$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/232218fb-52ee-3478-9615-5d042b01e4d7.roa File: 232218fb-52ee-3478-9615-5d042b01e4d7.roa (raw, json) Hash identifier: ivihAtGpgPUIVGEOebROsnhSxYrcL5aHFcJ5Ct24+CM= Subject key identifier: CE:B9:80:72:FC:F6:3C:E9:EE:E6:1A:CC:CC:EF:A8:B2:CF:30:3F:B4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F92087143C8EE1DF3B7A8EBC0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/232218fb-52ee-3478-9615-5d042b01e4d7.roa Signing time: Wed 21 Oct 2026 01:00:12 +0000 ROA not before: Wed 21 Oct 2026 01:00:12 +0000 ROA not after: Tue 19 Jan 2027 02:00:12 +0000 asID: 63949 IP address blocks: 172.235.126.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:92:08:71:43:c8:ee:1d:f3:b7:a8:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:12 2026 GMT Not After : Jan 19 02:00:12 2027 GMT Subject: CN=76985e60-fdd7-442c-be65-63a02efdb068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:76:cd:e0:d6:49:5d:e1:84:da:2c:e3:48: 53:b1:ca:20:a2:5c:0c:60:48:7b:9e:24:ac:11:d8: c8:cb:d8:9e:fc:bb:47:69:4f:f9:84:56:ca:54:d2: 02:9a:78:6e:b1:05:62:ce:f0:e2:d7:83:40:30:aa: ac:f6:35:ba:7a:37:b7:91:19:ca:1c:75:af:95:b7: 6c:9f:e6:4c:87:cc:c9:68:d2:49:f2:b0:3e:bb:29: b1:e7:97:5e:64:e3:8a:9c:90:7e:23:8c:5f:58:cb: ac:11:18:f3:83:c5:b1:de:90:83:9a:a3:7a:a2:27: c4:a6:ff:8e:f7:d2:cf:b3:df:67:39:f7:90:fc:88: d7:1f:f5:25:a0:92:5e:0d:6a:de:53:ce:49:d3:18: 70:74:87:57:d6:5e:1c:0b:3a:97:08:e4:00:fc:46: 50:da:f2:83:04:04:1a:f1:4d:07:c8:8b:7a:0a:51: bb:5d:0b:32:db:aa:e6:a3:71:6f:e0:f2:51:6f:d6: 6f:0b:03:af:ec:43:ab:d4:63:f2:88:70:9a:7c:72: ea:d4:34:a9:40:f3:fa:0b:fc:fc:a8:f3:e0:f2:21: 99:a7:77:ca:4b:1c:5e:59:00:87:65:62:35:7f:0d: 7d:06:54:6a:14:81:46:5c:97:27:a3:ed:83:c7:ba: a8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:B9:80:72:FC:F6:3C:E9:EE:E6:1A:CC:CC:EF:A8:B2:CF:30:3F:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/232218fb-52ee-3478-9615-5d042b01e4d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.126.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c2:d2:4a:35:2c:f4:e8:d8:e3:fb:58:5a:8c:8c:ef:6c:13: 36:e5:f5:ee:c7:30:4f:f6:f5:d2:95:38:d6:83:ad:61:c3:c8: 3f:c1:5e:06:00:34:d4:86:00:6c:10:cd:59:7b:e4:4b:8e:b5: bd:a8:b8:18:0c:78:d5:37:20:e5:4e:d4:e8:d1:fc:39:32:da: d6:25:35:de:c2:2e:ad:cf:00:dc:9c:38:9f:6b:f1:f6:98:f7: 5e:9a:60:9f:a5:6a:7f:2b:fa:9c:da:c9:16:92:75:0a:a4:1f: b3:b2:ad:2a:0c:f3:35:3a:01:64:86:ad:8d:cd:4b:2d:d9:9d: 70:37:8c:4f:b5:9f:d4:42:6b:50:ad:56:63:8c:c5:d8:e1:6a: 87:d5:c3:7d:c1:92:39:6c:c7:8a:6a:06:9c:65:f5:3e:6f:02: 00:d3:bf:18:70:32:12:b8:c4:24:e4:7f:0a:09:78:ed:a6:2a: b4:f6:b2:63:f8:eb:fb:68:20:a2:65:04:5b:ea:29:9a:55:92: 15:73:8f:6a:db:bd:75:31:bf:20:16:05:55:c8:0c:24:83:97: 4d:ae:c1:4f:32:9d:22:f4:b7:7d:af:37:77:bd:25:3d:fd:32: 91:9d:10:a9:e6:16:ee:70:bf:75:ad:a6:d2:d5:b1:90:2a:66: 27:62:da:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+SCHFDyO4d87eo68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMTAxMDAxMloXDTI3MDExOTAyMDAxMlowLzEtMCsGA1UEAxMk NzY5ODVlNjAtZmRkNy00NDJjLWJlNjUtNjNhMDJlZmRiMDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha12zeDWSV3hhNos40hTscogolwMYEh7niSs EdjIy9ie/LtHaU/5hFbKVNICmnhusQVizvDi14NAMKqs9jW6eje3kRnKHHWvlbds n+ZMh8zJaNJJ8rA+uymx55deZOOKnJB+I4xfWMusERjzg8Wx3pCDmqN6oifEpv+O 99LPs99nOfeQ/IjXH/UloJJeDWreU85J0xhwdIdX1l4cCzqXCOQA/EZQ2vKDBAQa 8U0HyIt6ClG7XQsy26rmo3Fv4PJRb9ZvCwOv7EOr1GPyiHCafHLq1DSpQPP6C/z8 qPPg8iGZp3fKSxxeWQCHZWI1fw19BlRqFIFGXJcno+2Dx7qoIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM65gHL89jzp7uYazMzvqLLPMD+0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjMyMjE4ZmItNTJlZS0z NDc4LTk2MTUtNWQwNDJiMDFlNGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOt+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/C0ko1LPTo2OP7WFqMjO9sEzbl9e7HME/29dKVONaDrWHDyD/BXgYA NNSGAGwQzVl75EuOtb2ouBgMeNU3IOVO1OjR/Dky2tYlNd7CLq3PANycOJ9r8faY 916aYJ+lan8r+pzayRaSdQqkH7OyrSoM8zU6AWSGrY3NSy3ZnXA3jE+1n9RCa1Ct VmOMxdjhaofVw33Bkjlsx4pqBpxl9T5vAgDTvxhwMhK4xCTkfwoJeO2mKrT2smP4 6/toIKJlBFvqKZpVkhVzj2rbvXUxvyAWBVXIDCSDl02uwU8ynSL0t32vN3e9JT39 MpGdEKnmFu5wv3WtptLVsZAqZidi2lE= -----END CERTIFICATE-----Generated at Sat Oct 24 14:17:37 2026 by rpki-client