$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cc33d8-e43e-3efe-8025-e8f4d57ad787.roa File: 17cc33d8-e43e-3efe-8025-e8f4d57ad787.roa (raw, json) Hash identifier: VxFqFIEgzq1dSo4upHKZN4bPrbI3W+W9zC5azr9aF4s= Subject key identifier: BD:1E:48:4A:AB:3E:3B:06:2D:97:5D:2A:89:FC:9A:E7:02:03:45:54 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F71EDB20F976130611E7E33A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cc33d8-e43e-3efe-8025-e8f4d57ad787.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.226.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:b2:0f:97:61:30:61:1e:7e:33:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=78ea072b-7c2f-4b3e-b0af-d838217440de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6f:fb:fa:c0:3c:32:6c:9d:d6:fd:e8:02:8b: 42:a9:bc:63:3d:83:8f:3d:04:8c:82:fe:f1:83:51: e8:8a:00:8f:8c:d9:e0:ce:c7:c2:26:91:93:d2:0a: 9e:f8:fe:44:68:bf:d2:a5:8c:3f:58:a1:7d:da:78: d5:3e:b7:36:e8:f0:89:24:ce:b8:a7:b9:8f:e9:50: 68:a6:14:09:61:f0:6d:51:8a:87:e8:ef:92:05:eb: 45:d1:31:46:d1:64:44:de:36:5c:c0:0f:e0:bd:ac: 1f:09:76:52:bf:63:78:2c:ad:a2:9d:72:54:f2:8c: 83:9f:50:7f:be:97:46:9a:07:f9:78:b8:9b:17:59: af:c6:b5:46:49:96:40:a8:15:1f:17:ae:9d:f1:cf: 2f:48:7b:0c:20:69:a7:7c:13:b7:2e:13:01:26:e3: 7c:49:58:3f:0d:df:1f:c6:60:e4:95:f8:9f:24:a5: 45:25:b4:c0:a8:cf:a7:ae:cc:f9:f3:56:4f:79:79: ad:41:45:9a:18:05:2e:19:37:07:91:14:4e:1a:72: d3:38:71:32:c4:bd:9a:a9:22:ae:0f:df:ec:54:d5: 3c:5d:44:92:d6:17:36:e2:96:9c:ef:d2:59:04:84: e2:8f:0d:cf:e4:35:87:c7:09:69:81:cd:80:f5:c8: 63:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:1E:48:4A:AB:3E:3B:06:2D:97:5D:2A:89:FC:9A:E7:02:03:45:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cc33d8-e43e-3efe-8025-e8f4d57ad787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:54:12:0f:a7:79:be:2b:4a:f4:13:58:53:86:de:52:98:09: 89:37:12:03:10:e9:83:0a:0f:e1:fd:51:24:79:cc:9c:21:8e: 0e:6b:b3:6c:59:6d:30:c4:65:00:c4:8d:3c:23:23:fc:99:66: b4:c0:b4:af:92:38:7d:12:06:04:d4:88:f1:98:dc:64:df:d7: 71:9d:a3:50:8f:73:a6:1e:8c:ae:90:18:52:f1:67:a0:e5:36: 72:a4:d6:c3:62:69:e1:85:5f:8a:3c:83:0d:2d:2c:03:14:45: f2:81:0b:94:6f:d5:f7:80:8b:98:72:c4:9a:99:da:db:fe:e4: 47:a5:fc:3e:70:64:4f:a4:52:fa:7b:3c:81:74:29:57:d1:8e: 9b:bf:ba:1e:9a:99:b3:0c:8e:57:c7:1c:cc:d7:cc:73:b8:cb: ea:f9:86:99:9f:00:a0:46:ae:ab:17:20:61:2f:74:37:88:cc: 4a:bf:65:46:df:48:b1:43:0e:98:a8:fd:e4:ee:2c:2b:0b:85: 36:ce:92:7d:0b:72:0a:cb:49:5c:03:1a:63:e6:73:e3:42:11: 0e:a7:08:f6:e0:04:e1:b8:5b:c1:5a:d9:06:e9:32:d9:4f:c0: 86:7c:17:73:dc:6b:f9:96:48:d7:a5:a1:1a:ee:ab:c9:6c:30: f3:a1:c6:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7bIPl2EwYR5+M6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NzhlYTA3MmItN2MyZi00YjNlLWIwYWYtZDgzODIxNzQ0MGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm/7+sA8Mmyd1v3oAotCqbxjPYOPPQSMgv7x g1HoigCPjNngzsfCJpGT0gqe+P5EaL/SpYw/WKF92njVPrc26PCJJM64p7mP6VBo phQJYfBtUYqH6O+SBetF0TFG0WRE3jZcwA/gvawfCXZSv2N4LK2inXJU8oyDn1B/ vpdGmgf5eLibF1mvxrVGSZZAqBUfF66d8c8vSHsMIGmnfBO3LhMBJuN8SVg/Dd8f xmDklfifJKVFJbTAqM+nrsz581ZPeXmtQUWaGAUuGTcHkRROGnLTOHEyxL2aqSKu D9/sVNU8XUSS1hc24pac79JZBITijw3P5DWHxwlpgc2A9chj+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0eSEqrPjsGLZddKon8mucCA0VUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTdjYzMzZDgtZTQzZS0z ZWZlLTgwMjUtZThmNGQ1N2FkNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElUEg+neb4rSvQTWFOG3lKYCYk3EgMQ6YMKD+H9USR5zJwhjg5rs2xZ bTDEZQDEjTwjI/yZZrTAtK+SOH0SBgTUiPGY3GTf13Gdo1CPc6YejK6QGFLxZ6Dl NnKk1sNiaeGFX4o8gw0tLAMURfKBC5Rv1feAi5hyxJqZ2tv+5Eel/D5wZE+kUvp7 PIF0KVfRjpu/uh6ambMMjlfHHMzXzHO4y+r5hpmfAKBGrqsXIGEvdDeIzEq/ZUbf SLFDDpio/eTuLCsLhTbOkn0LcgrLSVwDGmPmc+NCEQ6nCPbgBOG4W8Fa2QbpMtlP wIZ8F3Pca/mWSNeloRruq8lsMPOhxoM= -----END CERTIFICATE-----Generated at Wed Oct 21 10:21:21 2026 by rpki-client