$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bec975bd-2d76-38fc-b8c4-cd13e9310f9c.roa File: bec975bd-2d76-38fc-b8c4-cd13e9310f9c.roa (raw, json) Hash identifier: 7r6J/ax68F2NRwOLarmzuslAoIMMYsgEXOk6PkNWp5M= Subject key identifier: 27:92:F1:CD:A0:57:2A:39:4F:16:A7:DC:14:62:8E:BE:79:71:1F:CA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F655DFA450D1BA8A8B68C3680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bec975bd-2d76-38fc-b8c4-cd13e9310f9c.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 36183 IP address blocks: 172.225.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:fa:45:0d:1b:a8:a8:b6:8c:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=cd0a93ce-dd93-44fe-bfd2-cd62ef3c3fd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:de:02:85:e2:58:b1:74:02:67:b2:b3:19:b6: 69:ab:1d:85:f6:62:68:a5:33:f3:e3:bc:51:9b:52: 8a:b1:42:fb:f1:31:a6:9d:ed:f9:e5:f4:3f:f6:7d: ff:b9:b3:13:24:01:a4:6f:c3:02:99:21:c7:df:0a: 59:db:ee:00:72:ef:fc:26:ac:9d:1e:70:f4:20:80: e5:4d:6f:e1:54:2e:a5:a5:14:bc:00:40:f4:33:15: 4b:cf:a3:cd:fa:e6:15:35:07:1e:38:32:86:b4:2c: de:d3:8a:18:d4:73:2f:ef:06:bb:a2:93:eb:e4:32: fc:15:d1:68:8c:a9:65:a7:5a:ac:40:c2:5a:e7:52: 45:a0:5c:b5:b1:41:67:f5:22:59:c8:61:4d:53:c8: 35:26:a4:33:7a:78:27:ef:ae:e5:f5:62:02:e4:15: 91:29:93:25:af:16:3b:ae:82:cc:06:80:2b:8a:10: 5e:c9:77:8d:00:59:8e:06:bd:5a:8d:49:f4:64:59: 65:18:56:28:6d:70:a2:0c:3e:dd:0f:bf:f2:1f:3d: 99:78:7e:a3:0c:e2:a6:82:0a:b7:c5:74:91:3a:7c: 5b:04:d5:2c:85:65:1d:96:38:69:df:c2:47:49:16: d5:43:a6:4b:82:f9:d5:12:63:db:81:47:af:8e:d7: d2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:92:F1:CD:A0:57:2A:39:4F:16:A7:DC:14:62:8E:BE:79:71:1F:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bec975bd-2d76-38fc-b8c4-cd13e9310f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:70:e5:3e:9f:9a:44:02:99:ec:63:b6:ca:00:27:19:fe:09: 78:9a:7c:24:57:eb:c9:3d:11:dc:63:87:19:db:40:6e:4e:f3: a2:a5:b2:2a:0e:41:3e:20:d3:75:0d:57:29:95:26:19:a2:87: dc:56:ec:41:2f:04:96:23:7a:e5:57:9e:55:8a:61:be:33:a7: 21:40:e8:53:51:89:0f:55:0a:28:75:4b:d5:f4:be:fd:b4:ce: d8:0d:f5:69:44:3b:d1:39:3c:b5:e2:d2:28:9e:67:44:ec:44: ee:1e:8d:95:0e:d2:40:6b:4d:3c:f1:8c:60:83:0f:a6:ae:e8: 5d:84:93:d9:0b:d8:30:17:dd:d0:1d:3f:1f:ba:fe:99:4b:10: bb:88:9f:fd:45:73:12:2f:26:aa:83:35:99:e8:09:16:6e:dc: 4b:0b:a8:d1:98:dd:f1:59:57:ed:46:29:93:19:1c:79:d8:e5: 62:99:46:4d:c5:38:42:13:67:6b:c6:00:5d:e8:f1:13:59:8e: 73:41:9c:a5:26:75:8d:33:60:86:6a:dc:9c:98:6b:08:2f:e4: 45:08:34:73:c2:26:d7:15:3e:6b:e0:f1:b8:d5:4a:6d:fb:e2: 23:3d:51:a7:a2:b1:e0:e6:3a:03:12:84:18:83:8c:89:78:5d: e5:c1:dd:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXfpFDRuoqLaMNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk Y2QwYTkzY2UtZGQ5My00NGZlLWJmZDItY2Q2MmVmM2MzZmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt4CheJYsXQCZ7KzGbZpqx2F9mJopTPz47xR m1KKsUL78TGmne355fQ/9n3/ubMTJAGkb8MCmSHH3wpZ2+4Acu/8JqydHnD0IIDl TW/hVC6lpRS8AED0MxVLz6PN+uYVNQceODKGtCze04oY1HMv7wa7opPr5DL8FdFo jKllp1qsQMJa51JFoFy1sUFn9SJZyGFNU8g1JqQzengn767l9WIC5BWRKZMlrxY7 roLMBoArihBeyXeNAFmOBr1ajUn0ZFllGFYobXCiDD7dD7/yHz2ZeH6jDOKmggq3 xXSROnxbBNUshWUdljhp38JHSRbVQ6ZLgvnVEmPbgUevjtfSQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeS8c2gVyo5Txan3BRijr55cR/KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmVjOTc1YmQtMmQ3Ni0z OGZjLWI4YzQtY2QxM2U5MzEwZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBw5T6fmkQCmexjtsoAJxn+CXiafCRX68k9EdxjhxnbQG5O86KlsioO QT4g03UNVymVJhmih9xW7EEvBJYjeuVXnlWKYb4zpyFA6FNRiQ9VCih1S9X0vv20 ztgN9WlEO9E5PLXi0iieZ0TsRO4ejZUO0kBrTTzxjGCDD6au6F2Ek9kL2DAX3dAd Px+6/plLELuIn/1FcxIvJqqDNZnoCRZu3EsLqNGY3fFZV+1GKZMZHHnY5WKZRk3F OEITZ2vGAF3o8RNZjnNBnKUmdY0zYIZq3JyYawgv5EUINHPCJtcVPmvg8bjVSm37 4iM9UaeiseDmOgMShBiDjIl4XeXB3Xk= -----END CERTIFICATE-----Generated at Fri Oct 23 20:39:44 2026 by rpki-client