$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb966b9e-da4a-3378-a555-e5e78d02ddc8.roa File: fb966b9e-da4a-3378-a555-e5e78d02ddc8.roa (raw, json) Hash identifier: HDZz0URwJmgSk0DJshQZCl2WOhyScJDNiq6m8xTHuEM= Subject key identifier: B0:C6:00:5F:27:5A:8C:DB:25:02:74:4F:1F:4E:82:9C:F9:A9:A5:87 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7BB3052C45B76DE7DDD86A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb966b9e-da4a-3378-a555-e5e78d02ddc8.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 36183 IP address blocks: 172.224.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:05:2c:45:b7:6d:e7:dd:d8:6a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=8b31b4b0-d097-4612-8dc2-e0fef781c200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:28:84:d8:0e:31:d2:63:9d:bd:5e:07:81:0c: 74:04:73:8a:f0:dc:ee:02:f7:44:44:12:4f:c8:e8: 31:3c:6e:8a:ad:2d:b2:4f:fa:d2:33:0a:9f:80:a9: 46:29:69:73:72:62:ff:f5:ef:45:2b:88:29:9f:44: ef:9f:24:7e:77:10:21:ea:38:b9:b0:d4:31:94:91: 22:f2:ef:71:a3:98:b0:ac:fa:e3:8e:fa:78:56:12: 46:a8:f9:69:c8:a0:c9:95:ee:a8:c6:e0:6c:ed:68: d7:a6:78:5f:2a:34:3e:3a:3b:69:a3:70:6c:fe:5d: 74:38:af:1e:dc:74:0e:94:b1:d5:7f:a1:44:cc:17: a8:af:88:86:14:53:5c:99:98:51:55:d1:ef:ed:f3: 64:88:6a:96:eb:9e:16:de:8c:e0:1f:f6:ce:15:35: fa:a6:75:9e:32:98:9e:7b:82:28:9c:25:e7:2c:0c: 29:b0:cf:2e:21:b0:4d:49:a3:77:21:59:9c:fe:ef: 68:8e:04:9e:2e:9f:98:16:67:26:72:14:6a:dd:5c: 39:8c:1f:d8:48:13:97:30:f7:eb:8e:9a:d8:d4:81: 28:d7:30:03:ff:76:f2:b4:91:f7:1d:62:a6:2f:5a: ca:a5:76:0c:e1:db:fc:95:3f:3f:a7:66:38:aa:24: 19:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C6:00:5F:27:5A:8C:DB:25:02:74:4F:1F:4E:82:9C:F9:A9:A5:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb966b9e-da4a-3378-a555-e5e78d02ddc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5c:ec:55:31:b7:08:47:06:28:59:57:5b:ba:53:54:2e:82: f2:40:39:a9:96:de:5d:19:1a:fc:77:a2:68:be:8b:2f:1e:e4: 7a:c7:6d:a5:67:44:5f:95:28:00:11:c8:e8:9e:1e:f0:7a:63: 37:79:7e:a1:e0:a5:34:2b:ee:71:3f:5e:64:7e:4f:23:ff:11: fa:85:8a:1f:a1:a8:a1:e9:d3:92:b7:4d:68:8a:0f:81:f4:dc: 0f:15:8d:57:f4:a7:6e:bd:14:0e:8f:bb:90:73:54:ce:69:51: c2:1e:ee:12:47:56:91:c6:57:32:67:e7:34:4e:9e:91:98:2f: fc:60:a9:10:06:7d:bc:a1:47:d2:71:91:2e:85:2a:2f:3b:81: 3e:b4:a2:a0:22:f5:c2:5a:da:bc:39:ed:b5:d7:39:85:c5:d1: 55:d3:72:68:32:0c:90:58:b1:8f:a7:99:49:2c:1a:3e:5a:56: fc:24:c7:17:4f:88:74:dc:d9:97:89:cf:64:07:6d:4c:89:6f: c3:5d:db:06:01:a9:dd:ad:d2:0e:26:51:91:43:a2:52:6b:7f: ae:8d:cb:14:51:eb:bf:9c:02:53:d1:a3:6e:f0:85:14:7f:b8: 7d:52:27:46:ff:b1:53:9f:7b:ba:85:5e:db:aa:d1:fc:74:0b: f9:01:49:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swUsRbdt593YakAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk OGIzMWI0YjAtZDA5Ny00NjEyLThkYzItZTBmZWY3ODFjMjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiiE2A4x0mOdvV4HgQx0BHOK8NzuAvdERBJP yOgxPG6KrS2yT/rSMwqfgKlGKWlzcmL/9e9FK4gpn0TvnyR+dxAh6ji5sNQxlJEi 8u9xo5iwrPrjjvp4VhJGqPlpyKDJle6oxuBs7WjXpnhfKjQ+Ojtpo3Bs/l10OK8e 3HQOlLHVf6FEzBeor4iGFFNcmZhRVdHv7fNkiGqW654W3ozgH/bOFTX6pnWeMpie e4IonCXnLAwpsM8uIbBNSaN3IVmc/u9ojgSeLp+YFmcmchRq3Vw5jB/YSBOXMPfr jprY1IEo1zAD/3bytJH3HWKmL1rKpXYM4dv8lT8/p2Y4qiQZnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLDGAF8nWozbJQJ0Tx9Ogpz5qaWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmI5NjZiOWUtZGE0YS0z Mzc4LWE1NTUtZTVlNzhkMDJkZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFc7FUxtwhHBihZV1u6U1QugvJAOamW3l0ZGvx3omi+iy8e5HrHbaVn RF+VKAARyOieHvB6Yzd5fqHgpTQr7nE/XmR+TyP/EfqFih+hqKHp05K3TWiKD4H0 3A8VjVf0p269FA6Pu5BzVM5pUcIe7hJHVpHGVzJn5zROnpGYL/xgqRAGfbyhR9Jx kS6FKi87gT60oqAi9cJa2rw57bXXOYXF0VXTcmgyDJBYsY+nmUksGj5aVvwkxxdP iHTc2ZeJz2QHbUyJb8Nd2wYBqd2t0g4mUZFDolJrf66NyxRR67+cAlPRo27whRR/ uH1SJ0b/sVOfe7qFXtuq0fx0C/kBST4= -----END CERTIFICATE-----Generated at Wed Oct 21 21:10:31 2026 by rpki-client