$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25bfa81f-d573-31ef-b576-3e1fa72c8db7.roa File: 25bfa81f-d573-31ef-b576-3e1fa72c8db7.roa (raw, json) Hash identifier: 5siKCT+Pz61LKsHpbLmRRh+JSPdo+haqTowIRhcqc8U= Subject key identifier: 6B:4A:C7:2E:7F:E8:88:FB:8C:B9:BB:24:14:6A:8E:A0:5A:BB:F7:45 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7E7DD55D345910E5A0F3B900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25bfa81f-d573-31ef-b576-3e1fa72c8db7.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 36183 IP address blocks: 172.224.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:d5:5d:34:59:10:e5:a0:f3:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=44054989-8854-4128-ada7-a9ba9499f02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:26:fd:80:1c:d7:f8:5c:4b:9e:52:ae:4a:4b: 19:03:4a:ee:b8:8d:8b:ee:aa:fc:70:a8:86:fd:55: ad:ea:56:6c:21:52:c2:56:54:b1:fa:9c:f7:d2:46: 2b:9f:b9:e5:52:9a:bd:d0:84:03:2e:b8:78:8e:15: 50:18:7c:7e:43:c8:68:c7:38:22:30:d9:91:9b:73: ed:fa:e6:86:3f:ec:6f:de:17:d3:9f:5a:21:7c:da: 27:6c:18:a5:10:61:97:f0:a2:06:78:a0:10:3b:bd: 2b:01:3a:e8:cc:dd:7e:58:94:0d:68:d8:d4:18:e4: 03:4d:87:49:98:ae:62:04:bd:c8:47:4d:1b:0f:5b: 87:cb:82:36:b0:1c:fb:3f:a1:c4:b2:79:e3:e4:94: 04:45:33:a8:5a:e3:89:31:db:07:7e:7e:e7:a2:3d: 2b:2d:8e:48:3d:2d:c6:c2:65:e7:47:42:5a:cf:09: cc:1c:57:a1:f8:4c:de:d5:2a:da:5e:66:57:be:10: da:0f:d4:dc:c5:e1:b6:ca:2c:36:3c:4e:30:91:d6: df:78:d3:0e:7e:df:2e:21:7c:75:ab:dc:43:3c:a0: 4e:32:f0:ac:1e:ed:84:9b:2d:50:f7:c5:1c:45:f8: f8:1c:49:98:37:23:83:ed:d3:a0:aa:7a:d6:fd:e9: 39:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4A:C7:2E:7F:E8:88:FB:8C:B9:BB:24:14:6A:8E:A0:5A:BB:F7:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25bfa81f-d573-31ef-b576-3e1fa72c8db7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:06:7d:e9:ed:c1:eb:5d:26:0e:79:61:77:6f:3d:06:2d:62: 96:60:63:f0:26:5e:b8:34:40:51:e2:b1:0a:53:84:f8:5f:3c: a8:ca:aa:d3:ef:44:3c:d0:4d:58:9f:3a:7b:9e:93:1c:99:f9: 8d:14:54:1f:b4:ce:99:f4:ad:99:92:00:9f:e0:2e:08:57:b4: b9:0f:df:99:76:27:21:9a:f3:41:cc:a8:d0:11:0f:05:72:45: 60:7c:86:81:95:f2:a9:cf:36:d9:e1:1d:be:b1:44:c5:a4:ac: fa:75:7c:ac:01:51:36:d5:d8:b4:fb:73:e2:1e:8d:d8:7f:37: 88:ee:0c:81:36:28:bc:22:f4:df:12:6a:a8:8a:64:ab:40:36: 1b:53:ba:d3:30:ec:72:dc:ad:90:36:d9:41:05:74:65:07:3d: 98:68:4a:b0:f5:04:83:23:5c:27:be:c9:9c:ed:9b:97:b4:f0: 7c:8f:01:c6:74:44:91:95:49:40:b6:1e:cd:fd:ae:a1:e5:5d: d4:2b:6b:67:53:7a:8f:a0:fc:65:f3:8b:40:16:2c:1e:b4:6f: 80:54:ea:36:63:8a:86:43:b4:b6:e5:45:73:4e:16:86:5a:7d: ce:22:1f:14:b3:89:89:ee:ce:9d:4f:a1:c7:0e:a4:06:06:be: f5:42:78:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fdVdNFkQ5aDzuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NDQwNTQ5ODktODg1NC00MTI4LWFkYTctYTliYTk0OTlmMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCb9gBzX+FxLnlKuSksZA0ruuI2L7qr8cKiG /VWt6lZsIVLCVlSx+pz30kYrn7nlUpq90IQDLrh4jhVQGHx+Q8hoxzgiMNmRm3Pt +uaGP+xv3hfTn1ohfNonbBilEGGX8KIGeKAQO70rATrozN1+WJQNaNjUGOQDTYdJ mK5iBL3IR00bD1uHy4I2sBz7P6HEsnnj5JQERTOoWuOJMdsHfn7noj0rLY5IPS3G wmXnR0JazwnMHFeh+Eze1SraXmZXvhDaD9TcxeG2yiw2PE4wkdbfeNMOft8uIXx1 q9xDPKBOMvCsHu2Emy1Q98UcRfj4HEmYNyOD7dOgqnrW/ek56QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtKxy5/6Ij7jLm7JBRqjqBau/dFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjViZmE4MWYtZDU3My0z MWVmLWI1NzYtM2UxZmE3MmM4ZGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIGfentwetdJg55YXdvPQYtYpZgY/AmXrg0QFHisQpThPhfPKjKqtPv RDzQTVifOnuekxyZ+Y0UVB+0zpn0rZmSAJ/gLghXtLkP35l2JyGa80HMqNARDwVy RWB8hoGV8qnPNtnhHb6xRMWkrPp1fKwBUTbV2LT7c+Iejdh/N4juDIE2KLwi9N8S aqiKZKtANhtTutMw7HLcrZA22UEFdGUHPZhoSrD1BIMjXCe+yZztm5e08HyPAcZ0 RJGVSUC2Hs39rqHlXdQra2dTeo+g/GXzi0AWLB60b4BU6jZjioZDtLblRXNOFoZa fc4iHxSziYnuzp1PoccOpAYGvvVCeLk= -----END CERTIFICATE-----Generated at Thu Oct 22 12:00:20 2026 by rpki-client