$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d0e5d5-3833-3a63-a415-27f0655ef1f6.roa File: b3d0e5d5-3833-3a63-a415-27f0655ef1f6.roa (raw, json) Hash identifier: JDmToUunA9/8+RFb2ZRoLwsdOFW+4zkp0PjGSESHgho= Subject key identifier: 6C:A7:72:A9:EB:4B:05:D7:C0:78:65:80:CA:6F:72:F9:78:4D:A9:98 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ED9C762FF66BF17B7D5194280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d0e5d5-3833-3a63-a415-27f0655ef1f6.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 36183 IP address blocks: 172.224.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:62:ff:66:bf:17:b7:d5:19:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=f7c5e74f-c28f-44b5-90f1-bdc105ebf762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:38:14:e5:45:e9:91:79:88:95:75:10:a0:ec: ea:eb:51:4d:fb:e3:af:e9:43:0c:e5:4a:d0:af:5b: c2:e6:14:62:f6:21:64:1d:80:df:38:ab:10:01:c1: 5f:b5:45:fb:26:a7:c7:cf:31:4e:c4:7b:e5:48:16: 27:fa:8a:5b:0b:84:f0:11:5f:5e:5d:57:48:c5:7e: d5:80:1f:38:c3:20:97:6d:af:3d:70:9f:4d:f7:d8: 05:5d:fb:ed:dd:9e:51:36:f7:2c:a7:69:ad:35:10: 0c:c0:db:58:11:d8:13:17:da:11:55:14:99:10:ab: 5b:94:b6:62:78:dd:61:2b:dc:95:6c:12:aa:ba:89: 8b:aa:b2:c5:df:84:01:be:11:4e:4c:3f:34:c7:92: 74:b1:1a:fb:51:bf:60:42:3a:3e:e9:c0:02:08:33: 0e:c3:ee:49:6a:85:80:dc:5e:cd:68:8a:77:0e:49: d0:31:fb:7e:62:e4:66:8c:2a:72:76:ca:75:a9:ea: c1:46:88:84:78:8c:c1:15:13:52:9a:8b:a8:0c:4e: 1a:f0:ad:70:43:45:ce:03:22:ae:a5:fa:54:ef:c1: 42:7e:21:ec:c1:14:17:c7:74:25:13:e3:a5:9f:85: 13:22:e9:c8:2c:36:1a:4d:70:3f:cb:f0:0f:e0:46: f6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A7:72:A9:EB:4B:05:D7:C0:78:65:80:CA:6F:72:F9:78:4D:A9:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b3d0e5d5-3833-3a63-a415-27f0655ef1f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:3f:d0:19:1f:fa:80:67:95:60:92:ce:00:73:e2:94:87:6c: 42:c2:0f:7e:61:e9:92:5c:b8:3d:1d:d7:f8:fc:a1:a9:c2:fa: 73:66:70:34:e7:f0:9d:2c:73:b6:d4:9f:3e:d5:7a:32:e3:70: c3:bb:ee:c1:5a:de:48:bb:9d:ab:1f:8d:b5:1b:22:70:50:81: 93:c7:78:ae:ba:65:1f:26:08:86:55:56:0c:a7:85:ad:4d:61: fa:26:a4:58:c4:4d:9e:f3:37:02:67:59:6a:f6:ec:0c:42:c9: af:4e:d8:8c:9e:04:f2:aa:a1:35:a9:3b:f1:f1:0e:cc:d8:78: 8a:dc:aa:6f:cc:a5:fe:6f:50:50:39:ae:5b:83:1b:3c:42:0a: 84:10:9c:f3:ce:1b:4e:8f:bf:0a:79:87:93:b7:52:3b:d5:0b: 99:3f:22:fc:65:ef:99:d6:31:fa:84:bb:e1:6d:8b:1d:ae:56: 8f:7e:40:27:67:c7:99:99:bb:d9:45:bb:4f:18:4a:c2:d2:80: e3:7f:3f:e8:c7:1e:f2:bc:03:51:31:83:c7:00:df:28:44:fe: 0d:5b:e0:2c:45:6a:6c:2a:5a:a6:6b:4c:cf:7f:2d:09:db:9e: 17:f1:66:bf:45:14:5c:46:c5:ef:14:de:29:4a:1f:c7:5d:e6: 4c:5a:92:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Zx2L/Zr8Xt9UZQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk ZjdjNWU3NGYtYzI4Zi00NGI1LTkwZjEtYmRjMTA1ZWJmNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTgU5UXpkXmIlXUQoOzq61FN++Ov6UMM5UrQ r1vC5hRi9iFkHYDfOKsQAcFftUX7JqfHzzFOxHvlSBYn+opbC4TwEV9eXVdIxX7V gB84wyCXba89cJ9N99gFXfvt3Z5RNvcsp2mtNRAMwNtYEdgTF9oRVRSZEKtblLZi eN1hK9yVbBKquomLqrLF34QBvhFOTD80x5J0sRr7Ub9gQjo+6cACCDMOw+5JaoWA 3F7NaIp3DknQMft+YuRmjCpydsp1qerBRoiEeIzBFRNSmouoDE4a8K1wQ0XOAyKu pfpU78FCfiHswRQXx3QlE+Oln4UTIunILDYaTXA/y/AP4Eb2CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGyncqnrSwXXwHhlgMpvcvl4TamYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjNkMGU1ZDUtMzgzMy0z YTYzLWE0MTUtMjdmMDY1NWVmMWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw/0Bkf+oBnlWCSzgBz4pSHbELCD35h6ZJcuD0d1/j8oanC+nNmcDTn 8J0sc7bUnz7VejLjcMO77sFa3ki7nasfjbUbInBQgZPHeK66ZR8mCIZVVgynha1N YfompFjETZ7zNwJnWWr27AxCya9O2IyeBPKqoTWpO/HxDszYeIrcqm/Mpf5vUFA5 rluDGzxCCoQQnPPOG06Pvwp5h5O3UjvVC5k/Ivxl75nWMfqEu+Ftix2uVo9+QCdn x5mZu9lFu08YSsLSgON/P+jHHvK8A1Exg8cA3yhE/g1b4CxFamwqWqZrTM9/LQnb nhfxZr9FFFxGxe8U3ilKH8dd5kxaktA= -----END CERTIFICATE-----Generated at Sat Sep 5 01:26:34 2026 by rpki-client