$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d0e5d5-3833-3a63-a415-27f0655ef1f6.roa File: b3d0e5d5-3833-3a63-a415-27f0655ef1f6.roa (raw, json) Hash identifier: zlbqa14+1A+Z1LeulOXnFZmOcYrui8RyalZ+/fzpBjA= Subject key identifier: B0:41:F0:2F:BD:09:4E:F0:8F:79:FC:FF:CB:BE:BC:8A:8B:5B:7B:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E376482542FA4CFE4BBFE3080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d0e5d5-3833-3a63-a415-27f0655ef1f6.roa Signing time: Thu 18 Jun 2026 21:00:12 +0000 ROA not before: Thu 18 Jun 2026 21:00:12 +0000 ROA not after: Wed 16 Sep 2026 21:00:12 +0000 asID: 36183 IP address blocks: 172.224.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:37:64:82:54:2f:a4:cf:e4:bb:fe:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 18 21:00:12 2026 GMT Not After : Sep 16 21:00:12 2026 GMT Subject: CN=4e81631b-b9e9-4d9f-a546-db67f3302084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:4c:d4:e8:28:1b:3e:5f:1e:9f:cc:a7:cc:c5: 32:c2:33:66:a7:68:9d:4d:a9:e5:00:d7:af:e4:7c: c7:96:23:eb:78:c8:13:4d:1f:5f:c2:78:ff:73:80: b1:8c:bb:2a:ca:81:42:41:4a:93:03:8d:04:15:bb: cc:98:ad:3f:f6:fc:16:c4:20:bc:56:37:4e:e3:dc: 11:93:a1:9a:c9:99:24:86:b7:f6:a0:db:d0:42:45: 61:2a:03:1c:f6:68:38:1b:5e:a9:22:ea:05:be:3f: 99:3d:1b:28:7a:03:f1:0a:dc:87:42:df:52:89:6b: d5:ee:96:9b:2d:8f:48:4e:1f:03:ca:a2:72:a4:eb: d1:d9:d9:c0:7b:96:b8:7a:30:82:de:97:80:a0:c9: fa:36:1f:4d:7b:87:55:9e:1b:50:78:f2:8c:37:48: 91:c8:dc:56:14:0d:30:cc:d4:53:23:05:94:82:b6: 6a:86:ce:3b:29:fd:84:c0:84:13:df:85:52:5e:73: d8:95:d6:34:31:05:12:cb:54:59:c6:f6:9e:3f:81: bc:59:7b:20:28:ee:4f:7b:43:42:cf:e8:bd:01:b1: 12:12:23:fd:75:24:16:e2:35:41:8a:08:c9:37:3f: 42:9f:a8:27:e3:4e:15:c1:ee:b6:8b:12:f1:95:35: 62:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:41:F0:2F:BD:09:4E:F0:8F:79:FC:FF:CB:BE:BC:8A:8B:5B:7B:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d0e5d5-3833-3a63-a415-27f0655ef1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:c3:3d:4f:a0:22:97:ac:22:42:86:e7:02:cd:c5:9a:b7:c8: 6b:fe:92:ae:83:90:e0:0c:1a:46:9e:8c:b6:31:d0:57:9e:5c: 9b:a4:fb:43:5d:7d:b9:ea:d7:58:a8:04:fb:2f:52:7e:43:3a: 77:28:a6:7b:34:6f:ab:41:de:94:d9:8f:3c:a9:c2:b0:54:b9: 2f:43:4a:7f:0e:ae:e9:2a:60:62:4d:37:97:d5:1d:ac:6b:52: 52:43:ec:5f:99:29:bd:75:91:f8:07:c3:92:04:ad:cc:09:75: fa:32:41:b1:6f:22:87:fc:a9:a3:65:0a:2b:fc:b5:68:dd:d8: 61:d1:b0:5e:47:99:0f:00:d8:6c:ae:21:27:64:62:b7:e0:b5: 60:f8:9b:aa:85:9f:7d:16:c1:5d:83:db:30:62:c9:ca:4a:66: 03:a9:3f:03:78:3e:9c:17:3d:60:4e:ef:12:25:d6:00:48:8f: 28:b7:d8:a7:92:5b:af:df:dc:7c:1d:f8:74:21:1a:95:24:ab: b4:9a:c2:0f:62:a3:6e:87:d6:b8:28:3e:28:9e:a6:48:49:b5: 66:7f:42:cf:e5:dc:08:97:e1:90:5a:76:2f:03:5e:27:f4:e3: e3:9c:6e:fc:7e:0c:e0:1d:de:fb:1b:35:bc:22:d3:e6:02:2d: 20:70:3d:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE43ZIJUL6TP5Lv+MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxODIxMDAxMloXDTI2MDkxNjIxMDAxMlowLzEtMCsGA1UEAxMk NGU4MTYzMWItYjllOS00ZDlmLWE1NDYtZGI2N2YzMzAyMDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkzU6CgbPl8en8ynzMUywjNmp2idTanlANev 5HzHliPreMgTTR9fwnj/c4CxjLsqyoFCQUqTA40EFbvMmK0/9vwWxCC8VjdO49wR k6GayZkkhrf2oNvQQkVhKgMc9mg4G16pIuoFvj+ZPRsoegPxCtyHQt9SiWvV7pab LY9ITh8DyqJypOvR2dnAe5a4ejCC3peAoMn6Nh9Ne4dVnhtQePKMN0iRyNxWFA0w zNRTIwWUgrZqhs47Kf2EwIQT34VSXnPYldY0MQUSy1RZxvaeP4G8WXsgKO5Pe0NC z+i9AbESEiP9dSQW4jVBigjJNz9Cn6gn404Vwe62ixLxlTVi/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBB8C+9CU7wj3n8/8u+vIqLW3tIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjNkMGU1ZDUtMzgzMy0z YTYzLWE0MTUtMjdmMDY1NWVmMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3DPU+gIpesIkKG5wLNxZq3yGv+kq6DkOAMGkaejLYx0FeeXJuk+0Nd fbnq11ioBPsvUn5DOncopns0b6tB3pTZjzypwrBUuS9DSn8OrukqYGJNN5fVHaxr UlJD7F+ZKb11kfgHw5IErcwJdfoyQbFvIof8qaNlCiv8tWjd2GHRsF5HmQ8A2Gyu ISdkYrfgtWD4m6qFn30WwV2D2zBiycpKZgOpPwN4PpwXPWBO7xIl1gBIjyi32KeS W6/f3Hwd+HQhGpUkq7Sawg9io26H1rgoPiiepkhJtWZ/Qs/l3AiX4ZBadi8DXif0 4+Ocbvx+DOAd3vsbNbwi0+YCLSBwPWU= -----END CERTIFICATE-----Generated at Tue Jul 21 21:44:53 2026 by rpki-client