$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3f64956-3da5-3d43-95fd-783ba633b86a.roa File: e3f64956-3da5-3d43-95fd-783ba633b86a.roa (raw, json) Hash identifier: fYtgYIhSovAUG/zaKxMu6RpKwHwDKAAKRrMi2qLNX14= Subject key identifier: BE:BA:56:47:5E:1D:C9:D4:27:70:45:22:D9:35:DE:E4:98:0D:76:AF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7BB308E182ABD1E5A212A880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3f64956-3da5-3d43-95fd-783ba633b86a.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 36183 IP address blocks: 172.224.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:08:e1:82:ab:d1:e5:a2:12:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=f68b1e73-9394-4ed6-9fc7-b0df327e4482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:7f:ad:39:d2:51:37:c9:c4:69:48:3c:d5: e6:bd:b1:87:c8:62:54:13:c0:af:f8:30:fa:ce:df: 46:3d:67:68:a0:17:8e:88:ae:f0:7d:95:bb:2b:5a: 3d:33:36:42:ef:4a:aa:11:50:37:e3:d0:7e:2f:95: ab:f5:ad:b1:6b:68:ea:87:8b:99:9f:74:1a:e4:2d: 05:da:19:9a:8d:23:33:87:57:99:19:06:4f:b9:de: c6:cd:7c:5d:7e:ac:6a:69:ce:02:5f:16:6d:f8:33: 54:dc:61:86:0e:c9:53:5b:55:97:6c:be:b3:27:04: 2a:c8:8d:85:79:da:c7:ed:8b:9a:ca:16:8d:02:0a: db:0a:d8:2e:b0:cd:2e:72:05:16:d1:a7:6c:4d:b3: 5e:08:d0:e5:17:af:05:b7:ba:7a:4e:4a:29:17:8a: 92:a5:18:43:89:d1:53:10:a9:a3:63:65:f2:9a:1e: 7a:b1:f1:83:2a:8e:e2:83:98:b7:a0:1a:f0:1f:b5: 67:f8:c2:c1:41:bd:63:62:bc:ea:97:6f:ed:70:f8: b0:eb:b6:8d:14:f6:7e:49:12:be:c0:a7:24:a0:cc: 8a:c8:d5:ba:cd:e2:8e:5f:5a:b5:f0:1f:35:70:fc: 9f:c4:9b:e9:0a:76:a1:2b:99:60:b3:04:e6:30:aa: aa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:BA:56:47:5E:1D:C9:D4:27:70:45:22:D9:35:DE:E4:98:0D:76:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3f64956-3da5-3d43-95fd-783ba633b86a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:1a:ac:b4:9d:92:13:9d:f6:11:23:01:b9:fb:e3:1d:98:7f: 41:2c:f0:c4:46:24:21:92:3c:8a:87:8e:bb:c3:d3:e2:4a:c4: 27:7a:34:fd:d6:d2:5e:ca:e2:8b:24:b8:ff:93:73:08:dc:99: dd:c4:4d:83:e0:a6:da:38:cc:d2:8c:5b:6e:be:20:68:b1:9b: 55:8e:2e:41:56:8c:b5:bf:48:86:29:dd:74:af:13:db:fc:9c: f5:f2:b3:db:88:ef:42:24:3d:8b:b6:21:0c:25:dc:93:ae:19: 38:e0:b7:a6:f7:ab:ca:de:9c:33:8e:66:65:06:ec:3d:c1:3d: 82:b8:6d:d7:87:10:43:99:fd:5b:9e:96:f2:82:04:2d:a5:dd: 38:51:d3:dc:ac:5f:83:2c:98:12:90:49:a8:5d:27:c6:8c:ac: a2:86:6a:50:bc:03:6f:c9:f8:7a:f7:0e:55:61:87:40:51:7b: 57:f1:85:64:6a:e8:d7:bf:88:f4:15:5e:0b:45:8d:65:0b:0a: d7:46:4b:92:49:e2:56:df:e6:db:55:57:2d:e7:55:6c:23:0d: 0f:63:45:a3:b8:9e:5e:65:03:4b:31:59:9c:d4:50:c3:4f:c9: 9a:7f:6d:a0:4d:39:91:92:91:0c:26:5f:62:89:40:33:bb:a3: 40:84:14:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swjhgqvR5aISqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk ZjY4YjFlNzMtOTM5NC00ZWQ2LTlmYzctYjBkZjMyN2U0NDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGp/rTnSUTfJxGlIPNXmvbGHyGJUE8Cv+DD6 zt9GPWdooBeOiK7wfZW7K1o9MzZC70qqEVA349B+L5Wr9a2xa2jqh4uZn3Qa5C0F 2hmajSMzh1eZGQZPud7GzXxdfqxqac4CXxZt+DNU3GGGDslTW1WXbL6zJwQqyI2F edrH7YuayhaNAgrbCtgusM0ucgUW0adsTbNeCNDlF68Ft7p6TkopF4qSpRhDidFT EKmjY2Xymh56sfGDKo7ig5i3oBrwH7Vn+MLBQb1jYrzql2/tcPiw67aNFPZ+SRK+ wKckoMyKyNW6zeKOX1q18B81cPyfxJvpCnahK5lgswTmMKqqFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL66VkdeHcnUJ3BFItk13uSYDXavMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTNmNjQ5NTYtM2RhNS0z ZDQzLTk1ZmQtNzgzYmE2MzNiODZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8arLSdkhOd9hEjAbn74x2Yf0Es8MRGJCGSPIqHjrvD0+JKxCd6NP3W 0l7K4oskuP+Tcwjcmd3ETYPgpto4zNKMW26+IGixm1WOLkFWjLW/SIYp3XSvE9v8 nPXys9uI70IkPYu2IQwl3JOuGTjgt6b3q8renDOOZmUG7D3BPYK4bdeHEEOZ/Vue lvKCBC2l3ThR09ysX4MsmBKQSahdJ8aMrKKGalC8A2/J+Hr3DlVhh0BRe1fxhWRq 6Ne/iPQVXgtFjWULCtdGS5JJ4lbf5ttVVy3nVWwjDQ9jRaO4nl5lA0sxWZzUUMNP yZp/baBNOZGSkQwmX2KJQDO7o0CEFPI= -----END CERTIFICATE-----Generated at Thu Oct 22 10:35:02 2026 by rpki-client