$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f552b7e-d0da-3542-8e30-9e187384c23c.roa File: 5f552b7e-d0da-3542-8e30-9e187384c23c.roa (raw, json) Hash identifier: cS9OGCUGWxZ0nX/P0T2DdSlR8x4tbX7AIN8Sbg9LRag= Subject key identifier: 55:37:29:71:07:69:28:51:16:B2:E6:2F:12:66:02:AC:30:A7:DC:B9 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7BB3063CF75F098648DEC600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f552b7e-d0da-3542-8e30-9e187384c23c.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 36183 IP address blocks: 172.224.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:06:3c:f7:5f:09:86:48:de:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=b7c9bf26-3aa4-459d-b84c-158f2e638023 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:1a:4a:39:d3:2a:11:aa:c1:9e:2b:63:94: 14:c1:bf:3d:ba:9a:37:5c:a3:f8:81:25:ba:4e:ab: f2:76:83:8b:b0:4d:c2:ec:ed:92:de:2b:7c:38:28: ff:c0:5c:12:60:c9:94:f6:9d:a1:9d:fb:73:99:5d: 9f:92:43:bb:34:c0:00:0e:fe:8c:41:92:69:eb:2f: 96:ff:61:c8:20:47:d7:19:47:74:58:47:35:63:7a: 06:72:67:ea:a1:09:61:fe:13:c7:9c:96:9f:fd:98: 4c:03:68:01:6f:68:be:3f:c1:96:d9:81:be:4b:59: 9b:da:b6:40:c7:a6:dd:f6:a0:54:fd:b2:a8:19:2f: 2a:7f:ed:0f:4e:6b:85:8a:c9:cb:aa:e9:b0:54:6a: 26:83:94:e7:16:47:75:5f:5e:23:33:40:68:62:7b: 0b:9e:ca:f5:8e:64:15:5e:c5:0d:e2:3e:e9:49:27: e0:1a:58:3b:72:df:13:15:cc:8f:d7:38:ba:3f:c6: 64:8f:58:09:b7:21:0e:ce:53:e4:99:54:15:05:3d: 35:23:13:e4:fe:67:2f:08:b3:bc:c1:90:93:66:38: 06:fb:ea:16:95:23:46:f4:62:3a:d9:b8:28:b1:a1: 71:0b:a3:17:f2:a4:37:b9:a0:10:0e:c5:30:17:1f: a3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:37:29:71:07:69:28:51:16:B2:E6:2F:12:66:02:AC:30:A7:DC:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f552b7e-d0da-3542-8e30-9e187384c23c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:5b:08:75:77:84:d2:ec:9e:8b:d0:39:37:35:07:7b:7d:ac: 13:88:8d:f9:9b:2f:7d:8c:2d:9d:7b:99:df:fa:37:a0:ca:a2: cb:8a:e6:0a:20:bd:07:e1:2a:04:0d:74:3a:87:8e:88:c5:42: 86:9d:be:fb:ba:94:aa:be:aa:72:da:a7:23:80:87:af:a2:12: e2:5f:18:58:d0:18:b2:07:5c:14:67:9a:1b:d2:f9:aa:7d:64: 4b:50:59:3c:fd:f8:d5:15:98:17:d1:c4:a2:68:ff:a6:23:37: 22:85:66:8f:9c:64:33:d2:8c:b5:ee:b1:35:61:58:b7:da:32: d6:7b:f8:be:90:80:6c:b5:21:51:cf:c3:00:7f:57:e2:02:c7: c0:1c:8a:39:fd:ff:6c:b7:ab:91:e0:a7:89:ac:6c:cf:e2:f4: 62:4e:48:fb:9a:28:7f:c1:5a:5b:ed:4b:9b:74:7a:05:0a:4d: 3d:7d:89:3d:c3:c7:bf:a2:4c:61:88:74:76:14:d4:4a:e3:c1: 53:d8:d3:c9:79:fb:c2:a6:39:0a:cd:5a:d3:85:44:f1:37:7f: 1d:5f:46:82:d5:0c:d5:97:fc:e0:d4:ba:dc:b2:ee:82:77:e6: 86:6a:cd:df:5c:e8:d9:c7:90:f2:da:d6:9b:4d:63:71:25:6d: 8a:bc:fc:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swY8918JhkjexgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk YjdjOWJmMjYtM2FhNC00NTlkLWI4NGMtMTU4ZjJlNjM4MDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgkaSjnTKhGqwZ4rY5QUwb89upo3XKP4gSW6 TqvydoOLsE3C7O2S3it8OCj/wFwSYMmU9p2hnftzmV2fkkO7NMAADv6MQZJp6y+W /2HIIEfXGUd0WEc1Y3oGcmfqoQlh/hPHnJaf/ZhMA2gBb2i+P8GW2YG+S1mb2rZA x6bd9qBU/bKoGS8qf+0PTmuFisnLqumwVGomg5TnFkd1X14jM0BoYnsLnsr1jmQV XsUN4j7pSSfgGlg7ct8TFcyP1zi6P8Zkj1gJtyEOzlPkmVQVBT01IxPk/mcvCLO8 wZCTZjgG++oWlSNG9GI62bgosaFxC6MX8qQ3uaAQDsUwFx+j5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFU3KXEHaShRFrLmLxJmAqwwp9y5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWY1NTJiN2UtZDBkYS0z NTQyLThlMzAtOWUxODczODRjMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOACMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENbCHV3hNLsnovQOTc1B3t9rBOIjfmbL32MLZ17md/6N6DKosuK5gog vQfhKgQNdDqHjojFQoadvvu6lKq+qnLapyOAh6+iEuJfGFjQGLIHXBRnmhvS+ap9 ZEtQWTz9+NUVmBfRxKJo/6YjNyKFZo+cZDPSjLXusTVhWLfaMtZ7+L6QgGy1IVHP wwB/V+ICx8Acijn9/2y3q5Hgp4msbM/i9GJOSPuaKH/BWlvtS5t0egUKTT19iT3D x7+iTGGIdHYU1ErjwVPY08l5+8KmOQrNWtOFRPE3fx1fRoLVDNWX/ODUutyy7oJ3 5oZqzd9c6NnHkPLa1ptNY3ElbYq8/K4= -----END CERTIFICATE-----Generated at Fri Oct 23 21:48:15 2026 by rpki-client