$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2f7767f-0cb7-3dae-af90-c850c76d138b.roa File: c2f7767f-0cb7-3dae-af90-c850c76d138b.roa (raw, json) Hash identifier: 1wn/wQuvHsai0Yze5sNmDwYLZM5BLbTcju6ijw5Sgu0= Subject key identifier: 57:0A:96:17:B9:3C:7B:2E:90:8A:15:A5:2D:E8:19:FE:58:A6:FF:AF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F90A3136FAD51553524E21340 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2f7767f-0cb7-3dae-af90-c850c76d138b.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 20940 IP address blocks: 72.247.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:13:6f:ad:51:55:35:24:e2:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=aff6f1ed-43e4-4570-ae1e-fc62aa2370df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d7:1b:fd:7d:b9:ac:85:b5:82:87:cc:7a:67: 78:39:7e:81:2b:63:27:e4:1e:ec:47:9a:08:64:f5: 26:43:61:b5:b6:02:48:f9:18:af:e8:b8:83:b1:6a: 6f:8d:a0:8e:41:7d:f1:0c:fb:d8:13:b5:1f:3d:fc: 5f:df:14:9b:90:6b:2c:0d:5b:30:4a:31:54:13:44: df:db:ba:42:18:4e:dd:7b:67:f5:65:b3:1d:c7:b5: db:14:d9:9a:4d:70:4d:fe:07:35:38:9f:b8:5a:91: 80:65:23:88:44:84:d1:3e:1b:76:b7:40:84:fe:0c: b0:15:8e:48:e1:b3:af:49:e5:08:95:a8:83:8d:25: c4:7b:ea:29:73:ce:10:5a:8c:d7:d2:e2:64:65:12: 52:14:78:14:4b:3e:27:9f:3e:7d:61:6e:81:ac:2e: 97:a3:ba:a9:8f:28:05:0c:bc:af:77:00:ba:38:2b: 3c:ee:50:be:ca:7b:de:9a:44:34:46:3f:00:5c:4f: a6:96:af:40:b7:6c:b4:ea:90:29:2c:5f:df:cc:17: 46:44:48:fc:c9:75:d7:80:26:5e:93:40:25:d7:2f: 6b:74:6e:ba:a0:55:21:d8:30:c7:55:97:77:f9:1b: ad:b6:de:14:c2:64:db:42:ad:bf:77:08:ec:8b:ed: 3b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0A:96:17:B9:3C:7B:2E:90:8A:15:A5:2D:E8:19:FE:58:A6:FF:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2f7767f-0cb7-3dae-af90-c850c76d138b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.247.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:67:69:32:98:fa:b0:bd:16:9d:61:06:93:35:19:0a:63:4b: e0:19:74:e1:1d:ff:b1:95:3b:2f:42:ae:91:17:c8:7a:81:60: 1f:32:04:f1:ed:67:a1:28:39:65:d9:18:1e:a2:5d:30:77:95: 06:31:9f:ae:c5:6a:0b:c3:53:7f:ca:1b:e5:9c:1a:75:f1:19: a7:cb:65:39:e1:67:a8:aa:cf:ae:5b:14:ae:88:fe:69:fb:8b: c2:fe:18:fa:df:a3:5f:b1:d5:24:64:da:77:df:75:d0:79:cd: 3c:88:f1:e0:d6:35:14:52:f7:c7:d1:74:eb:50:48:e2:d7:be: 47:32:4d:d7:09:52:60:00:ae:8d:16:de:06:43:f5:63:b3:15: 06:e1:72:f6:21:ff:bc:9c:03:87:f4:7e:51:b8:04:c3:16:8f: 9f:46:d9:54:6d:f1:4e:ac:16:f2:14:c0:ee:5c:31:14:6f:13: 4b:bf:6d:36:15:a0:6c:68:aa:6f:15:af:53:52:2d:47:d7:cd: b0:ae:ec:c2:07:19:a9:cc:05:6a:9f:dc:e6:88:38:54:2f:01: 86:df:78:c6:cd:a4:0a:d5:21:b5:5c:99:32:b7:08:af:87:d1: c5:f5:38:77:b7:b3:54:63:c8:28:2e:56:96:2c:8e:0f:ff:02: 9e:80:c6:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QoxNvrVFVNSTiE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk YWZmNmYxZWQtNDNlNC00NTcwLWFlMWUtZmM2MmFhMjM3MGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9cb/X25rIW1gofMemd4OX6BK2Mn5B7sR5oI ZPUmQ2G1tgJI+Riv6LiDsWpvjaCOQX3xDPvYE7UfPfxf3xSbkGssDVswSjFUE0Tf 27pCGE7de2f1ZbMdx7XbFNmaTXBN/gc1OJ+4WpGAZSOIRITRPht2t0CE/gywFY5I 4bOvSeUIlaiDjSXEe+opc84QWozX0uJkZRJSFHgUSz4nnz59YW6BrC6Xo7qpjygF DLyvdwC6OCs87lC+ynvemkQ0Rj8AXE+mlq9At2y06pApLF/fzBdGREj8yXXXgCZe k0Al1y9rdG66oFUh2DDHVZd3+Ruttt4UwmTbQq2/dwjsi+070QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcKlhe5PHsukIoVpS3oGf5Ypv+vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzJmNzc2N2YtMGNiNy0z ZGFlLWFmOTAtYzg1MGM3NmQxMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBnaTKY+rC9Fp1hBpM1GQpjS+AZdOEd/7GVOy9CrpEXyHqBYB8yBPHt Z6EoOWXZGB6iXTB3lQYxn67FagvDU3/KG+WcGnXxGafLZTnhZ6iqz65bFK6I/mn7 i8L+GPrfo1+x1SRk2nffddB5zTyI8eDWNRRS98fRdOtQSOLXvkcyTdcJUmAAro0W 3gZD9WOzFQbhcvYh/7ycA4f0flG4BMMWj59G2VRt8U6sFvIUwO5cMRRvE0u/bTYV oGxoqm8Vr1NSLUfXzbCu7MIHGanMBWqf3OaIOFQvAYbfeMbNpArVIbVcmTK3CK+H 0cX1OHe3s1RjyCguVpYsjg//Ap6Axvc= -----END CERTIFICATE-----Generated at Thu Oct 22 14:37:38 2026 by rpki-client