$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf4f938a-7cae-3512-b369-300d6d3ea76a.roa File: cf4f938a-7cae-3512-b369-300d6d3ea76a.roa (raw, json) Hash identifier: W/pEP0jwP8HoMNn3CrRm4Si8siYm/qngLyKFwvv6AWM= Subject key identifier: 62:CF:E8:B8:B2:A4:34:3E:41:C7:C1:30:0F:AB:8E:E5:E8:D3:D7:83 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F71EDAB02FA9001C0416A1500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf4f938a-7cae-3512-b369-300d6d3ea76a.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.224.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:ab:02:fa:90:01:c0:41:6a:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=fe275bab-ee5c-488e-9394-60e80fe1659d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2c:d0:96:e8:fa:71:90:d8:69:c9:34:cd:ff: 70:46:7f:bb:ba:1c:b6:a6:6b:ef:10:d5:1d:74:66: b1:26:0e:0b:a1:2a:46:c9:55:b4:51:1c:e2:19:ef: d2:85:8a:f1:31:a8:3a:b0:35:70:87:70:6d:c3:cc: d9:71:38:08:28:8f:bf:a7:06:4c:c8:e3:6f:8c:1c: aa:f0:2f:c2:13:6e:e5:1e:ae:07:79:ef:95:fa:9b: c9:82:e4:05:2a:c7:a3:66:e4:b3:0f:e9:fc:41:19: 35:30:04:32:9b:4c:46:a8:f9:c6:17:d6:46:b7:f6: 26:35:04:af:1c:53:29:9a:74:a3:c1:e2:98:5e:43: e2:71:25:8c:c0:01:1a:9c:b5:e5:27:3e:f3:3a:74: ef:8d:4f:6e:9f:29:c1:c8:9d:12:b2:8b:7d:e2:27: ad:f8:6e:63:12:e7:d7:04:c4:f4:00:1f:f7:81:97: aa:71:74:e7:90:ab:ae:ad:79:ce:97:a5:95:1a:26: d0:d1:be:14:6d:6d:83:b4:59:f7:d5:cf:cf:28:83: 15:6d:5b:6b:39:79:ba:3b:b0:f8:a5:80:e8:fe:c7: 8f:f6:d2:15:10:31:f7:8a:ce:42:d9:3c:f6:ca:2a: 90:b0:3f:20:92:88:17:6c:f3:70:98:a0:6d:ec:9e: 01:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:CF:E8:B8:B2:A4:34:3E:41:C7:C1:30:0F:AB:8E:E5:E8:D3:D7:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf4f938a-7cae-3512-b369-300d6d3ea76a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d9:bb:73:9c:32:cb:59:cf:a3:75:39:c7:d6:c5:ae:52:82: f8:3a:ea:e5:ce:47:1d:b1:55:08:10:ec:f5:1d:ba:5b:5d:c6: 79:ac:4c:a5:9d:99:cd:ea:54:df:f9:ae:93:7f:8e:33:cc:30: cb:0b:1b:5e:73:24:31:07:72:0b:a2:ef:92:c5:24:1e:c0:19: e6:9c:4a:43:54:ff:0e:3f:8a:1b:07:d9:ea:e4:72:4e:bd:fb: ab:e0:0f:51:6a:97:e5:75:85:7d:78:d0:e3:34:86:80:6d:15: a0:ec:92:c4:0c:3a:9d:f7:d4:85:d9:7a:26:e0:c9:5e:a3:bf: 40:0b:34:4d:30:59:d3:8b:e5:a9:b7:dc:36:43:94:dc:fc:46: 3d:9b:47:04:2e:77:8f:89:5e:ba:4e:4e:70:d9:ea:04:dc:6e: b6:bd:f3:42:42:bf:68:e5:b1:85:b1:ff:b3:92:35:a2:c8:48: 3d:14:b7:ff:6e:aa:fc:ab:3a:84:0f:be:7e:53:2e:39:e0:30: cc:37:ff:7e:2c:c9:bf:49:96:6b:08:14:c2:33:2c:04:84:d6: 50:23:69:f4:7f:b3:96:38:b5:eb:f1:a0:e3:a8:c2:4b:44:97: 77:bf:00:ac:bf:34:0e:56:83:d8:4b:43:2d:e6:4a:04:74:b8: c3:d0:e9:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7asC+pABwEFqFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk ZmUyNzViYWItZWU1Yy00ODhlLTkzOTQtNjBlODBmZTE2NTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSzQluj6cZDYack0zf9wRn+7uhy2pmvvENUd dGaxJg4LoSpGyVW0URziGe/ShYrxMag6sDVwh3Btw8zZcTgIKI+/pwZMyONvjByq 8C/CE27lHq4Hee+V+pvJguQFKsejZuSzD+n8QRk1MAQym0xGqPnGF9ZGt/YmNQSv HFMpmnSjweKYXkPicSWMwAEanLXlJz7zOnTvjU9unynByJ0Ssot94iet+G5jEufX BMT0AB/3gZeqcXTnkKuurXnOl6WVGibQ0b4UbW2DtFn31c/PKIMVbVtrOXm6O7D4 pYDo/seP9tIVEDH3is5C2Tz2yiqQsD8gkogXbPNwmKBt7J4BRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLP6LiypDQ+QcfBMA+rjuXo09eDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2Y0ZjkzOGEtN2NhZS0z NTEyLWIzNjktMzAwZDZkM2VhNzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOABMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHZu3OcMstZz6N1OcfWxa5Sgvg66uXORx2xVQgQ7PUdultdxnmsTKWd mc3qVN/5rpN/jjPMMMsLG15zJDEHcgui75LFJB7AGeacSkNU/w4/ihsH2erkck69 +6vgD1Fql+V1hX140OM0hoBtFaDsksQMOp331IXZeibgyV6jv0ALNE0wWdOL5am3 3DZDlNz8Rj2bRwQud4+JXrpOTnDZ6gTcbra980JCv2jlsYWx/7OSNaLISD0Ut/9u qvyrOoQPvn5TLjngMMw3/34syb9JlmsIFMIzLASE1lAjafR/s5Y4tevxoOOowktE l3e/AKy/NA5Wg9hLQy3mSgR0uMPQ6Zo= -----END CERTIFICATE-----Generated at Sun Oct 25 14:18:54 2026 by rpki-client