$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/288bba28-ba9e-3364-8e5f-c39081b71b4e.roa File: 288bba28-ba9e-3364-8e5f-c39081b71b4e.roa (raw, json) Hash identifier: JzL7WshAGd++NKI6RisUUuOn5bXzal73ca/zz4tNzT4= Subject key identifier: F8:9B:33:2C:AE:BF:77:3A:7D:20:F4:62:D5:E9:6C:6B:0D:9D:6F:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F5E62E2CC607CF54720590780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/288bba28-ba9e-3364-8e5f-c39081b71b4e.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 20940 IP address blocks: 184.25.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e2:cc:60:7c:f5:47:20:59:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=28918c40-2980-4242-90f2-64d6f9bd5e6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:e0:ee:52:a0:22:8e:bb:4f:e1:bb:97:eb: 38:1f:e7:0f:19:1f:e9:ad:da:0b:88:4c:b2:f6:79: fd:87:d4:4c:ef:48:b0:d2:c0:5c:c2:be:8d:6d:4a: 2d:60:36:79:73:70:01:b5:33:23:a0:15:c0:18:0d: 08:05:85:51:cf:0e:97:40:f3:96:00:ce:cb:ec:eb: ef:0e:25:45:f0:f3:d0:99:8a:01:ab:33:16:f0:d4: 8b:05:d3:4c:ae:00:d7:e8:51:e6:83:20:a6:43:26: fe:54:33:d2:48:f1:e0:28:51:70:0f:87:d8:e1:67: 1f:c0:cd:67:9c:00:b2:54:43:c6:d1:5c:85:48:21: 6e:89:7c:1f:ab:76:9e:29:3d:90:bd:8d:f2:ef:d2: db:55:05:10:e3:fd:b7:df:10:cb:43:c5:42:b0:d5: b6:33:22:ed:44:e8:97:6b:79:85:2a:dc:3f:10:f4: 00:32:70:8c:5c:4c:5a:1f:05:c2:d4:5a:d5:18:dc: e7:a2:9c:66:43:f0:f0:75:ec:45:df:b0:3b:d4:d8: 99:7f:4b:8f:d7:7c:02:3e:40:63:c8:34:64:fa:b2: 79:16:98:91:df:9b:07:68:8b:7f:78:ff:1d:af:98: 04:4c:2a:5c:52:c1:18:e7:04:c3:cd:50:6b:68:aa: 40:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9B:33:2C:AE:BF:77:3A:7D:20:F4:62:D5:E9:6C:6B:0D:9D:6F:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/288bba28-ba9e-3364-8e5f-c39081b71b4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.25.252.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:85:e4:57:6d:7c:7d:e4:eb:08:6d:6f:8b:dd:c8:85:cc:a9: 4c:10:34:55:18:3e:4a:ba:65:6a:d3:9a:67:1d:30:fe:50:43: 7e:a7:37:69:e0:01:e4:90:01:d3:af:be:45:bc:c9:41:31:f7: 5c:41:0d:ea:75:9e:87:c4:ae:a0:24:ba:b3:c5:52:e4:94:e0: b7:37:aa:0d:71:42:44:5d:66:cf:50:fb:5c:01:a6:bf:46:37: 6b:99:4a:a8:58:98:3d:12:cd:38:5e:26:6f:aa:3b:a7:d8:a5: 60:7e:66:5c:73:b9:db:f4:a8:91:da:9b:f5:af:73:85:77:38: b4:65:4f:28:67:f1:9f:d1:99:65:55:32:28:5d:36:ca:d1:96: 1e:81:5c:40:5e:3d:aa:c7:f3:6d:91:72:2a:b8:f2:e1:bb:de: b3:31:12:bb:b7:7b:af:84:66:33:f9:d4:26:14:db:45:9b:8d: 34:bf:97:f8:f7:c7:ba:ef:05:fc:8b:3a:ac:61:4e:8f:2e:5e: 55:14:de:2e:04:4a:11:fe:d4:72:e1:24:5f:5b:f9:a2:2a:8c: 5c:60:d1:44:07:92:af:da:78:90:47:7d:31:2a:1d:e3:2a:1c: 54:97:b3:00:07:27:f1:04:21:f0:8e:27:42:e5:6d:4a:45:d5: d3:62:bc:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuLMYHz1RyBZB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk Mjg5MThjNDAtMjk4MC00MjQyLTkwZjItNjRkNmY5YmQ1ZTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1Lg7lKgIo67T+G7l+s4H+cPGR/prdoLiEyy 9nn9h9RM70iw0sBcwr6NbUotYDZ5c3ABtTMjoBXAGA0IBYVRzw6XQPOWAM7L7Ovv DiVF8PPQmYoBqzMW8NSLBdNMrgDX6FHmgyCmQyb+VDPSSPHgKFFwD4fY4WcfwM1n nACyVEPG0VyFSCFuiXwfq3aeKT2QvY3y79LbVQUQ4/233xDLQ8VCsNW2MyLtROiX a3mFKtw/EPQAMnCMXExaHwXC1FrVGNznopxmQ/DwdexF37A71NiZf0uP13wCPkBj yDRk+rJ5FpiR35sHaIt/eP8dr5gETCpcUsEY5wTDzVBraKpAoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPibMyyuv3c6fSD0YtXpbGsNnW8XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg4YmJhMjgtYmE5ZS0z MzY0LThlNWYtYzM5MDgxYjcxYjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBn8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyF5FdtfH3k6whtb4vdyIXMqUwQNFUYPkq6ZWrTmmcdMP5QQ36nN2ng AeSQAdOvvkW8yUEx91xBDep1nofErqAkurPFUuSU4Lc3qg1xQkRdZs9Q+1wBpr9G N2uZSqhYmD0SzTheJm+qO6fYpWB+Zlxzudv0qJHam/Wvc4V3OLRlTyhn8Z/RmWVV MihdNsrRlh6BXEBeParH822Rciq48uG73rMxEru3e6+EZjP51CYU20WbjTS/l/j3 x7rvBfyLOqxhTo8uXlUU3i4EShH+1HLhJF9b+aIqjFxg0UQHkq/aeJBHfTEqHeMq HFSXswAHJ/EEIfCOJ0LlbUpF1dNivFM= -----END CERTIFICATE-----Generated at Tue Oct 20 19:42:15 2026 by rpki-client