$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0151095d-5373-3671-ae82-adce7da18cf1.roa File: 0151095d-5373-3671-ae82-adce7da18cf1.roa (raw, json) Hash identifier: 9jtZ9VJS1gYnrS1kYyV+/HoFEwx5Vb+I5C57Mlz9CRo= Subject key identifier: 25:AE:9E:2B:CE:F6:01:06:FE:72:82:E0:59:60:A8:D0:F2:96:39:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F655DF9E599E61316578B9DE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0151095d-5373-3671-ae82-adce7da18cf1.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 36183 IP address blocks: 172.225.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:f9:e5:99:e6:13:16:57:8b:9d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=43cb879b-2acf-49f2-8b64-3fc79fe3d762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:53:6c:2e:62:36:13:30:56:f8:0f:99:61:37: d9:ed:fe:19:4d:37:10:cb:81:9f:8c:22:82:20:d6: 99:17:d8:7b:8e:97:94:61:14:d8:2f:67:aa:a9:41: d7:c3:2d:d0:f8:5b:dc:2f:11:eb:c3:18:86:a5:31: 84:31:a9:21:ae:14:a5:ad:18:a7:55:f9:c0:e8:0c: 73:dc:1b:c6:88:f7:f1:10:1a:05:f8:c4:38:db:89: e1:d1:82:18:35:ea:34:d4:45:d9:89:96:3a:c4:a5: f7:fa:5d:5d:f5:f5:66:01:03:f8:b4:2e:37:61:32: 72:35:3a:8b:19:b6:13:18:b3:ef:61:f5:e2:69:96: 1f:dc:a6:5a:7b:d9:70:b7:6c:09:24:24:64:50:0d: e5:1d:95:2d:6e:bb:0b:5c:eb:54:29:f1:f0:93:23: 8e:57:ec:fb:1a:8b:19:ae:7f:a6:c0:03:a2:7c:3b: 20:27:b6:78:9d:b0:55:75:00:0d:89:df:d4:53:17: ea:54:1d:fb:8e:cd:c7:84:1f:55:54:81:c1:49:dd: ac:7c:41:57:69:ec:b5:c7:a7:33:dd:5a:fe:8b:5a: 64:05:85:65:86:c8:fe:6c:e1:0c:a4:f1:b7:34:ea: 54:04:5e:d5:bb:29:45:f2:40:ab:aa:16:0a:de:99: c8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AE:9E:2B:CE:F6:01:06:FE:72:82:E0:59:60:A8:D0:F2:96:39:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0151095d-5373-3671-ae82-adce7da18cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:b9:de:2e:67:23:29:f8:47:19:ab:ae:60:f4:72:6a:fa:8a: 73:34:3c:39:22:0e:5f:c2:81:3d:78:1e:63:76:ef:2d:3e:0f: b7:63:aa:9e:6c:f5:3b:ba:08:17:18:50:cb:1c:dc:a1:bb:56: 12:76:af:82:fa:48:40:95:5f:61:98:37:d6:9e:ab:37:cb:96: 79:e4:bc:29:96:9f:cf:dc:aa:f9:78:35:06:44:58:e9:70:39: 88:c4:48:b0:9e:6c:20:5b:7c:a1:c5:e9:6c:44:2a:d8:46:6d: 02:fb:2a:79:e1:f6:bf:8c:41:a7:a1:76:c6:64:ee:cd:a6:7b: 71:00:ed:dd:74:3e:b4:59:a2:8c:4a:8c:23:20:13:ef:79:e2: 1f:da:f6:16:d1:bd:9f:48:06:9d:47:e0:15:29:45:95:6f:28: e6:e2:43:23:6e:69:b7:e8:ef:bb:7d:92:fc:36:74:9f:f1:ad: 32:56:48:cf:65:6d:aa:fe:51:c7:1f:a3:0a:c6:fa:99:e3:43: c8:df:75:8c:36:05:3f:f1:10:a1:08:6b:b8:19:45:86:18:f3: 82:56:f7:04:67:c4:60:d0:db:66:33:13:8d:fb:d5:f5:cd:d5: fe:a5:5d:13:ac:b4:53:49:78:6a:50:ee:32:95:6c:0d:48:5d: a5:4d:10:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXfnlmeYTFleLneAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk NDNjYjg3OWItMmFjZi00OWYyLThiNjQtM2ZjNzlmZTNkNzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1NsLmI2EzBW+A+ZYTfZ7f4ZTTcQy4GfjCKC INaZF9h7jpeUYRTYL2eqqUHXwy3Q+FvcLxHrwxiGpTGEMakhrhSlrRinVfnA6Axz 3BvGiPfxEBoF+MQ424nh0YIYNeo01EXZiZY6xKX3+l1d9fVmAQP4tC43YTJyNTqL GbYTGLPvYfXiaZYf3KZae9lwt2wJJCRkUA3lHZUtbrsLXOtUKfHwkyOOV+z7GosZ rn+mwAOifDsgJ7Z4nbBVdQANid/UUxfqVB37js3HhB9VVIHBSd2sfEFXaey1x6cz 3Vr+i1pkBYVlhsj+bOEMpPG3NOpUBF7VuylF8kCrqhYK3pnIMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWunivO9gEG/nKC4FlgqNDyljnXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDE1MTA5NWQtNTM3My0z NjcxLWFlODItYWRjZTdkYTE4Y2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOE3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe53i5nIyn4RxmrrmD0cmr6inM0PDkiDl/CgT14HmN27y0+D7djqp5s 9Tu6CBcYUMsc3KG7VhJ2r4L6SECVX2GYN9aeqzfLlnnkvCmWn8/cqvl4NQZEWOlw OYjESLCebCBbfKHF6WxEKthGbQL7Knnh9r+MQaehdsZk7s2me3EA7d10PrRZooxK jCMgE+954h/a9hbRvZ9IBp1H4BUpRZVvKObiQyNuabfo77t9kvw2dJ/xrTJWSM9l bar+UccfowrG+pnjQ8jfdYw2BT/xEKEIa7gZRYYY84JW9wRnxGDQ22YzE4371fXN 1f6lXROstFNJeGpQ7jKVbA1IXaVNEPs= -----END CERTIFICATE-----Generated at Mon Oct 26 23:35:20 2026 by rpki-client