$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42eca214-cc51-3cd8-93f1-70e4276225f6.roa File: 42eca214-cc51-3cd8-93f1-70e4276225f6.roa (raw, json) Hash identifier: Fdai7vyd2BFjpTdZmqOYQPE4TgJbbmeKj4Nfb2KQ1OU= Subject key identifier: E3:D6:A8:0A:8E:84:F9:36:5E:A1:F1:58:A3:4B:ED:58:83:40:96:8C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EBC770E5DCBCB9873DEF14300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42eca214-cc51-3cd8-93f1-70e4276225f6.roa Signing time: Wed 05 Aug 2026 13:00:12 +0000 ROA not before: Wed 05 Aug 2026 13:00:12 +0000 ROA not after: Tue 03 Nov 2026 14:00:12 +0000 asID: 36183 IP address blocks: 172.225.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:77:0e:5d:cb:cb:98:73:de:f1:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 13:00:12 2026 GMT Not After : Nov 3 14:00:12 2026 GMT Subject: CN=9821f6c0-d41b-42f8-b066-a1f401e5f91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:67:fc:52:01:f8:89:43:32:e6:91:d9:05:fc: e7:d5:5c:c1:ed:de:35:fb:41:c0:4e:ac:33:f8:11: 0f:4d:2a:1c:c7:eb:e7:37:5e:54:34:21:4f:76:7f: 3f:c4:b3:05:12:94:4f:45:2e:d0:76:fa:f7:24:40: e3:50:98:4d:bc:7c:b4:82:cd:2d:34:ce:43:9b:39: 1d:18:ee:a4:bd:01:c7:6e:15:32:55:8b:3a:06:3b: c6:b2:c4:7e:84:a3:8e:bd:15:b5:4a:57:8e:45:d3: 0d:75:9a:70:e9:96:44:50:eb:ca:b4:75:f9:10:f7: 5e:09:2d:46:92:d1:d4:97:36:f4:22:08:9f:c4:21: 43:5c:7f:0c:28:e7:67:eb:9a:80:d6:c6:64:da:6b: 48:9d:49:97:f4:f3:05:ef:69:15:06:b2:a7:6f:55: 55:8c:88:ed:fe:6b:3e:ee:78:e1:9f:3d:e1:3a:7e: 51:7d:c0:96:31:db:7d:14:9e:c5:3d:5e:6f:1f:ad: 27:35:9d:17:de:04:67:9f:7b:69:e2:5a:ee:b6:7c: 07:50:85:7b:f9:29:21:28:84:5c:ff:5f:c7:c0:bc: 03:af:17:a9:05:6f:e9:64:b4:8e:51:76:fd:9e:35: fb:47:0f:ff:09:73:c7:a1:2f:66:d0:dc:cc:bb:ed: 67:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D6:A8:0A:8E:84:F9:36:5E:A1:F1:58:A3:4B:ED:58:83:40:96:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42eca214-cc51-3cd8-93f1-70e4276225f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:82:17:43:1c:0b:e6:54:3f:4f:91:c3:fc:ee:06:d9:91:18: b2:d1:3e:e6:87:03:b8:a0:77:d8:44:8a:77:ff:69:3b:78:2a: 26:a0:b3:7d:ba:f9:ca:55:56:25:24:0c:85:00:21:7e:9e:60: c7:c8:7f:d6:a7:aa:7b:c4:7a:59:0a:cf:69:90:5b:70:fd:d2: 2e:5c:1c:74:62:aa:ea:4d:9a:77:04:b8:54:98:61:6f:a4:c0: 28:0a:00:38:ab:66:09:da:b2:1b:7e:bf:cf:c8:4c:13:63:fa: 74:25:3c:4b:53:8e:73:d3:60:5b:34:c4:a8:be:ef:8b:bf:c3: 49:a2:c0:09:90:bf:5e:ca:9e:fd:dc:81:9c:08:fe:6e:81:f4: 6e:ae:fd:52:0e:7a:54:66:48:6e:96:58:e5:a7:19:66:e8:6c: b5:63:57:96:b0:74:b8:ff:6e:6e:b9:41:38:7e:0f:91:87:4f: 02:66:aa:64:d7:4e:ae:f5:ee:be:a9:56:9c:3b:79:74:db:c6: b6:4e:a5:42:b4:b9:05:b3:70:25:b5:83:0c:1f:8d:36:b9:c9: e9:93:57:df:d1:bc:d1:3f:f3:aa:e7:4d:24:c2:23:d6:c0:5f: 26:5b:61:dd:c6:e7:b2:ed:97:94:77:09:76:5c:f6:ff:5e:26: 29:ff:a5:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dw5dy8uYc97xQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk OTgyMWY2YzAtZDQxYi00MmY4LWIwNjYtYTFmNDAxZTVmOTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmf8UgH4iUMy5pHZBfzn1VzB7d41+0HATqwz +BEPTSocx+vnN15UNCFPdn8/xLMFEpRPRS7Qdvr3JEDjUJhNvHy0gs0tNM5Dmzkd GO6kvQHHbhUyVYs6BjvGssR+hKOOvRW1SleORdMNdZpw6ZZEUOvKtHX5EPdeCS1G ktHUlzb0IgifxCFDXH8MKOdn65qA1sZk2mtInUmX9PMF72kVBrKnb1VVjIjt/ms+ 7njhnz3hOn5RfcCWMdt9FJ7FPV5vH60nNZ0X3gRnn3tp4lrutnwHUIV7+SkhKIRc /1/HwLwDrxepBW/pZLSOUXb9njX7Rw//CXPHoS9m0NzMu+1nXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPWqAqOhPk2XqHxWKNL7ViDQJaMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDJlY2EyMTQtY2M1MS0z Y2Q4LTkzZjEtNzBlNDI3NjIyNWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+CF0McC+ZUP0+Rw/zuBtmRGLLRPuaHA7igd9hEinf/aTt4Kiags326 +cpVViUkDIUAIX6eYMfIf9anqnvEelkKz2mQW3D90i5cHHRiqupNmncEuFSYYW+k wCgKADirZgnasht+v8/ITBNj+nQlPEtTjnPTYFs0xKi+74u/w0miwAmQv17Knv3c gZwI/m6B9G6u/VIOelRmSG6WWOWnGWbobLVjV5awdLj/bm65QTh+D5GHTwJmqmTX Tq717r6pVpw7eXTbxrZOpUK0uQWzcCW1gwwfjTa5yemTV9/RvNE/86rnTSTCI9bA XyZbYd3G57Ltl5R3CXZc9v9eJin/pQs= -----END CERTIFICATE-----Generated at Sat Sep 5 00:48:59 2026 by rpki-client