$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c75f275-b08c-392b-a9a8-7dc4f9a42b73.roa File: 0c75f275-b08c-392b-a9a8-7dc4f9a42b73.roa (raw, json) Hash identifier: v4ydXOyDsAdNHe7RErV4wIDWlw2F6n0qjJgqrHg/uvE= Subject key identifier: D5:D9:6D:01:12:6B:EF:4E:9A:04:0B:C2:C6:6C:CB:F4:57:C7:20:5E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F71EDB0717382091E2C727C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c75f275-b08c-392b-a9a8-7dc4f9a42b73.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.226.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:b0:71:73:82:09:1e:2c:72:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=ce5be0fa-cdd6-49a2-b3ad-d3a9355c03f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:67:5e:b5:f2:ba:b7:08:db:94:93:cf:45:d7: bf:b0:48:ec:e9:d6:8a:ea:2c:19:7a:13:31:86:6a: 3c:c9:e4:88:a9:e0:74:35:bd:20:31:2c:e3:74:f2: 49:aa:4e:35:61:33:be:35:c1:28:bb:2a:30:e8:72: 2b:6c:c2:dc:9e:1c:4d:e8:29:37:a2:57:08:ba:1e: 92:1c:c3:47:86:41:1d:86:66:f9:4e:0a:e7:df:d0: 40:16:48:c0:33:4d:22:64:e3:55:11:59:3e:c8:3c: 2c:f9:3b:49:7c:4b:96:aa:74:9d:b4:27:e8:dc:1f: 96:06:c5:0b:e9:64:ec:9a:b7:63:31:2b:c4:04:62: b7:e1:58:62:8c:1f:56:ee:46:91:7e:cb:58:5e:a9: 40:dc:d2:ef:cb:52:c5:1c:89:c6:1c:4e:b3:19:ae: 75:3a:cc:f7:a4:8c:7b:a5:24:fa:2d:03:ae:f6:b0: ca:80:c4:a6:60:9c:53:d5:98:36:ad:cc:11:a7:ac: e5:da:6b:a7:99:7f:3c:b8:be:12:d8:2a:57:5b:b1: 90:5f:3e:bb:f6:ae:5e:d9:46:1c:be:89:75:43:07: a8:ea:04:49:4e:b9:86:d7:aa:65:2c:77:9d:1a:3d: ce:d7:a2:6c:a6:da:61:a5:f1:49:1e:b5:aa:6a:00: 42:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:D9:6D:01:12:6B:EF:4E:9A:04:0B:C2:C6:6C:CB:F4:57:C7:20:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c75f275-b08c-392b-a9a8-7dc4f9a42b73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:dc:06:73:96:48:68:c6:70:a5:59:97:e7:16:0c:8d:e7:dd: 5f:23:08:82:74:00:59:44:8d:2a:ca:05:2b:12:69:c1:85:e6: be:2e:58:f2:70:8d:54:14:2b:ae:ff:26:18:1b:9b:b2:a3:51: 27:9d:a1:4a:b7:a1:4e:b5:29:dd:1e:76:2a:fd:0e:c6:dc:33: 50:da:a4:28:f3:4e:14:fb:89:3d:ff:d9:f6:76:8f:20:25:3c: c2:85:34:23:8a:d9:ef:fa:1a:dd:d9:d8:9a:95:48:75:b1:33: a2:f2:34:08:7a:f0:47:ec:33:dd:71:10:a1:85:18:53:94:9d: 56:ca:10:97:ad:b8:9c:34:79:b0:d0:cc:98:2a:b4:f0:8a:b6: 20:3e:22:e8:e9:67:37:ca:79:61:48:58:d8:d1:f2:23:c1:c5: 18:64:45:f9:fc:98:84:a8:c0:6c:03:ba:0e:dc:25:0b:f3:cb: 32:c0:60:f1:f8:2a:9e:c9:25:84:d9:d0:49:b5:5c:9f:1e:35: 4c:91:3b:bc:a2:33:13:12:d4:7d:3a:55:92:9a:fd:ae:e6:1b: 41:0f:61:18:60:e3:33:de:47:7d:9e:f4:71:7a:30:99:a1:29: 6b:0b:ec:61:0e:ce:43:12:d9:02:ff:bd:1f:3b:95:db:ad:70: e3:dc:f9:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7bBxc4IJHixyfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk Y2U1YmUwZmEtY2RkNi00OWEyLWIzYWQtZDNhOTM1NWMwM2Y3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmdetfK6twjblJPPRde/sEjs6daK6iwZehMx hmo8yeSIqeB0Nb0gMSzjdPJJqk41YTO+NcEouyow6HIrbMLcnhxN6Ck3olcIuh6S HMNHhkEdhmb5Tgrn39BAFkjAM00iZONVEVk+yDws+TtJfEuWqnSdtCfo3B+WBsUL 6WTsmrdjMSvEBGK34VhijB9W7kaRfstYXqlA3NLvy1LFHInGHE6zGa51Osz3pIx7 pST6LQOu9rDKgMSmYJxT1Zg2rcwRp6zl2munmX88uL4S2CpXW7GQXz679q5e2UYc vol1Qweo6gRJTrmG16plLHedGj3O16JsptphpfFJHrWqagBCIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXZbQESa+9OmgQLwsZsy/RXxyBeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGM3NWYyNzUtYjA4Yy0z OTJiLWE5YTgtN2RjNGY5YTQyYjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIncBnOWSGjGcKVZl+cWDI3n3V8jCIJ0AFlEjSrKBSsSacGF5r4uWPJw jVQUK67/Jhgbm7KjUSedoUq3oU61Kd0edir9DsbcM1DapCjzThT7iT3/2fZ2jyAl PMKFNCOK2e/6Gt3Z2JqVSHWxM6LyNAh68EfsM91xEKGFGFOUnVbKEJetuJw0ebDQ zJgqtPCKtiA+IujpZzfKeWFIWNjR8iPBxRhkRfn8mISowGwDug7cJQvzyzLAYPH4 Kp7JJYTZ0Em1XJ8eNUyRO7yiMxMS1H06VZKa/a7mG0EPYRhg4zPeR32e9HF6MJmh KWsL7GEOzkMS2QL/vR87ldutcOPc+YY= -----END CERTIFICATE-----Generated at Thu Oct 22 10:36:07 2026 by rpki-client