$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f7c0db6-a8d1-3f1b-82cb-ab964aad0c45.roa File: 3f7c0db6-a8d1-3f1b-82cb-ab964aad0c45.roa (raw, json) Hash identifier: IZ5PjDNoDX5kybMC4cNZu9BAcEvmBkYXvkBLF+VXyVU= Subject key identifier: 5D:2A:D9:34:99:A9:66:40:88:1F:3D:E8:34:1F:44:1B:BF:E5:37:02 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EC372AF3FF0DBEF699F00BC00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f7c0db6-a8d1-3f1b-82cb-ab964aad0c45.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 36183 IP address blocks: 172.225.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:af:3f:f0:db:ef:69:9f:00:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=7e1ffb9b-5fdd-49b3-9da1-c43303b0f8f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ec:c0:10:7e:9a:dc:f5:b8:4a:7c:fa:74:68: b6:71:39:08:d2:6a:c5:9c:65:4a:cc:24:f5:29:ae: 36:2b:c7:39:bc:c6:0b:91:a2:35:9b:f0:29:4e:d9: cf:10:f6:d6:f1:9a:cf:4c:09:24:d4:76:7f:d7:0a: 04:ab:8b:cb:d2:9e:e3:24:59:aa:e1:a0:24:bb:fd: 11:f7:c6:54:7a:e9:15:ba:92:bd:f5:8a:cc:b2:38: 42:50:76:8f:96:85:93:14:20:d5:3a:5c:38:83:dd: e2:db:3c:6b:79:17:ac:22:e5:f2:f0:e4:30:24:bb: 11:0c:51:82:e5:9e:0a:90:b1:43:44:83:9a:ec:61: ad:bf:00:82:0e:1c:6f:ea:bf:19:dd:d2:df:ab:b3: 3a:0c:b0:95:a4:4d:b6:3d:6a:20:58:20:84:4c:9d: 9d:aa:28:88:be:29:cb:de:46:91:74:a1:8c:93:0e: 96:1f:91:8b:4f:01:9a:a9:69:00:fc:9c:78:12:f2: 2c:d2:76:9c:50:a6:6e:90:e3:45:2b:8f:9c:0e:b9: f0:d9:16:25:7c:cc:18:24:47:64:d3:47:2a:cf:19: 9a:f2:30:37:ee:b2:a3:9a:f2:5b:2f:52:07:eb:58: 49:2d:45:ee:9b:4e:ce:58:dd:ed:c5:df:0f:f1:52: 75:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:2A:D9:34:99:A9:66:40:88:1F:3D:E8:34:1F:44:1B:BF:E5:37:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f7c0db6-a8d1-3f1b-82cb-ab964aad0c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:1d:2c:02:d8:43:0d:ae:bc:48:e4:d9:4e:96:ea:2a:61:65: f2:59:9d:2f:68:19:92:70:24:d8:04:57:f7:90:5b:8d:27:0b: 8f:59:cd:56:fc:6a:0f:fc:44:05:8f:fd:06:d1:76:34:e6:aa: 13:86:da:c0:2f:a2:4a:12:08:53:85:7c:70:25:69:e9:a4:8a: 7d:e8:60:c2:ff:d7:45:e6:61:e9:41:6b:bd:19:45:1d:5e:0a: 25:16:28:07:0c:c9:ad:2b:ff:df:e7:42:d3:50:89:ab:97:34: 16:25:37:84:f9:d6:0e:c3:04:a7:89:47:72:7c:1a:32:cc:da: 09:82:11:ff:6b:e4:c8:20:f0:39:5f:eb:9f:ef:2a:f6:8d:38: 08:cd:c4:e5:c7:d7:69:3c:29:d1:c3:fc:c7:27:6c:ff:a0:4f: 20:7f:15:fc:40:7a:09:97:fd:14:ca:78:53:b6:9e:a6:11:34: 88:72:4a:98:8a:71:da:07:d6:d1:8b:3a:bc:46:21:9a:b5:b8: ce:16:40:29:99:72:e6:f0:8b:ae:57:f5:a1:a5:34:6b:48:53: 85:92:94:9d:2b:c8:9c:d7:28:01:57:db:16:92:03:3b:f4:e5: 26:65:1e:bf:26:d1:d6:29:62:b3:3a:fc:52:42:c9:42:85:e5: 06:4e:55:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Dcq8/8NvvaZ8AvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk N2UxZmZiOWItNWZkZC00OWIzLTlkYTEtYzQzMzAzYjBmOGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiezAEH6a3PW4Snz6dGi2cTkI0mrFnGVKzCT1 Ka42K8c5vMYLkaI1m/ApTtnPEPbW8ZrPTAkk1HZ/1woEq4vL0p7jJFmq4aAku/0R 98ZUeukVupK99YrMsjhCUHaPloWTFCDVOlw4g93i2zxreResIuXy8OQwJLsRDFGC 5Z4KkLFDRIOa7GGtvwCCDhxv6r8Z3dLfq7M6DLCVpE22PWogWCCETJ2dqiiIvinL 3kaRdKGMkw6WH5GLTwGaqWkA/Jx4EvIs0nacUKZukONFK4+cDrnw2RYlfMwYJEdk 00cqzxma8jA37rKjmvJbL1IH61hJLUXum07OWN3txd8P8VJ1dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0q2TSZqWZAiB896DQfRBu/5TcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y3YzBkYjYtYThkMS0z ZjFiLTgyY2ItYWI5NjRhYWQwYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsdLALYQw2uvEjk2U6W6iphZfJZnS9oGZJwJNgEV/eQW40nC49ZzVb8 ag/8RAWP/QbRdjTmqhOG2sAvokoSCFOFfHAlaemkin3oYML/10XmYelBa70ZRR1e CiUWKAcMya0r/9/nQtNQiauXNBYlN4T51g7DBKeJR3J8GjLM2gmCEf9r5Mgg8Dlf 65/vKvaNOAjNxOXH12k8KdHD/McnbP+gTyB/FfxAegmX/RTKeFO2nqYRNIhySpiK cdoH1tGLOrxGIZq1uM4WQCmZcubwi65X9aGlNGtIU4WSlJ0ryJzXKAFX2xaSAzv0 5SZlHr8m0dYpYrM6/FJCyUKF5QZOVdU= -----END CERTIFICATE-----Generated at Sat Sep 5 06:53:59 2026 by rpki-client