$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2f47224b-3181-3456-acd2-84215941a959.roa File: 2f47224b-3181-3456-acd2-84215941a959.roa (raw, json) Hash identifier: ZTOBMY4Rna/6WbaC3+sBIpyTe306vC4Um8uCDEXTJCY= Subject key identifier: F7:83:64:B7:3F:E3:DB:4F:4F:75:EB:7B:8D:42:A8:E1:C7:D6:10:E0 Certificate issuer: /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Certificate serial: 010D0C9F4328584D91C011274FF501DB1EAAF680 Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2f47224b-3181-3456-acd2-84215941a959.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 30428 IP address blocks: 216.97.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Apr 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:11:27:4f:f5:01:db:1e:aa:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=1ccf2cd6-bfbc-4378-b0f4-a962d415c75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:fe:30:23:d3:a4:62:d2:7d:94:4d:c6:3f:74: ae:31:fe:47:c1:e9:44:d5:bd:56:36:09:89:42:cd: 1d:e1:c5:41:e2:69:cb:3a:d1:7e:cd:9b:7e:49:66: 75:65:c5:d9:a6:bb:b1:99:79:2f:d6:0d:98:8a:66: bb:ae:15:62:47:60:f8:9a:15:0e:8b:89:81:ea:81: 97:85:b4:f4:04:fe:94:e1:bf:4f:4e:b9:3c:3e:bc: 1b:71:7f:3d:e9:a9:b7:1e:23:70:15:42:ae:88:ad: 64:95:25:bb:b6:32:4a:51:cb:84:03:93:3c:49:9d: 43:aa:d7:f3:9b:f4:96:9a:e8:ef:28:ff:9b:0a:83: 93:7b:37:40:42:78:6c:44:84:b1:ac:2e:08:6f:74: de:0d:86:4f:c5:2b:62:85:8c:b8:d7:90:4f:0b:63: eb:8e:a6:bf:06:f9:e9:37:88:70:23:b5:f7:18:c5: 9b:3a:27:19:dd:71:e0:fb:29:c8:04:45:55:79:1e: 23:7f:98:01:91:56:bf:1e:27:44:50:e4:e4:23:0c: ff:4c:e6:06:4f:ce:f9:9b:73:a4:d1:a6:8a:d8:0d: 43:e6:5d:3b:51:90:46:ca:d3:a6:bf:60:62:c0:3e: f8:aa:e8:a4:fe:43:da:4b:8a:bf:61:0b:2d:ab:19: 0d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:83:64:B7:3F:E3:DB:4F:4F:75:EB:7B:8D:42:A8:E1:C7:D6:10:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/2f47224b-3181-3456-acd2-84215941a959.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl X509v3 Authority Key Identifier: keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer sbgp-ipAddrBlock: critical IPv4: 216.97.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:7f:83:bf:62:a2:87:34:62:a8:63:5e:04:64:41:00:29:10: 24:11:ba:14:30:c0:61:89:41:30:1c:eb:c5:32:e9:ad:a1:d2: 8b:92:9d:ec:fd:5b:5d:98:32:79:80:ba:ac:ac:39:2d:5c:99: aa:ed:88:8a:a5:23:ee:0b:fc:80:1b:42:8a:f3:8f:d1:ff:0e: 02:25:a3:86:ed:8e:75:f6:b8:1a:4c:c9:af:51:04:81:69:e0: 7e:aa:fd:1e:4f:6a:14:24:cd:5c:c4:37:01:81:f8:6a:c1:07: 29:88:ae:4b:0d:49:b6:fa:4e:ed:ea:39:ec:b3:35:19:24:fb: 9f:9e:57:e2:e1:bf:05:74:67:0c:30:55:e7:59:ef:bf:a6:32: 91:85:74:d3:77:ff:53:35:70:d6:4d:64:f0:21:28:f3:6d:ca: d1:e5:8a:f2:71:cd:18:0a:7e:00:30:c4:da:7c:55:54:e0:74: 73:e3:9d:08:9d:88:02:65:8f:9a:31:26:1b:04:ab:5a:49:09: 05:21:28:c5:a6:73:5a:fc:ea:10:4e:8a:60:13:58:11:31:24: 4e:8b:0a:b1:82:48:c1:f0:04:ea:c7:3b:79:e0:45:79:a6:f8: 2e:27:07:85:a8:ea:b0:29:9a:c0:16:1e:d2:de:1f:51:34:cd: 7d:c4:29:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBEnT/UB2x6q9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3 NzNlMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MWNjZjJjZDYtYmZiYy00Mzc4LWIwZjQtYTk2MmQ0MTVjNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkP4wI9OkYtJ9lE3GP3SuMf5HwelE1b1WNgmJ Qs0d4cVB4mnLOtF+zZt+SWZ1ZcXZpruxmXkv1g2Yima7rhViR2D4mhUOi4mB6oGX hbT0BP6U4b9PTrk8PrwbcX896am3HiNwFUKuiK1klSW7tjJKUcuEA5M8SZ1Dqtfz m/SWmujvKP+bCoOTezdAQnhsRISxrC4Ib3TeDYZPxStihYy415BPC2Prjqa/Bvnp N4hwI7X3GMWbOicZ3XHg+ynIBEVVeR4jf5gBkVa/HidEUOTkIwz/TOYGT875m3Ok 0aaK2A1D5l07UZBGytOmv2BiwD74quik/kPaS4q/YQstqxkNVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeDZLc/49tPT3Xre41CqOHH1hDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvMmY0NzIyNGItMzE4MS0z NDU2LWFjZDItODQyMTU5NDFhOTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4 YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1 MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2GGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx/g79iooc0YqhjXgRkQQApECQRuhQwwGGJQTAc68Uy6a2h0ouSnez9 W12YMnmAuqysOS1cmartiIqlI+4L/IAbQorzj9H/DgIlo4btjnX2uBpMya9RBIFp 4H6q/R5PahQkzVzENwGB+GrBBymIrksNSbb6Tu3qOeyzNRkk+5+eV+LhvwV0Zwww VedZ77+mMpGFdNN3/1M1cNZNZPAhKPNtytHlivJxzRgKfgAwxNp8VVTgdHPjnQid iAJlj5oxJhsEq1pJCQUhKMWmc1r86hBOimATWBExJE6LCrGCSMHwBOrHO3ngRXmm +C4nB4Wo6rApmsAWHtLeH1E0zX3EKR8= -----END CERTIFICATE-----Generated at Wed Apr 22 05:40:04 2026 by rpki-client