$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/156dd8fa-14f2-3948-854b-cee72b778379.roa File: 156dd8fa-14f2-3948-854b-cee72b778379.roa (raw, json) Hash identifier: lZUmRWhQXTKPwkhclkDP4rKYHGUT0I/8TQxn+NzwzK0= Subject key identifier: DA:21:E5:16:9E:83:E8:C1:7B:37:40:75:E7:3A:FB:B1:11:3D:0E:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F0D6CF51A282075DB83CCEE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/156dd8fa-14f2-3948-854b-cee72b778379.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 31984 IP address blocks: 173.222.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:f5:1a:28:20:75:db:83:cc:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=9d519b4c-df5c-4d95-ae42-b6629dd7f280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:21:c9:81:7b:e3:1e:8b:9f:80:20:e7:dd:58: c8:9f:f5:ae:0f:9d:76:0b:82:db:4a:71:7b:a9:3e: 58:b2:84:fc:9f:53:20:cf:31:b0:b7:b9:12:13:9b: a0:15:b9:9a:43:f7:d4:87:40:12:c9:fd:de:45:7a: 3f:12:53:0e:82:a6:c2:15:f0:a6:7d:b3:5b:b3:ca: e3:6f:2b:3b:69:5e:fa:ff:78:ee:3b:0a:df:63:8a: cd:f4:68:ed:a3:8a:91:0c:38:4d:41:64:74:38:d3: e4:b8:68:b0:60:52:49:ea:93:22:33:04:d9:55:95: 3f:de:fb:83:08:c7:72:7d:bd:d1:b0:57:11:d7:21: 61:7d:31:18:4e:09:d1:90:5a:b4:83:f7:ef:e7:38: ce:16:3d:0f:7e:85:0a:05:6d:24:a1:f9:29:39:c9: a4:b0:c4:55:44:00:32:e2:06:e0:5d:35:ae:1d:3a: 8c:74:ac:04:d4:35:d9:f6:27:75:24:ba:c5:a4:80: 9e:10:71:f7:d7:1c:2d:54:54:d3:f0:b9:6f:85:f4: ea:75:02:98:e4:38:86:0b:99:98:80:55:bd:69:9d: ca:94:dc:72:4f:56:51:14:dd:62:89:5a:8b:a9:45: 34:a1:0c:56:f9:33:23:25:02:e6:c3:8d:ed:e4:01: b2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:21:E5:16:9E:83:E8:C1:7B:37:40:75:E7:3A:FB:B1:11:3D:0E:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/156dd8fa-14f2-3948-854b-cee72b778379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:fd:85:cc:61:5d:60:22:4b:1e:ab:8b:96:1a:10:5b:46:d9: 73:94:8c:9c:40:13:9b:43:50:bb:f8:90:6f:dc:45:0a:29:b6: 9d:5e:ea:7b:b0:6b:b6:15:d9:02:de:0b:84:ae:61:d9:da:9c: 11:c3:d2:57:f3:98:85:7c:c8:ab:90:66:6f:d5:f1:b5:b5:49: 7c:d8:89:da:55:e3:f4:f2:c2:7f:71:06:b8:97:bb:f9:cd:3e: 20:53:06:0a:e5:19:8b:a0:3c:c9:fa:36:a6:7e:37:37:75:44: 53:44:12:ab:6f:ff:0a:3b:eb:c2:c5:8d:09:1a:ac:7f:fa:61: cc:da:c5:54:35:a8:0d:08:5e:57:90:2b:1e:16:da:e8:33:e2: b0:95:f1:3c:85:a5:21:78:ea:dd:d3:0e:e9:22:f6:07:e4:15: fa:15:e7:33:21:65:27:08:55:f3:17:4c:8b:57:69:bd:ee:eb: d8:1a:bb:77:42:b9:74:fc:fe:00:a9:1f:3a:27:d2:fa:59:a8: cf:11:0b:24:19:1c:47:4d:62:d9:87:55:3a:ac:f5:2f:6e:53: be:f5:ad:61:1a:70:5c:a5:ce:d4:5a:a7:7a:2f:56:b6:fe:53: cf:f1:fb:d7:5e:46:59:2f:b1:f7:d3:33:0e:b8:73:66:b9:63: b1:09:fc:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPUaKCB124PM7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk OWQ1MTliNGMtZGY1Yy00ZDk1LWFlNDItYjY2MjlkZDdmMjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSHJgXvjHoufgCDn3VjIn/WuD512C4LbSnF7 qT5YsoT8n1MgzzGwt7kSE5ugFbmaQ/fUh0ASyf3eRXo/ElMOgqbCFfCmfbNbs8rj bys7aV76/3juOwrfY4rN9Gjto4qRDDhNQWR0ONPkuGiwYFJJ6pMiMwTZVZU/3vuD CMdyfb3RsFcR1yFhfTEYTgnRkFq0g/fv5zjOFj0PfoUKBW0kofkpOcmksMRVRAAy 4gbgXTWuHTqMdKwE1DXZ9id1JLrFpICeEHH31xwtVFTT8LlvhfTqdQKY5DiGC5mY gFW9aZ3KlNxyT1ZRFN1iiVqLqUU0oQxW+TMjJQLmw43t5AGymwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoh5Raeg+jBezdAdec6+7ERPQ6MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTU2ZGQ4ZmEtMTRmMi0z OTQ4LTg1NGItY2VlNzJiNzc4Mzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArd7tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHT9hcxhXWAiSx6ri5YaEFtG2XOUjJxAE5tDULv4kG/cRQoptp1e6nuw a7YV2QLeC4SuYdnanBHD0lfzmIV8yKuQZm/V8bW1SXzYidpV4/Tywn9xBriXu/nN PiBTBgrlGYugPMn6NqZ+Nzd1RFNEEqtv/wo768LFjQkarH/6YczaxVQ1qA0IXleQ Kx4W2ugz4rCV8TyFpSF46t3TDuki9gfkFfoV5zMhZScIVfMXTItXab3u69gau3dC uXT8/gCpHzon0vpZqM8RCyQZHEdNYtmHVTqs9S9uU771rWEacFylztRap3ovVrb+ U8/x+9deRlkvsffTMw64c2a5Y7EJ/Ok= -----END CERTIFICATE-----Generated at Sat Sep 5 04:04:17 2026 by rpki-client