$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa88732e-a027-3852-b338-a0ad1f052d6c.roa File: aa88732e-a027-3852-b338-a0ad1f052d6c.roa (raw, json) Hash identifier: TMVfKBNrT9CApBB5rZXkAAM3DGEuoaMdkL+H5R4y9wc= Subject key identifier: 69:FF:14:50:DC:7B:19:78:CF:5F:9D:EC:8C:19:0E:8C:08:C7:E9:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7A4ED927B0238C1BC656EBD8 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa88732e-a027-3852-b338-a0ad1f052d6c.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 36183 IP address blocks: 172.224.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4e:d9:27:b0:23:8c:1b:c6:56:eb:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=05a2e33f-b53d-4db6-babe-cd1ab99f4d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:92:2b:f1:89:83:75:c3:a1:42:f5:0e:9f:8b: ed:76:85:ed:92:63:b7:37:e6:6b:3c:c6:a8:bf:02: 1b:cb:59:0b:d8:12:f9:4a:9f:98:95:5a:df:79:4e: b4:81:20:75:6a:2c:dc:df:69:47:52:da:b8:73:a7: 70:a1:83:86:1f:e8:4f:96:22:92:dd:77:7a:00:77: af:30:53:c4:0b:d6:f9:71:5b:55:3e:a8:55:a9:b6: 86:a1:c3:16:94:d5:b5:8b:26:68:d1:2b:ce:aa:c5: 29:bf:f7:df:44:d0:ae:2c:13:4a:50:b2:6e:30:2a: 6c:67:b7:35:50:94:a2:32:50:06:47:09:24:2c:12: b8:83:c2:8e:85:a1:2a:bf:8d:74:bd:aa:fa:d8:35: 61:b4:79:8d:bc:ca:22:15:0d:41:65:5b:35:00:53: 83:a1:9a:17:fc:40:b3:d7:46:d9:91:d5:5a:44:24: 33:72:86:3f:18:f2:4b:65:c6:54:1e:49:73:93:b2: ce:8b:64:95:49:c6:cb:08:26:41:ae:8c:ab:7c:e7: fa:98:da:81:74:31:ea:95:97:d9:aa:41:0f:da:65: 2a:01:a3:e1:5c:21:d2:f5:f5:41:e9:83:c3:b8:3a: ef:78:8e:49:df:1d:32:93:99:fa:de:db:1d:14:71: 5c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FF:14:50:DC:7B:19:78:CF:5F:9D:EC:8C:19:0E:8C:08:C7:E9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa88732e-a027-3852-b338-a0ad1f052d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f8:fa:2c:e1:0c:87:58:9c:b2:68:33:f5:32:f0:84:68:ce: b5:de:a5:9f:7c:27:e3:85:c2:9e:4c:51:65:30:ba:6b:96:61: 68:bd:5a:9b:01:f1:b5:65:cc:a6:40:58:bd:0e:cd:9a:40:98: 96:a0:55:2b:c6:0d:27:5b:0f:a4:8d:c2:a9:56:84:f6:90:73: 86:16:71:ea:bd:52:1c:f9:5f:1d:3c:e8:8c:ca:63:9e:2f:d8: f8:50:b2:7e:76:47:04:59:84:d8:e9:9e:f1:1c:ea:c3:29:62: 53:51:27:53:98:0c:d9:61:28:49:74:98:5c:e9:91:fc:db:37: 86:97:13:c5:57:6a:cd:74:09:13:02:c8:98:94:45:cb:6f:2f: 62:ed:1f:b4:cb:8b:3f:41:d2:59:11:93:09:5c:3a:9a:a4:25: 29:f4:a5:74:01:1e:85:83:7a:e1:45:35:6e:2f:e7:9e:88:9e: c2:1e:7d:6d:cb:c3:ef:4d:7d:42:27:77:d0:92:f7:6b:2d:10: 5a:f3:c0:02:7a:a3:95:6f:9b:61:08:2b:10:7b:9e:7e:bf:c3: 22:0d:4c:a6:b6:bb:3c:1d:f7:6b:db:9e:7e:3e:62:3d:1c:f7: d4:48:27:4c:16:5a:57:9c:e6:96:47:c8:7a:ba:d9:42:b6:f8: 21:08:eb:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TtknsCOMG8ZW69gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk MDVhMmUzM2YtYjUzZC00ZGI2LWJhYmUtY2QxYWI5OWY0ZDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpIr8YmDdcOhQvUOn4vtdoXtkmO3N+ZrPMao vwIby1kL2BL5Sp+YlVrfeU60gSB1aizc32lHUtq4c6dwoYOGH+hPliKS3Xd6AHev MFPEC9b5cVtVPqhVqbaGocMWlNW1iyZo0SvOqsUpv/ffRNCuLBNKULJuMCpsZ7c1 UJSiMlAGRwkkLBK4g8KOhaEqv410var62DVhtHmNvMoiFQ1BZVs1AFODoZoX/ECz 10bZkdVaRCQzcoY/GPJLZcZUHklzk7LOi2SVScbLCCZBroyrfOf6mNqBdDHqlZfZ qkEP2mUqAaPhXCHS9fVB6YPDuDrveI5J3x0yk5n63tsdFHFc1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn/FFDcexl4z1+d7IwZDowIx+kFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE4ODczMmUtYTAyNy0z ODUyLWIzMzgtYTBhZDFmMDUyZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJb4+izhDIdYnLJoM/Uy8IRozrXepZ98J+OFwp5MUWUwumuWYWi9WpsB 8bVlzKZAWL0OzZpAmJagVSvGDSdbD6SNwqlWhPaQc4YWceq9Uhz5Xx086IzKY54v 2PhQsn52RwRZhNjpnvEc6sMpYlNRJ1OYDNlhKEl0mFzpkfzbN4aXE8VXas10CRMC yJiURctvL2LtH7TLiz9B0lkRkwlcOpqkJSn0pXQBHoWDeuFFNW4v556InsIefW3L w+9NfUInd9CS92stEFrzwAJ6o5Vvm2EIKxB7nn6/wyINTKa2uzwd92vbnn4+Yj0c 99RIJ0wWWlec5pZHyHq62UK2+CEI604= -----END CERTIFICATE-----Generated at Wed Oct 21 21:10:31 2026 by rpki-client