$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a77e582-a25b-3deb-82c7-35a938a9f125.roa File: 9a77e582-a25b-3deb-82c7-35a938a9f125.roa (raw, json) Hash identifier: gdXra7jYVnzg36ibQvuMVq+rj0aI7pDUhw2PEBzCKfM= Subject key identifier: 0C:84:25:1B:35:E0:5E:3E:FD:76:B7:E0:63:A1:74:E2:66:82:73:2A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F024227190D3BC1B447283D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a77e582-a25b-3deb-82c7-35a938a9f125.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 63949 IP address blocks: 172.235.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:27:19:0d:3b:c1:b4:47:28:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=5bc50f47-fe0b-45a1-8fe6-66a0509271b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b3:f0:f2:44:04:90:db:60:54:a9:fc:63:36: bb:de:d6:6e:21:d9:4f:97:07:8c:0a:6b:eb:5a:09: 01:23:c1:bf:6a:8a:ec:43:52:7d:27:21:9d:cd:d6: bd:e9:2e:f5:a3:53:8d:43:46:c4:18:0d:9d:4a:73: 8d:9b:2a:63:2b:7d:16:c9:f0:0b:41:cd:c8:cd:b6: 01:97:f7:6e:5f:2f:88:eb:14:44:fb:ad:f5:07:43: 5a:cd:43:61:c3:6a:98:bc:c6:6e:cf:ab:10:60:8b: 98:c6:50:23:c4:32:ba:ef:ff:65:4b:73:1d:1d:7e: 11:f9:64:fc:ee:b8:ba:2d:3a:e7:dc:94:5a:89:f2: 21:4d:f6:df:cf:37:08:bc:ee:f7:ef:02:44:e0:51: 3e:49:c0:00:04:f5:85:0a:90:98:1a:4c:f6:b7:ff: e8:46:ae:c4:32:3d:24:ad:b1:15:ef:7d:8f:c2:da: bb:83:25:78:c8:8a:bb:92:07:49:d8:21:08:32:1a: 7a:85:88:68:00:0a:1b:73:71:d2:24:29:94:76:78: 0b:c6:29:8f:db:9a:69:bd:4f:08:3b:0b:bd:94:03: da:bb:e1:18:90:7c:74:db:31:9f:67:c2:9f:0d:56: 8b:13:cf:e6:33:c5:db:2e:03:db:ee:d1:b7:7d:36: 54:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:84:25:1B:35:E0:5E:3E:FD:76:B7:E0:63:A1:74:E2:66:82:73:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9a77e582-a25b-3deb-82c7-35a938a9f125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.118.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:6a:9c:9c:23:40:b0:37:27:71:87:70:e9:9d:65:32:ed:eb: 31:1e:e8:8c:a3:c4:ee:18:28:ac:76:bc:dd:44:54:29:d2:67: 5a:02:f2:1a:2c:43:35:c4:d9:c1:42:96:35:9b:b3:a8:b9:af: 59:cf:d3:be:46:dc:67:8d:4d:ca:b2:90:c1:10:5e:72:a7:cb: c4:15:70:db:17:d6:be:ee:a7:30:57:d8:9b:57:79:f7:7b:62: a5:91:eb:0d:6e:c7:f8:b2:12:9b:0f:71:10:f7:0e:8d:28:b8: 87:2d:ae:46:3c:68:ee:12:45:09:31:9d:87:86:47:54:1e:3c: 11:98:ac:62:8b:02:00:78:c4:f1:63:b7:c7:8d:e3:89:64:2a: 70:89:d2:29:5e:75:9d:36:74:e7:d2:aa:6d:bb:74:73:7c:ba: b6:cf:ac:44:f7:de:b5:27:e7:2a:e8:ca:b7:4f:1a:92:e4:63: 60:cd:a2:01:c3:4e:a6:f8:bc:38:98:6a:76:c0:a6:a3:a5:34: 87:f0:06:76:4f:ae:79:f7:32:d2:e3:fe:e4:0d:20:ef:99:c4: a8:ca:e9:bc:dd:ab:1c:fc:f1:3c:fa:06:f1:82:96:75:ad:28: b1:cb:e3:3a:51:af:9b:45:64:0d:10:b6:81:2c:40:f3:c3:ff: bd:35:ec:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQicZDTvBtEcoPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk NWJjNTBmNDctZmUwYi00NWExLThmZTYtNjZhMDUwOTI3MWI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbPw8kQEkNtgVKn8Yza73tZuIdlPlweMCmvr WgkBI8G/aorsQ1J9JyGdzda96S71o1ONQ0bEGA2dSnONmypjK30WyfALQc3IzbYB l/duXy+I6xRE+631B0NazUNhw2qYvMZuz6sQYIuYxlAjxDK67/9lS3MdHX4R+WT8 7ri6LTrn3JRaifIhTfbfzzcIvO737wJE4FE+ScAABPWFCpCYGkz2t//oRq7EMj0k rbEV732Pwtq7gyV4yIq7kgdJ2CEIMhp6hYhoAAobc3HSJCmUdngLximP25ppvU8I Owu9lAPau+EYkHx02zGfZ8KfDVaLE8/mM8XbLgPb7tG3fTZUEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyEJRs14F4+/Xa34GOhdOJmgnMqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWE3N2U1ODItYTI1Yi0z ZGViLTgyYzctMzVhOTM4YTlmMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOt2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAClqnJwjQLA3J3GHcOmdZTLt6zEe6IyjxO4YKKx2vN1EVCnSZ1oC8hos QzXE2cFCljWbs6i5r1nP075G3GeNTcqykMEQXnKny8QVcNsX1r7upzBX2JtXefd7 YqWR6w1ux/iyEpsPcRD3Do0ouIctrkY8aO4SRQkxnYeGR1QePBGYrGKLAgB4xPFj t8eN44lkKnCJ0iledZ02dOfSqm27dHN8urbPrET33rUn5yroyrdPGpLkY2DNogHD Tqb4vDiYanbApqOlNIfwBnZPrnn3MtLj/uQNIO+ZxKjK6bzdqxz88Tz6BvGClnWt KLHL4zpRr5tFZA0QtoEsQPPD/7017OY= -----END CERTIFICATE-----Generated at Sat Sep 5 01:29:29 2026 by rpki-client