$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa File: b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa (raw, json) Hash identifier: sPvVFj955CL0xPywHj2e6Y3vniUe+9TIPdx6hZIpnrg= Subject key identifier: 11:A6:E0:37:E2:7E:D1:57:82:B5:41:19:15:A3:02:EA:B4:CC:B5:E1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7BB3096D56DB4264F4CB9F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 36183 IP address blocks: 172.224.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:09:6d:56:db:42:64:f4:cb:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=f60db0c5-da99-4128-8620-a987c9a69aff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:84:f5:39:b0:ec:10:57:2e:e3:6e:c1:01:33: ef:bd:50:4e:8d:8d:82:45:80:ab:a7:8a:b9:e6:58: 55:94:51:1c:4a:b6:8a:8d:f3:b6:2b:94:87:b5:7c: 54:3d:13:b2:43:5d:8f:e7:52:7f:7a:af:3f:ad:d5: 5b:ee:2a:f3:ce:25:e8:0e:7d:21:39:c8:47:05:25: 2d:66:3e:d9:b4:42:3d:90:5e:86:bc:f6:fc:10:bf: ec:b5:2f:65:63:44:77:b7:d1:3a:23:15:f1:57:86: 56:40:13:0b:47:43:c8:31:a3:2c:10:81:37:93:c9: a1:ad:e1:1d:20:0b:a8:07:ed:36:92:92:f4:15:6b: 47:04:b7:c8:02:36:6e:3d:7a:8b:b2:5d:6f:2c:2f: a4:59:fc:25:2d:19:95:d3:ad:06:e6:66:82:4f:e6: df:81:bf:12:d7:98:35:1a:76:3a:d0:96:3a:4b:72: 05:f2:57:a2:00:52:64:05:38:cf:39:9d:9f:de:36: 0c:65:f3:61:64:e7:6d:bf:99:8e:d9:4d:c1:60:18: b3:df:c2:74:ed:8b:1f:f8:9b:da:ce:b8:a0:b3:11: 64:48:6a:b1:ab:42:a5:53:df:c9:fa:4d:0d:bb:2d: 4f:fc:c3:22:87:7e:62:79:25:9b:e2:93:26:38:5d: 64:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A6:E0:37:E2:7E:D1:57:82:B5:41:19:15:A3:02:EA:B4:CC:B5:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c7:04:6a:63:85:ed:24:e0:b4:5a:48:b8:8f:07:23:18:ee: 54:1f:fe:6a:2c:24:0d:00:be:84:e0:bd:39:03:ef:3f:06:ef: b0:63:27:c3:3e:12:ab:4b:7c:78:12:44:ef:da:ce:30:82:ce: 02:1a:6b:55:41:72:31:31:10:26:7e:e4:0e:b5:27:4c:76:9b: 43:32:56:6e:00:80:27:d0:c9:7e:75:10:bf:35:5b:4d:69:4e: cb:d5:b1:fd:ca:3c:27:f7:ed:ea:fa:ab:87:0f:46:9d:42:13: cc:c6:b0:60:01:8d:01:23:28:da:56:61:91:99:72:1f:b8:56: fe:fe:67:29:5c:2c:fd:e9:6a:00:ee:ec:9c:11:92:eb:44:3a: 59:1f:44:5b:6a:03:e6:e3:f0:6f:69:7e:78:3a:13:d6:38:08: 4a:ed:e2:2d:0b:07:dc:ab:0d:ec:29:2d:23:b4:c7:c4:8d:d4: 4e:84:d3:54:4e:4a:99:86:33:c3:01:62:53:9d:32:26:41:c4: 57:d1:00:c0:2d:45:52:43:30:e7:f0:76:d1:be:be:67:d0:f4: 01:08:08:c9:d7:23:f4:05:cd:8c:b6:3c:52:6d:6f:46:e9:b9: 9d:42:8c:df:98:fd:14:50:68:bd:e5:05:a1:17:93:6f:9a:26: 32:fc:d8:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swltVttCZPTLn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk ZjYwZGIwYzUtZGE5OS00MTI4LTg2MjAtYTk4N2M5YTY5YWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IT1ObDsEFcu427BATPvvVBOjY2CRYCrp4q5 5lhVlFEcSraKjfO2K5SHtXxUPROyQ12P51J/eq8/rdVb7irzziXoDn0hOchHBSUt Zj7ZtEI9kF6GvPb8EL/stS9lY0R3t9E6IxXxV4ZWQBMLR0PIMaMsEIE3k8mhreEd IAuoB+02kpL0FWtHBLfIAjZuPXqLsl1vLC+kWfwlLRmV060G5maCT+bfgb8S15g1 GnY60JY6S3IF8leiAFJkBTjPOZ2f3jYMZfNhZOdtv5mO2U3BYBiz38J07Ysf+Jva zrigsxFkSGqxq0KlU9/J+k0Nuy1P/MMih35ieSWb4pMmOF1kXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGm4DfiftFXgrVBGRWjAuq0zLXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjE0YzIzNDYtY2U4NC0z MDgyLTliZDEtZDUzYjY2YzZiMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTHBGpjhe0k4LRaSLiPByMY7lQf/mosJA0AvoTgvTkD7z8G77BjJ8M+ EqtLfHgSRO/azjCCzgIaa1VBcjExECZ+5A61J0x2m0MyVm4AgCfQyX51EL81W01p TsvVsf3KPCf37er6q4cPRp1CE8zGsGABjQEjKNpWYZGZch+4Vv7+ZylcLP3pagDu 7JwRkutEOlkfRFtqA+bj8G9pfng6E9Y4CErt4i0LB9yrDewpLSO0x8SN1E6E01RO SpmGM8MBYlOdMiZBxFfRAMAtRVJDMOfwdtG+vmfQ9AEICMnXI/QFzYy2PFJtb0bp uZ1CjN+Y/RRQaL3lBaEXk2+aJjL82NA= -----END CERTIFICATE-----Generated at Sun Oct 25 12:39:17 2026 by rpki-client