$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb6c5fe-5276-3e4a-8aa8-190e7e37fe1f.roa File: dfb6c5fe-5276-3e4a-8aa8-190e7e37fe1f.roa (raw, json) Hash identifier: pqDMcvPe5LRKd3fh9msmUCGET0Nb2418TBO2XQpCSUI= Subject key identifier: 40:09:81:AA:6E:A2:A9:2F:A3:AB:6E:34:ED:21:96:F2:37:99:5A:17 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F71EDAAD3CE5645061F451580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb6c5fe-5276-3e4a-8aa8-190e7e37fe1f.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.224.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:aa:d3:ce:56:45:06:1f:45:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=64b34282-193f-4203-b417-30c53c4c9064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:10:62:0a:77:da:d5:bc:bf:40:73:31:84:69: 66:3d:53:fe:b7:d3:19:fa:4e:59:ae:5a:a2:78:ad: c3:2a:42:cc:13:3a:d0:62:bc:60:19:aa:cf:c3:c5: 0a:1e:8d:d4:c1:e5:52:50:a3:5a:15:68:c7:86:44: 59:6a:ce:03:15:dc:bc:48:9d:a0:6d:e3:db:c2:d1: 54:09:d2:21:60:dc:5b:5c:b6:f3:c7:bd:c2:f1:a9: 55:05:b2:8d:14:17:00:8e:ce:da:5b:a4:af:60:59: 0a:62:5c:1e:71:f9:a0:84:77:67:74:3b:4b:91:7d: a1:a3:58:b3:e6:9a:7f:a8:c2:13:43:cd:82:b0:76: 15:b9:6f:65:7d:38:3a:27:24:22:8a:83:86:55:2e: 47:ae:78:cc:eb:df:82:01:92:8b:ac:e3:56:65:52: 3d:1a:2f:5d:7a:b3:00:51:01:ae:a4:e3:b3:ba:d2: 65:67:b7:5b:72:82:c1:05:b3:30:bb:7e:3c:6f:47: d0:75:bb:6f:9a:53:70:47:d5:73:ed:d7:94:06:51: da:12:95:04:85:36:7a:6f:7f:67:80:ab:ae:53:21: 09:3e:8a:91:5f:be:71:ba:da:b4:09:d6:e1:63:53: fe:2c:19:9f:83:1d:40:42:d7:36:2b:a3:50:86:d2: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:09:81:AA:6E:A2:A9:2F:A3:AB:6E:34:ED:21:96:F2:37:99:5A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfb6c5fe-5276-3e4a-8aa8-190e7e37fe1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:37:cc:0d:b1:79:1d:63:1e:0e:4d:4b:ef:90:23:25:68:64: 41:33:7d:32:0a:bd:2d:1f:24:b5:98:66:44:a4:61:a3:10:94: 75:98:cb:e7:01:9c:f0:cb:08:d9:39:3c:08:aa:ea:b8:0a:53: 40:6a:5b:4a:60:66:de:50:79:7c:6f:15:fc:8f:21:49:c3:01: 38:10:bf:fe:fa:82:89:47:a1:5d:3d:2b:c1:2b:cf:2d:0d:ff: e9:a2:27:17:20:c1:b3:25:d7:2a:0f:35:42:df:75:94:17:9c: fd:7f:4e:f8:1d:0e:47:d7:a2:19:6a:c9:71:25:3b:69:7b:03: 4b:06:8c:93:98:1f:e0:79:a3:4b:ea:e1:7a:bd:2c:15:27:e8: a5:a5:f1:8e:dd:00:08:88:fb:66:c4:c7:10:9d:36:5d:4b:4c: db:c5:90:20:a9:9e:58:dd:06:c7:a2:66:61:d9:82:bb:7c:c1: 45:01:92:7a:cc:47:f6:b3:ca:8a:10:ec:d9:84:bc:37:57:97: ea:c7:90:ec:cd:0b:53:88:45:5e:4b:d5:ba:3b:da:89:32:56: 94:50:a9:be:a8:6f:82:29:36:26:9e:cf:0d:44:54:ac:70:9c: e8:65:e0:c0:d8:e8:0e:e5:b2:f9:7f:d0:2e:1d:b2:4e:f6:38: ba:af:75:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7arTzlZFBh9FFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NjRiMzQyODItMTkzZi00MjAzLWI0MTctMzBjNTNjNGM5MDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhBiCnfa1by/QHMxhGlmPVP+t9MZ+k5Zrlqi eK3DKkLMEzrQYrxgGarPw8UKHo3UweVSUKNaFWjHhkRZas4DFdy8SJ2gbePbwtFU CdIhYNxbXLbzx73C8alVBbKNFBcAjs7aW6SvYFkKYlwecfmghHdndDtLkX2ho1iz 5pp/qMITQ82CsHYVuW9lfTg6JyQiioOGVS5HrnjM69+CAZKLrONWZVI9Gi9derMA UQGupOOzutJlZ7dbcoLBBbMwu348b0fQdbtvmlNwR9Vz7deUBlHaEpUEhTZ6b39n gKuuUyEJPoqRX75xutq0CdbhY1P+LBmfgx1AQtc2K6NQhtL0dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAJgapuoqkvo6tuNO0hlvI3mVoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZiNmM1ZmUtNTI3Ni0z ZTRhLThhYTgtMTkwZTdlMzdmZTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGs3zA2xeR1jHg5NS++QIyVoZEEzfTIKvS0fJLWYZkSkYaMQlHWYy+cB nPDLCNk5PAiq6rgKU0BqW0pgZt5QeXxvFfyPIUnDATgQv/76golHoV09K8Erzy0N /+miJxcgwbMl1yoPNULfdZQXnP1/TvgdDkfXohlqyXElO2l7A0sGjJOYH+B5o0vq 4Xq9LBUn6KWl8Y7dAAiI+2bExxCdNl1LTNvFkCCpnljdBseiZmHZgrt8wUUBknrM R/azyooQ7NmEvDdXl+rHkOzNC1OIRV5L1bo72okyVpRQqb6ob4IpNiaezw1EVKxw nOhl4MDY6A7lsvl/0C4dsk72OLqvdXA= -----END CERTIFICATE-----Generated at Fri Oct 23 14:28:58 2026 by rpki-client