$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c8ddc5f-4326-3742-aa88-a5ad314f298f.roa File: 2c8ddc5f-4326-3742-aa88-a5ad314f298f.roa (raw, json) Hash identifier: +Bv5IaXwbZ7jozDB9Vq5MCpF3JG1Bt7O+CTcidgNWfM= Subject key identifier: A2:73:8C:FF:E7:3E:71:F6:ED:6C:80:CC:95:68:81:DB:A3:39:0E:4E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F63F82573C26E44A757B60080 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c8ddc5f-4326-3742-aa88-a5ad314f298f.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.225.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:25:73:c2:6e:44:a7:57:b6:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=7690c18b-1cd9-4835-91e2-e9011b8371b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:4b:db:0a:32:6b:c8:88:5e:1b:b5:a5:65:43: 79:36:20:f8:46:f8:4b:55:70:4a:88:24:b6:40:66: aa:61:16:ac:89:d7:57:5e:07:29:5a:e8:6d:b1:85: 27:aa:c1:c4:71:d2:79:c6:03:72:78:1e:fc:31:57: 2f:0a:37:e3:3c:c2:f1:68:98:42:28:fa:3f:9c:a8: 77:7e:12:60:48:5d:86:88:fd:96:8f:64:e7:59:ce: 16:18:2d:59:b5:44:63:00:75:2d:87:87:02:b4:24: e5:ef:99:92:07:3c:81:d1:69:94:da:25:7e:2d:04: c1:02:8e:13:b6:99:81:43:df:55:43:d1:72:b0:40: 31:1c:fc:4f:48:30:38:58:68:bb:5c:92:a3:7e:2a: 39:85:4a:38:6a:7e:9d:0c:d0:ab:3f:2c:1f:fc:62: b5:c3:58:10:ff:4d:2a:a2:18:2c:36:a4:83:e5:62: 0e:77:f9:f0:24:53:d1:0f:7e:7a:b7:c8:86:ba:45: be:76:8b:17:c3:2b:61:a0:99:13:37:5c:8a:3c:01: 05:4e:40:21:4c:a3:0f:5a:28:fa:91:48:48:49:33: 3f:90:51:b5:df:5b:9f:cf:5c:91:66:58:ad:b2:f5: 5e:19:7a:17:91:70:f0:9e:c6:61:49:3e:f2:78:bc: ee:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:73:8C:FF:E7:3E:71:F6:ED:6C:80:CC:95:68:81:DB:A3:39:0E:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2c8ddc5f-4326-3742-aa88-a5ad314f298f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b9:93:4f:66:ef:a6:3b:43:e4:09:c0:1d:98:08:1b:08:7b: 2d:05:32:6d:54:a0:dc:a3:a5:e1:b6:96:b3:87:55:bb:49:40: c6:ab:c1:71:f0:16:2a:c6:48:e9:92:ea:b1:f8:b9:d1:74:1c: 6c:2d:16:96:31:8a:5d:36:b4:18:41:c6:75:40:e2:57:48:1d: 31:e9:12:4a:b4:a7:27:d2:80:89:14:31:66:23:b5:3c:a9:e0: c0:36:91:9f:c6:d8:6a:68:4d:d0:c5:85:b2:ae:74:dc:30:f6: d8:7c:a9:ac:5c:eb:72:24:fe:80:63:d2:6c:f2:5a:73:a7:ca: 75:7c:8d:e0:e4:50:d0:a9:df:5b:cc:21:50:aa:60:73:35:c1: 86:30:8b:c5:c7:d1:de:0e:3a:dd:60:9a:fe:12:b4:d9:b0:00: 5b:b9:28:e8:f4:b9:f2:bf:af:fb:09:97:4c:64:a7:49:3f:81: b9:79:90:91:eb:80:ea:5e:ad:26:ed:2a:1b:97:66:61:e1:20: e0:a5:a0:6d:03:11:91:d9:af:d5:45:45:22:ed:7d:cf:cc:e1: b0:74:71:c2:38:f0:61:c7:8d:fb:26:52:87:b0:5f:88:ff:38: 63:ce:2b:9b:05:d5:73:44:9d:a7:a2:bb:65:77:fa:e2:cc:e9: fa:8a:da:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+CVzwm5Ep1e2AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk NzY5MGMxOGItMWNkOS00ODM1LTkxZTItZTkwMTFiODM3MWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UvbCjJryIheG7WlZUN5NiD4RvhLVXBKiCS2 QGaqYRasiddXXgcpWuhtsYUnqsHEcdJ5xgNyeB78MVcvCjfjPMLxaJhCKPo/nKh3 fhJgSF2GiP2Wj2TnWc4WGC1ZtURjAHUth4cCtCTl75mSBzyB0WmU2iV+LQTBAo4T tpmBQ99VQ9FysEAxHPxPSDA4WGi7XJKjfio5hUo4an6dDNCrPywf/GK1w1gQ/00q ohgsNqSD5WIOd/nwJFPRD356t8iGukW+dosXwythoJkTN1yKPAEFTkAhTKMPWij6 kUhISTM/kFG131ufz1yRZlitsvVeGXoXkXDwnsZhST7yeLzuswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJzjP/nPnH27WyAzJVogdujOQ5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmM4ZGRjNWYtNDMyNi0z NzQyLWFhODgtYTVhZDMxNGYyOThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACe5k09m76Y7Q+QJwB2YCBsIey0FMm1UoNyjpeG2lrOHVbtJQMarwXHw FirGSOmS6rH4udF0HGwtFpYxil02tBhBxnVA4ldIHTHpEkq0pyfSgIkUMWYjtTyp 4MA2kZ/G2GpoTdDFhbKudNww9th8qaxc63Ik/oBj0mzyWnOnynV8jeDkUNCp31vM IVCqYHM1wYYwi8XH0d4OOt1gmv4StNmwAFu5KOj0ufK/r/sJl0xkp0k/gbl5kJHr gOperSbtKhuXZmHhIOCloG0DEZHZr9VFRSLtfc/M4bB0ccI48GHHjfsmUoewX4j/ OGPOK5sF1XNEnaeiu2V3+uLM6fqK2sY= -----END CERTIFICATE-----Generated at Wed Oct 21 17:06:50 2026 by rpki-client