$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa File: 3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa (raw, json) Hash identifier: iebi4/wwgeBL/yZEW4an3BNer5g1PCma+2OXb90PTsg= Subject key identifier: AA:29:33:0F:72:A5:58:BB:0B:EA:40:88:9F:3A:45:79:D8:F9:2E:40 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EC20C73ADC3D4F3074669DB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 36183 IP address blocks: 172.225.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:73:ad:c3:d4:f3:07:46:69:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=b1f0c34d-0d45-492e-9faf-d6ede657b492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:40:bd:e3:da:e5:16:21:28:15:83:44:3f:c3: e6:03:68:7c:28:7c:ff:d0:19:00:cb:a1:bf:25:57: 19:35:40:b3:31:f1:e2:ad:67:45:47:46:b8:3e:f4: ec:43:12:f0:b7:13:e4:6f:4b:94:f6:0c:5c:96:6c: 9b:a7:1f:d5:15:c7:a3:dc:5d:82:36:c1:a8:55:01: 01:11:70:dd:4e:54:72:00:05:c1:58:fc:ee:34:a6: 3c:a9:bd:d2:48:6f:cd:2e:1b:ca:a9:80:62:f8:cc: 2f:02:a2:cc:c3:36:20:24:d5:bb:07:81:86:82:b8: fa:71:49:ff:78:78:dc:ba:08:77:c7:1e:59:35:3d: 1e:cd:e2:2f:03:12:96:6c:ec:9e:14:9d:df:96:d9: a8:24:88:01:7c:cc:15:cf:eb:77:85:5c:45:e4:e5: 6b:c5:f5:6e:ec:3a:eb:55:25:45:aa:28:ab:fa:a3: 60:85:40:07:32:e4:50:7b:34:85:f7:4e:22:6b:8c: ff:1e:fc:2b:2c:e2:f7:4b:6f:6d:2f:80:06:e8:4a: 23:d1:2a:41:a5:35:95:3b:0d:1b:70:81:22:d3:e5: db:7b:3c:99:68:a4:05:d0:a1:48:b3:3d:33:87:13: 67:70:54:2e:7e:d5:ab:69:61:54:03:a2:8c:db:39: b5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:29:33:0F:72:A5:58:BB:0B:EA:40:88:9F:3A:45:79:D8:F9:2E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:cd:74:77:db:22:f4:ed:35:e3:18:bd:8e:65:4d:68:61:12: 95:9a:26:13:ca:78:42:db:cd:b4:96:77:b4:d0:46:db:e9:8a: 64:f9:9a:6b:d4:e8:71:00:c9:a6:32:cb:90:10:7b:a1:4e:5b: f7:2c:a2:0e:2b:2b:2f:57:53:04:51:31:db:10:76:89:77:e7: cd:46:c0:81:72:30:49:df:55:9f:bc:0d:96:55:a1:cb:56:13: 70:d4:8f:a0:f8:45:a5:bf:ca:68:05:8d:26:2c:d5:12:ba:ad: 38:f2:eb:94:59:3e:80:18:78:d9:be:8b:75:5d:d1:1c:af:60: e7:b8:cf:47:eb:d7:2e:30:42:b7:ae:f2:c8:74:6e:49:2d:1d: c6:81:dc:f9:7a:21:36:7f:3e:4d:2a:a9:7c:98:a0:36:e8:4f: b5:5c:1e:93:46:7c:43:29:4d:ba:7d:8c:ac:f0:5c:d6:cd:cc: 57:80:68:13:e0:05:02:96:d3:04:62:ac:8a:85:0a:ee:23:7b: 90:1a:b7:56:33:47:33:b1:fd:2e:1a:28:b3:c1:2c:79:bb:17: bc:64:8f:10:27:08:ea:ed:47:91:8e:23:64:c4:a1:63:09:cd: 7a:df:ad:2f:18:46:31:15:18:d2:c6:c5:b4:22:3d:a7:36:82: a5:e3:10:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDHOtw9TzB0Zp2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk YjFmMGMzNGQtMGQ0NS00OTJlLTlmYWYtZDZlZGU2NTdiNDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUC949rlFiEoFYNEP8PmA2h8KHz/0BkAy6G/ JVcZNUCzMfHirWdFR0a4PvTsQxLwtxPkb0uU9gxclmybpx/VFcej3F2CNsGoVQEB EXDdTlRyAAXBWPzuNKY8qb3SSG/NLhvKqYBi+MwvAqLMwzYgJNW7B4GGgrj6cUn/ eHjcugh3xx5ZNT0ezeIvAxKWbOyeFJ3fltmoJIgBfMwVz+t3hVxF5OVrxfVu7Drr VSVFqiir+qNghUAHMuRQezSF904ia4z/HvwrLOL3S29tL4AG6Eoj0SpBpTWVOw0b cIEi0+XbezyZaKQF0KFIsz0zhxNncFQuftWraWFUA6KM2zm15QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKopMw9ypVi7C+pAiJ86RXnY+S5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2U5MWY2ZTUtNGIzYi0z YWY5LWIwOWYtNmYxZmUxYThmY2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnNdHfbIvTtNeMYvY5lTWhhEpWaJhPKeELbzbSWd7TQRtvpimT5mmvU 6HEAyaYyy5AQe6FOW/csog4rKy9XUwRRMdsQdol3581GwIFyMEnfVZ+8DZZVoctW E3DUj6D4RaW/ymgFjSYs1RK6rTjy65RZPoAYeNm+i3Vd0RyvYOe4z0fr1y4wQreu 8sh0bkktHcaB3Pl6ITZ/Pk0qqXyYoDboT7VcHpNGfEMpTbp9jKzwXNbNzFeAaBPg BQKW0wRirIqFCu4je5Aat1YzRzOx/S4aKLPBLHm7F7xkjxAnCOrtR5GOI2TEoWMJ zXrfrS8YRjEVGNLGxbQiPac2gqXjEAA= -----END CERTIFICATE-----Generated at Fri Sep 4 22:44:25 2026 by rpki-client