$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ef85418-07b4-39b8-b356-8afa01cfcb5a.roa File: 1ef85418-07b4-39b8-b356-8afa01cfcb5a.roa (raw, json) Hash identifier: l+j+JpjIbm0oQ0cVDE0rVFp3DjYgGnLvdyN60sSZ8UQ= Subject key identifier: 65:86:96:81:56:A4:B5:D6:89:0D:A1:CA:B8:2B:86:8F:8F:DD:5E:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ED861EFD59FB92ADF4C2BA960 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ef85418-07b4-39b8-b356-8afa01cfcb5a.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 36183 IP address blocks: 172.224.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:ef:d5:9f:b9:2a:df:4c:2b:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=ef11f9b8-b469-4cae-a9b9-3166d89f009d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:7a:71:a6:1f:12:37:66:68:38:e5:31:0c:52: 68:4e:d1:a6:18:aa:f2:24:a1:47:47:66:66:9d:81: 9b:a4:57:7b:a8:16:5f:1d:75:1b:09:a6:8f:a0:ae: a0:86:74:1f:ab:6c:fc:46:79:90:06:99:4e:98:a2: 57:c6:a8:d5:a5:9b:1d:3c:7e:b3:20:7a:23:10:93: 3e:a5:36:da:95:97:8b:a5:0d:d3:b7:f4:10:9f:df: d5:5a:53:91:fe:f7:6f:03:18:5a:d3:cb:31:f7:03: 86:85:93:3d:78:81:71:ed:a3:f1:25:ce:ec:93:37: f4:9c:df:f6:6f:10:eb:81:cb:de:f7:42:51:08:b1: ea:3b:dc:e8:44:9f:2b:b9:4d:32:62:60:6b:78:8f: aa:b9:1d:dd:48:da:09:59:38:5a:f8:a4:bf:7c:3b: e7:0b:3d:84:aa:20:fe:ae:4a:8b:0e:7f:54:b3:b9: 71:c2:26:be:74:8d:a4:37:40:65:52:88:8f:63:6a: 48:ae:84:30:53:74:b2:cd:88:7a:b0:5d:6b:25:e8: de:99:9f:94:fa:39:30:f4:7b:56:61:c6:78:84:22: d4:e6:cf:26:c0:f3:16:85:57:5a:37:06:04:e4:98: 9f:bf:81:33:6a:f3:23:a1:a2:d9:52:93:25:16:0f: 63:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:86:96:81:56:A4:B5:D6:89:0D:A1:CA:B8:2B:86:8F:8F:DD:5E:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ef85418-07b4-39b8-b356-8afa01cfcb5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:b2:c7:ea:03:cf:f6:3d:8a:ff:7e:61:83:82:e4:6d:0d:2c: 4a:b8:d3:9e:4c:2e:40:5e:f6:bd:13:1d:e8:12:58:f2:66:82: 82:f9:3a:03:05:56:8f:a4:a6:7d:22:a5:1d:42:0b:6d:c1:86: 6b:6e:34:d3:d6:ef:30:7d:7c:7e:cb:82:a1:f9:f3:82:b4:4f: b2:d7:f0:bc:5b:02:bd:da:1e:f0:7c:95:a9:ef:71:45:38:59: 09:4c:b8:82:c4:78:4e:92:d5:a7:e5:4a:b4:1d:3a:1c:47:de: e8:ac:6c:a5:90:6b:a3:5e:e8:00:ef:15:9a:1f:9e:d8:72:af: 00:b3:a5:ba:92:bf:48:26:e4:3b:a7:25:d6:64:5f:49:11:cf: e8:ed:64:b7:d0:1d:3b:ea:dd:cd:d3:4c:e4:f9:d1:fc:22:c5: dc:37:eb:b9:c0:d8:10:7d:99:e3:29:fd:e9:11:0b:e1:67:b6: e8:90:40:22:c1:02:6a:bf:29:ed:be:55:30:2d:cf:b4:a6:5e: f2:2e:a2:46:b2:35:1a:f1:d2:c7:c1:f6:57:13:99:88:53:53: f8:79:2d:a3:ce:30:2f:b3:b1:25:b1:c5:0e:d3:9a:40:a5:81: 06:7c:ab:a5:ef:72:b9:78:07:cc:a7:bd:db:a7:99:0a:41:69: 50:5c:a0:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYe/Vn7kq30wrqWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZWYxMWY5YjgtYjQ2OS00Y2FlLWE5YjktMzE2NmQ4OWYwMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXpxph8SN2ZoOOUxDFJoTtGmGKryJKFHR2Zm nYGbpFd7qBZfHXUbCaaPoK6ghnQfq2z8RnmQBplOmKJXxqjVpZsdPH6zIHojEJM+ pTbalZeLpQ3Tt/QQn9/VWlOR/vdvAxha08sx9wOGhZM9eIFx7aPxJc7skzf0nN/2 bxDrgcve90JRCLHqO9zoRJ8ruU0yYmBreI+quR3dSNoJWTha+KS/fDvnCz2EqiD+ rkqLDn9Us7lxwia+dI2kN0BlUoiPY2pIroQwU3SyzYh6sF1rJejemZ+U+jkw9HtW YcZ4hCLU5s8mwPMWhVdaNwYE5Jifv4EzavMjoaLZUpMlFg9jHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWGloFWpLXWiQ2hyrgrho+P3V63MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWVmODU0MTgtMDdiNC0z OWI4LWIzNTYtOGFmYTAxY2ZjYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCyx+oDz/Y9iv9+YYOC5G0NLEq4055MLkBe9r0THegSWPJmgoL5OgMF Vo+kpn0ipR1CC23BhmtuNNPW7zB9fH7LgqH584K0T7LX8LxbAr3aHvB8lanvcUU4 WQlMuILEeE6S1aflSrQdOhxH3uisbKWQa6Ne6ADvFZofnthyrwCzpbqSv0gm5Dun JdZkX0kRz+jtZLfQHTvq3c3TTOT50fwixdw367nA2BB9meMp/ekRC+FntuiQQCLB Amq/Ke2+VTAtz7SmXvIuokayNRrx0sfB9lcTmYhTU/h5LaPOMC+zsSWxxQ7TmkCl gQZ8q6Xvcrl4B8ynvdunmQpBaVBcoEw= -----END CERTIFICATE-----Generated at Fri Sep 4 22:45:46 2026 by rpki-client