$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f2f5402-80c6-3aa4-b762-aa80a170b213.roa File: 3f2f5402-80c6-3aa4-b762-aa80a170b213.roa (raw, json) Hash identifier: k0CWqs0Gb8i+FiVa7S7zoleqc3mxdCqTKzYtDwHXCFo= Subject key identifier: B9:B2:7A:84:D6:12:BF:0F:5D:67:E8:0F:D9:C7:61:A8:3C:89:1A:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F63F8254FF9974B92EF8C8D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f2f5402-80c6-3aa4-b762-aa80a170b213.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.225.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:25:4f:f9:97:4b:92:ef:8c:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=c41698f0-7a5e-4e4d-ab0a-e41a38554a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:37:f0:a9:57:7e:88:5b:4c:7a:b6:4a:ae:8c: 6a:e0:5a:99:c1:6d:fa:f2:d5:d5:c8:0b:51:d2:b2: 8f:dc:09:97:5b:86:c8:af:0f:18:dd:a0:5d:a3:f9: 75:92:d1:18:93:c9:03:17:d9:6b:05:7b:48:ba:89: 3f:d8:8f:1e:f0:c1:7c:85:e4:ff:42:ea:9c:7c:ea: a4:a8:52:75:1b:ec:a3:66:ce:83:94:10:f2:7b:35: 2f:2a:b3:91:35:ea:cd:5c:8f:9e:27:a9:5d:75:43: 85:32:0e:49:41:db:07:e3:49:34:98:4f:8c:cb:65: b4:88:3c:25:9c:9a:27:06:b3:3b:b6:52:10:6c:41: da:5c:94:11:0d:c4:13:93:69:5d:dd:dc:46:52:0c: be:98:ae:cd:5e:00:3d:cd:fc:75:11:09:5c:bd:26: ee:e9:dd:32:0b:7f:8d:c8:5e:88:1d:3a:00:5a:e2: 5e:de:19:93:9b:f2:01:f8:30:97:a9:4f:40:2a:64: 62:66:42:de:24:be:44:6d:e1:f1:4c:5f:3a:6a:67: bb:06:9b:74:2a:89:69:d1:74:27:18:d4:85:ce:38: 9e:57:f5:09:7b:42:2d:ec:ca:2a:7d:c4:c2:fd:76: 2a:92:83:1f:ae:b3:1e:37:17:dc:ec:ff:ef:d2:08: 34:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B2:7A:84:D6:12:BF:0F:5D:67:E8:0F:D9:C7:61:A8:3C:89:1A:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f2f5402-80c6-3aa4-b762-aa80a170b213.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:8c:e2:c3:1a:b0:e7:36:cb:c5:87:ef:98:cb:18:d1:b2:02: 89:68:7f:55:85:79:47:83:fd:dd:bf:84:86:d3:1a:d7:19:a2: ac:c0:b5:a6:37:ec:59:cc:fa:1c:74:64:67:0a:0b:fb:41:06: 78:2e:bb:73:6e:fe:3e:82:3e:fd:3a:d5:23:52:16:2c:a0:93: d2:4e:43:10:e8:e0:01:96:2f:33:66:b6:98:2e:e9:4b:b5:9c: 96:2f:b0:0c:4d:58:37:a2:80:95:ee:34:f7:7d:5b:c3:2a:6e: 71:cf:7e:65:1c:55:f3:d0:2f:0f:be:51:00:6f:63:70:b9:12: da:34:ba:0f:3c:be:38:0c:23:9e:61:80:92:4f:d6:b9:7c:ff: 3e:17:60:83:b4:f9:36:7a:e3:40:8c:21:be:af:7e:89:d5:99: b0:a9:e5:cb:c9:06:81:d3:a4:60:48:47:ba:7b:89:c8:85:e1: 25:9b:2a:49:ec:08:e5:3c:ec:3d:37:45:47:4d:37:7d:dd:0c: 42:39:c1:9a:6f:1e:9f:32:20:f0:65:a2:2f:69:93:40:e4:7d: 5a:51:7e:1c:23:8a:b2:ef:9a:d6:86:2c:60:1b:8a:9f:bf:35: 2a:ce:65:c3:32:19:31:01:4b:c3:9d:fd:55:23:ac:84:9f:4e: 8b:a0:51:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+CVP+ZdLku+MjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk YzQxNjk4ZjAtN2E1ZS00ZTRkLWFiMGEtZTQxYTM4NTU0YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDfwqVd+iFtMerZKroxq4FqZwW368tXVyAtR 0rKP3AmXW4bIrw8Y3aBdo/l1ktEYk8kDF9lrBXtIuok/2I8e8MF8heT/QuqcfOqk qFJ1G+yjZs6DlBDyezUvKrORNerNXI+eJ6lddUOFMg5JQdsH40k0mE+My2W0iDwl nJonBrM7tlIQbEHaXJQRDcQTk2ld3dxGUgy+mK7NXgA9zfx1EQlcvSbu6d0yC3+N yF6IHToAWuJe3hmTm/IB+DCXqU9AKmRiZkLeJL5EbeHxTF86ame7Bpt0Kolp0XQn GNSFzjieV/UJe0It7MoqfcTC/XYqkoMfrrMeNxfc7P/v0gg0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmyeoTWEr8PXWfoD9nHYag8iRpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YyZjU0MDItODBjNi0z YWE0LWI3NjItYWE4MGExNzBiMjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeM4sMasOc2y8WH75jLGNGyAolof1WFeUeD/d2/hIbTGtcZoqzAtaY3 7FnM+hx0ZGcKC/tBBnguu3Nu/j6CPv061SNSFiygk9JOQxDo4AGWLzNmtpgu6Uu1 nJYvsAxNWDeigJXuNPd9W8MqbnHPfmUcVfPQLw++UQBvY3C5Eto0ug88vjgMI55h gJJP1rl8/z4XYIO0+TZ640CMIb6vfonVmbCp5cvJBoHTpGBIR7p7iciF4SWbKkns COU87D03RUdNN33dDEI5wZpvHp8yIPBloi9pk0DkfVpRfhwjirLvmtaGLGAbip+/ NSrOZcMyGTEBS8Od/VUjrISfTougUfk= -----END CERTIFICATE-----Generated at Wed Oct 21 17:14:52 2026 by rpki-client