$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf4f938a-7cae-3512-b369-300d6d3ea76a.roa File: cf4f938a-7cae-3512-b369-300d6d3ea76a.roa (raw, json) Hash identifier: wX810Lvof3oygmyqAk80lpc7nPBAGpSKT50+fWlxSuQ= Subject key identifier: B2:1E:B6:B8:29:EE:42:79:47:02:B7:F6:8C:D7:60:4B:2D:C7:1F:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584ED001FC65381E2022E1701560 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf4f938a-7cae-3512-b369-300d6d3ea76a.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 36183 IP address blocks: 172.224.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:fc:65:38:1e:20:22:e1:70:15:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=610bad21-df0b-4c37-ba3c-a39210bc70b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d3:3a:b1:9e:4a:fb:22:27:5a:1b:7a:60:ae: 11:e6:8e:84:2f:bf:e6:8c:86:10:84:46:91:6e:60: 52:4f:1a:c3:02:7f:1e:ae:7b:33:d4:48:4d:8b:26: b6:89:b1:b8:0e:73:0a:01:6d:98:98:1c:ef:ce:20: f1:49:6e:75:2a:5d:1d:dc:b2:c9:4e:da:bb:81:22: 31:0e:4c:cc:0a:80:5d:53:56:14:e5:1c:de:d5:cf: 97:68:ae:a5:73:74:e9:25:9c:4d:d9:21:cd:cb:13: fc:46:31:88:c0:c0:30:03:7d:e5:ee:a8:d5:47:38: 2d:ef:ec:0d:75:9f:03:97:2f:60:c7:e7:a6:0f:e7: 98:5b:19:61:d5:e8:f7:ca:13:1b:86:46:89:be:a9: 01:3f:8e:4a:21:8b:27:81:b0:1f:ac:7e:44:c0:79: 7d:d4:89:d2:d3:4f:d2:38:57:8b:21:1e:2b:ee:8d: 20:40:4c:3b:cd:02:ed:76:e1:79:9f:95:73:94:b6: d4:09:f9:43:f8:60:83:c5:7d:6b:17:ee:c2:ad:d5: 6d:55:a6:1e:c2:d9:0b:45:f8:c6:4b:f8:d3:1f:74: c8:9f:39:0d:9c:b1:58:38:79:bd:b4:b9:82:8e:49: 26:41:91:f4:f3:ea:54:a7:19:c6:8d:0b:0b:31:7d: 3c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:B6:B8:29:EE:42:79:47:02:B7:F6:8C:D7:60:4B:2D:C7:1F:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf4f938a-7cae-3512-b369-300d6d3ea76a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:bd:6e:d2:a0:ac:a0:43:de:a5:3e:ab:57:10:67:19:55:d9: ca:7c:ea:af:2f:d0:d4:59:27:34:b4:62:29:48:4f:63:c4:81: 85:ba:ee:21:4e:4d:04:c7:26:fb:e3:7b:ba:99:ec:10:c8:e6: cc:89:0c:b7:75:30:d2:04:d7:ce:25:83:6e:1c:fb:54:d9:a4: cb:1b:72:b5:c8:fc:e1:9c:48:41:90:5b:b9:d6:b5:67:d6:ea: 52:ec:c8:1a:e8:ae:5a:c6:7e:10:bc:9c:0b:a8:3e:13:56:dc: 60:ed:0e:39:c2:7d:1b:07:1e:62:aa:34:ff:31:79:46:58:71: 82:7d:da:c4:b9:fd:35:6c:19:00:8f:30:7c:3a:83:25:19:c0: 16:09:88:67:ec:ed:37:2e:41:ce:61:56:14:3e:9f:e9:c0:e6: 8f:d9:fa:03:4f:0d:6e:6d:c2:99:19:57:19:68:c2:71:f6:11: b9:e9:03:dc:01:c9:42:6a:0e:af:1c:0e:ff:3a:f8:ae:3d:01: 5e:30:67:cc:f0:75:d8:a5:c5:42:97:f1:74:3c:ba:4f:31:09: 9e:ea:72:dc:8d:7c:e4:58:78:5a:ba:72:43:e9:62:4c:60:89: f0:84:dd:74:ac:32:1a:f3:cb:2e:aa:e8:19:02:b2:c2:af:c0: 93:5a:ea:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfxlOB4gIuFwFWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk NjEwYmFkMjEtZGYwYi00YzM3LWJhM2MtYTM5MjEwYmM3MGI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9M6sZ5K+yInWht6YK4R5o6EL7/mjIYQhEaR bmBSTxrDAn8ernsz1EhNiya2ibG4DnMKAW2YmBzvziDxSW51Kl0d3LLJTtq7gSIx DkzMCoBdU1YU5Rze1c+XaK6lc3TpJZxN2SHNyxP8RjGIwMAwA33l7qjVRzgt7+wN dZ8Dly9gx+emD+eYWxlh1ej3yhMbhkaJvqkBP45KIYsngbAfrH5EwHl91InS00/S OFeLIR4r7o0gQEw7zQLtduF5n5VzlLbUCflD+GCDxX1rF+7CrdVtVaYewtkLRfjG S/jTH3TInzkNnLFYOHm9tLmCjkkmQZH08+pUpxnGjQsLMX083wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIetrgp7kJ5RwK39ozXYEstxx9xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2Y0ZjkzOGEtN2NhZS0z NTEyLWIzNjktMzAwZDZkM2VhNzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGO9btKgrKBD3qU+q1cQZxlV2cp86q8v0NRZJzS0YilIT2PEgYW67iFO TQTHJvvje7qZ7BDI5syJDLd1MNIE184lg24c+1TZpMsbcrXI/OGcSEGQW7nWtWfW 6lLsyBrorlrGfhC8nAuoPhNW3GDtDjnCfRsHHmKqNP8xeUZYcYJ92sS5/TVsGQCP MHw6gyUZwBYJiGfs7TcuQc5hVhQ+n+nA5o/Z+gNPDW5twpkZVxlownH2EbnpA9wB yUJqDq8cDv86+K49AV4wZ8zwddilxUKX8XQ8uk8xCZ7qctyNfORYeFq6ckPpYkxg ifCE3XSsMhrzyy6q6BkCssKvwJNa6oM= -----END CERTIFICATE-----Generated at Sat Sep 5 04:04:15 2026 by rpki-client