$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/c5228350-2799-3a43-abe9-42497ef211c0.roa File: c5228350-2799-3a43-abe9-42497ef211c0.roa (raw, json) Hash identifier: HS+ZEkxkzsIrY94JIDJVCM9VvtGuq5xAMutyq+Ws+8A= Subject key identifier: 19:6D:74:C5:33:EE:C2:AC:8E:75:EC:C2:45:16:FA:F0:06:77:9C:90 Certificate issuer: /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Certificate serial: 010D0C9F4328584D4D5A5B2233DEE1D4248B5604 Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/c5228350-2799-3a43-abe9-42497ef211c0.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 14618 IP address blocks: 170.72.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 17 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:5b:22:33:de:e1:d4:24:8b:56:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=71db260a-f2bf-4e37-aad8-542d7783c97e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:02:30:db:95:8c:db:c2:bc:98:7d:a0:50:75: 65:53:4a:40:79:ce:50:4b:28:0d:b3:55:ad:08:48: 3e:f1:ae:73:39:45:a8:f5:3c:b5:24:3a:1d:ac:ca: 51:99:c6:df:03:57:b9:48:83:c2:13:6a:04:62:c2: de:82:77:40:4f:4f:b1:05:03:1d:ee:34:50:b3:c2: 36:23:4b:f3:46:67:c6:3b:9a:dd:68:57:51:b9:26: 1f:76:44:92:ca:0e:cc:3c:59:92:ed:07:e0:dc:3f: d6:f1:10:96:74:01:28:ee:c4:36:bd:cc:07:9f:2c: aa:94:36:e6:78:39:73:fd:aa:8d:64:a8:de:c3:4b: 10:e0:f7:47:7a:4b:68:ad:04:bf:69:43:36:e7:2f: eb:27:28:3a:b5:85:49:c7:07:7f:31:21:7b:f9:54: d6:1d:da:76:a4:52:db:d0:4f:98:22:f8:73:63:11: 21:09:63:12:73:0c:86:45:7b:63:f0:6f:78:db:39: 9c:bf:07:64:21:3b:3a:ee:66:fd:8a:15:5f:38:90: 5c:d2:63:c1:27:59:20:51:99:ae:4a:82:3b:a1:16: ce:8d:ca:1d:43:1f:8c:75:27:03:fc:9d:85:1f:2c: 50:be:c4:b6:c6:06:c1:e3:51:bb:42:9f:95:1d:b4: 24:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6D:74:C5:33:EE:C2:AC:8E:75:EC:C2:45:16:FA:F0:06:77:9C:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/c5228350-2799-3a43-abe9-42497ef211c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl X509v3 Authority Key Identifier: keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer sbgp-ipAddrBlock: critical IPv4: 170.72.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:00:8c:2d:71:2a:1f:c2:4a:58:7c:1e:58:64:ad:c6:59:55: d5:18:b8:92:51:9a:90:21:40:5e:12:c0:c7:db:fa:e4:da:0c: cf:72:4e:7d:8d:f8:ee:a6:3e:31:db:ab:9c:e0:6a:ac:e7:0c: 4e:5a:81:78:e1:07:b2:60:6f:01:82:a9:f9:16:b4:15:3d:8e: 58:72:3a:73:73:26:36:ec:04:77:56:f6:44:22:c4:c3:b2:de: 45:ff:91:f6:11:9f:02:71:51:ba:d6:3d:8a:fc:71:36:ca:bf: be:7f:05:12:be:6e:9d:f6:06:7f:31:d0:07:41:eb:0d:e8:0e: b9:b0:88:23:a7:50:80:cb:c1:9f:c5:dd:c5:f4:b0:95:6c:89: 9c:26:25:cb:28:4a:6f:b1:8e:d2:c4:50:75:bc:cf:39:2d:ce: 3a:f2:f1:b5:c7:63:c9:6f:e5:c7:1b:5a:79:01:de:74:b9:ac: d4:d8:e7:88:00:f1:a2:26:14:67:02:ac:1d:29:2c:da:75:b1: a8:92:d0:12:9b:9b:9c:b2:de:b2:62:9a:a7:00:30:01:d9:22: 4c:95:51:69:c9:04:31:c2:88:4f:52:5a:85:54:f9:87:60:1d: aa:7f:f3:43:2f:74:73:9b:55:1d:04:e2:98:f3:ec:ed:7a:8f: b2:50:63:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWlsiM97h1CSLVgQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg4ZDJiNDEtYmI2NC00MGQ4LWIyNzQtYmE0NzA0ZDc5 ZGRmMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk NzFkYjI2MGEtZjJiZi00ZTM3LWFhZDgtNTQyZDc3ODNjOTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAIw25WM28K8mH2gUHVlU0pAec5QSygNs1Wt CEg+8a5zOUWo9Ty1JDodrMpRmcbfA1e5SIPCE2oEYsLegndAT0+xBQMd7jRQs8I2 I0vzRmfGO5rdaFdRuSYfdkSSyg7MPFmS7Qfg3D/W8RCWdAEo7sQ2vcwHnyyqlDbm eDlz/aqNZKjew0sQ4PdHektorQS/aUM25y/rJyg6tYVJxwd/MSF7+VTWHdp2pFLb 0E+YIvhzYxEhCWMScwyGRXtj8G942zmcvwdkITs67mb9ihVfOJBc0mPBJ1kgUZmu SoI7oRbOjcodQx+MdScD/J2FHyxQvsS2xgbB41G7Qp+VHbQkxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBltdMUz7sKsjnXswkUW+vAGd5yQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ODhk MmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3MDRkNzlkZGYvYzUyMjgzNTAtMjc5OS0z YTQzLWFiZTktNDI0OTdlZjIxMWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzg4ZDJiNDEtYmI2NC00MGQ4LWIy NzQtYmE0NzA0ZDc5ZGRmLzc4OGQyYjQxLWJiNjQtNDBkOC1iMjc0LWJhNDcwNGQ3 OWRkZi5jcmwwHwYDVR0jBBgwFoAUrQmtC8LYeFHJn6cxY0e41mzW5TUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83ODhkMmI0MS1iYjY0LTQwZDgtYjI3NC1iYTQ3 MDRkNzlkZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFqkjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0AjC1xKh/CSlh8HlhkrcZZVdUYuJJRmpAhQF4SwMfb+uTaDM9yTn2N +O6mPjHbq5zgaqznDE5agXjhB7JgbwGCqfkWtBU9jlhyOnNzJjbsBHdW9kQixMOy 3kX/kfYRnwJxUbrWPYr8cTbKv75/BRK+bp32Bn8x0AdB6w3oDrmwiCOnUIDLwZ/F 3cX0sJVsiZwmJcsoSm+xjtLEUHW8zzktzjry8bXHY8lv5ccbWnkB3nS5rNTY54gA 8aImFGcCrB0pLNp1saiS0BKbm5yy3rJimqcAMAHZIkyVUWnJBDHCiE9SWoVU+Ydg Hap/80MvdHObVR0E4pjz7O16j7JQY5Q= -----END CERTIFICATE-----Generated at Thu Apr 16 12:10:07 2026 by rpki-client