$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c625e66f-7436-34f9-8728-15891d38617a.roa File: c625e66f-7436-34f9-8728-15891d38617a.roa (raw, json) Hash identifier: HbblG1biY4CcpqmOO+It7J1eV6HOSWFx76/moxi3KJU= Subject key identifier: 89:2E:0A:48:CA:B4:3C:31:2A:DE:8C:06:B3:79:CB:26:05:E0:9C:F0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E3A2F58F515A1425EFB5E4B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c625e66f-7436-34f9-8728-15891d38617a.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 36183 IP address blocks: 172.224.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:58:f5:15:a1:42:5e:fb:5e:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=2e0c6321-08fe-43e9-b7e8-d2800c33880c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:21:e5:6c:1b:ed:91:db:c7:16:ee:bc:f4:fa: 7b:75:52:ad:73:02:e4:f4:88:f3:ef:08:09:93:82: dc:4c:39:84:c3:ff:14:8b:90:6e:96:ea:0a:b5:9d: d3:30:84:5a:41:0d:9e:7e:a1:ef:c7:83:75:b0:23: 48:e8:77:2e:f0:0b:9c:9c:08:90:bd:46:99:b9:75: 7c:8c:70:97:7d:25:b2:d8:a8:05:f0:5f:af:cf:7c: 17:0b:72:d5:04:be:eb:c5:29:0d:79:d1:11:04:bd: 67:c4:31:7a:1b:2a:6c:d9:aa:4c:79:11:b7:74:85: 0a:28:ae:3b:87:73:d3:cf:dd:25:38:25:d6:03:05: 21:a4:97:21:aa:fc:47:7c:8c:bb:ed:84:46:22:d2: 49:33:e1:45:95:63:fb:7b:3b:4b:8e:86:25:76:8f: c2:10:52:d9:e6:d4:5e:7d:97:5f:23:9d:19:b1:41: 31:87:87:29:af:e5:1a:f0:28:87:82:cf:53:69:db: d0:2d:4f:90:77:25:9d:38:07:ec:57:4b:46:ae:05: 15:86:6d:54:44:7f:5b:30:25:c9:41:5c:c9:48:50: 8e:bf:e6:30:92:11:92:c9:4d:1b:03:9e:f4:a7:50: c6:5b:d7:de:fc:f7:de:11:54:d2:36:68:3c:3b:2b: eb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:2E:0A:48:CA:B4:3C:31:2A:DE:8C:06:B3:79:CB:26:05:E0:9C:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c625e66f-7436-34f9-8728-15891d38617a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:0e:af:e8:03:c6:9c:a6:67:d2:8a:d3:52:cf:5a:08:62:1f: 79:14:f7:59:07:a1:62:09:30:6d:87:cf:30:c0:64:09:58:4a: f4:f1:70:2d:5a:07:65:e9:25:5a:5a:02:23:5d:bb:e8:98:6d: ef:e3:77:fc:3c:a0:35:4b:99:6e:25:70:d1:a2:1a:86:c9:74: 68:29:89:00:a1:5e:9c:7c:0d:b5:de:b8:d5:78:56:d6:f3:ff: 7b:bc:dc:6e:8f:74:30:41:3a:14:b3:9d:a6:0e:ff:e2:20:de: 20:1e:0f:b8:61:73:2c:30:9d:f7:31:41:27:2a:d8:73:95:82: 24:15:24:ce:f5:63:22:94:2d:cf:b0:85:11:e2:66:18:e5:23: ea:9c:bb:59:8e:f5:c6:cd:8a:27:61:97:50:54:1c:95:2f:46: 5b:2b:f9:e8:22:6d:da:0d:a2:84:6b:9b:1b:69:62:2d:62:ab: c4:fe:48:1c:6c:78:e3:36:22:6f:45:8b:5e:32:3d:24:0a:5b: d0:94:35:4a:bb:6d:09:47:ad:ce:ca:80:1d:04:07:7b:32:03: 63:12:e2:60:fc:4a:94:47:ad:c2:c5:e5:16:5d:11:8e:45:8b: 49:d4:cb:34:94:87:fc:34:5b:33:e0:30:dd:c8:b7:51:c9:2a: e3:a2:65:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46L1j1FaFCXvteS0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk MmUwYzYzMjEtMDhmZS00M2U5LWI3ZTgtZDI4MDBjMzM4ODBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSHlbBvtkdvHFu689Pp7dVKtcwLk9Ijz7wgJ k4LcTDmEw/8Ui5BuluoKtZ3TMIRaQQ2efqHvx4N1sCNI6Hcu8AucnAiQvUaZuXV8 jHCXfSWy2KgF8F+vz3wXC3LVBL7rxSkNedERBL1nxDF6Gyps2apMeRG3dIUKKK47 h3PTz90lOCXWAwUhpJchqvxHfIy77YRGItJJM+FFlWP7eztLjoYldo/CEFLZ5tRe fZdfI50ZsUExh4cpr+Ua8CiHgs9TadvQLU+QdyWdOAfsV0tGrgUVhm1URH9bMCXJ QVzJSFCOv+YwkhGSyU0bA570p1DGW9fe/PfeEVTSNmg8Oyvr5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkuCkjKtDwxKt6MBrN5yyYF4JzwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzYyNWU2NmYtNzQzNi0z NGY5LTg3MjgtMTU4OTFkMzg2MTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOA9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgOr+gDxpymZ9KK01LPWghiH3kU91kHoWIJMG2HzzDAZAlYSvTxcC1a B2XpJVpaAiNdu+iYbe/jd/w8oDVLmW4lcNGiGobJdGgpiQChXpx8DbXeuNV4Vtbz /3u83G6PdDBBOhSznaYO/+Ig3iAeD7hhcywwnfcxQScq2HOVgiQVJM71YyKULc+w hRHiZhjlI+qcu1mO9cbNiidhl1BUHJUvRlsr+egibdoNooRrmxtpYi1iq8T+SBxs eOM2Im9Fi14yPSQKW9CUNUq7bQlHrc7KgB0EB3syA2MS4mD8SpRHrcLF5RZdEY5F i0nUyzSUh/w0WzPgMN3It1HJKuOiZTw= -----END CERTIFICATE-----Generated at Tue Jul 21 21:47:58 2026 by rpki-client