$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa File: a24a5b45-65e4-3787-acd8-b655e54a2021.roa (raw, json) Hash identifier: IG3RJcL2GCVcas1lNU/qROy6TG1RQcdrMY02090vGwE= Subject key identifier: 89:0B:EC:78:5E:26:E5:D9:55:A0:4F:8D:BF:38:94:B9:F1:7A:7D:60 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584EC0A72F48DC64FEC3F4899080 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 20115 IP address blocks: 172.223.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:2f:48:dc:64:fe:c3:f4:89:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=f3bf1460-b730-4a58-8bbf-b6e708fdb246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:40:67:71:8e:f6:6f:4a:f4:3f:af:3a:83:fe: 05:fd:ba:4c:79:8f:c2:99:40:47:9a:28:b9:f4:8b: f4:4f:e6:98:67:ec:eb:fa:5b:9c:54:1f:5c:d9:dc: f7:b3:b5:62:d4:2b:49:ff:a5:9c:3c:74:20:09:78: 88:4c:37:60:77:63:a0:ea:ea:d6:77:9d:4a:7a:c3: 7a:67:2e:16:3d:e9:05:77:53:8f:52:15:d5:8e:5b: 20:e0:ce:f8:89:92:b6:c7:b6:99:be:31:b6:fe:03: 3e:9e:83:6e:c7:42:10:b2:d8:39:15:aa:17:84:46: 95:e9:75:dd:98:40:17:d6:c1:1f:58:31:92:1f:0b: 77:6a:fc:09:da:cd:2b:ce:c1:25:25:ff:25:4a:4b: f7:29:b8:d1:1f:d1:ec:28:f8:0e:79:0c:df:35:04: 21:0b:d9:f9:81:6c:a3:2f:3b:62:e2:07:45:84:a4: 4e:09:4f:96:6b:56:21:8b:ee:b5:1a:67:ab:3a:da: e2:08:02:68:d6:91:f4:55:0b:69:55:5e:f7:6a:83: 53:50:de:d2:98:c1:63:6f:ac:3d:af:c3:8d:a6:80: 00:da:7e:6e:a2:1e:7f:1f:77:ca:a7:b8:e4:ad:c4: c9:fe:51:3c:0b:76:d6:e3:91:9e:54:10:60:50:41: da:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:0B:EC:78:5E:26:E5:D9:55:A0:4F:8D:BF:38:94:B9:F1:7A:7D:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.223.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:c8:a2:88:00:bb:dd:d9:5d:d7:66:ac:64:8d:95:7f:da:8c: 7b:bf:66:6f:49:7d:26:f9:a9:1b:4a:dd:75:ed:c9:72:83:1d: b2:94:ff:58:d8:64:fe:8d:e9:67:f8:df:86:8a:78:25:b5:b8: c5:d0:7c:d0:6b:67:89:6b:6f:1a:d3:5f:e4:53:f5:0f:08:5f: c0:6a:8a:41:8c:3d:5d:80:eb:31:91:b5:8b:ba:c5:d8:47:c0: 49:33:73:9e:79:e3:d8:09:9e:a5:17:26:61:a0:97:e2:35:f4: 47:da:cd:65:19:7e:5d:0b:95:4c:ed:cf:63:55:e4:21:d3:b4: 1b:86:b8:12:ed:08:93:ca:be:25:dd:0a:34:76:e6:29:92:a9: 85:b6:17:a5:96:60:21:42:cc:da:6d:dc:4b:22:72:7f:bd:c3: a6:2e:f3:20:e2:1d:c5:a5:e2:d6:53:c0:66:d2:a7:96:b6:8f: f1:3a:79:7b:e2:22:f1:71:2a:8c:9e:de:d3:9e:29:30:dc:d6: 84:4f:49:6a:1a:a4:c2:7e:63:32:49:20:1d:50:0b:06:73:1f: 6e:ac:77:59:10:fd:82:d4:a5:63:34:be:b8:0d:60:cf:3c:86: 3b:ce:28:57:78:71:79:c2:76:1f:d8:28:ac:54:a6:a4:35:a7: 38:5b:d5:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Apy9I3GT+w/SJkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk ZjNiZjE0NjAtYjczMC00YTU4LThiYmYtYjZlNzA4ZmRiMjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0BncY72b0r0P686g/4F/bpMeY/CmUBHmii5 9Iv0T+aYZ+zr+lucVB9c2dz3s7Vi1CtJ/6WcPHQgCXiITDdgd2Og6urWd51KesN6 Zy4WPekFd1OPUhXVjlsg4M74iZK2x7aZvjG2/gM+noNux0IQstg5FaoXhEaV6XXd mEAX1sEfWDGSHwt3avwJ2s0rzsElJf8lSkv3KbjRH9HsKPgOeQzfNQQhC9n5gWyj Lzti4gdFhKROCU+Wa1Yhi+61GmerOtriCAJo1pH0VQtpVV73aoNTUN7SmMFjb6w9 r8ONpoAA2n5uoh5/H3fKp7jkrcTJ/lE8C3bW45GeVBBgUEHajwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkL7HheJuXZVaBPjb84lLnxen1gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTI0YTViNDUtNjVlNC0z Nzg3LWFjZDgtYjY1NWU1NGEyMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrN+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfIoogAu93ZXddmrGSNlX/ajHu/Zm9JfSb5qRtK3XXtyXKDHbKU/1jY ZP6N6Wf434aKeCW1uMXQfNBrZ4lrbxrTX+RT9Q8IX8BqikGMPV2A6zGRtYu6xdhH wEkzc55549gJnqUXJmGgl+I19EfazWUZfl0LlUztz2NV5CHTtBuGuBLtCJPKviXd CjR25imSqYW2F6WWYCFCzNpt3Esicn+9w6Yu8yDiHcWl4tZTwGbSp5a2j/E6eXvi IvFxKoye3tOeKTDc1oRPSWoapMJ+YzJJIB1QCwZzH26sd1kQ/YLUpWM0vrgNYM88 hjvOKFd4cXnCdh/YKKxUpqQ1pzhb1eo= -----END CERTIFICATE-----Generated at Sat Sep 5 03:57:57 2026 by rpki-client