$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34ffdcf7-cae7-3ca5-8b8b-58eaac5ea16f.roa File: 34ffdcf7-cae7-3ca5-8b8b-58eaac5ea16f.roa (raw, json) Hash identifier: /1bXUDtBnses/+ZvSRB4icKorLxzQGf+NpWFWtaaunw= Subject key identifier: B4:B7:2C:D5:38:59:3F:29:1E:D9:58:58:69:A7:AB:22:D8:C4:C3:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F71EDAF4F698F1AC7A9950D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34ffdcf7-cae7-3ca5-8b8b-58eaac5ea16f.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.225.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:af:4f:69:8f:1a:c7:a9:95:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=867d5f54-ea6b-4e5d-8c34-8f9b9989c391 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:17:08:10:84:c7:f2:5b:96:88:0f:3f:cc:eb: aa:51:19:10:2d:29:83:99:de:94:65:e9:29:22:00: ec:09:58:a1:01:c2:bf:59:d6:d2:47:3c:8d:a1:04: d9:51:99:86:b8:29:e1:70:c4:3c:e7:11:aa:5d:bb: 87:bc:f8:a1:3a:1b:71:67:b4:9d:bd:7b:00:6a:4a: 6b:9b:a1:a9:8a:9e:df:be:51:45:e6:43:94:5c:5b: 45:9d:8c:42:df:53:f5:07:28:9c:46:b2:ed:aa:7c: b7:d4:1d:09:46:9e:21:6d:1c:e5:f2:c1:7b:21:9b: d2:0c:ca:bb:9a:76:e2:1b:69:b2:54:19:18:58:f2: 02:ab:7d:3c:6d:40:4d:5c:de:a8:f1:96:20:87:69: b1:51:1b:52:50:e6:c4:54:47:ec:ea:1d:3a:15:54: 57:74:fa:48:bf:6a:81:85:e0:a3:b9:d8:5b:da:3a: 5f:1c:08:52:70:ec:c0:e9:78:95:93:43:3d:34:f1: 24:ae:9a:6e:e5:c6:8b:32:86:0e:6a:d9:a5:34:9e: 2a:b9:b4:a2:e8:06:ca:5d:0e:72:7f:1f:c3:3a:f0: 4a:98:1a:1d:f3:83:25:3b:c6:16:aa:d0:e8:93:19: 52:b6:1f:df:f1:55:3f:a6:c3:3a:39:43:46:9a:95: 0a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B7:2C:D5:38:59:3F:29:1E:D9:58:58:69:A7:AB:22:D8:C4:C3:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/34ffdcf7-cae7-3ca5-8b8b-58eaac5ea16f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:7b:09:1f:dc:50:6f:bf:f8:67:0e:05:57:5d:96:80:b5:21: 19:e4:d8:db:db:3d:9d:b9:2b:91:d7:08:ed:8d:11:8c:ff:f1: fe:c4:4f:15:a6:25:18:9c:6f:2c:7d:a5:46:06:6c:30:2d:6a: 27:05:5b:fc:00:f6:c6:2a:53:d7:f0:db:39:3c:fa:1b:b2:53: f3:f1:17:5c:94:35:ee:39:b2:c8:5b:0e:31:33:8a:9b:26:d6: 73:83:a1:43:7c:47:55:17:ea:a3:92:78:f9:b2:2e:55:89:53: 3e:1e:ec:e1:82:db:b1:4e:eb:cd:d5:25:ef:c3:cb:a1:02:6c: 84:93:3f:c2:b6:58:37:75:f0:73:7a:9a:18:93:11:71:4c:9b: 05:e5:e2:d4:55:46:50:81:51:b4:50:e8:4f:2f:3f:f7:b4:58: 51:17:70:e9:e3:ea:23:4c:ab:db:4a:51:d4:03:e5:8b:67:b3: 22:dd:0e:61:f3:64:ff:55:2e:98:5d:96:e5:43:af:81:3e:31: 6a:fb:6e:c1:d1:0b:03:8e:1a:60:d5:64:b5:4a:cc:a1:aa:f1: 5c:11:46:91:9e:72:fc:ab:26:70:a5:9c:cb:a5:30:72:41:64: 85:2e:3f:72:8d:10:95:90:37:05:a9:57:cd:5e:9a:c7:76:4d: 1e:df:2e:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7a9PaY8ax6mVDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ODY3ZDVmNTQtZWE2Yi00ZTVkLThjMzQtOGY5Yjk5ODljMzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBcIEITH8luWiA8/zOuqURkQLSmDmd6UZekp IgDsCVihAcK/WdbSRzyNoQTZUZmGuCnhcMQ85xGqXbuHvPihOhtxZ7SdvXsAakpr m6Gpip7fvlFF5kOUXFtFnYxC31P1ByicRrLtqny31B0JRp4hbRzl8sF7IZvSDMq7 mnbiG2myVBkYWPICq308bUBNXN6o8ZYgh2mxURtSUObEVEfs6h06FVRXdPpIv2qB heCjudhb2jpfHAhScOzA6XiVk0M9NPEkrppu5caLMoYOatmlNJ4qubSi6AbKXQ5y fx/DOvBKmBod84MlO8YWqtDokxlSth/f8VU/psM6OUNGmpUKZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLS3LNU4WT8pHtlYWGmnqyLYxMMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzRmZmRjZjctY2FlNy0z Y2E1LThiOGItNThlYWFjNWVhMTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH57CR/cUG+/+GcOBVddloC1IRnk2NvbPZ25K5HXCO2NEYz/8f7ETxWm JRicbyx9pUYGbDAtaicFW/wA9sYqU9fw2zk8+huyU/PxF1yUNe45sshbDjEzipsm 1nODoUN8R1UX6qOSePmyLlWJUz4e7OGC27FO683VJe/Dy6ECbISTP8K2WDd18HN6 mhiTEXFMmwXl4tRVRlCBUbRQ6E8vP/e0WFEXcOnj6iNMq9tKUdQD5YtnsyLdDmHz ZP9VLphdluVDr4E+MWr7bsHRCwOOGmDVZLVKzKGq8VwRRpGecvyrJnClnMulMHJB ZIUuP3KNEJWQNwWpV81emsd2TR7fLmM= -----END CERTIFICATE-----Generated at Sat Oct 24 16:34:16 2026 by rpki-client