$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa File: 88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa (raw, json) Hash identifier: +TDXJxUJv29orEYLPJFF9U8H+r0dPnVqcFxnKlth77c= Subject key identifier: 4B:32:98:63:C7:29:F6:F8:EA:73:B4:36:E3:65:EE:C3:3B:CE:EA:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F5E62EE9F70A6E4BC0B02D7C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 36183 IP address blocks: 172.225.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ee:9f:70:a6:e4:bc:0b:02:d7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=88e7649e-ef6b-4157-8b65-8a6b5d4d1394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0f:a9:15:6b:6a:2f:32:35:56:6c:18:02:10: 42:1b:57:10:cb:6b:4b:a6:12:af:14:28:cb:8a:01: 76:38:8d:83:15:11:b4:7d:84:6d:11:df:1b:32:2c: 3e:43:b0:c3:75:65:fb:ba:31:52:50:8b:f1:b5:76: b8:58:00:a2:25:19:de:dd:d7:49:a7:9e:1a:60:13: 20:73:86:01:39:47:4b:6c:33:4a:ef:ef:2d:01:a5: 45:f4:2c:18:ac:b4:bc:18:ff:71:d3:07:a1:1f:0d: d8:79:6d:7e:c1:27:48:a4:66:0a:5c:af:9e:70:71: 68:12:d9:58:f8:39:df:91:04:8e:3f:a9:8f:0d:f4: de:70:d0:08:e0:65:0a:71:2e:64:c2:59:46:4e:0f: 1b:bc:97:1c:5f:2c:59:3a:1c:34:c1:e0:4b:04:20: c0:f0:f3:7b:65:5f:f9:88:cf:41:4e:f0:08:16:b0: 3b:17:38:6b:ad:fc:69:1a:eb:3b:27:6d:8a:b1:9d: 66:1a:74:de:25:9b:6f:cb:23:5b:54:8f:a6:0c:9a: 9e:36:d6:c4:ca:ee:04:ec:eb:30:38:4d:74:ee:2b: 1f:ba:8e:79:cf:a3:e7:28:91:3c:d6:ba:11:28:48: 84:72:5c:83:65:51:c2:07:75:52:c9:25:b2:1b:d4: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:32:98:63:C7:29:F6:F8:EA:73:B4:36:E3:65:EE:C3:3B:CE:EA:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/88e9d63a-cbca-3d73-9bd3-67e4a08f7c00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ee:29:45:3d:cd:ba:6f:e6:d6:2b:b9:e8:99:f0:3a:5a:90: 03:67:1a:e8:0a:1a:e5:5c:77:02:20:75:5c:85:06:ae:1b:b0: 3d:3d:11:78:ab:f4:52:74:f5:24:a9:ce:8e:c7:32:bf:6e:60: df:ec:26:38:47:39:80:3c:a5:22:eb:53:5a:7a:d8:f3:95:a7: eb:f6:be:da:2d:2b:fa:22:ba:f7:29:ad:ea:2b:aa:1d:df:9e: d9:3f:e1:b3:24:30:7d:24:21:2b:92:02:7d:8a:c4:f1:f3:c8: 23:35:1a:f8:11:d4:51:e7:df:84:81:31:03:c0:21:c1:4d:11: 8e:58:b8:e4:ac:4f:b6:c3:7d:36:60:e0:9e:95:98:96:8c:b9: e2:6c:ac:a9:f1:d2:8d:15:08:7f:4f:5b:ba:e1:37:bb:6d:a2: f6:e5:9e:2d:a3:0d:4b:88:4c:c9:dc:65:4d:44:d4:fb:d8:a7: 2a:f5:a8:44:f5:f7:b4:69:d2:03:ee:cb:1f:ce:c0:7a:ec:89: be:be:a3:ef:bd:64:11:5d:74:08:8e:93:af:7d:2f:3e:b5:43: f6:1b:dc:87:48:81:e5:47:e5:c8:df:51:52:8f:55:89:41:7d: 5c:2c:d2:dd:8f:5d:78:15:d8:12:28:94:e0:01:d3:1d:4f:af: aa:39:9d:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYu6fcKbkvAsC18AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ODhlNzY0OWUtZWY2Yi00MTU3LThiNjUtOGE2YjVkNGQxMzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw+pFWtqLzI1VmwYAhBCG1cQy2tLphKvFCjL igF2OI2DFRG0fYRtEd8bMiw+Q7DDdWX7ujFSUIvxtXa4WACiJRne3ddJp54aYBMg c4YBOUdLbDNK7+8tAaVF9CwYrLS8GP9x0wehHw3YeW1+wSdIpGYKXK+ecHFoEtlY +DnfkQSOP6mPDfTecNAI4GUKcS5kwllGTg8bvJccXyxZOhw0weBLBCDA8PN7ZV/5 iM9BTvAIFrA7FzhrrfxpGus7J22KsZ1mGnTeJZtvyyNbVI+mDJqeNtbEyu4E7Osw OE107isfuo55z6PnKJE81roRKEiEclyDZVHCB3VSySWyG9SwlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsymGPHKfb46nO0NuNl7sM7zupYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODhlOWQ2M2EtY2JjYS0z ZDczLTliZDMtNjdlNGEwOGY3YzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGruKUU9zbpv5tYrueiZ8DpakANnGugKGuVcdwIgdVyFBq4bsD09EXir 9FJ09SSpzo7HMr9uYN/sJjhHOYA8pSLrU1p62POVp+v2vtotK/oiuvcpreorqh3f ntk/4bMkMH0kISuSAn2KxPHzyCM1GvgR1FHn34SBMQPAIcFNEY5YuOSsT7bDfTZg 4J6VmJaMueJsrKnx0o0VCH9PW7rhN7ttovblni2jDUuITMncZU1E1PvYpyr1qET1 97Rp0gPuyx/OwHrsib6+o++9ZBFddAiOk699Lz61Q/Yb3IdIgeVH5cjfUVKPVYlB fVws0t2PXXgV2BIolOAB0x1Pr6o5nRM= -----END CERTIFICATE-----Generated at Thu Oct 22 00:17:38 2026 by rpki-client