$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/914c03a4-02bf-3c33-83bf-8a73cbb2f5f4.roa File: 914c03a4-02bf-3c33-83bf-8a73cbb2f5f4.roa (raw, json) Hash identifier: nN7S7Uv/ewk3QBcAtGEhUdoFf1jiF/uFeGHV1n4K3Fo= Subject key identifier: B5:8C:6C:9D:D9:3F:BF:01:EC:7C:D0:35:65:E7:80:D1:38:02:BD:33 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EFCACD0BF987241F87A94CA40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/914c03a4-02bf-3c33-83bf-8a73cbb2f5f4.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 20940 IP address blocks: 172.224.0.0/12 maxlen: 12 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:d0:bf:98:72:41:f8:7a:94:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=63330e62-2329-4484-bb2a-9ea14f53589d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:11:c4:b6:f6:bf:30:bd:e1:b6:61:68:12:9e: 28:3e:47:42:72:73:0e:8e:29:36:cd:c5:19:33:2c: c6:3b:83:49:56:48:23:43:e2:5e:6e:d3:ac:f7:4f: 77:e0:25:f0:80:7f:98:c0:50:0c:24:d2:87:69:54: 70:92:60:13:bb:63:16:bc:1e:36:2c:cf:5c:8b:9a: d3:56:08:a3:8f:ef:43:df:17:0c:5b:46:70:33:c1: 9f:22:5e:e9:05:6f:0b:6d:e5:02:a3:a1:0e:f6:0f: fb:f8:1c:2b:4e:a4:0c:3b:4b:c1:d5:fc:76:c7:f1: 17:95:ff:b4:83:75:c8:65:c7:1f:b5:cf:41:b7:d0: 3e:30:7e:e0:b0:1b:2f:ec:fd:8c:26:9c:19:46:01: 74:81:84:2d:98:aa:75:24:75:6b:f0:00:3c:d9:e9: 42:a8:f1:80:58:02:dd:87:b7:0c:86:f8:31:eb:db: 37:06:c4:ef:fe:42:0a:fe:e5:1d:81:38:71:e6:35: aa:83:bd:bc:77:82:6d:7b:88:42:ec:08:57:52:2f: eb:17:d6:09:f4:ed:6f:ee:43:e6:63:9d:e2:b6:2a: f8:4a:16:d5:80:4b:35:20:a2:b8:09:01:39:70:19: 42:13:bf:3e:dc:97:8a:07:cb:70:c0:5b:4e:68:45: 3b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:8C:6C:9D:D9:3F:BF:01:EC:7C:D0:35:65:E7:80:D1:38:02:BD:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/914c03a4-02bf-3c33-83bf-8a73cbb2f5f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.0.0/12 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:43:90:b2:1f:ee:d0:4d:13:b3:34:b2:2c:17:a1:55:d7:17: 46:a1:7f:ec:fd:6c:55:ae:fb:90:59:b6:96:f6:e5:c4:78:b7: c8:01:4f:cd:1c:b2:69:22:70:87:7c:5a:7a:3d:be:49:83:14: 02:4e:09:c2:70:8f:84:84:ca:f8:42:e2:0d:57:8e:06:8c:82: 81:31:34:74:19:7c:d4:40:1f:ec:20:c0:5d:ff:9d:e4:86:1f: 09:36:8f:3e:b9:b5:2d:fb:a8:dd:9b:9c:a6:06:64:cb:c9:42: a7:27:f6:19:a1:ba:e2:95:9c:d1:15:7d:09:0b:a4:d0:08:c8: d8:4f:93:83:ac:03:9e:33:9a:e1:d7:02:09:62:97:f5:79:33: 52:37:7e:00:bd:37:9a:02:e2:a9:68:8b:e4:53:2d:90:90:3d: 94:d3:43:58:2c:dc:63:59:ef:ff:f3:60:fa:73:56:37:14:50: ff:ed:74:0a:be:a4:ee:70:b8:e1:c0:38:08:65:36:d3:31:27: b5:c7:3e:c0:68:83:2d:61:2c:bd:8d:11:0a:fb:18:23:75:bb: bb:83:f0:c2:e9:f0:a5:d6:e9:80:73:47:3e:4f:2c:f2:26:97: a7:26:dd:43:b5:e4:06:20:ae:ae:5a:e6:a7:f1:bc:f3:83:e3: f9:04:68:90 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE78rNC/mHJB+HqUykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk NjMzMzBlNjItMjMyOS00NDg0LWJiMmEtOWVhMTRmNTM1ODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhHEtva/ML3htmFoEp4oPkdCcnMOjik2zcUZ MyzGO4NJVkgjQ+JebtOs90934CXwgH+YwFAMJNKHaVRwkmATu2MWvB42LM9ci5rT Vgijj+9D3xcMW0ZwM8GfIl7pBW8LbeUCo6EO9g/7+BwrTqQMO0vB1fx2x/EXlf+0 g3XIZccftc9Bt9A+MH7gsBsv7P2MJpwZRgF0gYQtmKp1JHVr8AA82elCqPGAWALd h7cMhvgx69s3BsTv/kIK/uUdgThx5jWqg728d4Jte4hC7AhXUi/rF9YJ9O1v7kPm Y53itir4ShbVgEs1IKK4CQE5cBlCE78+3JeKB8twwFtOaEU7nQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLWMbJ3ZP78B7HzQNWXngNE4Ar0zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTE0YzAzYTQtMDJiZi0z YzMzLTgzYmYtOGE3M2NiYjJmNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMErOAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEEOQsh/u0E0TszSyLBehVdcXRqF/7P1sVa77kFm2lvblxHi3yAFPzRyy aSJwh3xaej2+SYMUAk4JwnCPhITK+ELiDVeOBoyCgTE0dBl81EAf7CDAXf+d5IYf CTaPPrm1Lfuo3ZucpgZky8lCpyf2GaG64pWc0RV9CQuk0AjI2E+Tg6wDnjOa4dcC CWKX9XkzUjd+AL03mgLiqWiL5FMtkJA9lNNDWCzcY1nv//Ng+nNWNxRQ/+10Cr6k 7nC44cA4CGU20zEntcc+wGiDLWEsvY0RCvsYI3W7u4PwwunwpdbpgHNHPk8s8iaX pybdQ7XkBiCurlrmp/G884Pj+QRokA== -----END CERTIFICATE-----Generated at Fri Sep 4 22:45:15 2026 by rpki-client