$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb18405-10dd-3001-8e81-b4467c5fd67c.roa File: 3fb18405-10dd-3001-8e81-b4467c5fd67c.roa (raw, json) Hash identifier: J51qkfOXE2qdaSzKcswvWlby2jm/mH05vTtEtYRYg74= Subject key identifier: 99:30:AD:2B:A4:BC:1B:13:51:84:73:76:40:11:F3:B9:67:77:00:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ED001FAA3D30EFB2A5969D3C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb18405-10dd-3001-8e81-b4467c5fd67c.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 36183 IP address blocks: 172.226.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:fa:a3:d3:0e:fb:2a:59:69:d3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=3dd1e764-4dc7-4673-9609-40b290f9e82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:34:2a:1d:e7:c3:30:17:09:e6:e3:cd:35:18: 45:fb:2f:a8:32:64:27:cf:30:db:a2:aa:ff:8c:ad: e8:87:e3:2c:f8:6b:63:76:ef:38:f6:15:02:9a:77: f2:73:05:70:8e:cb:4d:29:ce:b0:96:c8:08:fc:39: 90:07:91:07:fb:01:6c:69:12:5f:e0:df:c8:29:07: e9:dd:84:98:2e:44:b1:fb:46:7e:51:2f:52:13:38: 3d:b2:ed:5c:63:7d:45:62:a9:82:95:a4:32:5c:e4: b3:87:e8:6b:71:31:54:c0:c9:95:a8:a3:c6:36:a3: 5d:fd:b5:ad:71:61:fa:50:3b:af:8a:1a:87:96:15: be:52:5c:69:84:bc:69:14:c7:ea:da:93:ee:77:e6: 76:3a:be:1d:88:a7:8f:94:c3:e4:94:cb:52:59:ea: 82:7c:37:32:0b:cf:43:df:88:bb:13:91:60:44:bd: 31:e8:2c:a3:85:46:b0:2c:cb:ce:24:8c:7e:a4:d1: 30:f0:84:c9:fa:28:17:55:4a:18:34:ed:19:a5:01: 1c:f3:3f:40:d8:3f:cc:18:a5:73:c0:4d:cc:0b:97: bb:c2:df:d9:8e:7b:a0:d6:1f:77:2c:e8:89:51:ea: 6e:55:a1:95:79:e1:2e:09:00:8e:20:ba:b5:75:bf: 35:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:30:AD:2B:A4:BC:1B:13:51:84:73:76:40:11:F3:B9:67:77:00:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fb18405-10dd-3001-8e81-b4467c5fd67c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:da:db:3e:ec:27:b3:b4:26:62:ef:b5:ec:bf:e5:29:c5:92: 56:07:fe:c3:28:01:81:2e:c0:c7:54:bb:57:c1:79:ad:1d:b8: 97:60:78:c0:48:e5:3a:75:af:06:6c:90:dc:85:1e:48:b8:de: 4d:1d:0e:b0:1d:b8:1e:b1:cf:47:54:35:68:c2:db:a8:9c:4f: 5b:90:0b:cd:ec:bc:5b:af:cb:26:eb:d9:46:42:f9:78:47:58: 2b:b3:87:69:d7:a6:61:4f:e2:07:6a:67:18:a9:dc:9f:90:f7: 46:a0:e6:b7:4f:ff:79:4a:26:ca:2f:aa:3d:da:e6:87:15:be: f4:db:0d:45:56:42:1d:bf:c2:ca:d1:e0:7a:d8:b9:1a:a9:41: 46:52:00:1f:f9:d9:36:07:2b:12:94:43:0d:31:89:a0:e4:db: 2c:63:73:a9:00:75:7b:c1:45:42:f8:46:68:c7:ce:91:f2:9d: 63:8f:de:75:3a:00:8d:28:ec:67:5d:15:0a:6b:87:bd:a2:d8: 93:95:7c:1d:28:c9:9e:38:50:16:19:06:56:5f:4b:22:f9:89: 65:38:4b:4f:f2:70:ac:cf:97:6f:b0:77:c6:a0:30:a1:90:3b: 6b:4b:70:eb:90:89:66:65:09:82:5f:f7:d2:a1:a3:25:9d:46: 99:8c:89:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfqj0w77Kllp08AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk M2RkMWU3NjQtNGRjNy00NjczLTk2MDktNDBiMjkwZjllODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjQqHefDMBcJ5uPNNRhF+y+oMmQnzzDboqr/ jK3oh+Ms+Gtjdu849hUCmnfycwVwjstNKc6wlsgI/DmQB5EH+wFsaRJf4N/IKQfp 3YSYLkSx+0Z+US9SEzg9su1cY31FYqmClaQyXOSzh+hrcTFUwMmVqKPGNqNd/bWt cWH6UDuvihqHlhW+UlxphLxpFMfq2pPud+Z2Or4diKePlMPklMtSWeqCfDcyC89D 34i7E5FgRL0x6CyjhUawLMvOJIx+pNEw8ITJ+igXVUoYNO0ZpQEc8z9A2D/MGKVz wE3MC5e7wt/Zjnug1h93LOiJUepuVaGVeeEuCQCOILq1db81IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkwrSukvBsTUYRzdkAR87lndwCcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZiMTg0MDUtMTBkZC0z MDAxLThlODEtYjQ0NjdjNWZkNjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABna2z7sJ7O0JmLvtey/5SnFklYH/sMoAYEuwMdUu1fBea0duJdgeMBI 5Tp1rwZskNyFHki43k0dDrAduB6xz0dUNWjC26icT1uQC83svFuvyybr2UZC+XhH WCuzh2nXpmFP4gdqZxip3J+Q90ag5rdP/3lKJsovqj3a5ocVvvTbDUVWQh2/wsrR 4HrYuRqpQUZSAB/52TYHKxKUQw0xiaDk2yxjc6kAdXvBRUL4RmjHzpHynWOP3nU6 AI0o7GddFQprh72i2JOVfB0oyZ44UBYZBlZfSyL5iWU4S0/ycKzPl2+wd8agMKGQ O2tLcOuQiWZlCYJf99KhoyWdRpmMiUA= -----END CERTIFICATE-----Generated at Fri Sep 4 22:47:16 2026 by rpki-client