$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af2ee5ec-ad8c-3308-b351-15c743442c0e.roa File: af2ee5ec-ad8c-3308-b351-15c743442c0e.roa (raw, json) Hash identifier: rtpJBj9MNFYfttICEEy4fPrHErbkGi4y2iAS7mfXDeg= Subject key identifier: 13:C3:15:44:09:BD:B8:7C:C6:87:BD:58:B0:A9:35:53:5F:C6:0D:53 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F0AA22D4B6A1F14D99AF74800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af2ee5ec-ad8c-3308-b351-15c743442c0e.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 36183 IP address blocks: 172.224.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:2d:4b:6a:1f:14:d9:9a:f7:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=03defacf-14d5-4f0b-a526-38400eab30bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:48:c6:06:7f:ff:6e:f2:ea:b2:b7:9b:5c:87: c9:87:e7:8a:4d:81:68:25:fa:1c:de:d4:c8:ea:df: a3:e1:a8:a7:17:c6:1b:01:df:ca:af:31:0d:78:6f: 92:70:75:9b:7f:9d:ac:27:51:18:4c:51:2f:87:52: 32:13:8d:fd:d1:af:1e:1c:96:1a:c6:ef:1a:32:bf: 9b:23:4d:c4:e4:8d:69:43:16:a2:d2:a5:4e:15:5b: f5:ba:fa:4f:bd:b3:db:aa:3f:dd:be:be:b2:58:0c: ed:0b:e2:4f:68:d0:23:1e:40:68:95:90:4a:59:04: 3f:41:de:3a:f9:3d:e9:2c:19:96:fc:c4:83:a4:f8: 29:2e:ad:9e:e8:02:d4:a7:ef:dd:19:eb:cc:d7:d6: 58:ce:48:ba:16:62:cf:0f:1a:55:3d:b7:de:41:71: 5a:01:c9:01:eb:fd:a0:76:51:90:af:9f:e5:c7:96: ab:3e:96:f4:64:0d:be:25:ba:43:b5:2b:81:19:9f: 2f:0c:07:9a:6a:e2:74:bd:40:98:c0:12:f4:54:35: 69:4f:1e:e0:2d:59:11:d2:aa:b3:1e:50:50:30:bd: 6e:e7:4c:63:06:be:7c:8d:31:db:36:14:e8:5d:8d: 1b:19:98:83:57:72:48:10:61:04:48:89:4b:a5:7e: d6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C3:15:44:09:BD:B8:7C:C6:87:BD:58:B0:A9:35:53:5F:C6:0D:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/af2ee5ec-ad8c-3308-b351-15c743442c0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:e2:06:ae:26:83:8a:88:4d:6a:16:21:a7:e9:7b:05:f4:f2: 12:37:e7:54:0f:2e:d3:e2:0e:24:82:64:93:90:ce:cf:5e:8b: d3:de:b3:03:cc:b2:be:43:e0:1d:5b:9f:a4:89:81:34:69:60: f7:d5:86:f2:81:65:62:01:0b:c2:47:86:21:2b:b4:a5:b1:d6: 23:ef:cd:b7:d6:a7:9d:ea:c8:9b:ba:a1:9d:1b:2f:b4:58:46: e5:f9:c6:c9:6d:f0:50:f8:72:6b:89:54:cb:7a:97:90:23:ca: ba:40:b0:93:19:7e:a5:19:85:6d:de:9e:2e:5a:da:dc:3b:56: aa:41:1c:a3:14:de:1c:fb:96:50:47:ae:7c:fb:0e:10:6e:65: 11:fe:02:0f:d0:74:6b:2a:16:0f:ac:06:26:08:04:0c:64:7a: ea:3b:a3:e9:92:1a:9d:1f:3e:b2:62:ae:bd:17:88:8a:86:b4: 01:79:84:d1:ca:2f:96:d8:99:2f:6a:36:3f:09:84:57:bc:d6: f7:a9:ff:dd:c4:50:74:77:62:be:1a:be:9a:d4:05:b9:f9:be: fa:64:3b:36:57:64:a7:fd:66:db:56:e2:e1:ea:f3:67:48:f7: f6:cc:b6:b8:27:8c:a6:e6:41:0f:5d:28:72:2a:51:a9:21:61: 57:11:b8:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Koi1Lah8U2Zr3SAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk MDNkZWZhY2YtMTRkNS00ZjBiLWE1MjYtMzg0MDBlYWIzMGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0jGBn//bvLqsrebXIfJh+eKTYFoJfoc3tTI 6t+j4ainF8YbAd/KrzENeG+ScHWbf52sJ1EYTFEvh1IyE4390a8eHJYaxu8aMr+b I03E5I1pQxai0qVOFVv1uvpPvbPbqj/dvr6yWAztC+JPaNAjHkBolZBKWQQ/Qd46 +T3pLBmW/MSDpPgpLq2e6ALUp+/dGevM19ZYzki6FmLPDxpVPbfeQXFaAckB6/2g dlGQr5/lx5arPpb0ZA2+JbpDtSuBGZ8vDAeaauJ0vUCYwBL0VDVpTx7gLVkR0qqz HlBQML1u50xjBr58jTHbNhToXY0bGZiDV3JIEGEESIlLpX7WqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBPDFUQJvbh8xoe9WLCpNVNfxg1TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWYyZWU1ZWMtYWQ4Yy0z MzA4LWIzNTEtMTVjNzQzNDQyYzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIviBq4mg4qITWoWIafpewX08hI351QPLtPiDiSCZJOQzs9ei9PeswPM sr5D4B1bn6SJgTRpYPfVhvKBZWIBC8JHhiErtKWx1iPvzbfWp53qyJu6oZ0bL7RY RuX5xslt8FD4cmuJVMt6l5AjyrpAsJMZfqUZhW3eni5a2tw7VqpBHKMU3hz7llBH rnz7DhBuZRH+Ag/QdGsqFg+sBiYIBAxkeuo7o+mSGp0fPrJirr0XiIqGtAF5hNHK L5bYmS9qNj8JhFe81vep/93EUHR3Yr4avprUBbn5vvpkOzZXZKf9ZttW4uHq82dI 9/bMtrgnjKbmQQ9dKHIqUakhYVcRuHk= -----END CERTIFICATE-----Generated at Sat Sep 5 03:29:42 2026 by rpki-client