0a:58:f5:3b: eb:c8:9f:cc:f7:f3:d0:fc:39:c7:b0:c1:2d:1d:84: 9e:a6:b0:74:6c:22:0e:c0:c6:29:cd:70:96:c9:70: c5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9E:43:F1:36:0D:74:E4:54:71:F5:D0:28:81:E8:CB:1E:EF:6D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eb8b41b-e5d0-3769-8f11-0d84e80c7640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:89:93:16:33:b5:55:c3:d4:29:10:1b:31:c7:61:ed:0f:27: 2d:16:4c:60:01:76:84:a0:e4:47:ab:16:0e:e3:19:d6:41:23: 4b:28:78:eb:e2:cd:9a:f6:b0:ab:86:2e:e8:a5:90:81:12:57: 65:2a:32:dd:13:83:de:d5:f1:74:12:1c:a2:3f:08:85:5a:67: 69:7f:a8:9d:e0:d2:ff:6a:76:85:de:e9:38:6c:82:9c:7c:98: 0a:80:17:00:19:30:c0:fb:2e:da:6d:5d:54:0c:04:a6:db:de: 82:d3:93:50:a6:f7:fc:34:a0:60:e4:33:e7:51:8e:00:a2:5a: 64:7c:39:96:e4:77:cc:ce:d2:5b:9c:94:9a:e1:4d:96:3f:9c: dc:d2:1e:49:11:9f:c5:48:ad:fa:fd:34:a7:19:9d:07:b2:56: ef:a0:b2:2d:71:aa:c4:33:2b:2d:0a:d9:73:02:05:74:ca:8a: 39:5e:07:78:24:4a:3a:63:0f:89:a9:0b:17:96:ad:88:a2:cf: 7a:37:43:72:2f:4c:c1:8d:24:0a:18:4c:bb:a1:53:44:6b:90: d8:e3:87:94:ba:25:d4:b3:2e:05:c6:37:79:54:7d:2d:0f:cc: 1f:87:7f:d0:3b:49:7f:f5:1f:fc:e3:53:d7:66:3c:25:ba:17: 54:2e:19:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5MVIxg0hi3kfkflQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYyNjA5MDAxMloXDTI2MDkyNDA5MDAxMlowLzEtMCsGA1UEAxMk Y2Y1M2NhMGEtMWZlZS00MDk5LWI4ZGUtZjM1YWI5NDNhMWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz8qR8xft5BdlpX2ArKFx5nNtVE1NE0AwmUg jloKseaGphKVmo2vfvYl6sTOsWe/UylXsBMq2ah8HAClnHU/gIwSeOenTK1Kv1us kvbFmzPw5yWpfQx8x4+jSbmtkJmtaffLf2hFKPZf3s5h68BmiVxxzgb+Kt6UzL8Y mInWHqXwvuMkzAVjpMhb3ec7nvmP7xzp2r+vOIGKWVBmiCN4djssxam9i9HxnpJF YlgbY7T1Z34kNpfznINYWKIAUF3fQ3MhwYgRgweAIbsZSA14GKQQPBhW02H99SXT eQpY9TvryJ/M9/PQ/DnHsMEtHYSeprB0bCIOwMYpzXCWyXDFhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKaeQ/E2DXTkVHH10CiB6Mse723HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWViOGI0MWItZTVkMC0z NzY5LThmMTEtMGQ4NGU4MGM3NjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWJkxYztVXD1CkQGzHHYe0PJy0WTGABdoSg5EerFg7jGdZBI0soeOvi zZr2sKuGLuilkIESV2UqMt0Tg97V8XQSHKI/CIVaZ2l/qJ3g0v9qdoXe6Thsgpx8 mAqAFwAZMMD7LtptXVQMBKbb3oLTk1Cm9/w0oGDkM+dRjgCiWmR8OZbkd8zO0luc lJrhTZY/nNzSHkkRn8VIrfr9NKcZnQeyVu+gsi1xqsQzKy0K2XMCBXTKijleB3gk SjpjD4mpCxeWrYiiz3o3Q3IvTMGNJAoYTLuhU0RrkNjjh5S6JdSzLgXGN3lUfS0P zB+Hf9A7SX/1H/zjU9dmPCW6F1QuGfs= -----END CERTIFICATE-----Generated at Tue Jul 21 19:58:32 2026 by rpki-client