$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18cc1060-9e64-337d-8a77-7bcc97b5683a.roa File: 18cc1060-9e64-337d-8a77-7bcc97b5683a.roa (raw, json) Hash identifier: vxQnQa1Nw1sWpeQqm/UMnA6iepW0bI3r4H4EfOMCZsQ= Subject key identifier: 52:B9:F6:EF:BB:48:2B:3F:58:F9:F8:69:EF:50:3E:8A:EE:49:64:7F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7E7DD5DB8093900231A4DB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18cc1060-9e64-337d-8a77-7bcc97b5683a.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 36183 IP address blocks: 172.224.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:d5:db:80:93:90:02:31:a4:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=24de9c2a-0432-423b-9a9a-523ba682a654 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:55:e4:df:96:d7:2a:52:a7:30:f6:66:42:34: 1e:f9:fa:d1:eb:d8:a6:b2:3f:f3:ce:ba:2e:f2:a6: 5d:83:c0:2a:46:5c:90:a0:61:1c:3b:79:21:1e:24: a7:8b:9c:48:58:9c:85:5b:be:93:b2:b6:5f:7e:7b: fd:5f:be:74:66:88:72:a9:0b:ea:b0:c8:74:a3:db: 79:51:09:a5:b1:24:54:b5:4f:1b:e6:53:54:1b:12: de:8b:d9:93:67:f8:c6:a0:4b:1e:8a:cd:cd:01:38: f0:c5:dd:39:dc:62:0c:b9:fa:a7:c3:a3:9a:58:1f: c6:55:2a:03:6c:84:56:40:8d:3a:4e:62:81:41:41: 10:30:d0:21:73:30:26:a9:5d:29:f5:dd:a4:d7:4a: 74:7c:d6:bb:18:2a:fc:db:76:90:3b:0b:fe:7f:68: 41:f4:68:c6:9d:5b:55:ab:23:5f:ff:be:69:de:ff: 54:10:86:70:e9:ca:d3:2b:c0:a7:80:a2:2e:6a:28: e4:36:08:95:5c:d9:53:05:8c:13:0d:c5:ab:95:5f: f7:16:c7:42:5b:21:f2:56:fe:32:5e:91:6c:87:32: ac:81:5a:d2:1f:ed:52:de:83:5b:50:34:18:07:56: 68:67:48:c2:fd:ae:4f:56:46:b9:3b:11:c8:78:00: 95:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B9:F6:EF:BB:48:2B:3F:58:F9:F8:69:EF:50:3E:8A:EE:49:64:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18cc1060-9e64-337d-8a77-7bcc97b5683a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:78:3f:3e:02:24:6e:c9:b6:0a:b0:50:55:53:7f:7a:bf:0e: 30:0d:d1:53:81:0c:88:70:d3:b8:8e:82:e4:39:8e:ee:72:3b: b5:51:ee:06:80:1b:69:14:a0:99:71:7a:09:c8:7f:3a:08:6f: 1f:c4:fa:c3:2f:e1:37:d3:ba:b6:ef:36:3c:5b:7f:bc:c3:e8: d1:54:6a:79:3a:30:8d:f4:6d:98:84:ac:0b:a6:20:4b:3e:82: 5a:19:69:76:65:6d:73:33:97:eb:c6:e8:d7:3a:3f:dd:18:23: 78:24:83:a7:7b:18:e1:09:0e:98:29:0f:f9:a6:4f:74:47:b0: 36:a1:2b:cc:b1:13:d6:e4:9b:9e:6e:2a:0d:74:58:87:b1:2c: 3f:64:a0:71:45:04:51:d4:53:36:3d:e9:8c:66:04:6b:6d:23: 5c:e6:c8:ce:53:1d:ba:b4:7c:cd:e1:69:86:3e:12:fc:94:91: 90:b7:d9:87:e6:5b:c9:4b:7c:67:32:a6:f8:33:a1:0c:e6:35: af:a9:ff:05:71:c7:aa:6f:0a:d0:84:89:50:5e:f5:c8:d2:7f: 22:e7:1d:fb:ee:5c:72:19:b9:26:9f:b5:43:99:b5:69:fc:2f: e1:7d:01:58:ad:1d:bd:c3:e9:ae:41:13:d9:87:81:00:dd:ea: 17:d6:36:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fdXbgJOQAjGk2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MjRkZTljMmEtMDQzMi00MjNiLTlhOWEtNTIzYmE2ODJhNjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VXk35bXKlKnMPZmQjQe+frR69imsj/zzrou 8qZdg8AqRlyQoGEcO3khHiSni5xIWJyFW76TsrZffnv9X750ZohyqQvqsMh0o9t5 UQmlsSRUtU8b5lNUGxLei9mTZ/jGoEseis3NATjwxd053GIMufqnw6OaWB/GVSoD bIRWQI06TmKBQUEQMNAhczAmqV0p9d2k10p0fNa7GCr823aQOwv+f2hB9GjGnVtV qyNf/75p3v9UEIZw6crTK8CngKIuaijkNgiVXNlTBYwTDcWrlV/3FsdCWyHyVv4y XpFshzKsgVrSH+1S3oNbUDQYB1ZoZ0jC/a5PVka5OxHIeACVFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFK59u+7SCs/WPn4ae9QPoruSWR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMThjYzEwNjAtOWU2NC0z MzdkLThhNzctN2JjYzk3YjU2ODNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADt4Pz4CJG7JtgqwUFVTf3q/DjAN0VOBDIhw07iOguQ5ju5yO7VR7gaA G2kUoJlxegnIfzoIbx/E+sMv4TfTurbvNjxbf7zD6NFUank6MI30bZiErAumIEs+ gloZaXZlbXMzl+vG6Nc6P90YI3gkg6d7GOEJDpgpD/mmT3RHsDahK8yxE9bkm55u Kg10WIexLD9koHFFBFHUUzY96YxmBGttI1zmyM5THbq0fM3haYY+EvyUkZC32Yfm W8lLfGcypvgzoQzmNa+p/wVxx6pvCtCEiVBe9cjSfyLnHfvuXHIZuSaftUOZtWn8 L+F9AVitHb3D6a5BE9mHgQDd6hfWNkA= -----END CERTIFICATE-----Generated at Fri Oct 23 15:57:37 2026 by rpki-client