$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c247b0a-4d0b-3b78-a291-2f4f88037390.roa File: 3c247b0a-4d0b-3b78-a291-2f4f88037390.roa (raw, json) Hash identifier: zDkqYpTKPlAFlxSjc5+LEcUi3J7szFY7gkCcdLdiXHo= Subject key identifier: C5:F2:6F:68:F4:C7:19:91:A3:15:F5:BA:9D:DD:42:D9:B8:83:A1:68 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F655E685CDE614944CE16E200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c247b0a-4d0b-3b78-a291-2f4f88037390.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 36183 IP address blocks: 172.225.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:68:5c:de:61:49:44:ce:16:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=f4d25074-f5f8-40a6-993c-ce309d974fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:57:12:f4:38:35:89:f1:f1:0e:66:00:b0:44: f0:9e:f2:2b:8c:5e:bc:80:87:f0:78:21:2f:22:43: ef:22:48:df:58:9a:0c:be:00:c7:3b:8d:8b:dc:32: ad:ed:09:76:13:fe:10:9a:3f:e9:a2:63:73:b4:dd: 28:d2:61:c3:ad:91:f4:d5:96:3e:09:7c:8a:1b:0b: d5:c3:80:74:e1:cb:4f:4c:ee:01:b5:70:e6:2c:7f: 5e:22:e2:3f:92:37:45:d2:76:a7:fc:3e:26:ae:db: d7:74:ae:1d:65:02:aa:4c:11:c3:09:63:af:9e:99: 2b:53:ff:1d:91:a1:72:ea:04:fd:d1:e8:a6:c1:3a: f9:24:82:56:7a:e6:11:5a:96:5d:30:be:a4:bb:e4: 58:86:5c:8a:25:e8:4c:3e:f0:32:1e:da:65:38:77: 86:b2:31:86:83:da:df:4c:c9:4b:c4:db:99:19:ad: 1e:49:a3:f1:d9:e1:81:42:8a:13:f3:9f:ed:ef:c6: 5f:18:6b:3c:55:6f:04:93:03:5e:43:83:dc:b9:ac: 1f:d2:03:2d:7d:9e:38:29:9d:bb:eb:3d:c7:bc:fa: be:0d:f5:75:d3:58:1d:dc:54:0a:25:3c:7c:f7:a9: 06:23:81:7b:eb:e6:13:9b:6f:21:f5:ab:01:fb:a1: 40:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F2:6F:68:F4:C7:19:91:A3:15:F5:BA:9D:DD:42:D9:B8:83:A1:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c247b0a-4d0b-3b78-a291-2f4f88037390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d2:35:a1:00:4c:94:5c:f7:aa:18:d7:c1:b6:00:90:7d:11: 1c:02:da:e4:c2:1b:7f:fb:84:c0:e7:70:8b:12:27:d4:8b:ee: 11:48:8f:87:0d:be:ec:4e:e1:12:37:e3:00:7d:74:b7:d3:bd: 1d:d2:b2:2b:38:8d:07:c4:41:d9:5d:87:17:fe:09:29:75:13: 9d:ec:92:e5:2f:6d:71:e7:bb:6d:95:8c:d4:98:62:11:d2:03: 94:b0:8e:9c:5e:87:41:78:68:d9:5a:60:b8:75:6c:0d:fb:71: 36:01:21:07:70:8c:75:0b:3a:9f:7f:03:ed:03:3d:5f:67:63: 4b:93:75:92:a8:04:be:ef:4a:97:ad:1d:f2:db:61:22:96:42: b6:b9:24:92:a3:72:49:3a:15:b4:da:f8:c6:2f:4c:b8:d3:b7: e4:e4:04:ba:e6:dc:ec:c6:0a:c6:d3:54:b3:b2:d0:37:73:71: ab:ae:f0:9d:5a:28:05:54:da:d4:67:6f:7d:95:50:08:11:7c: a8:ea:a9:bb:d5:99:cf:1a:d7:e8:96:28:8a:a9:a4:c8:16:00: 6c:24:7c:8a:03:72:a1:d0:df:04:ea:6d:92:46:7f:8a:5f:73: f4:d8:65:3d:4b:3a:f2:f8:90:85:30:89:af:da:f9:ce:c8:56: 30:d4:7c:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXmhc3mFJRM4W4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZjRkMjUwNzQtZjVmOC00MGE2LTk5M2MtY2UzMDlkOTc0ZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglcS9Dg1ifHxDmYAsETwnvIrjF68gIfweCEv IkPvIkjfWJoMvgDHO42L3DKt7Ql2E/4Qmj/pomNztN0o0mHDrZH01ZY+CXyKGwvV w4B04ctPTO4BtXDmLH9eIuI/kjdF0nan/D4mrtvXdK4dZQKqTBHDCWOvnpkrU/8d kaFy6gT90eimwTr5JIJWeuYRWpZdML6ku+RYhlyKJehMPvAyHtplOHeGsjGGg9rf TMlLxNuZGa0eSaPx2eGBQooT85/t78ZfGGs8VW8EkwNeQ4Pcuawf0gMtfZ44KZ27 6z3HvPq+DfV101gd3FQKJTx896kGI4F76+YTm28h9asB+6FAWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXyb2j0xxmRoxX1up3dQtm4g6FoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2MyNDdiMGEtNGQwYi0z Yjc4LWEyOTEtMmY0Zjg4MDM3MzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDSNaEATJRc96oY18G2AJB9ERwC2uTCG3/7hMDncIsSJ9SL7hFIj4cN vuxO4RI34wB9dLfTvR3Ssis4jQfEQdldhxf+CSl1E53skuUvbXHnu22VjNSYYhHS A5Swjpxeh0F4aNlaYLh1bA37cTYBIQdwjHULOp9/A+0DPV9nY0uTdZKoBL7vSpet HfLbYSKWQra5JJKjckk6FbTa+MYvTLjTt+TkBLrm3OzGCsbTVLOy0Ddzcauu8J1a KAVU2tRnb32VUAgRfKjqqbvVmc8a1+iWKIqppMgWAGwkfIoDcqHQ3wTqbZJGf4pf c/TYZT1LOvL4kIUwia/a+c7IVjDUfCk= -----END CERTIFICATE-----Generated at Tue Oct 27 20:51:33 2026 by rpki-client