$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd85aee-f390-3a9f-9f6b-cb45ff629eac.roa File: 9fd85aee-f390-3a9f-9f6b-cb45ff629eac.roa (raw, json) Hash identifier: dYZnlpuXtsR2gAbyx8BuO8ju7qKMCO3XV0TWuxO9kdo= Subject key identifier: 3C:E3:EB:A7:36:5D:7A:06:FA:8D:21:61:39:FB:C0:61:16:BC:7E:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F71EDB15D43920D2923D74780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd85aee-f390-3a9f-9f6b-cb45ff629eac.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.226.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:b1:5d:43:92:0d:29:23:d7:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=6ae16d2e-73e9-4eb4-b978-3f0b04382b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d6:f9:1e:5b:4f:b0:38:df:65:e4:7e:d3:ad: 6d:ad:20:7f:b6:6c:d7:1a:dc:40:ec:d4:c4:7a:db: 6a:64:ca:de:77:b7:33:0e:f1:fc:52:91:7d:4f:30: 56:a6:51:bd:f3:5f:32:f5:82:13:9f:7e:ed:65:bf: a6:c9:e4:bc:83:86:42:28:38:cd:7f:21:97:07:f3: 60:cf:9b:c4:63:00:3d:7c:1f:5b:da:41:7e:ed:df: cb:54:0b:83:df:d8:47:b3:03:30:95:f9:57:ea:33: 77:12:0a:f5:ee:9e:e5:37:ac:70:40:70:80:cd:3c: ed:aa:0e:bd:c6:e6:17:52:eb:53:8a:35:7a:a0:d6: 18:19:c3:10:45:cb:c8:28:82:26:11:88:07:ff:07: 73:67:cc:09:a2:83:2e:68:ae:71:a9:9d:8b:8f:ce: 77:79:7b:2c:0d:b2:e9:1c:ed:ff:5f:3b:60:e2:5b: b5:73:f6:e4:67:e3:50:2c:49:03:0c:f2:5c:f7:15: 81:b2:55:90:fa:5d:b5:ae:02:d6:e7:e6:20:5d:76: 49:0c:90:ac:1e:78:6f:c7:2e:a7:f2:e7:a7:08:c6: 66:7a:16:77:08:60:8f:e0:58:33:f3:28:00:c4:41: 9d:69:73:a2:a3:57:dc:7c:a1:17:f8:f3:64:14:98: 44:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:E3:EB:A7:36:5D:7A:06:FA:8D:21:61:39:FB:C0:61:16:BC:7E:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fd85aee-f390-3a9f-9f6b-cb45ff629eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:25:8d:b8:b2:0d:48:d6:e9:5a:f3:80:ff:43:fb:5e:ba:06: b9:1e:76:22:dc:4b:71:b8:64:43:3a:fd:4c:5e:a1:3d:8d:dc: ea:c8:46:3c:1b:b6:e5:aa:d8:c4:c0:4a:ee:97:39:35:15:48: 97:54:96:54:43:cd:8c:e8:4c:5a:9d:db:14:50:c2:a4:79:32: 82:89:3c:4a:a7:4f:86:a7:49:cd:f5:d0:f6:11:bd:cd:c9:13: a7:b4:ea:5c:aa:40:ff:0b:c8:90:30:16:1f:55:ff:91:2b:8a: c9:e0:48:d1:21:af:4e:12:5b:65:d9:d9:88:4c:b7:15:d7:e1: 43:e2:a0:54:7d:b4:28:a7:dc:7d:89:eb:c8:b8:2d:9e:e4:5f: f5:41:e5:f0:82:6c:bb:42:97:94:bf:84:f1:de:5b:f6:8b:cb: b5:95:56:eb:56:0c:65:77:ab:1c:6b:96:7c:68:a8:5c:5e:66: 6b:60:eb:b5:2c:a1:8b:0c:c0:04:f5:11:f4:b5:d2:b8:3a:a9: f5:76:4d:f3:64:16:92:0a:62:24:53:06:e7:42:fe:c7:2d:3c: 27:dd:b7:d5:ba:9c:74:21:44:2e:e9:74:20:94:bd:3d:a4:28: 7a:43:b9:bb:c6:9a:cd:db:c2:33:8d:18:62:41:4c:47:d0:f4: 1c:43:67:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7bFdQ5INKSPXR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NmFlMTZkMmUtNzNlOS00ZWI0LWI5NzgtM2YwYjA0MzgyYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9b5HltPsDjfZeR+061trSB/tmzXGtxA7NTE ettqZMred7czDvH8UpF9TzBWplG9818y9YITn37tZb+myeS8g4ZCKDjNfyGXB/Ng z5vEYwA9fB9b2kF+7d/LVAuD39hHswMwlflX6jN3Egr17p7lN6xwQHCAzTztqg69 xuYXUutTijV6oNYYGcMQRcvIKIImEYgH/wdzZ8wJooMuaK5xqZ2Lj853eXssDbLp HO3/Xztg4lu1c/bkZ+NQLEkDDPJc9xWBslWQ+l21rgLW5+YgXXZJDJCsHnhvxy6n 8uenCMZmehZ3CGCP4Fgz8ygAxEGdaXOio1fcfKEX+PNkFJhEMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzj66c2XXoG+o0hYTn7wGEWvH4XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWZkODVhZWUtZjM5MC0z YTlmLTlmNmItY2I0NWZmNjI5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoljbiyDUjW6VrzgP9D+166BrkediLcS3G4ZEM6/UxeoT2N3OrIRjwb tuWq2MTASu6XOTUVSJdUllRDzYzoTFqd2xRQwqR5MoKJPEqnT4anSc310PYRvc3J E6e06lyqQP8LyJAwFh9V/5ErisngSNEhr04SW2XZ2YhMtxXX4UPioFR9tCin3H2J 68i4LZ7kX/VB5fCCbLtCl5S/hPHeW/aLy7WVVutWDGV3qxxrlnxoqFxeZmtg67Us oYsMwAT1EfS10rg6qfV2TfNkFpIKYiRTBudC/sctPCfdt9W6nHQhRC7pdCCUvT2k KHpDubvGms3bwjONGGJBTEfQ9BxDZ7U= -----END CERTIFICATE-----Generated at Sun Oct 25 14:19:58 2026 by rpki-client