$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa File: aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa (raw, json) Hash identifier: OPIkoDag/w2158iGgbVVL+OL9c2gqP/A47lvPYxJb6U= Subject key identifier: 76:48:42:13:A3:E4:89:E2:F7:0F:DD:EF:C0:AB:53:DC:70:97:63:35 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ED9C7606DD6A15E2CF5B0B580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 36183 IP address blocks: 172.224.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:60:6d:d6:a1:5e:2c:f5:b0:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=0152626f-f9be-4c3d-9f55-88c602faec08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a9:bd:87:72:d6:a1:2a:f8:95:6f:d9:a5:0e: 38:bb:32:9b:86:92:1a:04:c1:37:ae:42:0c:b8:ea: 28:9f:19:93:40:cc:52:26:69:4c:77:2a:74:f3:68: 16:74:88:ee:13:48:c3:c1:36:ee:cb:8f:e3:4c:9b: 6b:b4:68:c8:5e:51:1f:bb:bd:8f:fb:ce:b3:2a:34: 0e:2e:41:7e:97:53:75:62:90:63:f2:5e:7f:71:56: 6a:b3:59:78:ed:3c:ab:73:83:5d:b9:d3:83:35:df: c9:e5:31:02:73:ff:7d:f9:af:94:a4:60:56:e5:1f: 89:3d:38:21:02:49:1a:1f:61:b9:de:fb:65:ba:77: ce:3d:43:c3:79:20:03:7f:d8:49:8f:cf:12:2c:eb: 8d:6d:28:0e:f4:eb:95:1a:db:47:19:9e:ad:74:d2: b0:a8:eb:d4:6a:12:33:cf:db:a0:e5:96:98:71:f4: 9c:24:d6:9a:f9:3b:77:93:e5:8c:0a:9c:78:e0:d1: 0d:02:73:0d:66:d7:b8:6e:b6:1f:c3:00:62:6c:8d: 14:ca:b2:00:3d:8e:ee:d1:d7:4f:92:a2:48:9a:a4: f7:a8:fe:3f:82:12:b6:66:50:88:ec:db:48:5a:89: 34:0d:a2:73:80:62:a3:5a:e5:c3:be:8e:03:a3:2d: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:48:42:13:A3:E4:89:E2:F7:0F:DD:EF:C0:AB:53:DC:70:97:63:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aee3f320-18d4-3b39-b1e4-d0e6f367bc1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:f3:b0:ef:a2:b6:97:d7:39:bd:d5:c3:3c:b7:a7:1c:f8:b8: 9e:0a:7a:8f:69:87:37:53:82:3a:56:34:b7:67:34:6c:c8:18: 41:2c:c5:a3:b9:e4:71:ac:9b:f6:f2:3f:5c:b8:fe:1d:93:50: 0b:ce:a5:38:08:3c:a3:80:f3:d4:24:2c:56:90:16:9d:a2:be: a7:51:00:3b:2a:e3:28:61:43:e7:fc:17:0f:33:a3:15:82:14: 57:fb:b6:72:1b:69:8e:f6:a0:8e:16:ac:a3:4a:49:43:78:9d: ec:4c:57:a5:91:a8:7f:4e:80:95:d2:a9:94:84:25:57:39:8f: 45:f5:e6:80:d1:8f:0c:30:3f:38:d7:af:cd:05:90:93:86:d3: 09:db:73:6a:1f:5a:ab:7b:cb:08:a7:87:c8:ea:8b:29:fb:9d: 1c:6e:53:03:93:08:9e:07:77:e8:db:f4:c1:7b:83:20:40:80: b5:ce:3b:e2:5c:30:30:ee:e6:63:fb:fe:b9:c6:f8:30:a0:fe: 2d:1f:ba:ca:2c:a2:5f:55:4c:8a:c6:59:c2:56:a9:31:ac:17: e6:59:8a:0c:44:51:b5:7e:62:bc:98:cb:64:e6:7b:3a:de:aa: f8:d5:6b:94:99:0a:93:d8:23:62:f0:03:03:5a:6f:b5:29:cd: 6b:0f:60:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2Bt1qFeLPWwtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk MDE1MjYyNmYtZjliZS00YzNkLTlmNTUtODhjNjAyZmFlYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqm9h3LWoSr4lW/ZpQ44uzKbhpIaBME3rkIM uOoonxmTQMxSJmlMdyp082gWdIjuE0jDwTbuy4/jTJtrtGjIXlEfu72P+86zKjQO LkF+l1N1YpBj8l5/cVZqs1l47Tyrc4NdudODNd/J5TECc/99+a+UpGBW5R+JPTgh AkkaH2G53vtlunfOPUPDeSADf9hJj88SLOuNbSgO9OuVGttHGZ6tdNKwqOvUahIz z9ug5ZaYcfScJNaa+Tt3k+WMCpx44NENAnMNZte4brYfwwBibI0UyrIAPY7u0ddP kqJImqT3qP4/ghK2ZlCI7NtIWok0DaJzgGKjWuXDvo4Doy1wbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZIQhOj5Ini9w/d78CrU9xwl2M1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWVlM2YzMjAtMThkNC0z YjM5LWIxZTQtZDBlNmYzNjdiYzFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABrzsO+itpfXOb3Vwzy3pxz4uJ4Keo9phzdTgjpWNLdnNGzIGEEsxaO5 5HGsm/byP1y4/h2TUAvOpTgIPKOA89QkLFaQFp2ivqdRADsq4yhhQ+f8Fw8zoxWC FFf7tnIbaY72oI4WrKNKSUN4nexMV6WRqH9OgJXSqZSEJVc5j0X15oDRjwwwPzjX r80FkJOG0wnbc2ofWqt7ywinh8jqiyn7nRxuUwOTCJ4Hd+jb9MF7gyBAgLXOO+Jc MDDu5mP7/rnG+DCg/i0fusosol9VTIrGWcJWqTGsF+ZZigxEUbV+YryYy2Tmezre qvjVa5SZCpPYI2LwAwNab7UpzWsPYFA= -----END CERTIFICATE-----Generated at Sat Sep 5 02:46:46 2026 by rpki-client