$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8df8d4ea-633c-3c35-851e-4c014514ebf3.roa File: 8df8d4ea-633c-3c35-851e-4c014514ebf3.roa (raw, json) Hash identifier: 1aeiuESoDtuvKKgXKlIPDr7GFCIcbiitMwlV5SUi6Pc= Subject key identifier: 9E:6A:40:48:4F:C5:74:C7:8D:09:B9:93:33:3F:8A:A2:18:58:0D:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EC20C73C50C5EDD0381708DC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8df8d4ea-633c-3c35-851e-4c014514ebf3.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 36183 IP address blocks: 172.225.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:73:c5:0c:5e:dd:03:81:70:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=8e1ca773-5a98-4547-bc23-f81ee629b65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:c3:3e:f5:d4:8b:91:74:a0:ab:ef:25:be: c9:c2:f5:0b:37:16:84:93:44:e3:e7:d8:a9:6e:aa: d4:4a:dd:61:2a:8c:89:c4:0f:e0:c2:a0:9a:18:89: f1:92:bb:d8:40:ea:7b:91:81:68:33:06:e5:ab:10: 42:3a:e1:5f:29:15:7e:9e:b5:08:1a:7a:e6:e2:4c: 1c:a9:7d:74:6a:60:4c:88:46:18:5a:3b:d2:88:29: 29:9e:95:95:00:73:e3:03:bf:4c:46:90:82:ca:68: d9:88:89:e6:34:38:1d:f4:48:cc:b6:b9:79:4f:4c: cb:2e:36:aa:3b:ac:3a:8a:32:ef:5f:cc:9b:3f:55: a3:ad:cb:e7:23:59:a8:4f:d7:0d:0c:03:ef:75:64: be:7c:ad:35:70:4f:a7:82:ae:00:e2:7d:54:23:59: a9:99:52:aa:58:20:d4:c9:27:c1:33:df:d0:51:33: 31:f2:5c:8f:90:42:f1:bc:5e:f2:c5:e4:b7:40:d1: be:0f:2e:b3:92:d7:cb:2a:20:98:4b:6e:cb:b0:45: bb:fa:ac:44:74:f6:b6:76:21:a4:bd:73:44:50:1b: ce:76:39:77:3d:c7:a0:de:a9:b4:bd:c8:33:3d:b6: 7f:c1:c5:53:54:5c:b5:ab:26:c4:f2:cc:a7:f2:95: 8d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:6A:40:48:4F:C5:74:C7:8D:09:B9:93:33:3F:8A:A2:18:58:0D:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8df8d4ea-633c-3c35-851e-4c014514ebf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:15:79:34:74:3a:30:35:87:3f:f6:b8:03:11:de:02:66:a3: 71:b9:ac:28:ae:79:6a:14:32:fe:e5:db:22:0d:5c:82:92:7e: 24:e7:74:1f:ad:da:7a:91:fd:c3:8d:7c:9b:60:16:e8:73:b4: fc:a4:eb:4c:a5:56:18:26:ea:37:2a:fa:bd:e4:0e:45:e5:61: 4e:b5:a0:20:53:dc:da:9d:33:df:a9:56:8a:26:6c:ed:53:78: 30:ea:f7:d9:e9:ac:1d:0d:4c:7d:f2:89:16:b8:be:57:91:50: 98:87:64:b7:ef:c8:4b:59:19:54:48:85:ae:a0:c3:af:60:7c: 61:a8:3a:61:73:1f:b3:1e:f4:0a:87:47:09:c8:ed:6c:9d:9e: c5:92:f1:f1:dd:dc:2e:d1:7a:89:07:4d:8e:79:90:87:a2:7b: be:26:49:45:c4:b3:97:ca:3c:80:f2:3c:cf:08:ff:71:b2:c1: b6:30:42:15:5d:71:65:08:12:ad:42:d0:88:2d:18:e5:59:a5: d1:55:9f:72:43:fb:4c:2c:ac:19:ad:e4:bf:ce:cb:ed:ec:a7: 71:e9:48:55:3a:50:e5:ef:05:af:04:3c:c9:17:e6:fc:39:97: 42:74:83:f9:3b:6c:7a:b1:ac:86:5a:1d:a2:53:13:eb:34:79: ec:68:e2:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDHPFDF7dA4FwjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk OGUxY2E3NzMtNWE5OC00NTQ3LWJjMjMtZjgxZWU2MjliNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0DDPvXUi5F0oKvvJb7JwvULNxaEk0Tj59ip bqrUSt1hKoyJxA/gwqCaGInxkrvYQOp7kYFoMwblqxBCOuFfKRV+nrUIGnrm4kwc qX10amBMiEYYWjvSiCkpnpWVAHPjA79MRpCCymjZiInmNDgd9EjMtrl5T0zLLjaq O6w6ijLvX8ybP1WjrcvnI1moT9cNDAPvdWS+fK01cE+ngq4A4n1UI1mpmVKqWCDU ySfBM9/QUTMx8lyPkELxvF7yxeS3QNG+Dy6zktfLKiCYS27LsEW7+qxEdPa2diGk vXNEUBvOdjl3Pceg3qm0vcgzPbZ/wcVTVFy1qybE8syn8pWNHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5qQEhPxXTHjQm5kzM/iqIYWA0jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGRmOGQ0ZWEtNjMzYy0z YzM1LTg1MWUtNGMwMTQ1MTRlYmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8VeTR0OjA1hz/2uAMR3gJmo3G5rCiueWoUMv7l2yINXIKSfiTndB+t 2nqR/cONfJtgFuhztPyk60ylVhgm6jcq+r3kDkXlYU61oCBT3NqdM9+pVoombO1T eDDq99nprB0NTH3yiRa4vleRUJiHZLfvyEtZGVRIha6gw69gfGGoOmFzH7Me9AqH RwnI7WydnsWS8fHd3C7ReokHTY55kIeie74mSUXEs5fKPIDyPM8I/3GywbYwQhVd cWUIEq1C0IgtGOVZpdFVn3JD+0wsrBmt5L/Oy+3sp3HpSFU6UOXvBa8EPMkX5vw5 l0J0g/k7bHqxrIZaHaJTE+s0eexo4hk= -----END CERTIFICATE-----Generated at Sat Sep 5 06:53:53 2026 by rpki-client