$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b5b2c08-9172-3896-96c4-4a28bf93ae4c.roa File: 4b5b2c08-9172-3896-96c4-4a28bf93ae4c.roa (raw, json) Hash identifier: N/ecrkHkp5QKrUmDUajp71rqCNGgMw+ecOYR48gmJjc= Subject key identifier: 86:72:4B:33:61:5C:4D:A8:D6:B9:D6:A0:E8:F5:98:13:A6:F4:5C:2D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F71EDADFC9994621B8E33A600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b5b2c08-9172-3896-96c4-4a28bf93ae4c.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 63949 IP address blocks: 172.235.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:ad:fc:99:94:62:1b:8e:33:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=4a142ef4-39d2-48d6-8326-070f429a185f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:42:2a:8f:a6:06:b4:b1:bc:e4:13:ce:89:1c: e5:61:ee:43:ef:ee:c8:84:1e:cb:53:f1:9c:9f:03: 2e:be:bd:d1:e0:97:ed:e5:b9:b5:b4:ae:a1:85:13: 14:5f:52:c9:54:38:69:ee:14:df:4a:81:ed:97:f0: 26:8d:9a:09:50:0f:3e:4a:23:16:c8:3e:2d:94:84: f5:96:bd:2f:c3:bc:a0:b4:11:d1:b1:98:43:4c:75: 89:a1:82:61:ca:3d:51:e5:80:77:c6:d5:13:93:2b: 6f:74:81:5e:f6:1f:2b:2d:5c:63:3b:6c:2b:b8:8f: a3:58:8c:8c:44:de:76:08:8d:02:9c:fd:ca:54:d7: 55:d5:71:86:40:5d:05:5d:8d:54:d3:e0:38:df:a9: 63:ea:6b:6a:b3:f7:1e:9f:59:5a:38:72:a3:f9:fd: 42:12:c7:11:ae:8d:2b:48:d9:7b:e7:b5:7d:92:d2: 24:fb:2f:ea:f5:c4:93:d7:60:cc:f5:5b:2e:dd:6a: e0:f8:2b:6d:9e:a3:2a:b1:98:38:f4:ef:9c:3d:90: 29:26:f1:0f:ba:3a:0a:e4:ce:ec:ee:e9:a9:4d:d2: 6c:3f:83:13:7c:5d:2d:ca:ab:12:a8:a9:26:f2:7f: d2:9d:4f:d9:3a:0b:80:07:28:92:de:d4:40:cc:d0: 8d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:72:4B:33:61:5C:4D:A8:D6:B9:D6:A0:E8:F5:98:13:A6:F4:5C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b5b2c08-9172-3896-96c4-4a28bf93ae4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:ff:54:5a:23:12:a5:84:77:20:72:35:6d:ff:de:19:40:6b: 14:e3:fb:03:97:81:98:e6:67:ea:e1:9f:76:2d:f7:94:4c:15: 2c:5f:ac:c3:d2:de:4d:76:91:42:9a:61:ea:9d:24:0d:27:ee: b1:07:d1:3e:35:c1:84:f0:c3:7d:a9:20:3c:b7:52:ad:74:41: d7:8a:1f:ba:13:3a:35:11:4d:0f:54:20:23:94:a7:49:56:ef: 83:63:90:df:06:67:fa:be:43:d4:4b:64:77:69:15:fa:25:ff: fa:b8:67:8e:fb:f8:b2:af:42:48:77:7e:74:9d:05:6a:37:e0: bb:ae:7b:fa:2b:3f:fd:ea:c3:ba:af:97:a2:dd:c0:0f:98:77: 3f:c5:80:c8:89:95:9d:b3:4c:a3:64:e2:d3:ef:89:0d:c4:2e: 77:5e:11:36:56:3b:0e:37:20:e1:fb:31:83:7f:ca:80:c5:70: 40:ac:8d:c1:ca:38:ab:fb:e7:68:cb:96:c2:bf:80:39:6f:ec: 72:bc:04:db:39:18:76:97:2d:06:22:8f:51:66:94:95:22:15: 71:5a:4e:fe:8b:81:68:af:30:34:ba:8a:8a:b1:c8:42:b1:60: 57:62:d4:e8:fd:df:37:60:71:e4:04:74:c9:58:66:74:f2:7f: 1f:f7:20:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7a38mZRiG44zpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NGExNDJlZjQtMzlkMi00OGQ2LTgzMjYtMDcwZjQyOWExODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEIqj6YGtLG85BPOiRzlYe5D7+7IhB7LU/Gc nwMuvr3R4Jft5bm1tK6hhRMUX1LJVDhp7hTfSoHtl/AmjZoJUA8+SiMWyD4tlIT1 lr0vw7ygtBHRsZhDTHWJoYJhyj1R5YB3xtUTkytvdIFe9h8rLVxjO2wruI+jWIyM RN52CI0CnP3KVNdV1XGGQF0FXY1U0+A436lj6mtqs/cen1laOHKj+f1CEscRro0r SNl757V9ktIk+y/q9cST12DM9Vsu3Wrg+CttnqMqsZg49O+cPZApJvEPujoK5M7s 7umpTdJsP4MTfF0tyqsSqKkm8n/SnU/ZOguAByiS3tRAzNCNBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZySzNhXE2o1rnWoOj1mBOm9FwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGI1YjJjMDgtOTE3Mi0z ODk2LTk2YzQtNGEyOGJmOTNhZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOthMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADb/VFojEqWEdyByNW3/3hlAaxTj+wOXgZjmZ+rhn3Yt95RMFSxfrMPS 3k12kUKaYeqdJA0n7rEH0T41wYTww32pIDy3Uq10QdeKH7oTOjURTQ9UICOUp0lW 74NjkN8GZ/q+Q9RLZHdpFfol//q4Z477+LKvQkh3fnSdBWo34Luue/orP/3qw7qv l6LdwA+Ydz/FgMiJlZ2zTKNk4tPviQ3ELndeETZWOw43IOH7MYN/yoDFcECsjcHK OKv752jLlsK/gDlv7HK8BNs5GHaXLQYij1FmlJUiFXFaTv6LgWivMDS6ioqxyEKx YFdi1Oj93zdgceQEdMlYZnTyfx/3IAE= -----END CERTIFICATE-----Generated at Sun Oct 25 07:17:37 2026 by rpki-client