$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/265a24b5-20be-36e6-9fdb-248da6ec6b22.roa File: 265a24b5-20be-36e6-9fdb-248da6ec6b22.roa (raw, json) Hash identifier: WpRCpHELY1sQz60/TeCr2M+p5aGBjuR5qDK5kEokeE4= Subject key identifier: DB:28:67:AD:3B:65:35:BB:E9:30:36:82:C5:4A:A3:94:93:36:59:9B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ED001F9167CFD21953DFEF880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/265a24b5-20be-36e6-9fdb-248da6ec6b22.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 36183 IP address blocks: 172.225.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f9:16:7c:fd:21:95:3d:fe:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=9875926e-fc48-40b4-80f7-9b8777191793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:b0:a5:39:c4:db:59:7d:c6:4c:4c:a5:40: 23:13:ea:c7:d9:8f:60:b9:45:37:17:91:1f:71:6e: 31:56:cb:b0:ca:c0:ad:6e:9c:3a:c6:b9:9e:6e:36: 8b:9f:a8:16:62:ea:07:19:c7:4f:2b:f3:c5:c2:71: 49:3d:71:c3:01:5d:b9:e6:f5:62:d3:5d:4f:c8:7a: 06:47:5c:3a:c5:69:3c:82:d2:9e:af:78:b6:71:fe: c3:22:23:be:2c:64:93:e3:6a:ad:9a:55:8b:0a:cb: de:fe:ac:02:b2:cf:76:a2:85:a1:cf:f3:05:66:a4: d2:3a:77:76:df:ef:f8:cf:98:a9:22:dd:1c:e9:ea: 89:ba:71:e5:98:51:b1:aa:24:91:2d:47:81:f7:6a: 2b:63:84:ac:f8:22:81:49:4f:72:64:b5:39:28:a3: 7d:16:c4:e8:4e:72:d3:b2:51:b6:aa:07:2c:e2:8d: b6:dd:42:ec:3f:d5:db:eb:9d:6b:d3:69:e4:fc:2d: f7:c1:19:4f:06:67:aa:86:5c:6f:0c:33:f6:b9:88: 6d:b6:a3:45:64:78:ee:72:df:fc:7a:43:9a:14:c7: 43:27:1e:8e:d7:c7:2c:c5:99:60:c2:7d:1f:dd:1c: b1:88:79:3b:ae:cb:c1:9e:cc:7c:39:a4:b2:89:47: 4c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:28:67:AD:3B:65:35:BB:E9:30:36:82:C5:4A:A3:94:93:36:59:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/265a24b5-20be-36e6-9fdb-248da6ec6b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b8:e7:85:0e:74:87:49:3f:56:d5:33:2c:c3:51:95:c4:b9: ed:c7:02:ad:64:0f:9f:da:ef:ac:ec:6c:c6:42:03:1a:f0:0b: e7:df:39:06:38:ac:85:f7:f6:21:82:80:eb:90:65:82:eb:fb: 3b:22:24:ec:75:6c:8c:f4:8b:6c:29:97:08:b2:59:1a:83:5b: 00:a4:d2:ed:ce:9f:6d:c4:3e:a6:57:bc:2d:96:57:4f:ff:a3: eb:6d:76:e5:50:91:48:99:0a:16:5a:db:b6:00:66:9f:09:ac: d9:e3:ca:c7:24:39:21:c9:4b:fb:0c:7b:06:54:a1:d2:f8:96: 16:2a:72:b9:85:f1:6e:a7:8e:6e:8f:42:da:2a:63:a2:c5:47: e8:2d:5e:d2:51:6b:9a:9b:1c:55:ac:fb:0b:b2:06:e3:54:8e: 13:41:13:f9:de:75:d7:99:05:16:8e:df:84:33:99:bb:a2:37: d1:55:b1:ba:0c:84:13:83:a7:19:2b:03:63:43:38:b8:c7:02: 4f:09:ad:cd:6a:60:d8:3d:b2:41:5f:90:b2:e4:82:32:a0:16: 3c:46:24:94:5e:49:5c:76:32:d3:e9:bb:40:12:11:d5:a9:d5: f4:e4:53:da:d2:3b:fb:0e:0a:56:9c:07:38:dd:82:07:c1:bd: d2:e7:bd:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfkWfP0hlT3++IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk OTg3NTkyNmUtZmM0OC00MGI0LTgwZjctOWI4Nzc3MTkxNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujuwpTnE21l9xkxMpUAjE+rH2Y9guUU3F5Ef cW4xVsuwysCtbpw6xrmebjaLn6gWYuoHGcdPK/PFwnFJPXHDAV255vVi011PyHoG R1w6xWk8gtKer3i2cf7DIiO+LGST42qtmlWLCsve/qwCss92ooWhz/MFZqTSOnd2 3+/4z5ipIt0c6eqJunHlmFGxqiSRLUeB92orY4Ss+CKBSU9yZLU5KKN9FsToTnLT slG2qgcs4o223ULsP9Xb651r02nk/C33wRlPBmeqhlxvDDP2uYhttqNFZHjuct/8 ekOaFMdDJx6O18csxZlgwn0f3RyxiHk7rsvBnsx8OaSyiUdMcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsoZ607ZTW76TA2gsVKo5STNlmbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjY1YTI0YjUtMjBiZS0z NmU2LTlmZGItMjQ4ZGE2ZWM2YjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC454UOdIdJP1bVMyzDUZXEue3HAq1kD5/a76zsbMZCAxrwC+ffOQY4 rIX39iGCgOuQZYLr+zsiJOx1bIz0i2wplwiyWRqDWwCk0u3On23EPqZXvC2WV0// o+ttduVQkUiZChZa27YAZp8JrNnjysckOSHJS/sMewZUodL4lhYqcrmF8W6njm6P QtoqY6LFR+gtXtJRa5qbHFWs+wuyBuNUjhNBE/neddeZBRaO34QzmbuiN9FVsboM hBODpxkrA2NDOLjHAk8Jrc1qYNg9skFfkLLkgjKgFjxGJJReSVx2MtPpu0ASEdWp 1fTkU9rSO/sOClacBzjdggfBvdLnvVw= -----END CERTIFICATE-----Generated at Sat Sep 5 01:28:39 2026 by rpki-client