$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7834dcf2-c3a6-3c09-83b3-46d136891b88.roa File: 7834dcf2-c3a6-3c09-83b3-46d136891b88.roa (raw, json) Hash identifier: NuNL5KZjG4XTVNEVbvb4KP6WLckTXZaXPOmDbNlljmw= Subject key identifier: F8:41:A8:C9:3D:ED:FA:B9:2F:4D:57:A6:CD:C4:F7:43:DB:D6:31:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EC20C7A972F6D81660F474600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7834dcf2-c3a6-3c09-83b3-46d136891b88.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 36183 IP address blocks: 172.225.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:7a:97:2f:6d:81:66:0f:47:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=755ab3ec-a44a-45f3-8ca1-237ec0ad1b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d0:3b:a3:4a:f9:19:4c:28:85:da:c8:bd:21: 81:3e:c5:2f:fc:21:71:a9:dc:ee:43:93:cb:cd:10: 81:fb:8c:13:68:a2:ca:0f:71:c2:e0:40:6e:fb:da: 90:1f:6c:0c:c4:e7:e6:25:53:23:f0:f6:5d:92:05: 9e:f4:4c:74:bc:01:2d:bc:45:88:b7:63:4c:e6:f5: 70:9d:dc:0c:b2:ef:bd:3e:28:38:39:88:ab:21:b2: 4d:26:4b:49:2f:e1:9f:47:4f:c0:59:8a:a7:99:c9: 0a:2a:6d:2a:f7:27:eb:3b:16:06:75:b1:9d:7a:76: 7a:66:e1:3c:81:e9:11:ee:3b:16:82:87:90:0f:47: 28:92:b4:59:e9:16:1f:50:b0:f4:1c:be:a1:cb:8f: ad:f1:92:58:b7:fc:49:f7:bd:f5:cf:20:62:c7:e3: ea:a5:9e:c1:21:38:93:05:de:7f:1b:b9:e8:ec:44: 27:7e:63:98:ec:04:3d:99:f0:8c:0c:25:d8:6e:be: 96:61:65:dd:f8:d9:24:de:e1:78:9f:6f:65:b3:03: 25:f0:ea:08:3e:6b:2d:b0:a2:e7:53:67:c0:6b:01: a6:e9:4a:f7:ee:7c:bc:a2:6a:a7:0d:d4:11:22:69: 5c:78:ec:52:47:c6:db:7c:d4:c1:98:35:a1:00:6a: 42:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:41:A8:C9:3D:ED:FA:B9:2F:4D:57:A6:CD:C4:F7:43:DB:D6:31:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7834dcf2-c3a6-3c09-83b3-46d136891b88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:43:9d:a3:13:04:03:fa:3b:c3:ae:62:92:2f:e6:38:e1:64: 69:a0:a8:26:a0:3e:02:a3:31:96:e6:88:36:71:23:5d:f5:f2: 6a:84:2d:94:8f:77:a5:a9:28:0e:11:97:47:d0:2a:7c:04:9a: 20:7d:10:b0:20:41:02:4a:52:9e:90:27:36:f5:4a:9b:8d:56: 7a:58:36:26:e8:8f:4a:65:8b:9a:1a:6e:5c:ff:f9:d6:d9:21: 26:07:ed:1f:cf:de:a1:43:ca:0f:39:62:d4:2a:3b:6e:31:6a: cc:01:f8:4f:d9:a3:04:6b:76:db:ad:f5:40:07:fd:ad:fe:ff: ae:77:25:2d:bf:fa:70:54:ce:60:d8:05:ce:aa:69:c3:34:fe: 42:1e:b3:1a:a6:8f:d2:21:81:11:8f:04:9a:da:23:41:13:63: 51:bd:46:37:ca:02:82:88:e3:48:ba:1e:72:4d:10:a9:5e:67: e4:e4:f3:2f:e6:b2:c0:fe:b1:c0:bd:33:2f:81:2e:07:36:26: a4:48:31:7f:be:93:c9:e1:4a:fb:75:46:6c:6c:ad:d0:9c:44: 08:b1:46:64:6e:49:73:7d:e2:2d:55:87:0c:44:e8:b0:2a:69: b5:7e:04:e1:f9:e6:3b:17:65:6b:f1:a3:c2:c3:b1:10:b9:4c: 18:c2:c7:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDHqXL22BZg9HRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk NzU1YWIzZWMtYTQ0YS00NWYzLThjYTEtMjM3ZWMwYWQxYjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtA7o0r5GUwohdrIvSGBPsUv/CFxqdzuQ5PL zRCB+4wTaKLKD3HC4EBu+9qQH2wMxOfmJVMj8PZdkgWe9Ex0vAEtvEWIt2NM5vVw ndwMsu+9Pig4OYirIbJNJktJL+GfR0/AWYqnmckKKm0q9yfrOxYGdbGdenZ6ZuE8 gekR7jsWgoeQD0cokrRZ6RYfULD0HL6hy4+t8ZJYt/xJ9731zyBix+PqpZ7BITiT Bd5/G7no7EQnfmOY7AQ9mfCMDCXYbr6WYWXd+Nkk3uF4n29lswMl8OoIPmstsKLn U2fAawGm6Ur37ny8omqnDdQRImlceOxSR8bbfNTBmDWhAGpCewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhBqMk97fq5L01Xps3E90Pb1jGiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzgzNGRjZjItYzNhNi0z YzA5LTgzYjMtNDZkMTM2ODkxYjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhDnaMTBAP6O8OuYpIv5jjhZGmgqCagPgKjMZbmiDZxI1318mqELZSP d6WpKA4Rl0fQKnwEmiB9ELAgQQJKUp6QJzb1SpuNVnpYNiboj0pli5oablz/+dbZ ISYH7R/P3qFDyg85YtQqO24xaswB+E/ZowRrdtut9UAH/a3+/653JS2/+nBUzmDY Bc6qacM0/kIesxqmj9IhgRGPBJraI0ETY1G9RjfKAoKI40i6HnJNEKleZ+Tk8y/m ssD+scC9My+BLgc2JqRIMX++k8nhSvt1RmxsrdCcRAixRmRuSXN94i1VhwxE6LAq abV+BOH55jsXZWvxo8LDsRC5TBjCx6Q= -----END CERTIFICATE-----Generated at Fri Sep 4 23:30:56 2026 by rpki-client