$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f98de040-b3ae-3e77-8ff2-b3da842afe86.roa File: f98de040-b3ae-3e77-8ff2-b3da842afe86.roa (raw, json) Hash identifier: 9fvas0j2x6WFGvsR1YdpP+U/OW4bqhrucpVlAdNcHno= Subject key identifier: C9:B4:81:89:FC:B2:4A:D1:4E:6A:E9:C7:9B:2D:DD:73:D0:EC:2E:C2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E2D9F39A9ACB7BB34D6902230 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f98de040-b3ae-3e77-8ff2-b3da842afe86.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 63949 IP address blocks: 172.235.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:39:a9:ac:b7:bb:34:d6:90:22:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=3dac7b2f-3d74-4dec-87ed-56e9b80f9182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f4:c2:e0:e9:0e:9e:fa:5e:51:c3:11:90:0c: 15:e6:6f:b3:5c:7a:21:dd:ce:b4:18:5d:33:33:eb: ef:6c:ff:5d:73:a2:9d:2a:de:b8:00:34:45:5a:a1: ab:d3:51:8a:3f:ab:31:c1:5f:5c:b8:f2:04:1b:f0: 73:3f:67:ba:e5:0e:f0:9e:d4:59:1e:86:4e:51:fa: d6:e3:da:58:dd:2b:af:98:af:88:8f:35:ad:74:27: b6:bb:fc:e4:0f:6c:12:46:ae:59:64:1a:16:0c:3a: 13:5c:91:04:b3:1d:43:2e:e7:71:62:a7:5c:fe:3b: 67:54:4d:77:1e:cf:26:84:60:83:1f:b3:19:65:6e: a8:23:dc:4d:74:a2:7c:51:0e:69:f2:1d:16:20:2f: 95:ad:2c:b1:91:b5:fe:1b:ce:ed:0a:d2:56:df:94: 92:e4:aa:a7:1a:0e:1f:44:15:9b:3a:80:7d:bb:94: 79:0e:b5:58:ab:20:bc:5d:25:71:d8:b6:18:82:45: c6:c9:17:08:22:86:33:b6:20:e1:29:66:de:72:97: cf:47:b0:9a:64:8e:6f:2d:d7:79:c4:80:30:b6:0c: 94:56:aa:66:45:2c:94:13:2a:9a:29:71:3f:cb:f7: 48:81:d2:ac:f4:06:a9:53:34:bb:ce:ab:ff:42:8f: 27:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B4:81:89:FC:B2:4A:D1:4E:6A:E9:C7:9B:2D:DD:73:D0:EC:2E:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f98de040-b3ae-3e77-8ff2-b3da842afe86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:12:3f:16:a6:bc:a4:73:f1:6d:df:6e:71:24:3b:0c:48:56: 55:df:36:17:40:e1:cf:d6:fb:4b:57:0d:c0:b4:c4:4e:98:ed: 34:dd:f2:a5:ab:46:f8:13:79:f7:ed:e6:1f:ed:13:a9:02:11: 38:be:38:e1:19:8f:4f:da:6c:70:09:d7:3a:76:8d:61:ae:d8: 04:6b:65:95:c8:48:9b:e0:d6:d6:d5:65:8d:5f:cf:83:7d:cf: 44:d6:40:29:cf:70:e9:5e:5a:75:cd:18:a1:3d:b7:7a:f8:c1: a4:7e:2f:78:73:9e:58:8e:3d:a4:2d:28:61:a0:f2:e7:e0:77: 95:14:2e:b0:62:41:ed:57:2c:e6:70:8d:0a:37:92:b0:1e:2f: d3:e5:dd:54:b4:28:a9:59:27:e0:04:75:cf:30:ac:96:f1:95: 45:c6:00:5a:ad:c6:a8:ec:9d:1e:1c:72:3b:63:02:5e:67:25: 6e:0c:71:ee:be:60:2d:36:5d:a3:ee:e9:a2:28:c7:b1:c4:7f: 99:31:93:16:18:23:5d:db:16:82:7f:20:c7:2e:4d:67:5f:c1: 0b:d1:0b:23:94:8a:02:ba:ad:01:d8:62:ff:76:fa:44:3f:b8: 87:20:c2:9b:a5:7e:df:b2:bc:c3:08:6d:78:ba:21:c2:ca:0b: 6b:aa:8d:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnzmprLe7NNaQIjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk M2RhYzdiMmYtM2Q3NC00ZGVjLTg3ZWQtNTZlOWI4MGY5MTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfTC4OkOnvpeUcMRkAwV5m+zXHoh3c60GF0z M+vvbP9dc6KdKt64ADRFWqGr01GKP6sxwV9cuPIEG/BzP2e65Q7wntRZHoZOUfrW 49pY3SuvmK+IjzWtdCe2u/zkD2wSRq5ZZBoWDDoTXJEEsx1DLudxYqdc/jtnVE13 Hs8mhGCDH7MZZW6oI9xNdKJ8UQ5p8h0WIC+VrSyxkbX+G87tCtJW35SS5KqnGg4f RBWbOoB9u5R5DrVYqyC8XSVx2LYYgkXGyRcIIoYztiDhKWbecpfPR7CaZI5vLdd5 xIAwtgyUVqpmRSyUEyqaKXE/y/dIgdKs9AapUzS7zqv/Qo8nmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMm0gYn8skrRTmrpx5st3XPQ7C7CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjk4ZGUwNDAtYjNhZS0z ZTc3LThmZjItYjNkYTg0MmFmZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJASPxamvKRz8W3fbnEkOwxIVlXfNhdA4c/W+0tXDcC0xE6Y7TTd8qWr RvgTefft5h/tE6kCETi+OOEZj0/abHAJ1zp2jWGu2ARrZZXISJvg1tbVZY1fz4N9 z0TWQCnPcOleWnXNGKE9t3r4waR+L3hznliOPaQtKGGg8ufgd5UULrBiQe1XLOZw jQo3krAeL9Pl3VS0KKlZJ+AEdc8wrJbxlUXGAFqtxqjsnR4ccjtjAl5nJW4Mce6+ YC02XaPu6aIox7HEf5kxkxYYI13bFoJ/IMcuTWdfwQvRCyOUigK6rQHYYv92+kQ/ uIcgwpulft+yvMMIbXi6IcLKC2uqjUM= -----END CERTIFICATE-----Generated at Tue Jul 21 22:20:44 2026 by rpki-client