$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea653fa9-6ad6-3f86-b685-e990b7cce0e8.roa File: ea653fa9-6ad6-3f86-b685-e990b7cce0e8.roa (raw, json) Hash identifier: 7cX57o2mwAGNWZ9Z5QRJouAYaFfKFkhST98dGtItl4Y= Subject key identifier: 84:35:EA:FA:9F:2C:D8:55:09:C8:BE:C7:B0:A8:A7:1C:CE:B2:36:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EC20C7AAE796329E199024EC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea653fa9-6ad6-3f86-b685-e990b7cce0e8.roa Signing time: Fri 07 Aug 2026 13:00:11 +0000 ROA not before: Fri 07 Aug 2026 13:00:11 +0000 ROA not after: Thu 05 Nov 2026 14:00:11 +0000 asID: 36183 IP address blocks: 172.225.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c2:0c:7a:ae:79:63:29:e1:99:02:4e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 7 13:00:11 2026 GMT Not After : Nov 5 14:00:11 2026 GMT Subject: CN=d2084b79-6b49-4727-9daf-8b0bf280472d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ef:25:40:dc:00:ed:40:65:1b:0f:24:b7:cf: d5:5f:a1:ca:c9:96:8b:86:e6:42:42:a4:26:65:5c: ff:8a:89:c2:02:97:3d:7e:1a:fc:b0:cd:39:b3:89: be:36:b0:8e:2e:43:30:2b:bd:85:18:9a:d3:3c:9a: 62:62:2f:58:4d:98:3d:26:a6:33:1d:5b:98:31:85: 94:17:d5:15:06:22:aa:1d:76:94:72:45:d6:a2:49: d7:ed:af:72:e6:7e:aa:f8:03:95:9f:f0:fb:ec:5a: b6:4e:84:75:4e:61:2d:03:9d:7e:bd:d4:be:44:bb: a7:7f:e8:46:85:5e:bc:5a:c4:ab:6b:5e:af:28:c5: 23:9e:f4:ca:7a:4a:57:b5:37:ae:7d:48:19:83:7e: 24:a9:da:b0:9f:39:31:13:60:a0:82:40:d1:12:08: 1f:1d:32:bc:16:bd:bd:17:b1:3e:8f:7b:6d:2f:b7: 24:58:b3:78:5e:75:64:60:6c:76:46:53:64:c5:02: 90:91:d8:35:8c:d8:43:80:c7:d9:65:63:99:dc:e1: a9:b3:43:d3:03:55:ac:c6:38:fa:40:bd:63:87:66: 0a:41:b2:40:e1:4b:c7:da:b0:3f:83:a5:6d:f7:2d: dd:51:2f:14:c6:38:7f:68:13:1a:64:c5:f0:28:3b: 4d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:35:EA:FA:9F:2C:D8:55:09:C8:BE:C7:B0:A8:A7:1C:CE:B2:36:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ea653fa9-6ad6-3f86-b685-e990b7cce0e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:4a:1b:65:b9:fb:32:49:06:36:f1:46:fe:0b:f6:7a:4a:70: e9:c9:c4:d1:44:d3:9b:53:a9:04:37:2d:cf:ea:e6:c7:1d:d4: 33:c2:d3:b3:de:e3:d7:a1:2c:19:2a:e1:e3:30:15:d9:41:35: c8:e7:f5:95:4a:64:7e:13:80:a0:5b:4f:c5:60:cf:39:b0:74: 78:10:2a:b1:07:7c:b9:32:ca:82:8e:98:46:b1:cf:2c:f7:08: ea:fb:3b:63:80:d6:5f:72:25:d4:c5:d6:ca:4d:33:17:21:82: 1d:89:d7:97:a5:9b:46:0b:15:2a:1e:cb:e2:1c:05:59:ba:35: 06:4d:fb:80:bb:fa:ea:e4:34:d2:87:38:96:63:f4:85:73:da: 9c:ec:b6:ed:8c:ab:93:55:8f:26:ae:c0:41:6d:92:4a:22:9e: 86:46:6c:66:9d:5a:fb:07:0e:17:54:45:7d:5e:03:44:6d:6c: ec:4f:5e:72:23:9c:2e:11:9f:13:58:fa:41:b0:54:ad:6d:da: 4e:b2:88:fd:69:fa:5a:fd:a9:4f:f1:26:4d:b0:d4:7c:00:70: 2e:dc:5a:68:99:d7:80:c5:1d:f0:0f:d4:13:5c:28:c0:95:94: 58:0d:f3:4a:80:6e:cf:dd:1f:0f:44:5d:85:e8:ea:2a:ac:41: 79:91:61:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDHqueWMp4ZkCTsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk ZDIwODRiNzktNmI0OS00NzI3LTlkYWYtOGIwYmYyODA0NzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO8lQNwA7UBlGw8kt8/VX6HKyZaLhuZCQqQm ZVz/ionCApc9fhr8sM05s4m+NrCOLkMwK72FGJrTPJpiYi9YTZg9JqYzHVuYMYWU F9UVBiKqHXaUckXWoknX7a9y5n6q+AOVn/D77Fq2ToR1TmEtA51+vdS+RLunf+hG hV68WsSra16vKMUjnvTKekpXtTeufUgZg34kqdqwnzkxE2CggkDREggfHTK8Fr29 F7E+j3ttL7ckWLN4XnVkYGx2RlNkxQKQkdg1jNhDgMfZZWOZ3OGps0PTA1Wsxjj6 QL1jh2YKQbJA4UvH2rA/g6Vt9y3dUS8Uxjh/aBMaZMXwKDtNuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQ16vqfLNhVCci+x7CopxzOsjakMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWE2NTNmYTktNmFkNi0z Zjg2LWI2ODUtZTk5MGI3Y2NlMGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJKG2W5+zJJBjbxRv4L9npKcOnJxNFE05tTqQQ3Lc/q5scd1DPC07Pe 49ehLBkq4eMwFdlBNcjn9ZVKZH4TgKBbT8VgzzmwdHgQKrEHfLkyyoKOmEaxzyz3 COr7O2OA1l9yJdTF1spNMxchgh2J15elm0YLFSoey+IcBVm6NQZN+4C7+urkNNKH OJZj9IVz2pzstu2Mq5NVjyauwEFtkkoinoZGbGadWvsHDhdURX1eA0RtbOxPXnIj nC4RnxNY+kGwVK1t2k6yiP1p+lr9qU/xJk2w1HwAcC7cWmiZ14DFHfAP1BNcKMCV lFgN80qAbs/dHw9EXYXo6iqsQXmRYc0= -----END CERTIFICATE-----Generated at Sat Sep 5 01:22:57 2026 by rpki-client