$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53d389af-834a-30b9-8bde-5b7e74e1d241.roa File: 53d389af-834a-30b9-8bde-5b7e74e1d241.roa (raw, json) Hash identifier: fxJOJtlRgHIaeg+XherFrTFG6/6n6W+l7jKxzm80Gq4= Subject key identifier: 0C:78:BD:29:E9:25:C0:DD:5A:58:62:6F:90:3B:AB:50:C9:E0:0A:A5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7E7DEC848A0DD4FA3BDC3500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53d389af-834a-30b9-8bde-5b7e74e1d241.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 36183 IP address blocks: 172.224.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:ec:84:8a:0d:d4:fa:3b:dc:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=7ff8c9de-f152-4cc0-af0f-7e4cd1958cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4d:49:29:a2:22:44:55:36:0a:87:bd:13:fb: c3:d6:ce:6d:18:5f:cc:6c:84:81:38:44:fa:64:28: 41:d7:2c:5c:52:7c:57:d3:e3:05:1e:c2:99:be:a0: af:14:68:0e:5b:f5:85:9b:a5:78:dd:52:7b:6a:a7: 7e:ec:18:d1:10:86:f0:2f:15:3a:57:a0:5b:95:7b: 96:99:f4:06:17:60:7c:d1:6f:94:10:14:6e:9a:ae: 7f:e7:57:62:7e:98:6b:71:6a:0b:56:76:29:e4:1a: d0:66:53:1f:06:16:30:ea:2c:ad:f7:3e:06:ef:66: bf:7a:43:74:0a:d0:66:5a:92:b6:60:37:3a:bb:a2: 25:79:9c:25:9b:55:ef:44:ac:2d:c1:6c:d3:42:e7: e8:10:1c:96:ed:bc:1f:e3:b6:41:f8:8f:65:aa:ff: 12:83:8a:08:49:e9:e2:bd:6e:e5:76:89:e1:56:d7: 4b:90:5f:22:80:4a:48:ba:39:31:7e:78:c8:26:b1: be:99:4f:b1:be:2c:d7:34:fb:24:08:d4:b7:68:11: db:58:8f:12:0d:4a:d5:70:31:5c:40:4c:ec:80:48: d4:02:2c:3d:50:c8:0c:57:74:36:f8:4a:29:d6:3d: 3a:81:13:98:ba:bf:4d:fd:df:ce:66:1d:f4:43:f7: 87:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:78:BD:29:E9:25:C0:DD:5A:58:62:6F:90:3B:AB:50:C9:E0:0A:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/53d389af-834a-30b9-8bde-5b7e74e1d241.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:4d:05:01:b7:58:9b:68:ad:33:75:fc:66:88:1e:5a:c2:99: e1:52:a3:ad:7d:e0:76:de:ec:6b:ce:57:97:b6:96:89:73:8d: c1:a8:31:c3:da:ef:5d:5c:29:c0:62:fd:ae:6d:3b:91:90:b4: e5:22:6b:84:88:75:2b:9b:df:70:de:8d:78:f7:02:55:f4:59: 46:b4:f7:13:fe:51:f7:2b:8c:ba:80:60:d6:65:d4:6e:5e:ab: 3a:d6:af:42:1c:2a:52:65:3a:be:2f:50:a6:f8:2e:a5:95:2a: 40:10:0e:56:40:02:e7:2c:6e:fe:2f:17:8b:bf:a7:49:5b:13: d7:61:cb:06:27:67:81:98:f0:85:ee:b2:ed:1c:e8:a6:81:7a: 80:64:2c:de:f8:42:fd:dd:c7:b4:af:ee:f6:44:02:66:01:2c: 85:43:b2:fc:c7:03:90:90:62:3a:ce:f2:8c:c9:0b:13:76:75: 1c:9c:04:88:3e:e1:76:84:5e:80:29:6a:53:91:c2:1c:39:f6: 29:71:38:e7:9a:bb:d5:5b:3b:ac:ef:d1:d1:68:d1:2b:27:18: 81:32:be:6f:f6:94:c4:b2:f3:d7:46:98:1a:e4:32:ef:ae:2e: d7:14:54:a7:2e:0b:b3:c2:65:38:55:20:bd:2f:07:02:11:0e: cc:6f:72:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+feyEig3U+jvcNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk N2ZmOGM5ZGUtZjE1Mi00Y2MwLWFmMGYtN2U0Y2QxOTU4Y2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE1JKaIiRFU2Coe9E/vD1s5tGF/MbISBOET6 ZChB1yxcUnxX0+MFHsKZvqCvFGgOW/WFm6V43VJ7aqd+7BjREIbwLxU6V6BblXuW mfQGF2B80W+UEBRumq5/51difphrcWoLVnYp5BrQZlMfBhYw6iyt9z4G72a/ekN0 CtBmWpK2YDc6u6IleZwlm1XvRKwtwWzTQufoEByW7bwf47ZB+I9lqv8Sg4oISeni vW7ldonhVtdLkF8igEpIujkxfnjIJrG+mU+xvizXNPskCNS3aBHbWI8SDUrVcDFc QEzsgEjUAiw9UMgMV3Q2+Eop1j06gROYur9N/d/OZh30Q/eHMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAx4vSnpJcDdWlhib5A7q1DJ4AqlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTNkMzg5YWYtODM0YS0z MGI5LThiZGUtNWI3ZTc0ZTFkMjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9NBQG3WJtorTN1/GaIHlrCmeFSo6194Hbe7GvOV5e2lolzjcGoMcPa 711cKcBi/a5tO5GQtOUia4SIdSub33DejXj3AlX0WUa09xP+UfcrjLqAYNZl1G5e qzrWr0IcKlJlOr4vUKb4LqWVKkAQDlZAAucsbv4vF4u/p0lbE9dhywYnZ4GY8IXu su0c6KaBeoBkLN74Qv3dx7Sv7vZEAmYBLIVDsvzHA5CQYjrO8ozJCxN2dRycBIg+ 4XaEXoApalORwhw59ilxOOeau9VbO6zv0dFo0SsnGIEyvm/2lMSy89dGmBrkMu+u LtcUVKcuC7PCZThVIL0vBwIRDsxvciU= -----END CERTIFICATE-----Generated at Fri Oct 23 14:19:13 2026 by rpki-client