$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04f854a6-3fcc-3186-bdc9-f23273f9b59a.roa File: 04f854a6-3fcc-3186-bdc9-f23273f9b59a.roa (raw, json) Hash identifier: ivphubkVPRqMxUIFjkInEJpTyJFI4ulXuYnFgd4RGKo= Subject key identifier: 21:5A:EF:22:77:CD:CB:C8:49:B6:5C:83:8B:A8:6F:23:92:E4:8A:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EC0A735CABBDC00151FD45B80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04f854a6-3fcc-3186-bdc9-f23273f9b59a.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 36183 IP address blocks: 172.225.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:35:ca:bb:dc:00:15:1f:d4:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=6edfdf82-0de9-4c80-96d6-330cba0a391f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:84:2a:e7:2e:8e:28:d7:c7:e9:ca:10:61: a3:9e:87:da:24:87:98:64:e6:8a:36:5d:2c:c5:2e: a5:ba:6a:a5:58:79:46:18:58:46:19:46:99:ff:b2: 21:ab:ad:d5:7b:01:6b:2e:38:d0:3b:c7:6c:8b:c5: 68:70:33:46:35:67:b2:3e:12:bc:5f:d6:ca:e5:ef: c0:12:c4:92:75:f1:d0:95:67:28:83:a6:ca:a1:2a: 94:99:c6:ea:74:60:9a:90:f9:fb:4c:1a:ae:c3:23: fb:08:d9:b7:a1:07:f0:17:5b:5e:96:7b:9f:5b:7a: 6b:cf:aa:d6:5a:83:ec:6f:d6:b0:2e:93:e6:b6:7c: 8a:90:8d:8d:0b:fd:46:f1:a1:07:34:b7:3e:1c:c2: c7:57:a4:71:76:e1:03:3b:69:37:b6:f7:77:21:68: 95:96:60:e3:98:c4:70:3a:72:c3:c4:50:34:d8:d1: 7f:78:2c:d5:a8:75:bb:9c:a6:cc:74:7e:1e:95:48: 11:87:11:31:5f:80:a8:3a:12:15:fc:61:89:06:5c: 18:c9:09:0c:f6:44:91:bc:a5:c6:81:de:b7:85:8b: fa:c4:bb:ee:2b:c2:d2:29:35:e2:35:c5:7f:27:f8: cb:6d:b0:dd:48:68:df:b2:13:12:7d:71:a7:29:66: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5A:EF:22:77:CD:CB:C8:49:B6:5C:83:8B:A8:6F:23:92:E4:8A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/04f854a6-3fcc-3186-bdc9-f23273f9b59a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:c9:b3:aa:29:5a:90:74:ab:1d:46:42:67:17:df:fc:d3:e6: c4:7b:b8:4f:cc:d1:57:80:11:17:fd:c3:b3:20:30:2d:34:c9: 75:53:c1:ee:ff:b7:7f:8e:16:1c:b4:e2:2d:0b:c5:69:12:ad: ba:41:af:48:14:09:3a:6c:b8:6f:f2:92:a6:cc:91:2d:ad:94: cc:8f:6a:ce:30:19:64:c7:44:84:b1:b9:c8:ab:87:fc:d4:ca: e4:41:23:10:a2:22:87:bd:03:24:96:ba:f8:bc:36:b6:c1:81: f3:8a:d4:93:07:2f:fe:90:b7:b1:51:f4:3f:3b:82:1d:06:17: f4:ef:aa:44:cf:96:8b:6c:79:70:aa:0d:23:39:9c:b7:46:56: 71:e3:f6:1d:0a:4d:cc:fb:47:0a:50:54:0c:12:fc:76:77:a6: 66:5a:32:a1:23:e1:ec:32:b6:ec:df:4b:65:77:5e:df:90:4e: dd:0f:8f:b4:17:7c:7f:dd:60:60:2e:e5:c8:bd:04:34:4f:fb: a1:73:2f:6a:47:09:11:5a:a3:99:88:05:a5:97:56:9a:0d:51: 48:3f:c2:fe:f1:a0:0e:7a:2f:0b:9a:3e:66:1b:16:da:8b:77: c4:a2:b7:ec:7e:f2:d8:1d:cd:d2:47:48:43:3b:cb:10:52:16: c8:97:1b:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ApzXKu9wAFR/UW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk NmVkZmRmODItMGRlOS00YzgwLTk2ZDYtMzMwY2JhMGEzOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaeEKucujijXx+nKEGGjnofaJIeYZOaKNl0s xS6lumqlWHlGGFhGGUaZ/7Ihq63VewFrLjjQO8dsi8VocDNGNWeyPhK8X9bK5e/A EsSSdfHQlWcog6bKoSqUmcbqdGCakPn7TBquwyP7CNm3oQfwF1telnufW3prz6rW WoPsb9awLpPmtnyKkI2NC/1G8aEHNLc+HMLHV6RxduEDO2k3tvd3IWiVlmDjmMRw OnLDxFA02NF/eCzVqHW7nKbMdH4elUgRhxExX4CoOhIV/GGJBlwYyQkM9kSRvKXG gd63hYv6xLvuK8LSKTXiNcV/J/jLbbDdSGjfshMSfXGnKWYUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFa7yJ3zcvISbZcg4uobyOS5IqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDRmODU0YTYtM2ZjYy0z MTg2LWJkYzktZjIzMjczZjliNTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3Js6opWpB0qx1GQmcX3/zT5sR7uE/M0VeAERf9w7MgMC00yXVTwe7/ t3+OFhy04i0LxWkSrbpBr0gUCTpsuG/ykqbMkS2tlMyPas4wGWTHRISxucirh/zU yuRBIxCiIoe9AySWuvi8NrbBgfOK1JMHL/6Qt7FR9D87gh0GF/TvqkTPlotseXCq DSM5nLdGVnHj9h0KTcz7RwpQVAwS/HZ3pmZaMqEj4ewytuzfS2V3Xt+QTt0Pj7QX fH/dYGAu5ci9BDRP+6FzL2pHCRFao5mIBaWXVpoNUUg/wv7xoA56LwuaPmYbFtqL d8Sit+x+8tgdzdJHSEM7yxBSFsiXG78= -----END CERTIFICATE-----Generated at Sat Sep 5 04:05:18 2026 by rpki-client