$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41486355-4b5a-3c66-9789-e5f769fc61f7.roa File: 41486355-4b5a-3c66-9789-e5f769fc61f7.roa (raw, json) Hash identifier: Fa2Ju1J0syblOMZy5jH/0fmjIjeXIEX4IcQxWK0D3N8= Subject key identifier: 20:FA:E0:72:44:64:2B:E2:65:BA:C9:F0:3E:12:3F:9A:F5:52:FD:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EC20C73B9AACA821B59DCDF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41486355-4b5a-3c66-9789-e5f769fc61f7.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 36183 IP address blocks: 172.225.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:73:b9:aa:ca:82:1b:59:dc:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=20698b97-da0d-4958-a3ac-bd88fc943a25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f9:03:cf:c4:1f:f6:43:da:a2:09:1b:d7:74: b0:80:19:fc:88:fe:1a:5d:29:9f:60:9e:9f:97:80: 8c:51:b2:8b:b1:ec:ed:d6:06:dc:ff:29:94:b7:e1: 5b:38:7f:bc:a1:5f:f5:cb:d0:19:a8:ae:b3:a5:d7: dc:cc:e5:2c:3f:0b:1e:92:71:e1:ad:9c:f3:73:25: 6f:53:30:03:40:1c:62:00:66:13:d9:cd:18:66:9e: 05:5f:59:32:28:e6:38:43:11:f2:80:d6:44:03:ea: 49:07:9c:b2:4d:c9:00:77:e6:15:c9:1c:6f:6d:c4: dd:71:ca:76:df:55:71:a7:0a:c1:ef:2b:42:2d:a0: cc:09:1d:6e:a9:b2:dc:a8:f7:c6:5a:20:3e:00:06: 4a:01:03:99:30:ac:1c:1a:07:e9:0b:08:32:87:44: d3:c3:cd:10:26:43:51:b7:a0:c5:09:ed:c8:fa:ec: 13:14:4f:d7:17:c1:30:68:6c:54:79:87:ce:ca:65: 21:1f:cb:e9:4a:3d:fa:54:35:dc:37:3b:f5:d3:a7: 2a:7d:09:07:ab:d1:70:f3:13:0d:c8:de:e0:40:03: 0b:0a:78:1a:23:db:58:c3:64:f1:66:75:f3:b2:dc: 20:ff:e4:32:e6:20:71:e9:9a:ad:b5:5b:19:09:6b: dd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FA:E0:72:44:64:2B:E2:65:BA:C9:F0:3E:12:3F:9A:F5:52:FD:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/41486355-4b5a-3c66-9789-e5f769fc61f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:83:ce:76:f0:55:dd:2d:2c:d4:47:b7:71:38:d7:71:59:66: 10:d5:bd:28:5b:82:f7:d5:93:6d:51:98:4e:8f:8f:c6:0e:3e: 8a:a9:39:c1:bb:6f:0e:7b:79:42:c2:b1:68:fa:c8:75:b8:65: 04:98:1b:a6:d9:8f:9d:12:50:7d:ea:47:e3:d7:a1:5b:65:42: 02:3c:30:c9:ec:71:32:48:dc:cd:03:0d:ec:db:0f:a0:e1:a3: 21:e0:c5:14:07:0d:f2:27:5d:d9:52:40:44:b3:f2:2c:f4:f9: 16:a9:68:38:0b:98:6c:f4:12:82:e1:3a:49:d1:ad:dd:bd:66: a5:9c:71:78:1d:e5:34:0a:eb:6b:b5:51:c0:9f:18:a1:92:65: 28:82:78:6f:d1:6f:9b:e6:8c:c6:ed:10:4c:bd:fe:c7:eb:18: 93:f6:d1:0f:1f:f3:4e:ae:e0:df:90:2e:ee:fa:0f:9f:0c:79: 7f:89:34:97:dc:f5:87:09:e7:10:5f:0b:27:60:c5:95:04:42: 70:b2:39:f4:21:88:fe:d6:cb:68:ff:ae:c9:86:61:69:32:ac: 89:d4:d4:29:79:42:fa:00:dd:02:22:57:23:ae:6c:94:32:1e: c7:bd:b4:28:bf:99:f1:00:fa:55:6d:11:53:54:10:2d:68:52: f6:ec:6a:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDHO5qsqCG1nc34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk MjA2OThiOTctZGEwZC00OTU4LWEzYWMtYmQ4OGZjOTQzYTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPkDz8Qf9kPaogkb13SwgBn8iP4aXSmfYJ6f l4CMUbKLsezt1gbc/ymUt+FbOH+8oV/1y9AZqK6zpdfczOUsPwseknHhrZzzcyVv UzADQBxiAGYT2c0YZp4FX1kyKOY4QxHygNZEA+pJB5yyTckAd+YVyRxvbcTdccp2 31VxpwrB7ytCLaDMCR1uqbLcqPfGWiA+AAZKAQOZMKwcGgfpCwgyh0TTw80QJkNR t6DFCe3I+uwTFE/XF8EwaGxUeYfOymUhH8vpSj36VDXcNzv106cqfQkHq9Fw8xMN yN7gQAMLCngaI9tYw2TxZnXzstwg/+Qy5iBx6ZqttVsZCWvdJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCD64HJEZCviZbrJ8D4SP5r1Uv0YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDE0ODYzNTUtNGI1YS0z YzY2LTk3ODktZTVmNzY5ZmM2MWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSDznbwVd0tLNRHt3E413FZZhDVvShbgvfVk21RmE6Pj8YOPoqpOcG7 bw57eULCsWj6yHW4ZQSYG6bZj50SUH3qR+PXoVtlQgI8MMnscTJI3M0DDezbD6Dh oyHgxRQHDfInXdlSQESz8iz0+RapaDgLmGz0EoLhOknRrd29ZqWccXgd5TQK62u1 UcCfGKGSZSiCeG/Rb5vmjMbtEEy9/sfrGJP20Q8f806u4N+QLu76D58MeX+JNJfc 9YcJ5xBfCydgxZUEQnCyOfQhiP7Wy2j/rsmGYWkyrInU1Cl5QvoA3QIiVyOubJQy Hse9tCi/mfEA+lVtEVNUEC1oUvbsaiw= -----END CERTIFICATE-----Generated at Sat Sep 5 02:08:15 2026 by rpki-client