$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa618f7f-8fdf-33b0-acf9-fe85f94a013b.roa File: aa618f7f-8fdf-33b0-acf9-fe85f94a013b.roa (raw, json) Hash identifier: K7n/i50aWJr+zd9i357Zh9jLWauLrKItkZNEzfuEhRw= Subject key identifier: 1A:98:10:8C:C5:BD:6B:E0:E4:CF:94:51:72:58:A3:47:92:35:E4:AC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F63F825E1C69C0D2F998B5E20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa618f7f-8fdf-33b0-acf9-fe85f94a013b.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.225.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:25:e1:c6:9c:0d:2f:99:8b:5e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=0d328f3e-cdc8-4a70-a7c8-eab1a5e83aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:56:df:a7:43:60:19:d7:a2:d9:f9:35:be:3b: 7d:6e:b1:be:9a:66:6e:39:66:71:9a:81:d0:f3:e5: b0:b4:3d:4e:a8:78:a6:3d:3a:9e:31:8b:18:ef:cd: e4:c4:e4:2b:81:ab:f1:0e:9e:60:bd:87:95:4f:f8: db:a6:5d:62:80:da:18:65:d8:c5:20:0d:31:94:fe: 6c:af:54:14:a5:2f:cd:7f:37:22:28:4b:f8:e8:2a: 25:10:a2:c7:69:62:21:71:75:ae:56:84:40:cd:c9: 12:c2:76:6a:e8:3a:b5:16:ff:9a:9a:63:cc:59:df: 75:4a:a8:e8:3c:4e:dc:a0:fa:6b:55:a2:1b:5f:d4: 2c:ba:72:82:2a:8b:e3:1a:08:c6:72:f6:35:d8:4c: df:b1:73:54:f6:d4:4e:a7:a6:b2:58:e7:fb:27:ef: ef:c0:00:e0:b0:d0:96:b2:4d:50:1a:69:71:67:ff: 6c:d4:12:85:2c:bc:ba:a5:18:21:fa:b7:fa:a6:77: e6:d7:74:65:c5:df:c6:1c:0e:55:3f:07:4d:e8:a7: d4:21:f4:13:5c:62:68:e1:5a:59:1f:6d:e7:de:ee: 00:ce:93:8e:55:d0:40:5e:37:37:b0:1c:64:d9:75: e6:75:5f:0b:d2:52:24:3e:d3:89:ca:b3:31:09:bb: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:98:10:8C:C5:BD:6B:E0:E4:CF:94:51:72:58:A3:47:92:35:E4:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa618f7f-8fdf-33b0-acf9-fe85f94a013b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:bf:2f:a0:2f:a7:aa:37:1c:ea:dc:17:d7:67:48:49:08:7e: 0c:d1:9f:b2:2e:17:8b:89:d3:aa:83:2c:8d:00:d5:90:15:7f: 5c:c6:eb:fb:0a:23:32:23:5a:39:f5:ca:84:93:e9:a6:86:cd: bf:85:ea:03:21:27:75:d8:87:40:43:cd:9d:12:bd:fd:8b:eb: bd:ad:8e:67:9d:12:eb:50:5b:96:d2:49:a7:71:7e:fe:9f:71: bd:34:fc:78:0b:9b:91:d9:88:74:af:73:31:d1:13:51:fd:0d: 90:06:70:15:a5:c2:d4:dd:f0:75:03:dd:4d:c2:e1:81:09:2e: 41:22:b5:19:bd:e2:74:16:8c:85:77:7f:83:74:02:d7:8b:b9: a7:f7:ba:1f:1f:02:b8:30:c8:a8:1f:29:a9:0f:1f:4c:24:c7: b7:81:cd:b0:7b:51:5e:02:fe:9f:d4:67:99:e2:58:cb:6c:a2: 18:cc:96:24:f9:24:57:64:c7:1b:76:4c:c8:1f:cd:94:32:49: c2:28:9b:e5:af:bb:72:5a:00:fb:34:d2:0c:56:f9:a9:65:9e: b7:bc:39:b5:79:b7:b9:98:47:30:82:ab:fb:2c:d6:a4:f7:fd: f9:f0:35:64:cc:c2:3e:67:91:56:e2:da:86:ad:50:80:9c:fb: 34:57:85:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+CXhxpwNL5mLXiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MGQzMjhmM2UtY2RjOC00YTcwLWE3YzgtZWFiMWE1ZTgzYWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1bfp0NgGdei2fk1vjt9brG+mmZuOWZxmoHQ 8+WwtD1OqHimPTqeMYsY783kxOQrgavxDp5gvYeVT/jbpl1igNoYZdjFIA0xlP5s r1QUpS/NfzciKEv46ColEKLHaWIhcXWuVoRAzckSwnZq6Dq1Fv+ammPMWd91Sqjo PE7coPprVaIbX9QsunKCKovjGgjGcvY12EzfsXNU9tROp6ayWOf7J+/vwADgsNCW sk1QGmlxZ/9s1BKFLLy6pRgh+rf6pnfm13Rlxd/GHA5VPwdN6KfUIfQTXGJo4VpZ H23n3u4AzpOOVdBAXjc3sBxk2XXmdV8L0lIkPtOJyrMxCbuX5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqYEIzFvWvg5M+UUXJYo0eSNeSsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE2MThmN2YtOGZkZi0z M2IwLWFjZjktZmU4NWY5NGEwMTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEe/L6Avp6o3HOrcF9dnSEkIfgzRn7IuF4uJ06qDLI0A1ZAVf1zG6/sK IzIjWjn1yoST6aaGzb+F6gMhJ3XYh0BDzZ0Svf2L672tjmedEutQW5bSSadxfv6f cb00/HgLm5HZiHSvczHRE1H9DZAGcBWlwtTd8HUD3U3C4YEJLkEitRm94nQWjIV3 f4N0AteLuaf3uh8fArgwyKgfKakPH0wkx7eBzbB7UV4C/p/UZ5niWMtsohjMliT5 JFdkxxt2TMgfzZQyScIom+Wvu3JaAPs00gxW+allnre8ObV5t7mYRzCCq/ss1qT3 /fnwNWTMwj5nkVbi2oatUICc+zRXhcw= -----END CERTIFICATE-----Generated at Sat Oct 24 01:22:16 2026 by rpki-client