$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57abd3f4-824b-3c70-a8cc-76599624d82e.roa File: 57abd3f4-824b-3c70-a8cc-76599624d82e.roa (raw, json) Hash identifier: Ay6BDrjscfhD0QSi4HxprSzk9Hc106IGAkrtEYQx+NQ= Subject key identifier: 4A:A7:EB:3F:94:DF:BD:4B:BE:F3:DB:6D:68:2B:B6:6B:DF:DF:EA:FA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F71EDB635989E512F669BB100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57abd3f4-824b-3c70-a8cc-76599624d82e.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 63949 IP address blocks: 172.235.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:b6:35:98:9e:51:2f:66:9b:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=c4ce13f6-013f-4078-bb7c-41840a14e13b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7a:94:1c:a3:8a:03:1e:ce:90:f9:11:2f:ca: d1:c0:c0:da:44:5a:25:a5:21:0b:c3:87:fa:49:18: 99:33:00:a6:e1:63:ec:da:6f:f0:06:6c:48:48:1e: 69:cd:5a:2e:7a:db:d2:63:43:ab:23:ad:3b:a2:2d: da:78:d9:dc:a3:53:61:b9:5d:54:df:a1:30:9e:48: a5:ac:f3:66:35:0a:2b:1b:48:86:92:d1:7a:d7:aa: 24:d5:44:ff:61:3d:6e:fb:7c:31:9c:7e:99:ec:3d: 16:58:99:68:a8:84:bf:33:f7:5e:01:3d:c5:f0:5f: f4:93:8d:6e:82:5c:ab:14:e8:56:85:85:c8:ab:92: 1f:24:19:82:3c:bb:11:f8:7e:86:74:f2:c7:29:b3: 99:41:24:85:87:9d:5c:b4:47:08:6a:b9:e3:42:b1: 2c:96:14:18:68:0a:f8:58:06:1a:b7:0b:cc:7b:dd: ef:24:95:34:68:83:d1:49:27:a3:e3:42:14:3b:4e: 93:6c:96:24:72:13:e4:b2:f6:d2:5c:43:58:01:3b: 80:a2:af:cf:a4:6d:93:91:d5:08:f3:44:dd:72:8b: 90:cd:e8:ed:5d:d4:1f:b0:3c:6c:bc:01:02:d8:e5: 0e:c4:43:5f:87:09:9f:64:bb:3e:b6:d7:ba:aa:b0: ae:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A7:EB:3F:94:DF:BD:4B:BE:F3:DB:6D:68:2B:B6:6B:DF:DF:EA:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/57abd3f4-824b-3c70-a8cc-76599624d82e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:c8:b0:85:75:33:a3:0a:b0:69:e1:33:e4:1f:54:90:90:53: fb:88:87:70:40:2e:40:55:c2:d7:ea:ee:29:eb:95:c5:43:ac: dc:df:d9:5a:d2:58:1a:38:9d:f8:4e:23:dc:ce:2e:c3:62:5e: 55:83:30:ea:5b:17:d0:fa:84:a9:5d:d4:c9:e1:bc:e4:db:8c: 6e:9e:c7:c6:ac:cd:9a:a4:d1:9f:29:47:33:54:55:0d:59:f5: 23:32:13:9f:39:28:81:26:ed:ea:29:a3:26:94:bf:02:16:14: c9:a2:fc:df:35:2f:c3:59:a0:56:22:8f:49:98:07:a0:05:91: 06:e9:45:9b:3c:9c:01:7a:bb:79:cb:2a:ca:da:09:46:c7:c7: 48:3f:3b:82:06:53:78:2b:b4:55:96:f8:b4:de:3b:a2:b1:e1: b8:30:21:c9:da:cf:32:18:70:84:a0:e4:ff:1d:3c:e4:08:13: 24:8b:6a:0f:79:f7:da:22:8c:54:56:1a:4b:77:b2:e3:95:a3: a4:22:80:40:71:80:59:cf:9c:64:f2:c4:05:35:d7:36:50:19: a8:fd:31:be:15:e1:e4:89:ac:2b:63:af:87:b4:ba:2e:2a:48: 07:4e:55:d2:24:4c:e2:26:eb:5c:15:b8:1d:89:51:db:fc:fd: b9:da:42:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7bY1mJ5RL2absQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk YzRjZTEzZjYtMDEzZi00MDc4LWJiN2MtNDE4NDBhMTRlMTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3qUHKOKAx7OkPkRL8rRwMDaRFolpSELw4f6 SRiZMwCm4WPs2m/wBmxISB5pzVouetvSY0OrI607oi3aeNnco1NhuV1U36Ewnkil rPNmNQorG0iGktF616ok1UT/YT1u+3wxnH6Z7D0WWJloqIS/M/deAT3F8F/0k41u glyrFOhWhYXIq5IfJBmCPLsR+H6GdPLHKbOZQSSFh51ctEcIarnjQrEslhQYaAr4 WAYatwvMe93vJJU0aIPRSSej40IUO06TbJYkchPksvbSXENYATuAoq/PpG2TkdUI 80TdcouQzejtXdQfsDxsvAEC2OUOxENfhwmfZLs+tte6qrCuhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqn6z+U371LvvPbbWgrtmvf3+r6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTdhYmQzZjQtODI0Yi0z YzcwLWE4Y2MtNzY1OTk2MjRkODJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3IsIV1M6MKsGnhM+QfVJCQU/uIh3BALkBVwtfq7inrlcVDrNzf2VrS WBo4nfhOI9zOLsNiXlWDMOpbF9D6hKld1MnhvOTbjG6ex8aszZqk0Z8pRzNUVQ1Z 9SMyE585KIEm7eopoyaUvwIWFMmi/N81L8NZoFYij0mYB6AFkQbpRZs8nAF6u3nL KsraCUbHx0g/O4IGU3grtFWW+LTeO6Kx4bgwIcnazzIYcISg5P8dPOQIEySLag95 99oijFRWGkt3suOVo6QigEBxgFnPnGTyxAU11zZQGaj9Mb4V4eSJrCtjr4e0ui4q SAdOVdIkTOIm61wVuB2JUdv8/bnaQos= -----END CERTIFICATE-----Generated at Thu Oct 22 15:25:15 2026 by rpki-client