$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f93ed7-442a-3a28-8eaf-48a8e51bd8ac.roa File: 79f93ed7-442a-3a28-8eaf-48a8e51bd8ac.roa (raw, json) Hash identifier: BS1l2kOCyx9CF/1Zs42cAR4ETqjJltFME961Wfaw70E= Subject key identifier: E2:A7:65:7E:2F:1A:39:6D:6E:22:29:18:11:38:7D:BA:59:0C:5F:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EC37240D4171FC176F1B77940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f93ed7-442a-3a28-8eaf-48a8e51bd8ac.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 36183 IP address blocks: 172.225.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:40:d4:17:1f:c1:76:f1:b7:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=ad7cec29-0e7e-4ab3-a77f-e5347ba1277e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:86:ba:ce:62:51:79:7d:7d:30:99:f5:8c:2e: c3:40:b7:e7:ae:4e:e2:73:4e:b4:ad:77:fe:b6:a8: 8d:61:8d:0d:ce:bb:20:9f:1c:d6:54:c8:ae:22:c1: da:56:cd:9e:72:5f:75:2e:ab:6c:9a:eb:95:13:df: 57:54:ac:bd:c0:62:2b:15:f6:a7:62:8f:65:1b:ca: 97:b3:8f:f7:80:7a:43:23:fb:0a:9e:84:6e:77:2f: 1c:f0:76:9e:42:d1:57:25:54:22:42:0d:36:bb:6c: 97:a7:d4:2b:eb:56:5b:cc:b0:fc:f4:5d:d4:0c:b3: a1:1d:f2:4c:97:30:21:1d:8a:37:c9:66:ca:73:be: 73:f4:c9:58:fb:f7:bb:62:98:8e:42:c0:f4:b7:45: 1e:92:fe:87:a4:91:26:0a:30:6d:57:f8:26:0d:86: 4c:b1:fe:0e:d8:cf:2d:7d:f8:97:b4:1c:57:f4:99: 27:0d:fb:71:00:f5:0b:fd:7a:16:d3:8b:d6:64:a4: fd:89:07:2e:2b:6b:75:ff:b8:dc:c9:bd:b2:2d:56: 8d:a3:ef:69:4f:7f:3d:b4:e8:c0:2b:6e:ba:10:20: a9:5b:0d:a2:1f:2c:d1:9f:c8:30:37:d1:98:5a:fb: e4:ff:17:7d:85:d6:49:e5:14:c3:e4:c2:ab:20:58: 9f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A7:65:7E:2F:1A:39:6D:6E:22:29:18:11:38:7D:BA:59:0C:5F:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f93ed7-442a-3a28-8eaf-48a8e51bd8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:5a:76:a4:b1:45:93:e1:3b:d5:66:9c:84:39:e3:f9:83:5a: 03:07:7b:b3:b7:86:b3:84:61:0e:81:e3:36:3d:8b:b4:1c:9e: 4a:e1:c7:80:81:33:96:2c:af:da:fe:ee:10:39:41:d1:31:58: 23:5c:df:71:95:24:c1:f0:ab:1c:a5:dd:a0:fd:bc:56:84:69: 3f:66:64:d7:c0:54:50:45:63:df:a7:40:07:d3:42:bb:fd:5e: 15:a5:3e:34:e7:e8:5d:9f:50:99:7e:24:26:61:7c:2a:e8:37: 1c:b0:d7:ee:2b:60:f2:75:54:da:69:f6:87:38:c8:5e:fb:d2: a7:1f:f3:e6:8d:2d:eb:e7:61:51:31:24:48:34:f7:9a:01:94: 35:07:a1:81:84:38:d8:09:f5:ff:53:08:4a:aa:d9:c9:d4:bb: 29:ec:c8:fa:1e:f9:bf:65:3f:6c:dd:66:0d:ed:1f:15:87:9a: 06:31:8a:fd:e9:28:e8:fc:7e:a8:2c:0b:39:6a:cc:41:c4:70: cf:26:ff:2c:62:0c:d1:97:8b:ce:e1:7c:00:9f:ca:df:44:6d: 9d:96:39:52:f7:b9:69:36:bc:09:6b:91:48:45:22:21:89:16: de:9d:55:76:f4:f4:13:79:c8:87:ee:d4:c0:e7:62:91:8e:e7: cc:d5:e0:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DckDUFx/BdvG3eUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk YWQ3Y2VjMjktMGU3ZS00YWIzLWE3N2YtZTUzNDdiYTEyNzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04a6zmJReX19MJn1jC7DQLfnrk7ic060rXf+ tqiNYY0NzrsgnxzWVMiuIsHaVs2ecl91LqtsmuuVE99XVKy9wGIrFfanYo9lG8qX s4/3gHpDI/sKnoRudy8c8HaeQtFXJVQiQg02u2yXp9Qr61ZbzLD89F3UDLOhHfJM lzAhHYo3yWbKc75z9MlY+/e7YpiOQsD0t0Uekv6HpJEmCjBtV/gmDYZMsf4O2M8t ffiXtBxX9JknDftxAPUL/XoW04vWZKT9iQcuK2t1/7jcyb2yLVaNo+9pT389tOjA K266ECCpWw2iHyzRn8gwN9GYWvvk/xd9hdZJ5RTD5MKrIFiflwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKnZX4vGjltbiIpGBE4fbpZDF+XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzlmOTNlZDctNDQyYS0z YTI4LThlYWYtNDhhOGU1MWJkOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOE/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhadqSxRZPhO9VmnIQ54/mDWgMHe7O3hrOEYQ6B4zY9i7Qcnkrhx4CB M5Ysr9r+7hA5QdExWCNc33GVJMHwqxyl3aD9vFaEaT9mZNfAVFBFY9+nQAfTQrv9 XhWlPjTn6F2fUJl+JCZhfCroNxyw1+4rYPJ1VNpp9oc4yF770qcf8+aNLevnYVEx JEg095oBlDUHoYGEONgJ9f9TCEqq2cnUuynsyPoe+b9lP2zdZg3tHxWHmgYxiv3p KOj8fqgsCzlqzEHEcM8m/yxiDNGXi87hfACfyt9EbZ2WOVL3uWk2vAlrkUhFIiGJ Ft6dVXb09BN5yIfu1MDnYpGO58zV4LA= -----END CERTIFICATE-----Generated at Sat Sep 5 01:26:17 2026 by rpki-client