$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8a8da8-12ff-3986-a10c-c955ed07a6cf.roa File: 1b8a8da8-12ff-3986-a10c-c955ed07a6cf.roa (raw, json) Hash identifier: rRs9JKPpxV+baP3eltGhaoQ4pRfQ1nmpGbUB9vUfkms= Subject key identifier: 8C:ED:05:7D:11:56:ED:5C:26:14:2D:9F:97:B7:D7:2B:06:06:A1:A7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ED002075648424BACF9BF8100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8a8da8-12ff-3986-a10c-c955ed07a6cf.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 63949 IP address blocks: 172.235.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:02:07:56:48:42:4b:ac:f9:bf:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=eaa1c55e-cebd-4d33-93e1-e784678cab2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:95:75:6a:f8:f9:ab:04:d7:5b:95:a9:29:a3: 05:bc:4f:6c:41:85:aa:7e:0b:e7:c7:ed:e9:bc:3d: 5a:2e:9b:d8:d5:6c:d1:78:44:72:ff:70:8f:ea:d0: fc:c7:04:14:f9:a3:8b:b5:c1:9d:d2:28:d1:11:5b: a1:75:c8:68:d8:72:0e:23:b9:09:a2:1d:0e:d5:af: 52:13:1f:f9:7f:83:91:a8:f7:81:ff:93:36:8e:5b: 7a:6b:0a:3e:7b:24:f9:56:c1:54:a4:c3:37:55:1e: f3:25:ea:8a:69:e1:49:8a:46:76:79:70:02:de:aa: 29:1a:57:4e:85:bb:78:47:87:4d:ef:bd:83:c1:4b: c8:06:82:a7:ed:3c:f0:2e:c4:c1:94:35:67:ea:dc: b8:45:cd:42:3c:25:4d:d0:3b:d7:6e:e8:63:c1:09: 08:a3:74:8e:06:d4:65:65:ba:a6:b1:39:c8:1b:3d: 60:b1:52:0a:26:95:e6:3d:3c:7c:19:d4:6a:21:7f: 2d:95:51:85:cb:a5:e3:9e:f9:2e:76:eb:8a:1a:9d: b1:83:18:b4:07:60:1c:3d:6f:a2:9e:4e:d4:67:48: 63:d3:ae:bf:de:30:0d:6e:71:02:b5:2b:98:a3:58: 00:34:30:2d:22:89:75:fe:fe:90:fe:96:99:8e:ba: d9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:ED:05:7D:11:56:ED:5C:26:14:2D:9F:97:B7:D7:2B:06:06:A1:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1b8a8da8-12ff-3986-a10c-c955ed07a6cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e0:61:86:a5:8f:b5:fd:5a:9e:56:f6:65:8c:ef:9b:f3:63: 9b:5a:c3:e9:15:cb:ec:fd:8f:62:15:7b:98:4c:e6:9b:ee:ab: 62:0d:ba:95:33:57:24:27:64:9b:95:69:a5:7d:61:71:36:94: 3c:7b:88:de:70:8a:00:86:9d:40:64:c5:6f:be:0c:62:11:62: d0:66:72:27:99:04:da:16:00:ab:9c:50:87:55:7c:d4:01:24: df:1d:d9:57:be:be:8d:b0:a4:26:82:34:9f:3c:91:18:45:6b: 1d:61:34:3e:d6:14:b7:68:46:e0:a9:2f:33:a6:af:48:ea:a2: 38:3e:e5:ba:87:82:be:4d:c6:97:09:4d:3b:5e:1d:bd:fe:ee: 63:e6:15:de:73:42:dc:4c:ec:10:53:e5:c1:78:6a:2c:dd:3e: dd:95:81:2a:31:cb:fe:69:f5:c7:7c:a8:03:fc:c0:dc:6d:97: 9a:b3:b9:de:94:2c:84:73:1c:50:22:40:5c:14:41:08:33:81: f7:9b:2c:ee:75:e7:0e:33:58:94:a7:5e:e1:6d:ef:e6:99:0b: 5f:78:ae:c2:a6:c7:5d:92:20:e8:0f:ba:11:37:4e:86:fd:23: 78:8e:40:d5:a0:9f:ab:82:cb:e7:1b:0e:3f:ae:bf:fa:98:6d: db:93:e2:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAgdWSEJLrPm/gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZWFhMWM1NWUtY2ViZC00ZDMzLTkzZTEtZTc4NDY3OGNhYjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJV1avj5qwTXW5WpKaMFvE9sQYWqfgvnx+3p vD1aLpvY1WzReERy/3CP6tD8xwQU+aOLtcGd0ijREVuhdcho2HIOI7kJoh0O1a9S Ex/5f4ORqPeB/5M2jlt6awo+eyT5VsFUpMM3VR7zJeqKaeFJikZ2eXAC3qopGldO hbt4R4dN772DwUvIBoKn7TzwLsTBlDVn6ty4Rc1CPCVN0DvXbuhjwQkIo3SOBtRl ZbqmsTnIGz1gsVIKJpXmPTx8GdRqIX8tlVGFy6XjnvkuduuKGp2xgxi0B2AcPW+i nk7UZ0hj066/3jANbnECtSuYo1gANDAtIol1/v6Q/paZjrrZGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIztBX0RVu1cJhQtn5e31ysGBqGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWI4YThkYTgtMTJmZi0z OTg2LWExMGMtYzk1NWVkMDdhNmNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3gYYalj7X9Wp5W9mWM75vzY5taw+kVy+z9j2IVe5hM5pvuq2INupUz VyQnZJuVaaV9YXE2lDx7iN5wigCGnUBkxW++DGIRYtBmcieZBNoWAKucUIdVfNQB JN8d2Ve+vo2wpCaCNJ88kRhFax1hND7WFLdoRuCpLzOmr0jqojg+5bqHgr5NxpcJ TTteHb3+7mPmFd5zQtxM7BBT5cF4aizdPt2VgSoxy/5p9cd8qAP8wNxtl5qzud6U LIRzHFAiQFwUQQgzgfebLO515w4zWJSnXuFt7+aZC194rsKmx12SIOgPuhE3Tob9 I3iOQNWgn6uCy+cbDj+uv/qYbduT4tA= -----END CERTIFICATE-----Generated at Sat Sep 5 01:23:58 2026 by rpki-client