$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f018f09-7356-3140-91a4-ff59b6712c2e.roa File: 1f018f09-7356-3140-91a4-ff59b6712c2e.roa (raw, json) Hash identifier: /7FchOxg9LWMmhIDzIRmdpO01UDlvZVve+HyQY12iho= Subject key identifier: 20:10:4F:98:37:CD:47:13:AB:42:8A:0D:37:4C:64:B4:F4:A2:EC:02 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7BB306B31C88489B366BE4C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f018f09-7356-3140-91a4-ff59b6712c2e.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 36183 IP address blocks: 172.224.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:06:b3:1c:88:48:9b:36:6b:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=68a19b99-1b27-447a-86bb-142a79961322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c4:1d:cb:4a:9f:ce:92:e9:a4:8c:51:ab:e6: 35:bc:5e:2c:9b:95:e6:b5:7a:25:81:b4:2b:03:ec: c3:0a:98:78:9e:ea:9c:6a:8d:8f:16:e9:64:33:17: 1b:22:b1:d8:96:cc:b7:45:ca:08:77:c8:c3:f4:cb: 68:37:01:71:98:6c:af:0c:e1:cf:b5:d1:dc:25:21: 4a:e8:ce:6f:d2:f8:3a:48:1c:c9:a9:ee:53:e6:73: 83:4c:7a:eb:5d:cc:9b:b0:8e:cb:e6:42:49:cd:9a: ee:78:d8:c3:c0:c0:8d:e2:26:df:e5:cb:d3:e5:42: 1d:19:59:26:a4:16:dc:63:71:36:ca:4d:40:74:03: 97:a1:0c:2e:19:fa:7e:b5:72:f1:4c:66:c0:b3:c0: be:a5:75:b4:24:b6:2c:02:75:47:4a:d8:c3:f9:8e: ef:0b:8d:39:60:71:2e:2f:f0:b1:fa:08:ac:70:1c: 23:50:66:ad:1e:dd:57:0b:0d:91:81:73:45:33:59: 32:a7:37:27:b7:82:6c:4e:4d:27:88:b7:57:a8:2d: 42:54:b8:4b:d8:41:b5:6e:dd:8d:03:0e:25:16:8b: ce:56:77:a9:a5:45:b9:b6:dd:4b:30:2f:23:fb:3d: 34:c6:d0:c7:26:8f:2f:67:57:06:35:07:7c:dc:a7: 45:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:10:4F:98:37:CD:47:13:AB:42:8A:0D:37:4C:64:B4:F4:A2:EC:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1f018f09-7356-3140-91a4-ff59b6712c2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7e:9a:81:8e:06:54:37:19:dd:86:c7:aa:67:33:aa:d5:4e: 12:7e:7f:36:f0:1c:af:47:bb:44:f8:01:26:61:0d:ed:88:28: 87:80:4c:a1:29:c8:d0:c6:89:20:ff:e7:21:cd:73:c0:d1:bd: 89:22:5f:ea:98:32:4d:89:6a:9c:8f:df:09:7f:25:5b:11:9b: 80:32:35:9e:11:13:eb:0a:55:a0:b4:ce:c0:4b:fd:1c:36:ab: 43:7c:a6:e3:90:dc:ec:5f:6a:5f:80:93:d4:f2:00:92:ff:f0: 1a:ba:92:1b:69:ad:c6:ba:83:ad:5c:0f:08:4e:b2:10:60:9b: 86:14:4e:d9:28:8a:ab:85:87:25:56:61:1e:ad:78:03:53:64: 4b:f9:28:b5:97:b1:c0:52:74:b1:58:0e:f4:9b:6f:03:45:b4: 73:74:a0:f1:75:b2:a9:25:1c:24:f0:04:e3:d8:b3:d1:15:df: 7d:4a:8f:11:3a:7f:c8:25:ef:d9:53:80:0c:70:2c:ef:59:ba: 34:01:82:c7:cb:7e:6e:9b:b8:af:54:6d:25:24:7c:cf:37:0b: e9:5d:d1:13:42:0a:52:96:67:84:c9:9b:d2:b9:83:df:fe:05: 73:66:19:57:ba:09:cd:0b:43:7e:da:71:5a:75:b7:87:72:4f: e0:97:1b:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swazHIhImzZr5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NjhhMTliOTktMWIyNy00NDdhLTg2YmItMTQyYTc5OTYxMzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMQdy0qfzpLppIxRq+Y1vF4sm5XmtXolgbQr A+zDCph4nuqcao2PFulkMxcbIrHYlsy3RcoId8jD9MtoNwFxmGyvDOHPtdHcJSFK 6M5v0vg6SBzJqe5T5nODTHrrXcybsI7L5kJJzZrueNjDwMCN4ibf5cvT5UIdGVkm pBbcY3E2yk1AdAOXoQwuGfp+tXLxTGbAs8C+pXW0JLYsAnVHStjD+Y7vC405YHEu L/Cx+giscBwjUGatHt1XCw2RgXNFM1kypzcnt4JsTk0niLdXqC1CVLhL2EG1bt2N Aw4lFovOVneppUW5tt1LMC8j+z00xtDHJo8vZ1cGNQd83KdFpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAQT5g3zUcTq0KKDTdMZLT0ouwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMWYwMThmMDktNzM1Ni0z MTQwLTkxYTQtZmY1OWI2NzEyYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABR+moGOBlQ3Gd2Gx6pnM6rVThJ+fzbwHK9Hu0T4ASZhDe2IKIeATKEp yNDGiSD/5yHNc8DRvYkiX+qYMk2JapyP3wl/JVsRm4AyNZ4RE+sKVaC0zsBL/Rw2 q0N8puOQ3Oxfal+Ak9TyAJL/8Bq6khtprca6g61cDwhOshBgm4YUTtkoiquFhyVW YR6teANTZEv5KLWXscBSdLFYDvSbbwNFtHN0oPF1sqklHCTwBOPYs9EV331KjxE6 f8gl79lTgAxwLO9ZujQBgsfLfm6buK9UbSUkfM83C+ld0RNCClKWZ4TJm9K5g9/+ BXNmGVe6Cc0LQ37acVp1t4dyT+CXGyA= -----END CERTIFICATE-----Generated at Fri Oct 23 03:57:49 2026 by rpki-client