$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b923eb8b-4768-33b2-aab2-ec3ecab7256b.roa File: b923eb8b-4768-33b2-aab2-ec3ecab7256b.roa (raw, json) Hash identifier: DnbeiJxIZve9qPgokEHmaqmXiQd+2A7qRgCMZrBDJJI= Subject key identifier: A2:39:7D:E9:8D:8E:41:42:6D:8E:94:E8:C6:F3:55:89:1E:EF:D9:70 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA78F9196891ECDD8AC9F65C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b923eb8b-4768-33b2-aab2-ec3ecab7256b.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 36183 IP address blocks: 172.224.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:8f:91:96:89:1e:cd:d8:ac:9f:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=34b01ea6-93cd-4363-ad2a-d4b2b205583c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:87:28:cb:03:11:4e:bf:40:c9:4e:08:d5:48: 37:fc:b6:a4:a6:ad:6e:60:80:02:c6:4b:21:59:46: 1a:16:59:13:bb:70:8b:99:bf:1d:c3:12:1e:44:22: b2:ee:60:56:80:82:13:35:ea:c6:06:12:a9:3c:fa: 1c:f8:8c:3d:e6:b7:aa:67:d4:83:79:71:f8:67:a6: 45:be:64:21:80:31:b4:fa:5c:98:6c:b9:c0:9c:1f: f5:17:47:69:4b:fd:ad:04:e0:fe:14:d0:25:ae:83: 68:16:1a:18:de:d2:c3:83:67:df:c3:db:cf:66:81: 4e:06:49:3d:c9:75:ad:2c:06:0b:8b:f5:42:49:bd: fb:9c:5a:d0:ef:15:22:25:b6:e6:e8:b6:98:9c:44: 1b:71:fb:da:5b:0a:15:de:37:17:ce:62:64:aa:7e: 4a:1c:9a:5e:c8:62:0b:3d:70:08:68:6e:18:0d:55: 90:21:9b:2b:dc:4e:55:4e:5d:fb:1f:7c:13:c2:83: 11:bf:e8:3d:a1:61:fe:20:8d:f1:21:34:40:8d:63: 89:b8:cb:2c:d4:6b:c6:75:74:3c:e4:f0:0a:1c:24: 04:06:64:ed:0c:1f:cc:0a:9b:e1:ae:d3:bc:ca:cd: d8:20:10:9b:90:d9:2d:c8:d7:f4:a0:28:f5:04:2f: 89:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:39:7D:E9:8D:8E:41:42:6D:8E:94:E8:C6:F3:55:89:1E:EF:D9:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b923eb8b-4768-33b2-aab2-ec3ecab7256b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:a0:e6:88:d0:e4:db:04:66:28:e6:a9:6e:e0:1b:ab:b7:d2: 23:43:77:da:04:27:b1:48:cf:4c:ef:c0:be:f0:fe:0f:dc:bf: 18:0f:20:58:44:4e:e5:47:01:ed:90:17:8f:78:23:04:28:25: 5f:3e:33:b6:1b:56:45:46:d1:5d:c5:9b:30:cb:cc:9b:90:e8: fa:bb:d1:6e:ab:f0:96:2d:f2:eb:2b:49:01:eb:84:40:a7:36: 7a:e4:19:44:5a:5e:13:11:cf:1f:39:07:a2:60:6e:46:cc:90: 91:f0:b6:10:85:76:90:e5:5a:28:d0:7f:d5:07:a5:4a:33:64: 0b:eb:bc:fc:95:15:3c:cc:e1:17:5e:7a:47:e8:69:b9:b1:28: 63:f9:66:d3:13:44:93:06:25:c8:6f:04:8c:a4:78:8a:6a:ec: eb:ef:59:8d:9c:af:e5:eb:84:ae:d0:6c:96:5d:e1:6c:b3:39: e4:ff:ab:fd:a2:38:b4:f3:c3:5e:d7:3f:09:35:20:d4:9d:ba: 38:c9:ea:50:7e:72:ca:6e:13:41:af:df:e8:07:af:1a:54:d6: 59:3a:eb:5a:18:3b:0c:be:c8:25:56:d7:8c:9a:c8:9c:40:00: c8:08:1c:62:5b:f8:40:37:f3:7d:19:c1:36:c6:40:7b:96:0a: b2:90:a2:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nj5GWiR7N2KyfZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MzRiMDFlYTYtOTNjZC00MzYzLWFkMmEtZDRiMmIyMDU1ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYcoywMRTr9AyU4I1Ug3/Lakpq1uYIACxksh WUYaFlkTu3CLmb8dwxIeRCKy7mBWgIITNerGBhKpPPoc+Iw95reqZ9SDeXH4Z6ZF vmQhgDG0+lyYbLnAnB/1F0dpS/2tBOD+FNAlroNoFhoY3tLDg2ffw9vPZoFOBkk9 yXWtLAYLi/VCSb37nFrQ7xUiJbbm6LaYnEQbcfvaWwoV3jcXzmJkqn5KHJpeyGIL PXAIaG4YDVWQIZsr3E5VTl37H3wTwoMRv+g9oWH+II3xITRAjWOJuMss1GvGdXQ8 5PAKHCQEBmTtDB/MCpvhrtO8ys3YIBCbkNktyNf0oCj1BC+JDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKI5femNjkFCbY6U6MbzVYke79lwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjkyM2ViOGItNDc2OC0z M2IyLWFhYjItZWMzZWNhYjcyNTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6g5ojQ5NsEZijmqW7gG6u30iNDd9oEJ7FIz0zvwL7w/g/cvxgPIFhE TuVHAe2QF494IwQoJV8+M7YbVkVG0V3FmzDLzJuQ6Pq70W6r8JYt8usrSQHrhECn NnrkGURaXhMRzx85B6JgbkbMkJHwthCFdpDlWijQf9UHpUozZAvrvPyVFTzM4Rde ekfoabmxKGP5ZtMTRJMGJchvBIykeIpq7OvvWY2cr+XrhK7QbJZd4WyzOeT/q/2i OLTzw17XPwk1INSdujjJ6lB+cspuE0Gv3+gHrxpU1lk661oYOwy+yCVW14yayJxA AMgIHGJb+EA3830ZwTbGQHuWCrKQoq8= -----END CERTIFICATE-----Generated at Sat Sep 5 00:10:38 2026 by rpki-client