$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0680990-f810-3f25-bc5d-cfe803161410.roa File: f0680990-f810-3f25-bc5d-cfe803161410.roa (raw, json) Hash identifier: YjLtKPlCBpgGh/aVwKz3qSsGoW1wgZjRVPG1DORd1O4= Subject key identifier: 10:F3:9D:BE:29:FB:C2:5B:41:C0:DE:2B:C1:AF:89:83:0E:9F:4C:0A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7BB3095720C3FDDB9EEB65C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0680990-f810-3f25-bc5d-cfe803161410.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 36183 IP address blocks: 172.224.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:09:57:20:c3:fd:db:9e:eb:65:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=db3c2e6e-f3c9-4987-834c-7e397c6302cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e2:2e:28:42:19:76:3c:1d:91:17:11:18:48: 1f:01:98:6f:89:91:27:95:ab:a9:bf:66:69:3e:b5: 7d:6d:23:0f:5a:99:e5:c4:22:0f:a8:b5:29:09:53: 7e:eb:ea:c1:bb:c7:0b:9c:94:86:e7:3b:b3:1d:fa: 28:fb:51:5a:58:26:00:f8:c5:ef:ce:a1:25:e0:46: ee:87:c4:d0:c1:07:19:45:06:c2:56:f5:b5:2b:6a: ca:d2:1e:31:49:f7:aa:24:6f:60:ec:bf:1d:ac:24: 1c:1c:27:10:bc:d2:2c:d8:52:5b:6f:42:ad:93:7f: 1a:9f:32:c2:98:d1:d1:10:38:87:df:b8:7d:6e:5c: 56:64:ae:07:e7:d4:77:ac:02:99:c8:42:d2:39:29: 62:24:7c:ee:40:a1:84:70:33:3b:20:9a:d6:de:97: 6c:5f:8a:88:96:12:c7:30:cd:71:a3:fd:a0:f4:1d: 72:ce:1d:4c:80:b7:db:6c:40:ec:2c:fe:d6:fe:38: 26:d1:8b:ab:0b:46:d6:32:cc:8b:2a:9a:a0:8e:e4: c7:c7:db:ec:27:b0:ef:3e:bb:ec:9e:13:e0:be:98: 4a:41:d1:bc:56:5c:de:d4:f5:62:10:b3:61:0a:93: ee:6d:10:70:34:a0:b0:8e:a3:85:15:78:ab:8f:6a: 22:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:F3:9D:BE:29:FB:C2:5B:41:C0:DE:2B:C1:AF:89:83:0E:9F:4C:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f0680990-f810-3f25-bc5d-cfe803161410.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:91:27:51:bb:27:59:84:47:01:5a:81:a5:a2:b9:50:b6:0e: b7:69:3c:ff:56:b4:68:71:74:b1:6a:c3:45:a3:3c:86:2a:ba: e6:c2:54:9a:d4:a2:1f:49:6f:f3:48:9b:db:a5:ae:79:88:e4: d4:cd:2b:61:0b:a3:f8:5c:eb:83:83:ab:de:8c:5f:8e:de:f3: 24:cb:0c:cf:ac:ca:81:b6:23:99:d8:f9:95:70:1d:81:d0:2d: 0a:c1:98:df:12:8a:49:fa:d8:de:b9:9c:bb:c5:47:31:cf:6c: 38:d1:59:b7:d2:de:6b:d2:66:0b:34:1d:af:23:3a:12:07:03: 84:aa:f0:bd:41:14:28:b9:06:cd:82:6d:39:c6:16:a4:42:d7: 77:df:42:e2:03:53:aa:53:88:25:5a:b5:75:bf:a3:0d:f5:c8: d5:f7:6a:cf:f7:de:19:f7:a5:37:2a:d9:40:9f:bd:4c:74:8d: 32:b1:4d:78:15:6b:9d:a8:4e:a8:1a:66:80:aa:cf:f2:4c:56: e4:3e:76:95:d3:46:89:7f:b9:dc:ef:46:7e:27:d3:02:bb:be: 96:d9:19:fd:28:19:4f:a4:2d:af:a9:16:77:35:0d:29:a7:22: 71:55:c4:a1:76:52:ff:27:b2:02:69:3b:89:fb:26:c2:02:10: 85:77:3d:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swlXIMP9257rZcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk ZGIzYzJlNmUtZjNjOS00OTg3LTgzNGMtN2UzOTdjNjMwMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeIuKEIZdjwdkRcRGEgfAZhviZEnlaupv2Zp PrV9bSMPWpnlxCIPqLUpCVN+6+rBu8cLnJSG5zuzHfoo+1FaWCYA+MXvzqEl4Ebu h8TQwQcZRQbCVvW1K2rK0h4xSfeqJG9g7L8drCQcHCcQvNIs2FJbb0Ktk38anzLC mNHREDiH37h9blxWZK4H59R3rAKZyELSOSliJHzuQKGEcDM7IJrW3pdsX4qIlhLH MM1xo/2g9B1yzh1MgLfbbEDsLP7W/jgm0YurC0bWMsyLKpqgjuTHx9vsJ7DvPrvs nhPgvphKQdG8Vlze1PViELNhCpPubRBwNKCwjqOFFXirj2oiqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDznb4p+8JbQcDeK8GviYMOn0wKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjA2ODA5OTAtZjgxMC0z ZjI1LWJjNWQtY2ZlODAzMTYxNDEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOC9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGORJ1G7J1mERwFagaWiuVC2DrdpPP9WtGhxdLFqw0WjPIYquubCVJrU oh9Jb/NIm9ulrnmI5NTNK2ELo/hc64ODq96MX47e8yTLDM+syoG2I5nY+ZVwHYHQ LQrBmN8Sikn62N65nLvFRzHPbDjRWbfS3mvSZgs0Ha8jOhIHA4Sq8L1BFCi5Bs2C bTnGFqRC13ffQuIDU6pTiCVatXW/ow31yNX3as/33hn3pTcq2UCfvUx0jTKxTXgV a52oTqgaZoCqz/JMVuQ+dpXTRol/udzvRn4n0wK7vpbZGf0oGU+kLa+pFnc1DSmn InFVxKF2Uv8nsgJpO4n7JsICEIV3PXk= -----END CERTIFICATE-----Generated at Thu Oct 22 03:13:29 2026 by rpki-client