$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a839e1c-d4c5-378e-ade0-0118e2a672da.roa File: 6a839e1c-d4c5-378e-ade0-0118e2a672da.roa (raw, json) Hash identifier: zrZ2x3Ig1XSfx816aRVh+UHiNcbjcRWldLGTUU8HEQ8= Subject key identifier: 9D:B2:D9:41:8C:29:F3:F9:4B:A7:80:02:1F:85:5B:89:B4:90:DB:FE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EC372410112E8C444309A1800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a839e1c-d4c5-378e-ade0-0118e2a672da.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 36183 IP address blocks: 172.225.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:41:01:12:e8:c4:44:30:9a:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=c1ebead1-1fb9-4632-8d61-1bb35667fb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:88:3a:3d:6d:82:87:c8:f6:82:f6:51:6c:eb: b8:0b:34:ee:62:e2:c2:b6:c8:c8:e3:27:22:1a:ae: 34:bd:7a:28:c5:d5:62:27:41:4f:f0:8b:22:d7:e0: e6:b4:0a:86:05:1f:70:9a:41:eb:22:72:f8:22:33: b7:6b:3b:f8:d2:ec:c9:af:d5:6f:a2:5e:d3:3e:92: ec:38:d0:17:2c:c9:0f:0a:03:ff:d3:7d:ff:3e:76: 2f:3f:22:ef:2e:e8:d6:25:f0:48:57:b0:f6:46:e5: ba:6e:2d:2b:6e:41:e4:cd:64:75:e0:40:66:dd:a7: 85:b3:bc:64:4e:9b:ec:ad:6c:95:64:fc:1f:66:39: d9:85:85:41:d5:00:93:1d:33:42:f9:98:30:2b:40: 24:45:d1:0c:57:25:11:e6:fa:96:a9:ff:b7:95:b1: d4:30:75:87:3d:b1:2f:bc:61:1f:3b:c1:ac:e8:5e: 89:fb:33:04:28:09:46:70:8e:48:f0:33:b9:80:df: 07:ad:52:6c:63:a2:ec:51:f1:bd:70:9f:83:00:b1: f5:ac:32:d8:fd:13:7e:ea:04:d5:c5:01:54:7e:c6: ef:6e:ad:fe:3e:41:a2:20:d3:f6:b6:73:da:40:a7: a6:2b:96:d4:59:3d:af:3e:ce:9a:b6:9c:90:a4:18: 74:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:B2:D9:41:8C:29:F3:F9:4B:A7:80:02:1F:85:5B:89:B4:90:DB:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a839e1c-d4c5-378e-ade0-0118e2a672da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:05:c6:97:ad:f2:e3:b1:75:34:e5:0a:55:af:22:17:95:52: 1e:51:29:0e:c0:db:4b:c7:8b:9e:04:0e:b2:c2:01:c5:f4:8e: 77:af:e6:c1:5e:ce:93:81:f0:0a:51:d0:90:4c:9e:5a:18:4a: 30:11:68:89:60:b4:0f:af:3c:20:6a:80:8c:46:bb:d9:17:08: f2:ff:a4:82:a1:64:f5:39:21:d4:5b:f9:0c:31:f7:67:38:7f: 17:c2:07:6b:ff:de:44:68:47:54:a0:ce:5a:48:5c:87:20:ad: 43:09:35:b6:25:29:0a:5e:93:31:1f:bc:b5:54:66:5f:1c:35: 6d:dc:69:22:f5:7f:00:5d:29:09:c5:79:b9:49:9c:56:6e:74: 31:aa:bb:d6:4d:22:71:f4:2a:fc:c5:74:56:c0:0b:66:5b:ff: 8b:29:12:44:be:1a:0d:a3:f7:cb:c9:ca:db:1d:b6:cf:e0:bf: 76:18:e6:ea:7a:ce:6b:1d:08:97:3e:c5:15:c3:ed:2f:b2:fe: be:e4:c2:af:83:f9:c4:d3:c5:e5:fb:4f:f7:48:3a:06:0c:49: 69:5b:25:d8:aa:44:6a:5d:30:89:65:ee:21:12:93:05:d8:b6: 11:b1:2a:f9:0a:51:b7:99:9d:73:0c:99:29:62:f8:27:98:3c: 86:c9:88:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DckEBEujERDCaGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk YzFlYmVhZDEtMWZiOS00NjMyLThkNjEtMWJiMzU2NjdmYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIg6PW2Ch8j2gvZRbOu4CzTuYuLCtsjI4yci Gq40vXooxdViJ0FP8Isi1+DmtAqGBR9wmkHrInL4IjO3azv40uzJr9Vvol7TPpLs ONAXLMkPCgP/033/PnYvPyLvLujWJfBIV7D2RuW6bi0rbkHkzWR14EBm3aeFs7xk TpvsrWyVZPwfZjnZhYVB1QCTHTNC+ZgwK0AkRdEMVyUR5vqWqf+3lbHUMHWHPbEv vGEfO8Gs6F6J+zMEKAlGcI5I8DO5gN8HrVJsY6LsUfG9cJ+DALH1rDLY/RN+6gTV xQFUfsbvbq3+PkGiINP2tnPaQKemK5bUWT2vPs6atpyQpBh0ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2y2UGMKfP5S6eAAh+FW4m0kNv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmE4MzllMWMtZDRjNS0z NzhlLWFkZTAtMDExOGUyYTY3MmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcFxpet8uOxdTTlClWvIheVUh5RKQ7A20vHi54EDrLCAcX0jnev5sFe zpOB8ApR0JBMnloYSjARaIlgtA+vPCBqgIxGu9kXCPL/pIKhZPU5IdRb+Qwx92c4 fxfCB2v/3kRoR1SgzlpIXIcgrUMJNbYlKQpekzEfvLVUZl8cNW3caSL1fwBdKQnF eblJnFZudDGqu9ZNInH0KvzFdFbAC2Zb/4spEkS+Gg2j98vJytsdts/gv3YY5up6 zmsdCJc+xRXD7S+y/r7kwq+D+cTTxeX7T/dIOgYMSWlbJdiqRGpdMIll7iESkwXY thGxKvkKUbeZnXMMmSli+CeYPIbJiGc= -----END CERTIFICATE-----Generated at Fri Sep 4 22:45:01 2026 by rpki-client