$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4908fe9-4750-3057-9ec8-2a78db88e84d.roa File: e4908fe9-4750-3057-9ec8-2a78db88e84d.roa (raw, json) Hash identifier: VefDZNWA/V7L9HMOvM+hs7JdnGlh8CGV7xMq6AQ0Qyg= Subject key identifier: 33:6B:E3:0C:6D:06:EB:C6:22:39:0D:E6:F6:E5:7C:31:71:10:E4:69 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F5E62ED22E6A6677188340180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4908fe9-4750-3057-9ec8-2a78db88e84d.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 36183 IP address blocks: 172.225.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ed:22:e6:a6:67:71:88:34:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=417d3b34-e3b5-4315-8d47-9a182f7eede8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f0:94:68:76:e2:5e:e5:dd:64:cb:fd:14:e6: 0b:c7:f5:7c:db:25:4f:dd:60:6b:fe:26:85:4f:44: f7:eb:91:9e:51:b8:8a:13:9a:9e:33:59:49:f6:2d: 32:9c:44:6c:7a:95:51:c5:0c:90:ea:bc:95:44:c2: 2c:b4:6d:8a:8b:5b:05:0d:b1:53:47:17:f6:4b:63: e2:4e:0a:ed:ce:e9:b2:f3:96:d4:0b:3c:bb:c2:1d: db:9d:d6:28:e1:bd:16:e8:71:46:66:2b:18:da:3e: 75:b5:d0:ff:86:1d:b8:f4:b2:5a:3c:b4:1d:e8:f2: 95:ad:39:a3:a0:87:f3:92:5d:20:30:b5:88:76:63: da:8c:84:c4:dd:04:c8:59:bf:15:42:60:04:24:a0: f0:e2:89:d5:e0:1c:fc:2d:ba:f0:62:38:80:7e:46: 49:c5:0a:1e:49:e3:fa:46:21:eb:1c:13:d2:8d:c3: 81:0d:2c:6c:f6:a9:68:a6:ee:0f:95:94:de:74:5d: 86:76:50:57:01:af:58:98:b2:50:5e:91:f4:e0:ee: 7c:e7:4a:e4:b4:4f:13:22:4f:3d:81:d8:72:98:27: 1e:67:fc:f8:b8:34:44:d5:27:6b:66:30:54:d4:c9: 38:59:fa:6e:2c:8e:77:7a:39:93:58:18:70:02:28: be:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:6B:E3:0C:6D:06:EB:C6:22:39:0D:E6:F6:E5:7C:31:71:10:E4:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e4908fe9-4750-3057-9ec8-2a78db88e84d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:28:3e:c0:3b:04:b8:59:39:ef:30:ea:7d:c2:38:e2:3a:9c: 90:ee:61:3b:53:a5:8c:f7:9d:6b:21:fb:42:f5:d6:4c:3a:71: f5:23:b4:32:c6:d9:1c:5e:75:67:6d:56:42:c2:75:80:c2:6d: 02:4c:93:5e:a3:40:44:52:91:1f:fc:5f:9f:a6:5e:d1:4c:69: 19:77:88:ab:84:48:19:e1:57:ee:f1:19:03:6a:e7:3e:7b:31: 62:f9:75:61:06:a5:b6:ad:b4:d1:fd:cd:91:a2:e3:77:31:5c: 2d:8d:4f:d9:24:c2:4a:7a:f0:02:90:e0:75:52:71:e2:2f:4c: ea:1f:df:fb:e0:8c:92:8c:73:ee:32:64:00:c6:7e:0f:80:3b: bc:40:bc:a8:92:27:95:46:7b:51:57:c5:45:00:0b:d7:03:f1: b4:4c:7b:6f:6c:bf:09:76:a4:cf:ef:79:c4:d8:80:bb:0c:b7: ef:13:35:2d:b9:4c:7b:2b:d7:3e:8c:61:c3:86:11:cc:58:c3: 78:ae:a1:fd:4c:41:ac:8b:96:5d:2c:02:76:1f:27:c9:5e:b5: 3d:95:4a:8e:7b:4b:16:db:1a:57:89:6f:7c:8b:c2:2e:e0:c3: 4b:a6:76:a4:d7:26:8f:49:10:b3:ae:43:68:a6:1e:91:ad:5d: 6c:cd:8e:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYu0i5qZncYg0AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NDE3ZDNiMzQtZTNiNS00MzE1LThkNDctOWExODJmN2VlZGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvCUaHbiXuXdZMv9FOYLx/V82yVP3WBr/iaF T0T365GeUbiKE5qeM1lJ9i0ynERsepVRxQyQ6ryVRMIstG2Ki1sFDbFTRxf2S2Pi Tgrtzumy85bUCzy7wh3bndYo4b0W6HFGZisY2j51tdD/hh249LJaPLQd6PKVrTmj oIfzkl0gMLWIdmPajITE3QTIWb8VQmAEJKDw4onV4Bz8LbrwYjiAfkZJxQoeSeP6 RiHrHBPSjcOBDSxs9qlopu4PlZTedF2GdlBXAa9YmLJQXpH04O5850rktE8TIk89 gdhymCceZ/z4uDRE1SdrZjBU1Mk4WfpuLI53ejmTWBhwAii+xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNr4wxtBuvGIjkN5vblfDFxEORpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTQ5MDhmZTktNDc1MC0z MDU3LTllYzgtMmE3OGRiODhlODRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8oPsA7BLhZOe8w6n3COOI6nJDuYTtTpYz3nWsh+0L11kw6cfUjtDLG 2RxedWdtVkLCdYDCbQJMk16jQERSkR/8X5+mXtFMaRl3iKuESBnhV+7xGQNq5z57 MWL5dWEGpbattNH9zZGi43cxXC2NT9kkwkp68AKQ4HVSceIvTOof3/vgjJKMc+4y ZADGfg+AO7xAvKiSJ5VGe1FXxUUAC9cD8bRMe29svwl2pM/vecTYgLsMt+8TNS25 THsr1z6MYcOGEcxYw3iuof1MQayLll0sAnYfJ8letT2VSo57SxbbGleJb3yLwi7g w0umdqTXJo9JELOuQ2imHpGtXWzNju8= -----END CERTIFICATE-----Generated at Mon Oct 26 03:55:08 2026 by rpki-client