$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/109ef7a1-0cae-3644-8fcd-a5448eaea78d.roa File: 109ef7a1-0cae-3644-8fcd-a5448eaea78d.roa (raw, json) Hash identifier: RlKon7TmRPYyzjCEPZLcl2Vwut/t0XiDmcV4FKei3IA= Subject key identifier: 56:66:9C:D4:41:1E:62:E1:5A:21:FB:39:E1:C9:C5:0C:A4:EB:78:FB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F963872F7304F5DEC7A399500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/109ef7a1-0cae-3644-8fcd-a5448eaea78d.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 16625 IP address blocks: 173.222.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:72:f7:30:4f:5d:ec:7a:39:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=85e4c4b6-c642-4178-a58a-3be8e28bcc62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f0:9d:e1:40:34:44:7a:ec:38:41:2f:dc:02: 02:8d:58:98:9c:63:8e:62:e5:74:e0:f2:16:e2:30: ce:5c:89:05:8b:4a:94:50:cd:24:90:53:a8:69:61: 8a:2a:73:b6:58:b4:bf:82:49:97:89:ed:df:8a:59: f0:0c:f6:4c:83:4a:a5:51:54:d2:07:30:c3:61:c1: 79:95:fb:e2:6f:2e:b9:e0:72:ce:d5:75:5e:9a:64: 6f:74:31:f6:ed:2b:99:88:36:43:82:c5:72:69:ab: 08:1c:7a:52:b8:a9:21:7b:2d:86:fe:09:9e:aa:5a: d8:d3:47:12:c1:58:5d:20:34:6d:1e:ea:52:e6:62: 1c:bd:a2:d2:3d:72:2f:4e:42:f6:b5:4c:c5:56:e9: 7c:f5:06:be:aa:87:c8:e7:74:4b:5f:33:b3:88:f0: c1:66:af:53:be:15:b5:2a:a0:09:1b:b8:2e:66:b1: 5e:c6:8d:ac:00:08:3c:12:a7:1b:62:db:d4:b3:d4: dc:78:a9:ab:7d:83:75:c6:27:2c:53:c4:da:48:0a: cb:9f:01:55:49:38:17:f3:3a:3f:d0:90:a9:bb:e4: a4:af:e7:ba:dd:98:03:39:1a:83:8b:09:90:0e:fc: f4:3a:40:21:53:e3:a5:d5:b6:c2:78:bb:46:b6:f3: 85:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:66:9C:D4:41:1E:62:E1:5A:21:FB:39:E1:C9:C5:0C:A4:EB:78:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/109ef7a1-0cae-3644-8fcd-a5448eaea78d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 173.222.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:d1:ca:08:08:2f:8e:1a:46:23:56:da:3d:ed:17:51:81:dc: 13:3f:0f:77:9a:67:dc:80:81:a8:f4:92:68:56:15:41:7a:42: 1f:c5:43:64:db:0b:35:d0:a6:a6:c7:ee:bc:bb:5c:f1:11:15: 88:e7:46:6e:fb:e2:01:d2:c6:2d:86:11:5e:e0:1f:70:66:7f: 70:62:d1:0b:7f:ee:78:c1:52:e6:11:6f:d9:aa:7c:04:07:7f: 81:49:30:6a:59:8f:09:52:cd:35:b1:ff:a5:3d:34:9d:74:98: 80:e9:09:f5:75:08:3f:be:60:42:7a:f9:e4:2a:17:4f:c7:4b: 08:70:e6:02:9f:29:dc:41:9e:45:93:ed:68:05:f1:e9:f1:11: d4:47:f7:4c:4a:ee:40:51:7c:0e:14:08:e7:f3:c9:9b:b6:a1: 38:f2:3b:52:f0:d2:99:5c:03:4a:59:b1:4f:63:c0:fc:e9:a4: 8b:47:2f:63:22:72:bc:8f:74:8d:9b:a9:ce:49:9d:92:46:a9: 73:28:3f:8a:b3:ec:0a:3c:8a:b5:08:b3:9c:2a:01:64:5a:a9: 29:7b:7f:a8:ea:c9:af:20:e6:17:9f:2b:04:14:81:09:32:87: a8:af:8f:2a:a0:f4:a2:37:fe:4c:e0:8a:0a:d0:e3:a2:f2:42: 2f:0c:5f:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WOHL3ME9d7Ho5lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk ODVlNGM0YjYtYzY0Mi00MTc4LWE1OGEtM2JlOGUyOGJjYzYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvCd4UA0RHrsOEEv3AICjViYnGOOYuV04PIW 4jDOXIkFi0qUUM0kkFOoaWGKKnO2WLS/gkmXie3filnwDPZMg0qlUVTSBzDDYcF5 lfviby654HLO1XVemmRvdDH27SuZiDZDgsVyaasIHHpSuKkhey2G/gmeqlrY00cS wVhdIDRtHupS5mIcvaLSPXIvTkL2tUzFVul89Qa+qofI53RLXzOziPDBZq9TvhW1 KqAJG7guZrFexo2sAAg8EqcbYtvUs9TceKmrfYN1xicsU8TaSArLnwFVSTgX8zo/ 0JCpu+Skr+e63ZgDORqDiwmQDvz0OkAhU+Ol1bbCeLtGtvOFvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZmnNRBHmLhWiH7OeHJxQyk63j7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTA5ZWY3YTEtMGNhZS0z NjQ0LThmY2QtYTU0NDhlYWVhNzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrd5kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbRyggIL44aRiNW2j3tF1GB3BM/D3eaZ9yAgaj0kmhWFUF6Qh/FQ2Tb CzXQpqbH7ry7XPERFYjnRm774gHSxi2GEV7gH3Bmf3Bi0Qt/7njBUuYRb9mqfAQH f4FJMGpZjwlSzTWx/6U9NJ10mIDpCfV1CD++YEJ6+eQqF0/HSwhw5gKfKdxBnkWT 7WgF8enxEdRH90xK7kBRfA4UCOfzyZu2oTjyO1Lw0plcA0pZsU9jwPzppItHL2Mi cryPdI2bqc5JnZJGqXMoP4qz7Ao8irUIs5wqAWRaqSl7f6jqya8g5hefKwQUgQky h6ivjyqg9KI3/kzgigrQ46LyQi8MX0g= -----END CERTIFICATE-----Generated at Sat Oct 24 18:56:57 2026 by rpki-client