$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c247b0a-4d0b-3b78-a291-2f4f88037390.roa File: 3c247b0a-4d0b-3b78-a291-2f4f88037390.roa (raw, json) Hash identifier: bQDslYsvvtNh2gzv5DRvNBaE4sn/jpMnWY7/ZzTBUUo= Subject key identifier: B4:3C:CF:27:98:9F:90:BD:03:11:97:2F:71:8B:1F:E5:2E:EA:D7:DE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EC372AF57D180B662F4311880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c247b0a-4d0b-3b78-a291-2f4f88037390.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 36183 IP address blocks: 172.225.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:af:57:d1:80:b6:62:f4:31:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=12c2a7ac-7007-48a9-a699-4438925e3351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0e:4c:dd:dd:b9:2d:a2:7c:98:07:58:bc:25: 7c:17:07:43:cb:9a:47:d3:69:bb:34:3d:15:83:64: fd:64:c1:5a:98:81:a9:fa:1c:20:44:23:8c:d5:66: 05:cf:64:9f:3c:f4:ba:c7:3e:d8:00:aa:67:67:e3: 94:a1:e0:6d:3b:1b:7e:ad:6a:85:0e:b8:3d:96:85: a1:43:3d:23:5e:6f:e8:fa:6c:0b:ef:b7:79:9d:60: df:c4:55:ed:5a:de:57:d9:de:16:cf:fd:df:5d:8a: a4:05:76:18:e0:69:57:f5:77:a5:e1:0d:8f:4f:b4: fe:fa:68:b8:34:ee:24:50:ac:2d:c8:74:70:f6:14: a9:3c:be:e3:df:39:54:c3:11:a5:17:2e:79:d3:e0: 5d:28:99:25:6a:c2:9c:27:2e:4a:c2:2e:12:f8:e1: de:e8:b1:22:ab:a6:19:68:f2:7d:48:f2:a7:f7:7c: 7d:cf:fe:25:0b:58:67:00:36:91:89:27:ff:73:9b: b0:77:eb:8f:42:06:b6:49:60:42:f9:1b:41:14:29: 3d:e4:d0:de:00:b6:b0:23:82:a1:fb:d9:2f:76:64: be:36:52:4b:db:1e:73:86:c3:e8:7c:a2:4b:0d:aa: 24:b1:93:45:8c:64:c5:c9:44:0d:e4:4a:f2:51:3f: 6b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3C:CF:27:98:9F:90:BD:03:11:97:2F:71:8B:1F:E5:2E:EA:D7:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c247b0a-4d0b-3b78-a291-2f4f88037390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:9a:3d:73:5b:d6:1a:2b:72:0a:91:95:88:32:c9:3f:ef:35: 37:aa:eb:5a:55:86:77:32:1f:46:e1:2b:99:38:0d:71:74:09: ba:40:34:76:e2:2d:77:9c:95:43:c0:3f:0f:fb:75:59:2c:ca: de:f4:48:d4:b5:e8:ff:93:3a:2e:29:9f:51:14:dd:8d:c8:1f: 59:a6:ae:4b:81:8b:a0:81:9b:d8:1a:58:13:ac:fc:0a:58:8b: 62:97:83:0b:58:d8:c1:62:8c:ff:15:60:9a:88:4d:77:9c:ba: 45:3f:31:35:39:d8:a2:27:c2:4b:f3:60:74:07:45:55:97:cf: 81:72:5f:ae:8f:51:37:5e:4b:65:93:35:ad:1f:fa:45:35:bf: 96:eb:87:57:0f:51:06:5e:74:cb:c0:a8:c4:c4:b4:8c:bd:0e: 79:65:b6:47:e3:ee:4f:fd:ad:af:c0:b0:6a:4a:bc:61:b7:64: b8:35:84:ba:42:fe:9d:18:96:b3:8c:b7:cd:a2:2d:44:32:fe: 08:da:35:dd:c7:7d:f7:63:a0:ab:af:be:3a:94:81:cd:06:fd: ca:63:4d:a7:18:28:0b:00:12:39:7e:6e:08:40:c8:3b:43:96: 9c:5b:46:b3:fd:e6:2b:71:ae:fe:a5:b5:2f:e2:9c:54:f9:44: 9f:93:b6:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dcq9X0YC2YvQxGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MTJjMmE3YWMtNzAwNy00OGE5LWE2OTktNDQzODkyNWUzMzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ5M3d25LaJ8mAdYvCV8FwdDy5pH02m7ND0V g2T9ZMFamIGp+hwgRCOM1WYFz2SfPPS6xz7YAKpnZ+OUoeBtOxt+rWqFDrg9loWh Qz0jXm/o+mwL77d5nWDfxFXtWt5X2d4Wz/3fXYqkBXYY4GlX9Xel4Q2PT7T++mi4 NO4kUKwtyHRw9hSpPL7j3zlUwxGlFy550+BdKJklasKcJy5Kwi4S+OHe6LEiq6YZ aPJ9SPKn93x9z/4lC1hnADaRiSf/c5uwd+uPQga2SWBC+RtBFCk95NDeALawI4Kh +9kvdmS+NlJL2x5zhsPofKJLDaoksZNFjGTFyUQN5EryUT9rLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ8zyeYn5C9AxGXL3GLH+Uu6tfeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2MyNDdiMGEtNGQwYi0z Yjc4LWEyOTEtMmY0Zjg4MDM3MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC6aPXNb1horcgqRlYgyyT/vNTeq61pVhncyH0bhK5k4DXF0CbpANHbi LXeclUPAPw/7dVksyt70SNS16P+TOi4pn1EU3Y3IH1mmrkuBi6CBm9gaWBOs/ApY i2KXgwtY2MFijP8VYJqITXecukU/MTU52KInwkvzYHQHRVWXz4FyX66PUTdeS2WT Na0f+kU1v5brh1cPUQZedMvAqMTEtIy9Dnlltkfj7k/9ra/AsGpKvGG3ZLg1hLpC /p0YlrOMt82iLUQy/gjaNd3HffdjoKuvvjqUgc0G/cpjTacYKAsAEjl+bghAyDtD lpxbRrP95itxrv6ltS/inFT5RJ+Ttg8= -----END CERTIFICATE-----Generated at Sat Sep 5 03:29:21 2026 by rpki-client