$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9117d7be-37c1-3d2d-b08b-fb93d8453276.roa File: 9117d7be-37c1-3d2d-b08b-fb93d8453276.roa (raw, json) Hash identifier: Jxi/wKVZMNWhMvo6nGYLsy9i5LhGbenwpsaSeRWT6NQ= Subject key identifier: E3:40:67:2B:49:EE:4C:39:21:B5:D9:AB:42:76:09:83:10:64:05:3E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EBC770DFCC41847CB3649CB80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9117d7be-37c1-3d2d-b08b-fb93d8453276.roa Signing time: Wed 05 Aug 2026 13:00:12 +0000 ROA not before: Wed 05 Aug 2026 13:00:12 +0000 ROA not after: Tue 03 Nov 2026 14:00:12 +0000 asID: 36183 IP address blocks: 172.225.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:77:0d:fc:c4:18:47:cb:36:49:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 13:00:12 2026 GMT Not After : Nov 3 14:00:12 2026 GMT Subject: CN=9e03bb8a-37c1-41e5-80f8-f31c11e8b817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4b:b9:a5:09:cb:19:98:e7:30:f3:4d:1f:27: 96:4d:c0:7b:fb:a3:0e:00:52:c5:7b:9d:e3:56:19: 26:cc:60:c0:d6:d4:f6:54:70:0c:b8:e6:99:4b:0a: 0f:c2:ce:69:7e:5f:87:52:06:cb:1a:43:c4:f7:07: f7:b4:a5:8b:43:32:38:0c:6c:3f:93:44:27:71:09: 2b:7c:b4:5c:31:db:16:35:35:97:05:45:0f:96:02: 64:c6:4d:f9:87:df:3d:ad:b0:a4:a6:96:31:76:4b: 5d:bf:be:d6:ea:bf:c7:0d:e9:a7:a5:f6:e1:90:29: 8c:61:8b:9d:a7:3d:05:d6:56:c1:5b:2c:52:ac:48: 17:3c:61:bd:05:09:57:10:b9:df:54:01:b0:5a:d2: 31:04:f8:fd:1e:18:e7:b0:fb:fd:9c:1b:37:31:b5: 89:a8:60:8e:39:ca:f3:de:8c:c1:0e:44:bc:ec:17: b3:d3:1a:a1:58:bf:dc:c5:b5:0f:c6:c6:dc:13:68: ca:1a:43:84:6a:91:20:80:ca:4c:e6:b2:98:54:90: 1e:0b:d3:d0:a2:a5:92:bb:31:09:ef:12:51:df:78: 62:0a:b1:f6:fe:bf:93:87:ca:5c:16:56:37:96:54: ac:2a:3b:66:41:e3:b8:7e:08:18:3a:83:77:4f:26: f8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:40:67:2B:49:EE:4C:39:21:B5:D9:AB:42:76:09:83:10:64:05:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9117d7be-37c1-3d2d-b08b-fb93d8453276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:0b:d2:09:2c:e8:36:c8:f4:db:51:e2:fe:ff:b5:c9:ec:ac: f1:87:e8:94:d1:90:73:21:c8:e7:9a:23:8d:ed:3a:a7:ff:28: 30:cb:74:f4:1b:a1:e7:ea:3e:ae:d9:84:5a:6a:bf:69:df:24: 2e:20:98:16:46:f9:c8:ec:32:63:d0:fd:47:9b:0b:1d:3d:ec: 30:3c:72:be:b3:d1:38:aa:d1:1e:06:18:46:6e:6b:78:e1:c5: 44:28:4b:ff:1f:c2:60:27:29:53:f7:3a:f3:be:a7:4d:6f:cd: 54:d3:a0:75:95:81:3b:39:6a:65:52:a0:4f:88:6b:94:65:a5: 38:2b:bd:63:f4:1e:55:c9:44:f8:f3:23:9f:34:91:7c:e2:ac: 4d:c4:dc:cf:b1:a5:d3:1f:cf:71:f6:b9:d3:92:84:8d:47:41: 2d:c9:b6:52:a8:06:29:7b:76:af:eb:a1:16:5e:60:d3:d2:6a: cc:ab:2e:b6:df:21:21:f3:1b:0e:7c:9d:6d:98:c7:4a:d7:73: a6:10:80:d9:57:6b:e7:6f:00:43:df:50:d2:79:5a:98:c0:f0: 87:04:89:5d:37:e0:04:20:bc:0d:c0:2c:fa:34:d6:fa:16:b5: 01:4e:c0:90:63:e8:a4:e3:12:19:b3:31:48:fc:4e:a8:a1:8f: 49:c0:79:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dw38xBhHyzZJy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk OWUwM2JiOGEtMzdjMS00MWU1LTgwZjgtZjMxYzExZThiODE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUu5pQnLGZjnMPNNHyeWTcB7+6MOAFLFe53j VhkmzGDA1tT2VHAMuOaZSwoPws5pfl+HUgbLGkPE9wf3tKWLQzI4DGw/k0QncQkr fLRcMdsWNTWXBUUPlgJkxk35h989rbCkppYxdktdv77W6r/HDemnpfbhkCmMYYud pz0F1lbBWyxSrEgXPGG9BQlXELnfVAGwWtIxBPj9HhjnsPv9nBs3MbWJqGCOOcrz 3ozBDkS87Bez0xqhWL/cxbUPxsbcE2jKGkOEapEggMpM5rKYVJAeC9PQoqWSuzEJ 7xJR33hiCrH2/r+Th8pcFlY3llSsKjtmQeO4fggYOoN3Tyb4OQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFONAZytJ7kw5IbXZq0J2CYMQZAU+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTExN2Q3YmUtMzdjMS0z ZDJkLWIwOGItZmI5M2Q4NDUzMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOF/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0L0gks6DbI9NtR4v7/tcnsrPGH6JTRkHMhyOeaI43tOqf/KDDLdPQb oefqPq7ZhFpqv2nfJC4gmBZG+cjsMmPQ/UebCx097DA8cr6z0Tiq0R4GGEZua3jh xUQoS/8fwmAnKVP3OvO+p01vzVTToHWVgTs5amVSoE+Ia5RlpTgrvWP0HlXJRPjz I580kXzirE3E3M+xpdMfz3H2udOShI1HQS3JtlKoBil7dq/roRZeYNPSasyrLrbf ISHzGw58nW2Yx0rXc6YQgNlXa+dvAEPfUNJ5WpjA8IcEiV034AQgvA3ALPo01voW tQFOwJBj6KTjEhmzMUj8Tqihj0nAedg= -----END CERTIFICATE-----Generated at Sat Sep 5 01:26:46 2026 by rpki-client