$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0e5737f-92a1-36ea-82da-d481e7d2812b.roa File: c0e5737f-92a1-36ea-82da-d481e7d2812b.roa (raw, json) Hash identifier: r6NVSK2/pxQuKAZiFjKFw8MI+xbkz8+/2s96uGfCvQI= Subject key identifier: 91:E2:BF:28:18:5E:54:26:50:2F:3A:BF:FB:EA:62:60:EB:10:39:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F58CD678BB7B52B521ACF8980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0e5737f-92a1-36ea-82da-d481e7d2812b.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 63949 IP address blocks: 172.235.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:67:8b:b7:b5:2b:52:1a:cf:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=19492a3f-8f79-49cb-9da3-9c219ccbc13e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:90:31:17:cd:1c:e7:51:5c:b4:c9:25:87:aa: b8:d5:b6:bf:ba:c0:cd:5b:3a:bb:fd:5b:b9:59:e1: 1d:01:ac:25:ba:25:b8:8a:70:c5:d2:0a:cf:41:a7: bb:c2:39:d0:16:9f:26:d2:7e:64:aa:82:d7:3c:44: bc:7a:86:09:f1:28:2f:d3:a1:e3:04:4d:d1:f7:99: e2:b6:50:4e:11:18:82:aa:0d:a8:c5:40:04:ff:44: e1:fe:6b:41:aa:d8:2f:35:f7:96:71:16:ca:1c:b1: 60:d2:13:75:fa:8a:5b:9d:f3:8f:fb:b4:54:1e:62: 53:89:7d:c9:83:a5:9e:1b:11:97:e4:4b:e8:25:4d: da:41:74:2e:ab:24:56:da:0a:35:66:09:b6:aa:8b: b6:ee:b8:b6:8e:ec:be:93:9d:af:3c:78:f7:17:08: 85:c5:0b:e4:59:e5:30:86:07:25:07:c3:44:53:79: 39:8d:27:fd:ad:3a:fd:44:9c:d4:43:02:25:a4:61: 69:fa:e1:73:56:fe:23:e1:12:4a:0f:f6:1b:9c:92: df:37:11:7f:ca:42:24:3e:8f:11:54:4a:24:ee:b3: 65:00:2e:30:54:68:dc:97:a0:36:82:a8:db:39:60: d3:f5:58:88:3d:6f:1a:40:70:9f:82:46:a4:c8:bb: d9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:E2:BF:28:18:5E:54:26:50:2F:3A:BF:FB:EA:62:60:EB:10:39:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c0e5737f-92a1-36ea-82da-d481e7d2812b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:dd:58:38:a0:1e:01:87:e7:94:87:a7:47:32:da:f5:b0:de: d8:61:50:1c:3b:d6:e5:1d:db:fc:5a:e2:8f:ec:bc:03:fd:0d: 02:e3:0f:fd:ea:3a:47:64:f1:92:0f:4a:ca:16:3d:04:19:6e: 47:7d:b5:99:ff:33:47:97:30:70:86:00:9e:81:51:d4:57:91: c4:d5:ea:8f:ca:f9:ce:7b:69:f4:4e:a1:99:89:a0:da:b9:26: 04:8f:73:fe:48:a0:73:b8:a1:c2:81:ed:b4:ed:c6:8a:78:f9: bc:db:06:7e:a9:0f:fc:18:fa:e2:e2:3d:63:f1:ef:f7:53:97: 6a:99:31:ab:a5:2f:03:fb:47:6d:79:ee:ae:9d:80:cc:6c:31: fa:37:df:69:dc:17:3e:36:1b:28:4a:6c:e7:19:b8:37:59:77: 62:28:eb:f4:6b:d8:ff:ef:f1:6c:f2:2e:b2:cb:0f:df:71:40: 3d:67:98:06:3a:34:56:26:48:2a:b5:2b:89:47:1e:3c:9d:6d: 2d:05:d5:4b:8d:d3:b0:dc:47:61:2b:52:fa:6a:95:25:f3:d1: 52:04:08:c3:f9:06:78:f0:0e:07:3f:da:c7:f8:be:f6:8e:d8: be:d8:df:77:3f:78:2c:0c:04:30:67:53:1b:cb:58:cd:38:eb: 48:28:8c:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzWeLt7UrUhrPiYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk MTk0OTJhM2YtOGY3OS00OWNiLTlkYTMtOWMyMTljY2JjMTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpAxF80c51FctMklh6q41ba/usDNWzq7/Vu5 WeEdAawluiW4inDF0grPQae7wjnQFp8m0n5kqoLXPES8eoYJ8Sgv06HjBE3R95ni tlBOERiCqg2oxUAE/0Th/mtBqtgvNfeWcRbKHLFg0hN1+opbnfOP+7RUHmJTiX3J g6WeGxGX5EvoJU3aQXQuqyRW2go1Zgm2qou27ri2juy+k52vPHj3FwiFxQvkWeUw hgclB8NEU3k5jSf9rTr9RJzUQwIlpGFp+uFzVv4j4RJKD/YbnJLfNxF/ykIkPo8R VEok7rNlAC4wVGjcl6A2gqjbOWDT9ViIPW8aQHCfgkakyLvZ1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHivygYXlQmUC86v/vqYmDrEDlxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzBlNTczN2YtOTJhMS0z NmVhLTgyZGEtZDQ4MWU3ZDI4MTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOt4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfdWDigHgGH55SHp0cy2vWw3thhUBw71uUd2/xa4o/svAP9DQLjD/3q Okdk8ZIPSsoWPQQZbkd9tZn/M0eXMHCGAJ6BUdRXkcTV6o/K+c57afROoZmJoNq5 JgSPc/5IoHO4ocKB7bTtxop4+bzbBn6pD/wY+uLiPWPx7/dTl2qZMaulLwP7R215 7q6dgMxsMfo332ncFz42GyhKbOcZuDdZd2Io6/Rr2P/v8WzyLrLLD99xQD1nmAY6 NFYmSCq1K4lHHjydbS0F1UuN07DcR2ErUvpqlSXz0VIECMP5BnjwDgc/2sf4vvaO 2L7Y33c/eCwMBDBnUxvLWM0460gojGU= -----END CERTIFICATE-----Generated at Thu Oct 22 07:31:42 2026 by rpki-client