$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cdc89d9-d4a1-304a-8a98-4f8b4495a652.roa File: 8cdc89d9-d4a1-304a-8a98-4f8b4495a652.roa (raw, json) Hash identifier: OxT16O9Nwb7S2c+0qDis+79CPBW9rk0LtS9/eaxTCzc= Subject key identifier: 1F:BD:74:8C:0C:01:08:E3:AC:7B:7B:8D:BA:19:A8:8E:3C:D2:34:97 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ED9C75FEA9DA4DEF6F108D200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cdc89d9-d4a1-304a-8a98-4f8b4495a652.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 36183 IP address blocks: 172.224.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:5f:ea:9d:a4:de:f6:f1:08:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=8ff61958-a6b8-4ebf-b4a1-7bd99dae948c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:ae:83:72:ba:83:8e:87:f7:75:32:7c:08: b5:12:65:c2:63:d5:cc:9d:aa:91:fd:da:43:8d:1d: 43:e7:00:04:35:0e:cf:a6:bf:c1:67:63:6c:64:49: 1b:b6:4f:b4:96:ef:55:28:eb:69:a2:56:d9:79:01: f1:02:4e:8e:12:8a:c6:98:dc:4c:44:ff:2a:e8:f1: 7e:98:08:ab:67:87:59:c8:55:80:e0:a2:76:ef:10: 8a:11:f0:a8:40:be:df:38:fc:05:84:65:35:da:22: 4a:3c:f1:8a:d6:50:6d:17:ae:ea:68:34:60:42:65: 2e:27:82:11:36:d3:a8:5d:77:c9:5b:95:54:ac:37: ce:7e:43:59:0e:eb:71:80:f8:29:f7:2d:a8:9a:eb: 85:61:15:da:74:3a:8e:41:6d:86:90:69:8c:d9:18: e8:de:39:58:08:1d:bb:bf:7f:fb:83:b9:7b:db:1d: 18:5b:3b:41:7c:4e:ae:15:96:c7:99:42:70:aa:67: a2:e6:a4:c0:dd:3b:8f:94:bb:54:2b:8c:16:03:9e: c2:39:0e:57:7b:e6:f9:a0:c8:9e:3c:1d:d1:14:0b: 40:a6:f3:4e:29:e7:b9:6e:06:39:18:f5:9f:59:81: 60:20:49:53:d8:2d:cc:ed:f4:84:01:d1:86:63:e4: 64:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BD:74:8C:0C:01:08:E3:AC:7B:7B:8D:BA:19:A8:8E:3C:D2:34:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8cdc89d9-d4a1-304a-8a98-4f8b4495a652.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:07:7f:38:96:dd:22:6b:f2:7f:5b:03:59:45:9f:ee:90:5c: 60:54:ad:20:c2:35:cb:bb:57:b7:a5:29:67:20:50:b2:f5:30: 89:89:89:e4:1a:ca:a1:af:0e:3c:34:e0:c5:07:4f:10:2c:55: 82:26:62:6c:1d:66:81:94:38:a3:da:a7:87:92:75:c3:6e:e8: 8c:09:a3:23:e7:b3:41:27:15:04:73:35:50:97:1a:e7:3f:08: d2:6e:7a:96:b2:57:7c:93:b0:e4:0f:9b:00:41:fb:cb:22:6a: 0f:e3:05:57:7a:9f:ea:27:d3:ad:dd:8c:73:20:da:12:1f:a1: 08:8b:93:41:e5:92:c9:05:c1:e9:9e:33:d2:e2:0f:a9:e7:51: 27:71:4e:50:42:70:6d:37:60:ed:b0:c0:d3:b6:dc:6c:bf:b4: ea:7c:c5:e7:cb:a4:31:ef:a1:c9:d3:85:e6:20:44:e4:1b:2e: 37:83:ea:3e:c8:12:c3:d4:07:9b:3e:71:51:80:82:81:dc:51: 53:fb:fb:cb:1f:11:ef:2d:0f:dc:ea:29:b0:51:38:22:96:48: 3c:8c:4d:4e:b0:bb:2f:35:83:25:5e:22:f9:e0:fe:4f:56:ce: f4:55:18:08:47:c1:82:0b:8d:00:c1:ad:e2:91:01:09:c1:17: 33:9c:5d:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx1/qnaTe9vEI0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk OGZmNjE5NTgtYTZiOC00ZWJmLWI0YTEtN2JkOTlkYWU5NDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs+ug3K6g46H93UyfAi1EmXCY9XMnaqR/dpD jR1D5wAENQ7Ppr/BZ2NsZEkbtk+0lu9VKOtpolbZeQHxAk6OEorGmNxMRP8q6PF+ mAirZ4dZyFWA4KJ27xCKEfCoQL7fOPwFhGU12iJKPPGK1lBtF67qaDRgQmUuJ4IR NtOoXXfJW5VUrDfOfkNZDutxgPgp9y2omuuFYRXadDqOQW2GkGmM2Rjo3jlYCB27 v3/7g7l72x0YWztBfE6uFZbHmUJwqmei5qTA3TuPlLtUK4wWA57COQ5Xe+b5oMie PB3RFAtApvNOKee5bgY5GPWfWYFgIElT2C3M7fSEAdGGY+RkcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+9dIwMAQjjrHt7jboZqI480jSXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGNkYzg5ZDktZDRhMS0z MDRhLThhOTgtNGY4YjQ0OTVhNjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgHfziW3SJr8n9bA1lFn+6QXGBUrSDCNcu7V7elKWcgULL1MImJieQa yqGvDjw04MUHTxAsVYImYmwdZoGUOKPap4eSdcNu6IwJoyPns0EnFQRzNVCXGuc/ CNJuepayV3yTsOQPmwBB+8siag/jBVd6n+on063djHMg2hIfoQiLk0HlkskFweme M9LiD6nnUSdxTlBCcG03YO2wwNO23Gy/tOp8xefLpDHvocnTheYgROQbLjeD6j7I EsPUB5s+cVGAgoHcUVP7+8sfEe8tD9zqKbBROCKWSDyMTU6wuy81gyVeIvng/k9W zvRVGAhHwYILjQDBreKRAQnBFzOcXbs= -----END CERTIFICATE-----Generated at Sat Sep 5 01:26:40 2026 by rpki-client