$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3ce1707-0126-33b1-85cf-4de892b6bc2b.roa File: c3ce1707-0126-33b1-85cf-4de892b6bc2b.roa (raw, json) Hash identifier: Ej1C7tDid3rUu7yuWpSpt5A6zAL4PfUgCNE4DY6d6H0= Subject key identifier: 00:56:B2:31:C0:17:8F:52:5A:DB:90:C4:B1:59:D8:FC:13:59:95:EC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EBC770E8E94E0D513C49990A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3ce1707-0126-33b1-85cf-4de892b6bc2b.roa Signing time: Wed 05 Aug 2026 13:00:12 +0000 ROA not before: Wed 05 Aug 2026 13:00:12 +0000 ROA not after: Tue 03 Nov 2026 14:00:12 +0000 asID: 36183 IP address blocks: 172.225.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:77:0e:8e:94:e0:d5:13:c4:99:90:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 5 13:00:12 2026 GMT Not After : Nov 3 14:00:12 2026 GMT Subject: CN=aa1a45a2-9f54-4356-9011-47b117cdfcdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:87:bd:69:7d:9c:4f:72:51:b0:d1:d3:db:01: f9:27:69:89:c0:72:b2:1a:fb:fa:7b:a2:ed:83:00: 90:f3:8d:61:67:2d:28:0d:9f:28:58:8e:fa:c1:a4: 86:36:fa:3f:5d:22:e8:1d:ef:6b:bd:34:e4:d7:59: 4c:b6:dc:93:bc:06:b4:1d:da:66:ef:7c:0a:a2:59: 0c:d7:cd:fd:8b:d5:3b:c9:da:76:35:36:6e:e3:b7: 87:c2:50:de:8d:ba:e7:f1:68:23:31:10:9d:6e:d0: 95:88:73:13:d6:c0:eb:54:57:0b:05:61:84:08:18: 3d:32:24:c6:09:c8:58:a3:ab:f6:6f:63:a4:b3:9a: 27:5c:23:5f:94:7e:fc:f2:bf:d2:98:35:86:24:d3: b1:c5:20:5c:e4:f2:5f:22:97:2c:6d:ab:36:0e:d2: 0d:57:32:71:57:80:d9:7e:3e:0e:0f:c7:12:09:70: 40:2b:1f:b0:02:47:3f:08:7e:7c:f5:1c:4b:81:e8: 76:4b:8c:5e:9f:78:9e:6d:e1:c7:e6:8f:55:00:2f: 5b:f1:fc:b5:03:9a:ea:08:fc:ea:68:cf:16:e7:d6: be:33:41:02:eb:f5:bb:81:bc:47:49:59:5d:bf:47: 4d:3b:55:c5:b5:11:8e:9d:66:07:ec:31:94:3c:cb: f8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:56:B2:31:C0:17:8F:52:5A:DB:90:C4:B1:59:D8:FC:13:59:95:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3ce1707-0126-33b1-85cf-4de892b6bc2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:57:dd:5e:fa:b8:2d:b2:70:a1:74:23:a2:93:7b:1e:64:f9: b1:3e:1a:6d:3f:33:67:db:9c:65:7d:15:23:36:57:6d:aa:2d: 36:ae:04:d8:ee:fa:57:22:ed:81:30:a1:04:dd:2a:bc:7f:5f: 74:00:24:9a:5d:51:35:13:47:5f:36:f6:11:04:21:a6:b2:cc: b6:f1:fc:3e:4e:b9:a7:c4:7c:57:98:10:7c:9e:e2:e6:bb:aa: 42:4e:3c:e1:69:36:5a:11:49:d8:2f:05:6d:58:8a:9f:5d:83: ad:05:cc:87:fc:8b:fb:47:b0:c6:38:09:11:05:0c:51:47:32: 8b:e7:f1:fc:11:bb:a5:b3:a5:be:1a:6d:00:31:50:92:8a:8b: d8:a8:85:67:2c:79:94:ec:f6:81:16:dd:55:a6:be:00:44:04: cd:4a:0e:91:90:3d:f9:54:40:6c:f8:1c:9d:b0:1c:0e:be:74: 92:21:95:29:79:13:47:35:cf:3f:56:8c:6d:34:a2:9f:7a:78: d0:45:5f:ac:11:05:54:98:a9:46:87:0b:8e:7a:db:f1:39:cd: 0e:06:9a:2b:ef:90:0e:38:e6:55:fb:68:45:be:9a:e1:dc:dd: e0:41:bd:e6:8c:6e:48:5d:22:fe:84:08:65:36:12:dd:50:5b: 4e:2f:bc:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dw6OlODVE8SZkKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk YWExYTQ1YTItOWY1NC00MzU2LTkwMTEtNDdiMTE3Y2RmY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4e9aX2cT3JRsNHT2wH5J2mJwHKyGvv6e6Lt gwCQ841hZy0oDZ8oWI76waSGNvo/XSLoHe9rvTTk11lMttyTvAa0Hdpm73wKolkM 1839i9U7ydp2NTZu47eHwlDejbrn8WgjMRCdbtCViHMT1sDrVFcLBWGECBg9MiTG CchYo6v2b2Oks5onXCNflH788r/SmDWGJNOxxSBc5PJfIpcsbas2DtINVzJxV4DZ fj4OD8cSCXBAKx+wAkc/CH589RxLgeh2S4xen3iebeHH5o9VAC9b8fy1A5rqCPzq aM8W59a+M0EC6/W7gbxHSVldv0dNO1XFtRGOnWYH7DGUPMv4pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFABWsjHAF49SWtuQxLFZ2PwTWZXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzNjZTE3MDctMDEyNi0z M2IxLTg1Y2YtNGRlODkyYjZiYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxX3V76uC2ycKF0I6KTex5k+bE+Gm0/M2fbnGV9FSM2V22qLTauBNju +lci7YEwoQTdKrx/X3QAJJpdUTUTR1829hEEIaayzLbx/D5OuafEfFeYEHye4ua7 qkJOPOFpNloRSdgvBW1Yip9dg60FzIf8i/tHsMY4CREFDFFHMovn8fwRu6Wzpb4a bQAxUJKKi9iohWcseZTs9oEW3VWmvgBEBM1KDpGQPflUQGz4HJ2wHA6+dJIhlSl5 E0c1zz9WjG00op96eNBFX6wRBVSYqUaHC4562/E5zQ4GmivvkA445lX7aEW+muHc 3eBBveaMbkhdIv6ECGU2Et1QW04vvAM= -----END CERTIFICATE-----Generated at Sat Sep 5 07:16:38 2026 by rpki-client