$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c67ffc7-cfb3-3fc5-8d13-33ba932f52d5.roa File: 3c67ffc7-cfb3-3fc5-8d13-33ba932f52d5.roa (raw, json) Hash identifier: o6kTkIsc1Tiu8gvyglDdyvI5dqCgP7uZgZBcktJc9g4= Subject key identifier: 3A:D7:D8:C8:64:73:2D:A3:B0:F8:9D:02:BA:20:03:D2:F2:AC:A6:19 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F71EDAEACC487FFEB96BB45B0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c67ffc7-cfb3-3fc5-8d13-33ba932f52d5.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 63949 IP address blocks: 172.235.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:ae:ac:c4:87:ff:eb:96:bb:45:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=9439affd-d6d5-478f-8b2c-54d7f47daea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:74:30:ec:89:68:7c:20:29:17:d7:05:9a:be: 5b:8c:63:ac:92:b2:a3:af:04:09:ed:5f:5c:cb:64: 2a:d4:05:1f:0c:68:8e:b2:e7:59:26:61:69:24:dd: 8f:30:a2:b6:96:72:fc:cb:9a:0b:62:34:a4:e1:2e: cc:58:15:48:77:41:33:27:7c:fc:eb:5d:65:92:1e: 8b:58:0c:63:f9:81:07:f9:dc:cb:51:5f:ac:58:fe: 01:4a:a4:fc:d8:58:6e:fd:70:89:97:bd:58:ed:dd: c2:f3:a3:94:ab:50:14:9d:d9:07:da:d6:5e:ff:ef: d8:5e:1a:ad:f5:0b:7b:1f:a5:2c:74:b1:71:44:0a: cf:36:e2:71:31:9b:ce:0d:79:30:40:6f:b9:fd:fa: 61:70:14:4e:83:4c:44:25:19:ce:1e:9e:05:98:d6: f0:38:bd:0b:42:ca:b5:9a:fc:2c:c3:ba:b2:40:b2: aa:a6:96:d9:34:a6:75:5c:cc:df:91:91:fc:13:43: 46:7c:09:bd:a8:e1:88:51:4b:ae:0b:65:7e:93:71: 4e:8b:fb:f6:ac:cb:22:9f:d2:e3:d5:0d:84:48:a8: d4:0c:4a:92:1f:a6:c7:e3:0a:e4:47:18:b0:12:54: 84:81:3c:19:37:fa:8d:c5:a2:68:a8:7e:2a:d6:d9: aa:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D7:D8:C8:64:73:2D:A3:B0:F8:9D:02:BA:20:03:D2:F2:AC:A6:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3c67ffc7-cfb3-3fc5-8d13-33ba932f52d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:9f:bd:a7:5f:0a:6c:19:6f:3a:68:a3:9b:20:0f:0d:7c:ba: 6d:f1:62:55:62:e6:1b:e2:ee:d8:c4:a4:f5:59:d3:25:2f:50: d3:40:fa:0f:f3:86:c2:3e:9c:3e:78:56:9c:82:39:44:0d:d8: 92:85:b7:9b:69:05:7a:7c:e2:9a:3d:b6:7c:c4:52:70:81:e5: f6:9f:76:9a:e5:92:cf:a5:62:b2:e8:8c:a2:8c:d3:bb:e1:04: 77:d2:27:3e:57:a6:cf:40:ee:41:86:f9:3e:af:aa:df:5d:cb: 40:0b:a0:8d:4e:53:fe:ff:74:13:2c:ba:78:03:23:61:85:82: 1a:e9:9d:93:17:b2:56:ec:c4:38:89:f2:8f:57:0d:aa:65:c9: 82:b1:38:18:02:7c:fa:17:1d:48:96:61:20:35:b7:b1:f3:94: 50:18:32:04:69:1b:4a:b3:d7:c2:4b:a0:74:3f:ee:66:26:9d: 44:3c:92:0a:3a:d7:cc:ef:2d:2c:70:95:3a:81:f4:12:ea:91: f4:c4:d4:7c:94:06:e7:71:49:8c:a2:9b:ac:1c:1f:c7:bc:98: 22:7f:a1:78:e9:af:32:bc:0c:62:bc:7f:a9:6f:6d:2d:72:e4: ce:09:3e:98:6c:ee:ae:52:98:cb:2d:c5:11:93:82:8c:78:3e: 1f:f2:e5:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7a6sxIf/65a7RbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk OTQzOWFmZmQtZDZkNS00NzhmLThiMmMtNTRkN2Y0N2RhZWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnQw7IlofCApF9cFmr5bjGOskrKjrwQJ7V9c y2Qq1AUfDGiOsudZJmFpJN2PMKK2lnL8y5oLYjSk4S7MWBVId0EzJ3z8611lkh6L WAxj+YEH+dzLUV+sWP4BSqT82Fhu/XCJl71Y7d3C86OUq1AUndkH2tZe/+/YXhqt 9Qt7H6UsdLFxRArPNuJxMZvODXkwQG+5/fphcBROg0xEJRnOHp4FmNbwOL0LQsq1 mvwsw7qyQLKqppbZNKZ1XMzfkZH8E0NGfAm9qOGIUUuuC2V+k3FOi/v2rMsin9Lj 1Q2ESKjUDEqSH6bH4wrkRxiwElSEgTwZN/qNxaJoqH4q1tmq1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrX2Mhkcy2jsPidArogA9LyrKYZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2M2N2ZmYzctY2ZiMy0z ZmM1LThkMTMtMzNiYTkzMmY1MmQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISfvadfCmwZbzpoo5sgDw18um3xYlVi5hvi7tjEpPVZ0yUvUNNA+g/z hsI+nD54VpyCOUQN2JKFt5tpBXp84po9tnzEUnCB5fafdprlks+lYrLojKKM07vh BHfSJz5Xps9A7kGG+T6vqt9dy0ALoI1OU/7/dBMsungDI2GFghrpnZMXslbsxDiJ 8o9XDaplyYKxOBgCfPoXHUiWYSA1t7HzlFAYMgRpG0qz18JLoHQ/7mYmnUQ8kgo6 18zvLSxwlTqB9BLqkfTE1HyUBudxSYyim6wcH8e8mCJ/oXjprzK8DGK8f6lvbS1y 5M4JPphs7q5SmMstxRGTgox4Ph/y5S0= -----END CERTIFICATE-----Generated at Sat Oct 24 08:28:36 2026 by rpki-client