$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2e386a9-55ad-3605-9702-c6f331e0cd0c.roa File: a2e386a9-55ad-3605-9702-c6f331e0cd0c.roa (raw, json) Hash identifier: eq79gtI5Pa7yLqgV9fp/Uh12CeyJVMxLL61UI1s2BjY= Subject key identifier: 8F:13:D8:63:75:1A:B3:84:E3:C3:93:76:D6:29:27:E7:BA:52:39:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7BB3061788C9FA9C7A97B200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2e386a9-55ad-3605-9702-c6f331e0cd0c.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 36183 IP address blocks: 172.224.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:06:17:88:c9:fa:9c:7a:97:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=1ce7a6e9-c494-41c5-906f-597457b3735a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:63:42:63:b3:95:19:a6:17:42:7b:97:d8:ce: 1c:b7:94:25:5b:6b:9f:b3:93:ab:a9:6e:6a:ed:36: 55:61:5d:c1:a4:df:d7:38:b8:bf:ef:15:7e:f0:72: dd:a2:77:1d:7a:14:4a:82:ef:71:62:96:60:cd:b5: 85:e0:38:99:cf:c2:c9:c9:d6:29:f6:de:fe:93:5f: 1d:0c:c4:f5:6d:03:8f:47:5b:69:71:0a:ff:e2:bd: c2:ab:8d:aa:43:b2:d7:25:ec:e0:4a:32:05:ad:12: 1c:7c:b6:df:2e:3f:45:47:9d:e7:b3:05:1f:05:f3: 20:d9:56:cd:83:b0:2f:6c:d3:46:9b:60:f2:1c:18: 60:91:b5:d0:7e:e9:82:7b:e3:5a:ee:4d:64:60:34: 93:96:95:8c:6f:7f:64:bc:a1:b7:f6:82:e7:46:7b: c4:97:f2:a1:75:f3:68:20:4b:0f:5b:e7:91:f7:27: 2f:04:70:b4:06:17:69:f5:d2:d1:58:8e:22:73:56: bf:9e:37:63:cc:61:e5:71:b4:fd:6a:12:61:b4:a2: e5:97:6d:87:5a:a3:4b:b8:bf:a6:53:e2:35:69:a5: 99:c4:80:8e:10:14:65:e1:71:93:56:d8:91:ac:c1: 23:b1:54:31:74:8f:b8:46:d6:61:c0:cc:32:a4:06: b2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:13:D8:63:75:1A:B3:84:E3:C3:93:76:D6:29:27:E7:BA:52:39:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2e386a9-55ad-3605-9702-c6f331e0cd0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:e4:52:95:03:4a:da:67:e4:50:e1:d5:f0:bc:f1:dc:c9:2d: f2:53:27:29:c9:c7:9b:9c:fe:48:27:fa:35:96:24:0b:9a:c7: ac:11:68:8e:4f:91:6f:ab:b8:1b:ce:d3:76:81:2b:ed:49:06: bb:08:02:aa:ac:10:18:2d:65:48:0b:3a:6f:6c:c9:28:39:04: 07:ce:22:65:91:9b:50:e8:02:ac:6b:dd:b2:2b:7a:ac:cf:98: d2:9d:4a:f0:ec:ba:db:c3:97:0c:c0:ce:90:ec:b8:35:d3:ed: d9:f3:29:ad:a6:01:e5:e2:5b:54:0f:b2:1b:a9:c1:87:a5:68: 7c:13:c6:f7:05:3b:51:fc:fa:f6:2b:10:c3:cd:f9:91:bd:a1: 7f:70:f3:2c:8f:90:92:9a:4b:66:e0:d9:1c:79:dd:3d:88:96: af:37:3b:86:25:c4:cf:4b:aa:e3:98:c7:19:76:82:1c:6d:61: 54:5f:a5:97:54:94:7f:fa:c7:1d:fd:f6:ac:4b:51:e6:ea:c7: 04:35:57:dc:6f:b7:50:e4:56:89:c0:3a:5f:35:25:5a:ba:45: 09:62:52:41:8d:a2:e8:3c:48:b1:37:01:73:fa:c0:98:5d:1f: 68:79:f8:24:e0:25:c6:b6:32:53:8b:d5:0c:0b:4b:1e:45:28: 4a:d8:3b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swYXiMn6nHqXsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk MWNlN2E2ZTktYzQ5NC00MWM1LTkwNmYtNTk3NDU3YjM3MzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2NCY7OVGaYXQnuX2M4ct5QlW2ufs5OrqW5q 7TZVYV3BpN/XOLi/7xV+8HLdoncdehRKgu9xYpZgzbWF4DiZz8LJydYp9t7+k18d DMT1bQOPR1tpcQr/4r3Cq42qQ7LXJezgSjIFrRIcfLbfLj9FR53nswUfBfMg2VbN g7AvbNNGm2DyHBhgkbXQfumCe+Na7k1kYDSTlpWMb39kvKG39oLnRnvEl/KhdfNo IEsPW+eR9ycvBHC0Bhdp9dLRWI4ic1a/njdjzGHlcbT9ahJhtKLll22HWqNLuL+m U+I1aaWZxICOEBRl4XGTVtiRrMEjsVQxdI+4RtZhwMwypAay/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8T2GN1GrOE48OTdtYpJ+e6UjmiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTJlMzg2YTktNTVhZC0z NjA1LTk3MDItYzZmMzMxZTBjZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOC7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbkUpUDStpn5FDh1fC88dzJLfJTJynJx5uc/kgn+jWWJAuax6wRaI5P kW+ruBvO03aBK+1JBrsIAqqsEBgtZUgLOm9sySg5BAfOImWRm1DoAqxr3bIreqzP mNKdSvDsutvDlwzAzpDsuDXT7dnzKa2mAeXiW1QPshupwYelaHwTxvcFO1H8+vYr EMPN+ZG9oX9w8yyPkJKaS2bg2Rx53T2Ilq83O4YlxM9LquOYxxl2ghxtYVRfpZdU lH/6xx399qxLUebqxwQ1V9xvt1DkVonAOl81JVq6RQliUkGNoug8SLE3AXP6wJhd H2h5+CTgJca2MlOL1QwLSx5FKErYOzA= -----END CERTIFICATE-----Generated at Sat Oct 24 20:54:01 2026 by rpki-client