$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a767ba3-2fd4-3415-940d-455ace57a09c.roa File: 8a767ba3-2fd4-3415-940d-455ace57a09c.roa (raw, json) Hash identifier: E34BDx5JU20JVg/Q+S1Dt6mxx+iUdDBnLHrayO9s8tI= Subject key identifier: 33:CF:AE:7F:3C:4D:09:52:78:D9:B8:54:CC:EA:35:10:AF:09:4E:43 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EBC770DF0D4DC2876F1FBA0E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a767ba3-2fd4-3415-940d-455ace57a09c.roa Signing time: Wed 05 Aug 2026 13:00:12 +0000 ROA not before: Wed 05 Aug 2026 13:00:12 +0000 ROA not after: Tue 03 Nov 2026 14:00:12 +0000 asID: 36183 IP address blocks: 172.225.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:77:0d:f0:d4:dc:28:76:f1:fb:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 13:00:12 2026 GMT Not After : Nov 3 14:00:12 2026 GMT Subject: CN=7d2f13a9-58e8-4fa8-be66-7df1f60524dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:36:94:d7:e7:fd:82:0d:30:c0:72:02:06:0a: 7f:7f:97:8c:50:da:46:af:61:f8:39:0f:fb:9d:a2: fa:83:61:71:41:9b:33:42:5f:2b:e9:38:07:f4:ea: d8:3c:4a:dd:87:7d:8f:2b:25:e9:a2:30:7d:b8:85: 4b:f3:fb:8a:f1:26:a1:5b:c3:c4:14:78:0a:d9:f2: 65:46:58:b3:20:b0:1a:b8:c3:13:a8:76:7c:98:9b: 90:19:ec:c7:b0:23:db:4c:2b:7f:d0:29:20:5f:9b: 20:b4:81:8a:31:4a:dc:b2:16:02:26:b9:d0:9b:1b: 46:8c:fe:09:ea:44:9e:42:5d:8c:27:00:34:bd:a7: d8:af:cf:7e:88:ef:59:2c:fb:2e:31:df:20:38:89: da:74:b8:c1:a0:e2:84:41:3d:ae:5d:b6:af:30:81: 2a:d2:f0:22:6b:4e:60:16:af:66:56:fc:e3:ca:c6: 11:f3:bf:6b:ae:b9:7b:2f:38:1a:2c:1b:82:e0:74: 7c:9a:34:99:7e:c6:2b:97:e3:3c:c6:66:a6:df:f8: 85:b9:fe:58:d9:e0:79:2d:60:fa:c6:4d:6a:f5:71: 11:78:e4:4c:ce:1a:8f:a0:16:30:13:50:63:4f:bb: 17:b5:ee:34:dc:42:76:ee:e6:40:a6:2d:12:a1:f4: 3c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:CF:AE:7F:3C:4D:09:52:78:D9:B8:54:CC:EA:35:10:AF:09:4E:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a767ba3-2fd4-3415-940d-455ace57a09c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c7:b9:2f:f8:60:4c:6c:5a:50:ee:f6:b2:5d:d8:6b:73:9a: 88:1a:cb:ee:d1:c0:e7:51:0f:f7:ae:6b:61:9f:98:ef:61:79: 5d:c7:cf:9c:75:66:0e:8d:ce:a2:bd:ac:14:ae:d9:63:8a:7c: 3b:e5:60:01:f7:e4:cc:37:3f:d4:35:11:63:b4:6d:6c:0f:98: 37:5a:70:30:89:e6:79:a9:3a:56:63:0b:be:35:21:8b:e4:59: 2d:14:4c:d8:09:02:2b:ca:a5:8e:6c:1d:32:d9:cd:c2:ae:50: 87:53:f8:ec:94:f2:d9:e8:93:d9:9e:2e:ec:3c:96:0b:80:3a: 74:4b:b0:39:e0:ba:b8:8d:e1:b7:5f:f7:d4:7d:85:1e:7d:f6: 91:83:e4:6c:93:f8:03:74:b3:4c:74:c3:13:c8:74:98:b4:8d: 9a:66:f2:d1:bf:78:5e:85:6a:66:11:7c:4c:82:f1:79:a3:78: ea:4f:cd:62:68:02:bc:ae:39:19:8e:81:4e:9c:ca:d9:67:ca: 1a:09:8f:6e:f5:95:60:63:5b:85:20:e5:f4:e2:4c:ae:dc:59: 1c:b1:f5:5b:61:a0:cc:84:3d:f8:6c:97:94:4f:3a:c1:7d:32: 40:c0:ae:b5:b5:5c:4d:da:88:10:ef:75:fb:63:2f:72:ff:d4: 4d:3b:aa:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dw3w1NwodvH7oOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk N2QyZjEzYTktNThlOC00ZmE4LWJlNjYtN2RmMWY2MDUyNGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjaU1+f9gg0wwHICBgp/f5eMUNpGr2H4OQ/7 naL6g2FxQZszQl8r6TgH9OrYPErdh32PKyXpojB9uIVL8/uK8SahW8PEFHgK2fJl RlizILAauMMTqHZ8mJuQGezHsCPbTCt/0CkgX5sgtIGKMUrcshYCJrnQmxtGjP4J 6kSeQl2MJwA0vafYr89+iO9ZLPsuMd8gOInadLjBoOKEQT2uXbavMIEq0vAia05g Fq9mVvzjysYR879rrrl7LzgaLBuC4HR8mjSZfsYrl+M8xmam3/iFuf5Y2eB5LWD6 xk1q9XEReORMzhqPoBYwE1BjT7sXte403EJ27uZApi0SofQ8XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPPrn88TQlSeNm4VMzqNRCvCU5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE3NjdiYTMtMmZkNC0z NDE1LTk0MGQtNDU1YWNlNTdhMDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOF+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfHuS/4YExsWlDu9rJd2Gtzmogay+7RwOdRD/eua2GfmO9heV3Hz5x1 Zg6NzqK9rBSu2WOKfDvlYAH35Mw3P9Q1EWO0bWwPmDdacDCJ5nmpOlZjC741IYvk WS0UTNgJAivKpY5sHTLZzcKuUIdT+OyU8tnok9meLuw8lguAOnRLsDnguriN4bdf 99R9hR599pGD5GyT+AN0s0x0wxPIdJi0jZpm8tG/eF6FamYRfEyC8XmjeOpPzWJo AryuORmOgU6cytlnyhoJj271lWBjW4Ug5fTiTK7cWRyx9VthoMyEPfhsl5RPOsF9 MkDArrW1XE3aiBDvdftjL3L/1E07qvY= -----END CERTIFICATE-----Generated at Sat Sep 5 01:27:34 2026 by rpki-client