$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d314c6-55a6-3ee1-9a58-1dfc46631ee0.roa File: 21d314c6-55a6-3ee1-9a58-1dfc46631ee0.roa (raw, json) Hash identifier: 7RqC8De3XSq1OfNlHbPbmIXdVjdUXbfkurXHMNXh7pA= Subject key identifier: 17:5F:52:AE:E0:C9:8C:6D:A0:CD:4C:28:F8:72:50:C3:55:45:D1:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F71EDAA99CD4E44B76919F280 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d314c6-55a6-3ee1-9a58-1dfc46631ee0.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.226.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:aa:99:cd:4e:44:b7:69:19:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=032b914b-538a-42b9-8599-42bdec35392a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f2:87:9f:07:13:0d:d6:87:f4:c5:63:b6:93: cf:9f:93:d5:81:ab:45:82:a0:84:1a:38:49:96:22: 2c:cc:55:ec:a0:e7:8e:36:33:d1:49:a4:c3:7c:b2: 9f:de:0d:3c:57:a6:3f:6e:98:fb:b6:64:79:5b:9b: 94:d8:56:c1:02:72:4e:c8:ab:c4:54:fd:e2:af:9d: 32:50:74:c5:22:6d:9f:19:2d:97:24:66:fc:83:c8: 2b:a4:bb:c8:40:ba:0e:25:7b:4c:34:00:fc:bd:b4: 4b:8a:fd:f4:cc:fd:5e:18:e4:a9:8c:b5:a8:d0:86: c0:cd:97:ba:ba:f1:88:2c:3e:39:bc:1a:1c:f7:79: f2:2e:1f:96:fd:00:21:1d:ae:55:8e:d7:bf:c0:d3: b8:6f:79:10:7e:4b:d4:61:64:6f:c6:1e:e7:e1:0e: a6:06:49:e7:5e:9b:55:b7:a4:96:ad:56:07:34:c2: ef:05:3b:c5:c6:45:73:32:58:6d:23:04:67:1b:8a: cd:43:27:72:6d:fc:d0:86:61:43:89:a8:f9:29:68: e2:96:f5:ef:15:f5:a1:67:2c:a6:88:83:a4:92:c8: 9d:a3:50:be:da:c9:84:33:77:f6:96:b8:9d:fe:75: 82:43:f1:3c:5a:01:92:c4:b7:d8:c8:a5:80:25:e9: 04:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5F:52:AE:E0:C9:8C:6D:A0:CD:4C:28:F8:72:50:C3:55:45:D1:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21d314c6-55a6-3ee1-9a58-1dfc46631ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ba:6f:d6:6d:29:5d:eb:28:f3:02:eb:6b:b4:7e:3c:ba:61: 9b:b0:66:13:19:75:07:c7:a7:a9:ed:60:57:9a:c8:ca:07:58: 56:f4:01:0f:ee:38:4d:0a:5e:d5:1c:42:73:43:46:d9:df:be: 70:d6:f9:b3:33:25:db:46:57:7e:ff:3c:a9:81:99:f3:28:3a: 62:ad:c3:8f:00:fa:23:66:66:de:d6:b1:46:a8:78:94:b7:21: a0:e0:1b:d0:d7:79:a3:67:d7:b4:e2:f7:45:7d:1c:11:0a:ff: 96:63:7c:5a:a6:5a:83:00:ff:c7:fd:dd:11:a0:b5:f9:4a:72: 20:83:e2:dc:f4:50:9c:f9:16:1e:e7:5e:16:f0:ec:48:cb:3a: 17:13:63:de:b3:9c:0e:8d:33:6d:93:30:ac:be:1b:6f:63:0e: d5:5e:cd:b5:dd:f7:26:02:c8:f4:a7:6d:29:7e:2b:aa:0b:a6: ed:64:36:12:6a:89:b0:3b:1d:cb:6f:82:f2:e5:6a:53:f7:b0: 41:f0:35:0c:1a:21:59:40:3b:35:78:db:35:82:a3:7d:41:92: 80:1f:6c:17:53:c4:57:a2:d1:a0:14:1d:55:3f:cb:cf:b2:55: 97:ac:9c:cc:ef:54:17:58:4e:90:a7:c6:5a:95:bc:f4:0d:af: a6:3a:de:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7aqZzU5Et2kZ8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MDMyYjkxNGItNTM4YS00MmI5LTg1OTktNDJiZGVjMzUzOTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfKHnwcTDdaH9MVjtpPPn5PVgatFgqCEGjhJ liIszFXsoOeONjPRSaTDfLKf3g08V6Y/bpj7tmR5W5uU2FbBAnJOyKvEVP3ir50y UHTFIm2fGS2XJGb8g8grpLvIQLoOJXtMNAD8vbRLiv30zP1eGOSpjLWo0IbAzZe6 uvGILD45vBoc93nyLh+W/QAhHa5Vjte/wNO4b3kQfkvUYWRvxh7n4Q6mBknnXptV t6SWrVYHNMLvBTvFxkVzMlhtIwRnG4rNQydybfzQhmFDiaj5KWjilvXvFfWhZyym iIOkksido1C+2smEM3f2lrid/nWCQ/E8WgGSxLfYyKWAJekEWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdfUq7gyYxtoM1MKPhyUMNVRdERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjFkMzE0YzYtNTVhNi0z ZWUxLTlhNTgtMWRmYzQ2NjMxZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa6b9ZtKV3rKPMC62u0fjy6YZuwZhMZdQfHp6ntYFeayMoHWFb0AQ/u OE0KXtUcQnNDRtnfvnDW+bMzJdtGV37/PKmBmfMoOmKtw48A+iNmZt7WsUaoeJS3 IaDgG9DXeaNn17Ti90V9HBEK/5ZjfFqmWoMA/8f93RGgtflKciCD4tz0UJz5Fh7n Xhbw7EjLOhcTY96znA6NM22TMKy+G29jDtVezbXd9yYCyPSnbSl+K6oLpu1kNhJq ibA7HctvgvLlalP3sEHwNQwaIVlAOzV42zWCo31BkoAfbBdTxFei0aAUHVU/y8+y VZesnMzvVBdYTpCnxlqVvPQNr6Y63pg= -----END CERTIFICATE-----Generated at Tue Oct 27 09:24:25 2026 by rpki-client