$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fe36e9-0a64-327a-8187-4d203c9cdf69.roa File: 29fe36e9-0a64-327a-8187-4d203c9cdf69.roa (raw, json) Hash identifier: 0Q41yrYJ8e9DK9QAbTlVJQXSkYDPvDSBJVwbe62watI= Subject key identifier: B8:75:78:C6:06:5A:69:13:93:39:24:D6:00:7B:19:F6:B9:05:CE:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F71EDA9385CCC1E10A6E7DC80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fe36e9-0a64-327a-8187-4d203c9cdf69.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.226.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a9:38:5c:cc:1e:10:a6:e7:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=dc327167-c920-4149-8964-ade3b2662b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6a:40:4b:8d:e4:b0:bc:2b:59:eb:51:c4:30: 67:e4:86:49:06:45:09:0a:e7:d1:f4:aa:bd:b8:a8: a9:4e:2e:0c:37:d0:3c:c6:be:c0:c3:f7:b3:44:82: ed:5b:31:ab:44:87:ee:e1:24:36:58:d5:c3:64:62: c9:5f:af:ed:1e:01:86:e0:2c:ec:d5:06:8c:26:85: 5e:88:d1:c6:03:6f:b9:4a:b0:e9:89:a5:2d:9f:49: 9b:88:16:a1:ed:35:f9:f4:b6:69:21:34:36:66:f9: ad:4e:48:3f:14:d2:04:d3:d0:db:ce:6d:33:49:af: 76:0d:b1:61:e8:04:d4:75:6d:ca:15:45:52:ce:f6: 96:35:08:9a:3a:4b:53:54:14:b2:d0:38:12:80:69: 28:56:8a:23:30:ce:ff:b2:e7:d8:4c:c1:88:f1:e2: e7:e3:2d:9d:6c:80:9a:74:c3:89:f4:59:39:8f:c8: d4:a0:07:65:1a:78:2e:f8:a2:96:eb:ec:ed:55:ca: df:ad:34:df:d7:31:b9:73:7e:a8:11:74:5c:ec:41: c3:bb:c6:3d:c3:f1:03:09:bd:77:5f:e8:8c:f3:3b: 78:b1:78:5b:98:24:f7:c1:f1:cb:09:02:1a:93:0e: f1:62:97:d8:91:18:20:47:57:09:65:e8:52:5c:55: 32:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:75:78:C6:06:5A:69:13:93:39:24:D6:00:7B:19:F6:B9:05:CE:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/29fe36e9-0a64-327a-8187-4d203c9cdf69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ea:e3:af:76:be:04:05:15:31:2c:d3:34:ec:44:36:27:2e: 35:07:5a:cd:cb:55:99:31:d0:70:f3:0a:af:ec:ad:1d:e0:ad: 05:a1:1a:4e:3f:90:52:da:22:e1:9f:2c:ae:f6:93:72:9a:d8: af:0f:ad:f1:9d:32:88:0f:09:5c:65:86:21:ac:23:09:eb:e5: ec:17:a9:d9:45:a0:ed:1b:5b:66:7c:b1:ab:43:36:b5:31:6c: 17:37:98:6f:16:f1:8f:b6:73:21:9f:25:77:73:4f:3f:e4:09: 70:f6:41:4d:d7:e2:44:55:7c:99:55:fa:d4:73:95:8a:66:10: aa:17:8b:9c:38:6b:17:a4:b1:3e:e6:ef:64:6c:de:d3:59:2e: 2e:cc:ae:85:04:b5:77:39:c6:9d:e5:73:d3:90:45:e3:cb:1f: 78:e2:46:f4:ad:0d:97:4f:76:2b:a8:35:19:39:d0:48:53:a1: ec:3d:98:5d:88:f3:69:57:a9:b0:e5:54:85:98:5b:de:0c:a5: 6b:f9:4c:a3:56:4e:33:9e:a5:b0:87:43:df:f2:a7:b6:26:71: 8f:3b:6c:1a:d5:6f:f2:52:bf:7b:9e:c5:4d:64:20:85:d6:8d: 97:ec:45:c5:69:fb:74:b9:58:e5:c6:8c:76:08:1c:80:84:1d: 67:f7:04:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7ak4XMweEKbn3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ZGMzMjcxNjctYzkyMC00MTQ5LTg5NjQtYWRlM2IyNjYyYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWpAS43ksLwrWetRxDBn5IZJBkUJCufR9Kq9 uKipTi4MN9A8xr7Aw/ezRILtWzGrRIfu4SQ2WNXDZGLJX6/tHgGG4Czs1QaMJoVe iNHGA2+5SrDpiaUtn0mbiBah7TX59LZpITQ2ZvmtTkg/FNIE09Dbzm0zSa92DbFh 6ATUdW3KFUVSzvaWNQiaOktTVBSy0DgSgGkoVoojMM7/sufYTMGI8eLn4y2dbICa dMOJ9Fk5j8jUoAdlGngu+KKW6+ztVcrfrTTf1zG5c36oEXRc7EHDu8Y9w/EDCb13 X+iM8zt4sXhbmCT3wfHLCQIakw7xYpfYkRggR1cJZehSXFUy+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLh1eMYGWmkTkzkk1gB7Gfa5Bc4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjlmZTM2ZTktMGE2NC0z MjdhLTgxODctNGQyMDNjOWNkZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATq4692vgQFFTEs0zTsRDYnLjUHWs3LVZkx0HDzCq/srR3grQWhGk4/ kFLaIuGfLK72k3Ka2K8PrfGdMogPCVxlhiGsIwnr5ewXqdlFoO0bW2Z8satDNrUx bBc3mG8W8Y+2cyGfJXdzTz/kCXD2QU3X4kRVfJlV+tRzlYpmEKoXi5w4axeksT7m 72Rs3tNZLi7MroUEtXc5xp3lc9OQRePLH3jiRvStDZdPdiuoNRk50EhToew9mF2I 82lXqbDlVIWYW94MpWv5TKNWTjOepbCHQ9/yp7YmcY87bBrVb/JSv3uexU1kIIXW jZfsRcVp+3S5WOXGjHYIHICEHWf3BCo= -----END CERTIFICATE-----Generated at Sun Oct 25 20:59:39 2026 by rpki-client