$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2b302a7-7472-36be-b827-81ff12827b21.roa File: c2b302a7-7472-36be-b827-81ff12827b21.roa (raw, json) Hash identifier: uQ41qgF8/BxX4A4MjZqQYbF/aXTsCrx/aFChd3WGaTI= Subject key identifier: 05:E9:F8:4E:8F:6F:CF:2E:D3:CD:EC:03:A7:11:DF:3F:94:02:E1:7D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F63F824FC7ECD45555D6F4100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2b302a7-7472-36be-b827-81ff12827b21.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.225.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:24:fc:7e:cd:45:55:5d:6f:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=e0f759d0-05df-48d2-aa10-f034900c18f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:d8:b1:4a:ef:66:70:b1:92:b7:e1:93:9f: 58:de:80:56:54:6b:0f:34:19:6e:90:72:7a:81:07: dc:ba:d7:b0:bd:c2:2d:bd:95:73:cc:a0:a8:d6:1a: 00:d3:63:dc:4d:f7:65:97:98:ff:dd:b4:2d:c8:34: e1:fb:e6:5a:77:50:e7:bc:c6:02:36:14:66:ae:c3: bb:fa:c7:75:6e:09:23:f7:b2:4c:ab:c0:72:d1:86: 05:72:1d:a7:c7:0f:37:e8:cb:69:b1:d7:29:17:d9: 72:ab:51:a0:d7:40:6f:3a:95:aa:00:c6:db:95:ac: 69:74:f5:2c:ae:cd:ec:b8:66:54:88:6e:92:de:0f: 5b:f3:03:d0:ec:8d:a6:6e:9b:ad:d9:fd:86:92:2f: 0d:d5:72:03:26:de:d2:2a:48:e2:4f:49:e3:c1:5c: 86:7e:bf:e1:22:e3:f2:43:df:8a:9c:5e:c8:bf:47: b7:d2:de:20:ce:31:e3:11:b3:5f:f6:80:ec:c9:04: 95:b5:56:28:4e:06:45:a6:8b:bc:a1:bd:6b:95:21: 22:fc:4c:d0:50:3c:25:34:a5:66:b4:8c:90:e7:70: d5:44:ef:21:7f:18:07:0c:3d:8e:a7:ba:f2:50:03: cf:83:e0:7e:dd:b6:52:7c:34:40:5e:9a:19:33:c6: c8:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E9:F8:4E:8F:6F:CF:2E:D3:CD:EC:03:A7:11:DF:3F:94:02:E1:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2b302a7-7472-36be-b827-81ff12827b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:c3:6b:d6:06:5a:02:79:14:79:a6:91:a4:18:12:4f:7e:d3: 8a:54:9c:16:2e:79:b7:c8:4d:6d:ac:8b:1a:71:49:c1:9f:8f: 9a:2d:bf:34:d6:79:4d:26:d8:0d:a5:af:14:41:70:c1:35:a3: 8f:29:98:52:42:b6:e5:09:cf:67:47:a9:9e:fa:df:5c:e8:2b: b1:bb:27:19:d6:97:88:ce:3c:65:bc:7f:2f:e7:af:cc:38:b0: 71:45:e7:c5:9f:95:20:6d:ea:cd:36:de:01:75:26:2b:0f:5b: 54:92:8a:d1:ec:b4:17:cd:21:3b:03:11:e4:67:43:6a:e1:04: 26:02:1f:46:6e:aa:7c:6a:4d:d5:01:26:8a:bc:16:ea:92:24: 18:25:e7:0e:0f:3a:28:5c:da:5a:3b:7e:21:dd:52:d8:79:97: 17:f5:88:a6:7b:68:62:0b:a9:49:cf:e5:a0:80:f4:19:8f:78: 0c:c0:e4:02:0e:fa:40:77:ee:dc:fa:7c:51:1a:69:de:86:22: 2f:b0:f4:89:b3:e3:34:dc:be:cb:b0:53:c4:37:3a:91:bb:79: be:99:71:64:32:b5:cd:bd:3d:81:9a:fb:27:23:1c:ec:a3:b8: eb:3d:44:7e:a2:f6:24:13:97:be:be:01:6a:11:58:6e:85:ba: 92:f1:bb:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+CT8fs1FVV1vQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk ZTBmNzU5ZDAtMDVkZi00OGQyLWFhMTAtZjAzNDkwMGMxOGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvfYsUrvZnCxkrfhk59Y3oBWVGsPNBlukHJ6 gQfcutewvcItvZVzzKCo1hoA02PcTfdll5j/3bQtyDTh++Zad1DnvMYCNhRmrsO7 +sd1bgkj97JMq8By0YYFch2nxw836MtpsdcpF9lyq1Gg10BvOpWqAMbblaxpdPUs rs3suGZUiG6S3g9b8wPQ7I2mbput2f2Gki8N1XIDJt7SKkjiT0njwVyGfr/hIuPy Q9+KnF7Iv0e30t4gzjHjEbNf9oDsyQSVtVYoTgZFpou8ob1rlSEi/EzQUDwlNKVm tIyQ53DVRO8hfxgHDD2Op7ryUAPPg+B+3bZSfDRAXpoZM8bI0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXp+E6Pb88u083sA6cR3z+UAuF9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzJiMzAyYTctNzQ3Mi0z NmJlLWI4MjctODFmZjEyODI3YjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLDa9YGWgJ5FHmmkaQYEk9+04pUnBYuebfITW2sixpxScGfj5otvzTW eU0m2A2lrxRBcME1o48pmFJCtuUJz2dHqZ7631zoK7G7JxnWl4jOPGW8fy/nr8w4 sHFF58WflSBt6s023gF1JisPW1SSitHstBfNITsDEeRnQ2rhBCYCH0ZuqnxqTdUB Joq8FuqSJBgl5w4POihc2lo7fiHdUth5lxf1iKZ7aGILqUnP5aCA9BmPeAzA5AIO +kB37tz6fFEaad6GIi+w9Imz4zTcvsuwU8Q3OpG7eb6ZcWQytc29PYGa+ycjHOyj uOs9RH6i9iQTl76+AWoRWG6FupLxu5M= -----END CERTIFICATE-----Generated at Mon Oct 26 23:35:00 2026 by rpki-client