$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf67070-83af-367c-b2c8-6a9939cbb29b.roa File: baf67070-83af-367c-b2c8-6a9939cbb29b.roa (raw, json) Hash identifier: hxkyoVE67DmbKChjOlhoPZGdztQ6DhR6PIzytqN0g0E= Subject key identifier: C9:0A:82:B2:C2:19:05:B7:87:D2:52:00:C2:43:B3:57:60:BB:BA:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F549D6DD1E584DABAE78C0E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf67070-83af-367c-b2c8-6a9939cbb29b.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 63949 IP address blocks: 172.236.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:6d:d1:e5:84:da:ba:e7:8c:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=6774c5de-89c1-4f5b-ba01-ea9d897071bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:0a:d7:0b:53:7b:da:ca:88:1a:6a:71:b6:57: 3c:94:4a:d8:f9:2f:e9:5b:57:99:fa:fc:21:0f:8e: 48:9a:a3:b8:46:2b:1b:72:e7:6a:00:bc:e9:36:12: c9:c8:f4:31:d0:b8:c1:d2:dc:8e:39:8e:88:53:90: cf:5b:98:05:b7:74:ad:03:3c:50:a5:7b:ac:9b:f3: 14:1e:d4:6a:f9:d3:43:67:da:45:c8:84:88:7d:78: 2e:69:ba:46:67:d5:5d:fc:b3:86:48:31:a3:99:5e: 98:1d:d3:15:8d:d4:64:ed:81:66:2e:da:d4:12:1d: 2e:9e:12:28:59:e3:a1:d2:2a:8f:9e:7d:0b:c6:17: fb:03:78:bc:a7:f0:3e:a0:79:2c:0e:0e:85:df:04: 35:f1:53:08:53:ad:bf:61:8a:f6:85:ed:e3:0d:7d: ec:01:ff:03:06:ca:d7:87:04:92:82:ac:d3:02:23: 3f:fb:9a:a6:1a:e2:44:4c:55:89:fc:fb:e3:ed:2c: 5c:be:e8:6b:26:62:5f:63:62:d4:92:31:f4:fc:c0: 5f:84:01:ee:50:4c:7c:6b:36:9a:db:fe:f5:7f:27: 7e:5b:e4:c9:ac:04:cf:e1:de:55:ad:fc:c8:82:61: 15:d5:f1:75:e6:b5:43:af:19:af:56:67:cb:15:65: 59:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0A:82:B2:C2:19:05:B7:87:D2:52:00:C2:43:B3:57:60:BB:BA:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/baf67070-83af-367c-b2c8-6a9939cbb29b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.236.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:84:57:4a:3e:39:9c:1e:e2:9c:54:bf:7f:ba:a7:c0:06:8f: 55:58:29:92:12:9d:c1:15:b8:d3:bd:d4:d6:ef:e5:f0:e1:71: 9f:62:b1:e7:c9:1c:da:66:18:e2:1f:36:4c:82:ab:72:28:dc: d4:d9:a3:8d:59:5e:d5:e2:a7:2f:05:db:54:cb:3d:0b:9c:e9: fc:66:25:87:32:ed:29:f0:0c:49:c0:b4:1f:f6:90:b7:18:15: 2f:89:67:3b:31:fd:32:c6:8d:7e:75:ed:b3:d4:85:25:ed:4e: e8:a6:90:0c:5c:db:8d:89:ea:c4:e5:8e:60:96:1e:27:15:2e: 2c:46:43:e3:3d:9a:fe:38:ea:29:ad:34:53:61:bd:e5:04:58: 08:d3:42:47:44:14:0f:51:85:38:ae:83:9e:48:59:0e:6e:13: 75:9d:5a:4a:63:b6:ba:a7:44:7e:bf:e6:18:16:f4:6b:6a:2b: a1:4e:f5:87:b3:92:29:8e:b5:fc:a2:c9:8a:74:85:6c:ce:75: 10:b8:31:21:3c:57:e1:3b:b3:04:d1:b0:d2:e5:8a:97:d8:82: 62:e0:ac:cd:28:bf:f2:43:97:83:26:2d:e0:5c:63:c4:7a:a5: 08:50:c6:29:f6:c7:3e:7f:89:f4:3f:43:9c:92:7d:45:2d:12: 5f:9a:4e:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnW3R5YTauueMDgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk Njc3NGM1ZGUtODljMS00ZjViLWJhMDEtZWE5ZDg5NzA3MWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQrXC1N72sqIGmpxtlc8lErY+S/pW1eZ+vwh D45ImqO4RisbcudqALzpNhLJyPQx0LjB0tyOOY6IU5DPW5gFt3StAzxQpXusm/MU HtRq+dNDZ9pFyISIfXguabpGZ9Vd/LOGSDGjmV6YHdMVjdRk7YFmLtrUEh0unhIo WeOh0iqPnn0Lxhf7A3i8p/A+oHksDg6F3wQ18VMIU62/YYr2he3jDX3sAf8DBsrX hwSSgqzTAiM/+5qmGuJETFWJ/Pvj7SxcvuhrJmJfY2LUkjH0/MBfhAHuUEx8azaa 2/71fyd+W+TJrATP4d5VrfzIgmEV1fF15rVDrxmvVmfLFWVZxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMkKgrLCGQW3h9JSAMJDs1dgu7pqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmFmNjcwNzAtODNhZi0z NjdjLWIyYzgtNmE5OTM5Y2JiMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2EV0o+OZwe4pxUv3+6p8AGj1VYKZISncEVuNO91Nbv5fDhcZ9isefJ HNpmGOIfNkyCq3Io3NTZo41ZXtXipy8F21TLPQuc6fxmJYcy7SnwDEnAtB/2kLcY FS+JZzsx/TLGjX517bPUhSXtTuimkAxc242J6sTljmCWHicVLixGQ+M9mv446imt NFNhveUEWAjTQkdEFA9RhTiug55IWQ5uE3WdWkpjtrqnRH6/5hgW9GtqK6FO9Yez kimOtfyiyYp0hWzOdRC4MSE8V+E7swTRsNLlipfYgmLgrM0ov/JDl4MmLeBcY8R6 pQhQxin2xz5/ifQ/Q5ySfUUtEl+aTgM= -----END CERTIFICATE-----Generated at Sat Oct 24 18:51:11 2026 by rpki-client