$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa File: aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa (raw, json) Hash identifier: oMjlsFPcctZMiOdQog39yn+Vw5hv5mIamInrkikKY08= Subject key identifier: 69:11:E0:FE:66:F8:30:25:4E:81:23:09:90:AA:E7:C4:C0:08:CF:59 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E37647FD36788B5E90F5C5B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 36183 IP address blocks: 172.224.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:7f:d3:67:88:b5:e9:0f:5c:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=d16ad5f4-a1c4-44f6-8598-4a8538670db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9b:27:8d:28:72:ba:59:23:92:d1:06:45:47: 25:7d:bb:ed:5b:ef:12:56:2b:0f:16:7c:bd:02:b0: f0:f7:73:da:6c:68:bc:18:f6:00:3f:d5:37:38:f2: 5e:06:ea:48:8d:a2:c8:34:4a:b5:f9:c7:a4:42:7c: 3f:80:08:a6:62:bc:65:8d:dd:02:d2:a3:75:a1:58: 4f:38:70:32:db:e1:94:9e:b8:bf:cc:8d:bb:9c:75: 9e:14:b0:55:6f:e5:d6:56:9d:70:96:84:10:28:17: 2c:b2:82:0a:d5:a8:7e:3b:2e:e4:9d:a6:17:3c:80: dc:02:2b:c3:ee:24:74:48:7b:63:99:d5:7c:db:a3: a3:16:d6:ad:27:f0:f3:57:2f:21:36:dd:62:8b:b5: 19:5a:5f:bb:3c:d5:01:5c:ae:5c:22:c9:b7:3a:16: 86:fd:c6:3b:95:78:49:d4:2a:64:a2:05:98:e7:df: 11:4e:ca:54:8c:93:b3:5a:3f:6f:b8:56:78:57:ba: 0b:c2:ee:32:33:60:b1:a9:62:87:da:b2:9e:0d:13: 74:58:c7:9a:9c:ef:01:e3:e0:e7:48:2c:58:d3:01: d9:93:ac:67:eb:bc:f5:3c:fd:db:c4:1e:9b:1d:fc: 5f:76:4d:6c:48:b8:ba:48:9e:91:75:c8:58:b0:36: af:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:11:E0:FE:66:F8:30:25:4E:81:23:09:90:AA:E7:C4:C0:08:CF:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:fb:de:b0:42:ec:8a:15:b2:e3:cb:94:4c:ce:f7:26:51:78: 54:30:59:f8:e9:fd:f2:67:c1:23:25:af:c1:5e:d8:75:7c:3e: 23:4d:65:51:9e:99:a8:e2:75:47:f6:85:be:fd:cd:a6:61:fe: 9e:d8:64:31:99:11:91:1d:23:99:14:7f:47:7c:0c:f5:2d:57: f7:a9:ec:26:97:5e:cc:25:33:7b:25:2c:2e:d0:86:8e:d4:b2: dc:6e:f5:59:e7:17:45:02:40:df:5e:4a:72:fb:16:6e:99:6c: d3:1b:e6:75:fe:f3:6e:08:5d:7a:16:97:3c:59:df:fb:f3:13: 23:9c:39:10:57:35:87:ad:39:b8:4f:e5:25:8e:cb:70:ce:5d: 15:9e:d7:be:45:b3:d2:b4:a1:56:1e:80:55:7b:bc:0e:ea:15: a7:d1:20:57:1a:5f:7f:8d:86:e9:00:32:37:d0:28:12:77:f5: 9a:d7:ff:51:69:1c:74:28:fe:3e:af:e1:06:52:4d:2b:8d:10: 1f:31:5f:27:4b:40:e7:d3:26:47:80:bf:2a:d9:bb:79:6b:d0: 9e:14:c4:0a:f7:ae:19:2c:14:a1:9d:40:08:7f:4e:86:fe:ef: ac:b3:77:47:f2:13:75:4e:30:4c:bd:fa:0c:e1:ce:c9:7e:d6: 76:05:35:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZH/TZ4i16Q9cW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk ZDE2YWQ1ZjQtYTFjNC00NGY2LTg1OTgtNGE4NTM4NjcwZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4psnjShyulkjktEGRUclfbvtW+8SVisPFny9 ArDw93PabGi8GPYAP9U3OPJeBupIjaLINEq1+cekQnw/gAimYrxljd0C0qN1oVhP OHAy2+GUnri/zI27nHWeFLBVb+XWVp1wloQQKBcssoIK1ah+Oy7knaYXPIDcAivD 7iR0SHtjmdV826OjFtatJ/DzVy8hNt1ii7UZWl+7PNUBXK5cIsm3OhaG/cY7lXhJ 1CpkogWY598RTspUjJOzWj9vuFZ4V7oLwu4yM2CxqWKH2rKeDRN0WMeanO8B4+Dn SCxY0wHZk6xn67z1PP3bxB6bHfxfdk1sSLi6SJ6RdchYsDavrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkR4P5m+DAlToEjCZCq58TACM9ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWVlM2YzMjAtMThkNC0z YjM5LWIxZTQtZDBlNmYzNjdiYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb73rBC7IoVsuPLlEzO9yZReFQwWfjp/fJnwSMlr8Fe2HV8PiNNZVGe majidUf2hb79zaZh/p7YZDGZEZEdI5kUf0d8DPUtV/ep7CaXXswlM3slLC7Qho7U stxu9VnnF0UCQN9eSnL7Fm6ZbNMb5nX+824IXXoWlzxZ3/vzEyOcORBXNYetObhP 5SWOy3DOXRWe175Fs9K0oVYegFV7vA7qFafRIFcaX3+NhukAMjfQKBJ39ZrX/1Fp HHQo/j6v4QZSTSuNEB8xXydLQOfTJkeAvyrZu3lr0J4UxAr3rhksFKGdQAh/Tob+ 76yzd0fyE3VOMEy9+gzhzsl+1nYFNfM= -----END CERTIFICATE-----Generated at Tue Jul 21 21:44:13 2026 by rpki-client