$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a84c983b-f5a3-3c4f-bffc-c9eb62fc363b.roa File: a84c983b-f5a3-3c4f-bffc-c9eb62fc363b.roa (raw, json) Hash identifier: m7Zf+VVsAi7GQIFuFXNOCZ1usXmSw18HyLUHxbmfaq8= Subject key identifier: 0A:AC:51:CC:11:6E:0F:6B:71:3A:B0:92:60:80:D2:64:16:DF:EB:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F655DF981546901392FCA3740 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a84c983b-f5a3-3c4f-bffc-c9eb62fc363b.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 36183 IP address blocks: 172.225.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:f9:81:54:69:01:39:2f:ca:37:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=8b0fc182-d8aa-42f0-8cf0-db442426ef91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f1:56:f3:94:f7:7a:46:f9:54:5d:7e:54:75: d0:13:ac:44:81:0d:0b:13:62:e5:54:b7:03:3f:d0: e1:0e:0b:b9:2c:79:82:6d:de:77:1e:7d:48:86:4e: 3e:c5:fe:79:8c:c3:f9:a0:6d:db:6a:29:8a:73:aa: 2b:ff:2e:35:14:25:2e:ff:94:43:35:13:64:2c:dd: c1:b4:cc:d7:b7:54:7e:7d:db:fd:46:2e:00:88:85: 40:a3:5b:4b:06:a9:49:bc:aa:5f:83:f6:8d:45:9a: d6:3a:b8:84:25:7e:ed:12:88:d5:db:81:63:b5:98: 5e:f8:e1:66:d9:e5:83:36:ee:5d:00:1f:a7:98:84: ba:ff:9e:7b:c4:1e:ce:d5:6b:80:03:59:a7:2d:48: e7:6c:6b:33:a7:57:6c:38:0d:52:41:ba:f4:65:1e: 4b:40:2f:5f:d1:cc:db:0c:2f:f6:12:1b:fa:dc:cb: 85:ce:79:4a:47:73:74:a2:a4:f5:79:83:34:9f:63: 1f:84:d4:a6:8d:8a:d8:91:16:92:43:49:40:8b:5a: 5a:45:f8:00:86:20:0b:85:de:a3:76:63:41:52:a7: 69:6d:47:cc:ce:28:44:0c:3d:ac:ce:58:d8:c5:b3: 60:6e:2a:bc:b2:05:e8:f4:58:ac:df:b1:02:46:5d: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:AC:51:CC:11:6E:0F:6B:71:3A:B0:92:60:80:D2:64:16:DF:EB:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a84c983b-f5a3-3c4f-bffc-c9eb62fc363b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:57:5f:47:da:11:63:27:a0:d3:49:fc:ae:4b:54:02:53:5c: 06:1a:9c:8d:4d:b9:e7:cc:25:9b:92:07:31:31:24:e6:8d:e2: 61:a7:5c:09:ae:b4:6e:4e:05:d5:f0:5c:c6:fa:c5:9e:c8:31: 20:f4:26:df:e1:36:4e:12:49:67:5d:e4:e9:11:af:59:27:10: c6:86:33:13:72:ba:9d:a5:c8:6c:0e:52:04:08:c5:10:e0:e0: 23:ec:87:23:bb:48:49:0e:62:2c:c9:36:43:bf:8d:49:ba:bf: 78:91:77:56:27:97:3d:78:2c:33:9c:95:10:a7:df:7a:46:93: a8:76:6d:91:36:e3:ae:06:c0:aa:d8:64:3b:59:c2:8f:a3:52: 3d:5e:05:0d:3c:76:c9:a2:43:45:a2:2e:27:98:fb:4c:81:a9: e8:39:96:46:2e:3d:38:b5:4d:c6:05:dc:69:ad:22:9f:60:12: d9:9d:db:18:fb:cc:79:c6:e9:f4:67:51:9a:f8:c1:a3:e9:6c: 39:f1:8e:11:89:8d:9e:4f:02:13:03:69:f4:68:65:67:b6:7c: 6b:5a:7a:73:7c:cc:c3:e2:05:67:0a:d0:3d:35:8f:09:a5:c4: 95:e6:b5:74:4e:d0:14:8e:5d:78:e5:8b:7c:2e:a0:8d:e2:fd: 66:a2:f2:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXfmBVGkBOS/KN0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk OGIwZmMxODItZDhhYS00MmYwLThjZjAtZGI0NDI0MjZlZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/FW85T3ekb5VF1+VHXQE6xEgQ0LE2LlVLcD P9DhDgu5LHmCbd53Hn1Ihk4+xf55jMP5oG3baimKc6or/y41FCUu/5RDNRNkLN3B tMzXt1R+fdv9Ri4AiIVAo1tLBqlJvKpfg/aNRZrWOriEJX7tEojV24FjtZhe+OFm 2eWDNu5dAB+nmIS6/557xB7O1WuAA1mnLUjnbGszp1dsOA1SQbr0ZR5LQC9f0czb DC/2Ehv63MuFznlKR3N0oqT1eYM0n2MfhNSmjYrYkRaSQ0lAi1paRfgAhiALhd6j dmNBUqdpbUfMzihEDD2szljYxbNgbiq8sgXo9Fis37ECRl3xKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqsUcwRbg9rcTqwkmCA0mQW3+sMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTg0Yzk4M2ItZjVhMy0z YzRmLWJmZmMtYzllYjYyZmMzNjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5XX0faEWMnoNNJ/K5LVAJTXAYanI1NuefMJZuSBzExJOaN4mGnXAmu tG5OBdXwXMb6xZ7IMSD0Jt/hNk4SSWdd5OkRr1knEMaGMxNyup2lyGwOUgQIxRDg 4CPshyO7SEkOYizJNkO/jUm6v3iRd1Ynlz14LDOclRCn33pGk6h2bZE2464GwKrY ZDtZwo+jUj1eBQ08dsmiQ0WiLieY+0yBqeg5lkYuPTi1TcYF3GmtIp9gEtmd2xj7 zHnG6fRnUZr4waPpbDnxjhGJjZ5PAhMDafRoZWe2fGtaenN8zMPiBWcK0D01jwml xJXmtXRO0BSOXXjli3wuoI3i/Wai8ss= -----END CERTIFICATE-----Generated at Sun Oct 25 11:25:26 2026 by rpki-client