$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31d32ce4-ee70-3f91-b448-310600acfa4e.roa File: 31d32ce4-ee70-3f91-b448-310600acfa4e.roa (raw, json) Hash identifier: Z3vIZnJqWgCa+Rrm6AUJO5rYkmrYmuZJv9Ho3Fzj+BY= Subject key identifier: F2:CA:75:B7:08:98:31:C8:B6:16:51:7A:83:79:A2:8E:12:7D:03:59 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA788A7B21900733F6EE32BE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31d32ce4-ee70-3f91-b448-310600acfa4e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 63949 IP address blocks: 172.104.4.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:a7:b2:19:00:73:3f:6e:e3:2b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=f9c82da6-0b27-45c9-bbc6-edfe9e079d90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:51:a0:11:37:dc:33:da:26:89:de:ef:73:d9: 85:72:bb:7d:af:2e:68:e7:4f:dc:89:9f:da:b7:ef: 0c:5e:92:3f:4a:af:3c:0f:8f:3d:6f:a8:64:ab:72: d8:21:41:44:63:ac:c9:ad:6e:39:5b:10:7e:9c:cf: 11:43:eb:83:e3:14:c7:5f:38:88:15:b6:3b:35:4b: f9:5d:e9:15:a1:ee:cd:40:d0:94:a7:ba:bc:ff:ce: 9d:0d:73:69:e2:6a:2b:05:54:6c:ee:40:e2:f0:54: a7:49:bd:14:26:fa:d3:02:44:ef:9b:b9:44:1b:74: 6c:df:35:4a:0b:fb:d1:bc:25:aa:dd:1a:20:e5:54: 31:5f:26:a1:06:bf:45:a3:61:6f:ed:00:21:6f:24: 64:77:87:27:e8:6a:f4:c4:8b:48:12:7e:ee:40:21: 4b:e1:a1:62:14:03:2d:89:d8:b9:fe:7f:9f:74:9a: e1:5b:29:e4:ae:21:56:ed:8b:71:7e:d4:9f:d7:d8: d8:eb:05:94:26:8e:9f:bb:7c:ac:1f:92:ed:10:6e: 34:1e:0b:68:ac:93:35:d5:90:b2:04:42:ab:03:fe: 8f:5f:72:db:4b:8c:c8:4a:a2:94:2d:df:93:4e:ba: d3:1c:31:d5:e3:6e:d9:c5:09:c3:e8:12:14:1f:81: 8e:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:CA:75:B7:08:98:31:C8:B6:16:51:7A:83:79:A2:8E:12:7D:03:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/31d32ce4-ee70-3f91-b448-310600acfa4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.104.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ea:15:2b:1d:71:dd:d9:fe:bb:48:34:84:ec:7c:d8:65:46: 90:19:a7:5f:af:96:fa:04:06:56:0e:ed:80:76:29:47:f8:8b: 7a:8d:6b:ef:c2:ca:13:1c:06:cd:71:75:92:a7:b1:71:82:e2: 35:b4:52:fc:f9:ff:03:e2:62:57:92:6f:ab:03:9a:9c:e9:bd: ba:28:97:03:99:86:75:b1:f3:d1:4a:ec:92:53:57:af:75:cd: 18:b2:12:46:fa:86:30:0a:a3:29:4a:7a:12:b9:09:17:70:16: b1:75:b1:0f:0b:e9:94:6f:c0:7b:ed:6a:ba:1b:fa:25:9c:09: bb:4c:8c:c9:39:cb:fd:92:e6:9d:9e:87:db:de:56:25:32:94: 64:3c:07:12:1c:b3:ed:e6:e3:e0:8a:4c:18:4b:2d:e4:56:d6: 32:77:8b:bb:9c:55:99:48:71:99:ac:08:c6:ef:3b:76:89:d5: fb:d1:18:71:bf:09:8d:b2:82:51:88:0c:89:77:31:67:e4:00: d8:4f:9e:31:75:8e:fc:36:c2:27:cd:21:dd:c6:8c:96:42:b7: 58:8f:e5:a8:5d:d8:d3:97:ed:d2:fd:32:0a:be:24:f1:f3:d6: 6b:f1:d4:50:73:20:2b:8e:7e:8f:5f:eb:b1:98:d2:76:7d:16: 48:b2:33:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niKeyGQBzP27jK+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZjljODJkYTYtMGIyNy00NWM5LWJiYzYtZWRmZTllMDc5ZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlGgETfcM9omid7vc9mFcrt9ry5o50/ciZ/a t+8MXpI/Sq88D489b6hkq3LYIUFEY6zJrW45WxB+nM8RQ+uD4xTHXziIFbY7NUv5 XekVoe7NQNCUp7q8/86dDXNp4morBVRs7kDi8FSnSb0UJvrTAkTvm7lEG3Rs3zVK C/vRvCWq3Rog5VQxXyahBr9Fo2Fv7QAhbyRkd4cn6Gr0xItIEn7uQCFL4aFiFAMt idi5/n+fdJrhWynkriFW7YtxftSf19jY6wWUJo6fu3ysH5LtEG40HgtorJM11ZCy BEKrA/6PX3LbS4zISqKULd+TTrrTHDHV427ZxQnD6BIUH4GOQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLKdbcImDHIthZReoN5oo4SfQNZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzFkMzJjZTQtZWU3MC0z ZjkxLWI0NDgtMzEwNjAwYWNmYTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGgEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnqFSsdcd3Z/rtINITsfNhlRpAZp1+vlvoEBlYO7YB2KUf4i3qNa+/C yhMcBs1xdZKnsXGC4jW0Uvz5/wPiYleSb6sDmpzpvboolwOZhnWx89FK7JJTV691 zRiyEkb6hjAKoylKehK5CRdwFrF1sQ8L6ZRvwHvtarob+iWcCbtMjMk5y/2S5p2e h9veViUylGQ8BxIcs+3m4+CKTBhLLeRW1jJ3i7ucVZlIcZmsCMbvO3aJ1fvRGHG/ CY2yglGIDIl3MWfkANhPnjF1jvw2wifNId3GjJZCt1iP5ahd2NOX7dL9Mgq+JPHz 1mvx1FBzICuOfo9f67GY0nZ9FkiyM2A= -----END CERTIFICATE-----Generated at Sat Sep 5 05:27:57 2026 by rpki-client