$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3ce1707-0126-33b1-85cf-4de892b6bc2b.roa File: c3ce1707-0126-33b1-85cf-4de892b6bc2b.roa (raw, json) Hash identifier: sBHymsNxSPRRTI90/W/igqJlayaWCh593ipPEOwpW1o= Subject key identifier: 97:C6:2E:7F:56:62:7D:F5:B9:B6:10:DF:EE:D6:3F:AD:83:AA:F3:1C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F5E62ED81C9C9BC14A4AD3D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3ce1707-0126-33b1-85cf-4de892b6bc2b.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 36183 IP address blocks: 172.225.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ed:81:c9:c9:bc:14:a4:ad:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=ec30be56-0456-43fc-8ed4-73c73a98dc5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:79:d6:7f:87:24:1f:e0:4a:04:16:ee:a7:94: df:be:6d:e1:e9:5a:17:4c:4f:76:7e:b5:95:be:87: 7b:bb:94:b7:7e:f0:f6:6a:0c:b8:5d:7b:ee:0b:ea: db:1b:fd:0d:20:ad:67:9e:99:46:15:a2:7b:69:0e: 83:56:b7:39:3a:2f:d5:08:e7:f0:c4:e0:cd:44:15: 9e:75:66:3c:e1:f6:90:c7:bf:1e:c4:c6:de:50:cd: fc:7a:b5:07:e1:21:49:3d:7f:1b:17:31:2c:25:f5: 35:46:f6:eb:ba:84:fe:05:54:e4:18:5b:c3:39:a1: 40:59:7a:45:40:0d:43:93:11:4b:5a:33:bd:8c:7b: 9b:1b:bd:93:01:22:dc:38:d0:9e:7f:67:a4:c9:02: 21:54:db:1b:08:2d:6b:48:df:27:77:54:8b:cc:78: df:ea:62:20:29:17:79:2f:d4:47:91:a8:e5:d7:ef: 27:18:07:87:9c:15:d3:fa:c6:97:9b:d1:fa:cc:49: d9:39:9d:c9:39:e4:ee:f0:d7:cf:d0:1a:6a:77:15: f9:c0:07:c7:8f:e2:90:47:64:89:65:93:8d:06:78: e2:59:e1:8d:57:13:8d:3d:db:60:a9:e2:aa:f5:bb: 0c:9f:84:eb:b5:6c:43:cf:7b:a1:0c:92:9f:04:ad: 28:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:C6:2E:7F:56:62:7D:F5:B9:B6:10:DF:EE:D6:3F:AD:83:AA:F3:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c3ce1707-0126-33b1-85cf-4de892b6bc2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ce:90:00:c1:1c:30:36:46:ed:b6:b7:d9:35:07:f8:06:40: 84:fc:4a:7f:2d:4b:27:9d:a9:0f:57:64:6b:4b:17:3e:78:19: 6f:e6:b2:dc:8d:ad:72:0a:ae:6c:dc:a6:69:1b:79:9e:94:be: e8:d1:5e:5e:2e:79:95:7e:70:d2:4d:b0:9e:9c:0b:85:cd:0b: 02:64:50:01:57:2f:49:4e:dc:58:31:54:eb:43:a7:5f:d5:30: 6e:c4:34:06:4e:20:56:80:15:a5:f4:f2:ee:07:c0:e5:0c:17: a5:61:9c:06:ff:25:aa:98:f1:f5:7b:f6:6c:c2:0a:32:af:f2: 34:25:cc:bf:50:4e:5d:9f:d9:fa:7c:c6:a0:0e:fc:4b:de:b5: d4:c2:82:0f:e0:7f:d0:92:fe:ae:90:36:f4:99:9c:38:63:34: 78:71:3e:d1:e5:28:10:8e:62:b7:06:2f:25:b5:d7:96:f0:e0: b3:d2:a8:14:16:1e:53:d6:d7:68:f5:a7:12:75:3c:6b:f9:72: 70:5b:e2:a3:6e:06:98:76:af:80:be:8d:69:e8:4f:2e:3c:14: 1d:2a:56:10:95:f3:65:79:df:8c:ff:e3:e9:f8:59:fc:62:e8: 44:38:1a:55:e1:2c:1a:42:60:2c:cc:a4:47:3c:34:46:bd:f6: 97:e6:f7:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYu2Bycm8FKStPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZWMzMGJlNTYtMDQ1Ni00M2ZjLThlZDQtNzNjNzNhOThkYzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3nWf4ckH+BKBBbup5Tfvm3h6VoXTE92frWV vod7u5S3fvD2agy4XXvuC+rbG/0NIK1nnplGFaJ7aQ6DVrc5Oi/VCOfwxODNRBWe dWY84faQx78exMbeUM38erUH4SFJPX8bFzEsJfU1RvbruoT+BVTkGFvDOaFAWXpF QA1DkxFLWjO9jHubG72TASLcONCef2ekyQIhVNsbCC1rSN8nd1SLzHjf6mIgKRd5 L9RHkajl1+8nGAeHnBXT+saXm9H6zEnZOZ3JOeTu8NfP0BpqdxX5wAfHj+KQR2SJ ZZONBnjiWeGNVxONPdtgqeKq9bsMn4TrtWxDz3uhDJKfBK0oxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfGLn9WYn31ubYQ3+7WP62DqvMcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzNjZTE3MDctMDEyNi0z M2IxLTg1Y2YtNGRlODkyYjZiYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXOkADBHDA2Ru22t9k1B/gGQIT8Sn8tSyedqQ9XZGtLFz54GW/mstyN rXIKrmzcpmkbeZ6UvujRXl4ueZV+cNJNsJ6cC4XNCwJkUAFXL0lO3FgxVOtDp1/V MG7ENAZOIFaAFaX08u4HwOUMF6VhnAb/JaqY8fV79mzCCjKv8jQlzL9QTl2f2fp8 xqAO/EvetdTCgg/gf9CS/q6QNvSZnDhjNHhxPtHlKBCOYrcGLyW115bw4LPSqBQW HlPW12j1pxJ1PGv5cnBb4qNuBph2r4C+jWnoTy48FB0qVhCV82V534z/4+n4Wfxi 6EQ4GlXhLBpCYCzMpEc8NEa99pfm98o= -----END CERTIFICATE-----Generated at Sat Oct 24 18:51:30 2026 by rpki-client