$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/863199ee-fd81-318e-a764-0d5042ec3f44.roa File: 863199ee-fd81-318e-a764-0d5042ec3f44.roa (raw, json) Hash identifier: 9jYK1hHkoJj/BElKSgRF6B/JmfLhXVwXPJw1AM4wZ20= Subject key identifier: 0E:17:EA:3E:4E:99:64:C7:E8:FC:31:7C:1E:40:61:28:B7:CB:C1:E0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F63F8255BE9C6E020B5134480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/863199ee-fd81-318e-a764-0d5042ec3f44.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.225.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:25:5b:e9:c6:e0:20:b5:13:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=6f2c8ae1-3923-4661-ad74-651d8ce44076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3b:c9:09:28:b4:01:dd:5e:13:83:f3:21:52: 59:46:f6:95:a2:67:e5:3f:30:b1:7a:b9:b3:39:95: 88:65:b2:32:81:6c:73:cc:bb:a6:0c:d3:d7:99:cc: 1e:56:0e:ab:83:12:08:4f:18:6f:31:ed:6b:0e:bb: 90:f2:a8:96:84:5f:07:0f:3a:6a:c1:8b:1d:35:d8: 93:4f:ef:f7:89:ea:86:7f:3c:7a:6e:5e:a7:15:57: 76:ba:9a:56:3a:c9:e3:8e:10:d5:d5:2d:7a:5e:37: f1:1e:47:86:4d:d6:7f:89:72:0d:49:48:49:02:32: 66:32:d4:d1:67:e8:08:3a:64:6e:d9:ae:f3:ed:9c: 8d:b0:24:f5:96:c2:cc:65:29:30:f1:97:99:3a:13: 63:c1:1d:a7:b4:ff:bc:34:27:db:5a:ec:35:c7:82: a0:2c:17:91:ff:a5:01:c8:4d:ff:c6:8e:8b:9a:02: 85:54:6a:a0:8f:3d:c2:72:fd:93:c8:e4:b0:5f:13: e3:50:18:db:f0:82:73:13:51:44:0c:c5:d8:00:52: 33:f4:77:71:c0:af:6f:a0:45:da:4d:e2:40:95:da: f5:a1:9d:83:d4:fe:6e:eb:56:8f:47:e7:0f:8d:35: 1f:ad:5b:67:80:5e:a5:b5:a0:f6:13:3b:b6:40:af: d0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:17:EA:3E:4E:99:64:C7:E8:FC:31:7C:1E:40:61:28:B7:CB:C1:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/863199ee-fd81-318e-a764-0d5042ec3f44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:91:55:0c:a0:03:4c:0e:16:88:1c:af:46:db:22:cd:2b:64: 70:39:fd:c5:b1:c6:52:a0:cd:04:0b:24:2b:5f:97:28:47:86: 25:18:5f:e2:84:0f:5e:f0:09:ca:2f:b5:fe:b3:90:c8:e0:7f: 45:0b:63:99:f9:e4:84:03:c9:9c:dc:f3:68:87:e2:6d:3b:79: 0c:eb:58:88:49:44:f9:12:cc:bd:9c:45:9b:de:d0:9a:32:d6: 84:48:dc:63:8b:b7:91:24:0e:3e:8b:e4:9d:aa:4e:b5:d7:9e: bb:da:b0:5e:bd:9e:c3:40:f2:c5:25:ce:ca:49:fb:57:ba:d3: 32:31:09:8e:6e:66:f1:8f:ed:04:b1:dd:1b:17:55:72:bb:f9: cc:1a:16:ad:05:97:e5:dc:38:f8:e6:1c:53:80:3b:4a:5b:db: 16:0c:aa:97:4f:3e:8a:e2:22:00:5a:99:c1:9a:a0:9c:5b:9e: f1:48:9b:c9:3e:e4:f5:d2:70:12:3b:18:37:ee:3f:31:20:ef: 29:dd:6d:53:2b:b1:bf:3e:e6:ac:35:23:83:63:1a:74:5b:24: 0e:94:41:c5:29:ec:a4:00:0d:4f:11:98:71:33:fd:42:16:c0: 03:51:44:3d:e4:18:a5:aa:7c:b9:c1:2b:61:33:01:35:c3:8b: 8b:8a:88:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+CVb6cbgILUTRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk NmYyYzhhZTEtMzkyMy00NjYxLWFkNzQtNjUxZDhjZTQ0MDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjvJCSi0Ad1eE4PzIVJZRvaVomflPzCxermz OZWIZbIygWxzzLumDNPXmcweVg6rgxIITxhvMe1rDruQ8qiWhF8HDzpqwYsdNdiT T+/3ieqGfzx6bl6nFVd2uppWOsnjjhDV1S16XjfxHkeGTdZ/iXINSUhJAjJmMtTR Z+gIOmRu2a7z7ZyNsCT1lsLMZSkw8ZeZOhNjwR2ntP+8NCfbWuw1x4KgLBeR/6UB yE3/xo6LmgKFVGqgjz3Ccv2TyOSwXxPjUBjb8IJzE1FEDMXYAFIz9HdxwK9voEXa TeJAldr1oZ2D1P5u61aPR+cPjTUfrVtngF6ltaD2Ezu2QK/QWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4X6j5OmWTH6PwxfB5AYSi3y8HgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODYzMTk5ZWUtZmQ4MS0z MThlLWE3NjQtMGQ1MDQyZWMzZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyRVQygA0wOFogcr0bbIs0rZHA5/cWxxlKgzQQLJCtflyhHhiUYX+KE D17wCcovtf6zkMjgf0ULY5n55IQDyZzc82iH4m07eQzrWIhJRPkSzL2cRZve0Joy 1oRI3GOLt5EkDj6L5J2qTrXXnrvasF69nsNA8sUlzspJ+1e60zIxCY5uZvGP7QSx 3RsXVXK7+cwaFq0Fl+XcOPjmHFOAO0pb2xYMqpdPPoriIgBamcGaoJxbnvFIm8k+ 5PXScBI7GDfuPzEg7yndbVMrsb8+5qw1I4NjGnRbJA6UQcUp7KQADU8RmHEz/UIW wANRRD3kGKWqfLnBK2EzATXDi4uKiAY= -----END CERTIFICATE-----Generated at Sun Oct 25 00:59:28 2026 by rpki-client