$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2069ed3-75df-3373-a509-7cfa80b12473.roa File: a2069ed3-75df-3373-a509-7cfa80b12473.roa (raw, json) Hash identifier: 4FLCmZ8hB5Y77x56YkgNsZLRpBcahIVZtPvJXpGdk9A= Subject key identifier: D2:32:13:C8:44:13:8E:69:64:52:05:6F:48:05:2E:6A:E3:85:24:88 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7E7DD59594D67C8DAD203D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2069ed3-75df-3373-a509-7cfa80b12473.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 36183 IP address blocks: 172.224.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:d5:95:94:d6:7c:8d:ad:20:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=2ffe80fe-048f-41d9-8a77-c815d22b8fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a2:dc:53:9c:6b:e1:27:4e:b4:0f:30:88:f3: 7e:a5:35:bc:f7:44:3e:57:e7:fd:22:9b:f3:48:4c: b6:39:11:5c:ed:ff:5c:8d:ed:6a:1d:1b:dd:5d:8f: 00:ca:74:9a:41:9c:0c:92:47:31:0b:c3:b5:c4:5a: 2f:8c:93:b8:c9:51:b7:df:98:59:2c:b0:28:23:22: ff:3e:93:38:37:ac:9c:e3:ae:d1:77:7f:cd:8d:aa: 57:af:47:30:96:9b:24:b2:b8:a5:7b:6f:c8:35:f2: bb:77:7f:d7:00:cd:5e:c2:f6:5d:92:4a:e1:8a:54: 4b:ac:89:3f:2c:1d:77:90:ea:d0:aa:ff:25:61:10: ac:3a:52:a8:65:08:e2:c5:41:74:7f:c2:bb:f7:25: 33:40:9a:5c:5e:ab:43:b8:fb:4b:17:ca:65:17:a4: 30:49:6f:96:58:91:e8:65:ec:ff:99:88:fc:ec:71: 46:91:29:e2:51:26:29:5e:c2:11:c7:09:3c:b2:3c: bf:25:3d:f6:e4:41:43:3a:e2:38:09:3a:64:70:b7: f0:1c:8b:60:79:88:95:24:b1:9d:b1:80:b0:87:3d: 59:e4:d7:28:ba:3d:75:bc:ab:6b:84:76:a3:10:89: 8d:1c:df:91:9c:3e:71:fc:54:08:ec:5e:b3:75:37: ce:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:32:13:C8:44:13:8E:69:64:52:05:6F:48:05:2E:6A:E3:85:24:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2069ed3-75df-3373-a509-7cfa80b12473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:b3:07:77:2c:a3:ff:52:71:6c:d7:8d:a9:c0:07:f4:dc:49: 8b:b5:94:ea:46:e7:b6:87:a5:c6:ae:da:ab:5a:8f:17:98:c6: 2e:cd:2c:3d:6d:10:e2:4b:6c:c5:d8:50:b2:23:15:79:06:5d: f7:79:12:02:df:fa:de:79:54:24:bb:0a:e9:b5:68:7f:75:90: b0:78:b3:fe:4e:28:65:c6:fe:9d:f0:68:40:3a:c2:75:9e:a9: ec:27:00:90:29:d5:57:89:fd:87:2c:3c:9f:80:55:c1:d7:a4: d6:9a:16:71:22:d5:fe:65:70:94:35:80:b9:62:0e:b7:a6:ca: fb:0b:ad:9f:0e:3d:f7:b6:97:fc:f1:eb:2a:4b:14:15:ed:88: 5e:e6:ea:28:39:8b:4a:05:b1:2f:cb:25:ab:14:a7:b4:1f:8c: 48:d7:4b:44:65:59:31:60:cf:c7:7a:f6:9c:78:24:f4:3f:5a: d8:4a:86:3a:35:9d:2d:60:79:46:9a:f1:c7:8a:0f:fd:3b:be: ac:3e:37:df:ba:43:79:c2:c4:a4:db:09:01:3d:73:cb:09:fc: f4:3b:73:cf:0d:91:67:fa:b5:6e:0c:2d:50:31:4c:d0:f3:cb: 9d:f7:d5:ac:d8:59:98:15:52:b0:2f:e8:f3:2e:42:fd:53:2b: 7e:ef:9d:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fdWVlNZ8ja0gPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk MmZmZTgwZmUtMDQ4Zi00MWQ5LThhNzctYzgxNWQyMmI4ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaLcU5xr4SdOtA8wiPN+pTW890Q+V+f9Ipvz SEy2ORFc7f9cje1qHRvdXY8AynSaQZwMkkcxC8O1xFovjJO4yVG335hZLLAoIyL/ PpM4N6yc467Rd3/NjapXr0cwlpsksrile2/INfK7d3/XAM1ewvZdkkrhilRLrIk/ LB13kOrQqv8lYRCsOlKoZQjixUF0f8K79yUzQJpcXqtDuPtLF8plF6QwSW+WWJHo Zez/mYj87HFGkSniUSYpXsIRxwk8sjy/JT325EFDOuI4CTpkcLfwHItgeYiVJLGd sYCwhz1Z5Ncouj11vKtrhHajEImNHN+RnD5x/FQI7F6zdTfOHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIyE8hEE45pZFIFb0gFLmrjhSSIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTIwNjllZDMtNzVkZi0z MzczLWE1MDktN2NmYTgwYjEyNDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCzB3cso/9ScWzXjanAB/TcSYu1lOpG57aHpcau2qtajxeYxi7NLD1t EOJLbMXYULIjFXkGXfd5EgLf+t55VCS7Cum1aH91kLB4s/5OKGXG/p3waEA6wnWe qewnAJAp1VeJ/YcsPJ+AVcHXpNaaFnEi1f5lcJQ1gLliDremyvsLrZ8OPfe2l/zx 6ypLFBXtiF7m6ig5i0oFsS/LJasUp7QfjEjXS0RlWTFgz8d69px4JPQ/WthKhjo1 nS1geUaa8ceKD/07vqw+N9+6Q3nCxKTbCQE9c8sJ/PQ7c88NkWf6tW4MLVAxTNDz y5331azYWZgVUrAv6PMuQv1TK37vnXM= -----END CERTIFICATE-----Generated at Tue Oct 27 03:49:23 2026 by rpki-client