$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa File: a24a5b45-65e4-3787-acd8-b655e54a2021.roa (raw, json) Hash identifier: m4X+RgUR2CP6cuYFxSUQUpoJZGLoS77ovUGha3WxM8k= Subject key identifier: BA:0C:BB:48:E9:5B:8A:A3:26:2E:87:42:FD:06:CB:83:C8:FF:AA:E3 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584F6292E2EC662FF84D21A88B98 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 20115 IP address blocks: 172.223.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:e2:ec:66:2f:f8:4d:21:a8:8b:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=e0c2873b-f681-4671-a779-31ae259eb851 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0c:d9:1e:e6:46:6e:11:2c:3f:5c:f4:74:9d: 52:b8:ad:4b:c9:02:f0:5c:94:74:26:d8:d9:19:ec: 30:63:20:44:19:67:73:bd:5f:07:fb:40:71:5c:26: 1e:e4:df:ee:fc:2e:8d:38:73:c1:22:da:ad:23:8f: 96:ef:ff:c8:7e:3d:a5:30:b8:54:0b:a2:c3:6b:bf: ee:13:62:ec:57:64:9f:3d:9c:f4:b6:13:9c:d7:b9: 9b:e6:31:f5:59:78:8f:d6:58:67:5c:14:17:05:0e: 77:dd:63:85:9e:cc:d7:cc:c7:27:5e:76:4e:84:39: ae:13:b8:6b:7b:32:35:1c:9c:91:4e:22:c9:10:85: b9:60:f9:6a:36:ab:57:aa:05:8d:22:09:51:61:aa: a7:4d:c7:f4:a7:d2:11:23:66:a0:fa:ed:46:b8:58: 17:10:e8:cf:d9:e8:7f:32:e7:ff:4b:71:78:47:a5: 8e:4f:ae:37:58:17:a3:dd:d9:cf:fe:70:45:7d:0f: c6:37:8a:a9:02:d7:30:d5:42:08:63:c3:7c:85:f3: 5c:5a:ee:f4:15:ef:a8:ad:de:68:54:92:37:2f:74: 75:eb:11:76:31:fc:af:6e:ca:b3:19:15:a6:15:a4: 79:a8:87:c7:f4:17:ba:b4:f8:0e:20:26:61:0c:1d: f7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0C:BB:48:E9:5B:8A:A3:26:2E:87:42:FD:06:CB:83:C8:FF:AA:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a24a5b45-65e4-3787-acd8-b655e54a2021.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.223.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:72:5d:d0:39:58:f5:0c:6b:4f:b1:ef:2c:fe:7a:38:19:a7: fe:b5:4b:12:45:ba:9b:bc:f8:07:91:d2:86:93:02:b8:6c:d7: f7:a6:d8:d7:61:fc:a2:31:e4:f2:b7:bf:85:5d:1f:d0:78:7f: a0:53:bb:c6:c4:d4:76:ad:6b:6c:13:ea:e0:8b:42:b2:0e:87: aa:17:5b:92:2c:31:0d:1e:71:b9:20:98:9d:e4:e1:11:2f:72: 47:e7:03:d0:a1:f0:3a:20:ff:30:a4:16:05:e9:d2:bd:98:b5: ad:25:46:bb:18:f3:9e:64:6d:b3:9d:52:fb:72:3a:08:74:41: 6f:03:b4:84:1c:7e:af:3b:01:c3:e6:ae:82:53:35:55:fb:34: 77:bd:4e:08:87:6a:bd:1d:9d:33:df:7c:e3:8a:24:7e:b6:79: 0d:40:18:36:16:f6:99:f8:92:0a:e8:10:16:35:87:be:3a:71: 2f:4d:5e:2c:02:25:9c:15:57:de:16:d7:dd:3e:07:fe:e3:45: 30:c4:1a:22:ac:73:7e:ed:0d:c9:44:7d:70:8c:36:ae:87:86: 47:b6:8a:30:c7:38:91:22:9a:a2:dd:f1:ed:0b:6b:be:bc:05: cf:44:3f:87:98:e3:21:3a:4d:3c:8c:d6:21:2f:d8:89:c5:7a: ee:1f:7d:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuLsZi/4TSGoi5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTBjMjg3M2ItZjY4MS00NjcxLWE3NzktMzFhZTI1OWViODUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQzZHuZGbhEsP1z0dJ1SuK1LyQLwXJR0JtjZ GewwYyBEGWdzvV8H+0BxXCYe5N/u/C6NOHPBItqtI4+W7//Ifj2lMLhUC6LDa7/u E2LsV2SfPZz0thOc17mb5jH1WXiP1lhnXBQXBQ533WOFnszXzMcnXnZOhDmuE7hr ezI1HJyRTiLJEIW5YPlqNqtXqgWNIglRYaqnTcf0p9IRI2ag+u1GuFgXEOjP2eh/ Muf/S3F4R6WOT643WBej3dnP/nBFfQ/GN4qpAtcw1UIIY8N8hfNcWu70Fe+ord5o VJI3L3R16xF2MfyvbsqzGRWmFaR5qIfH9Be6tPgOICZhDB336QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoMu0jpW4qjJi6HQv0Gy4PI/6rjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTI0YTViNDUtNjVlNC0z Nzg3LWFjZDgtYjY1NWU1NGEyMDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrN+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZyXdA5WPUMa0+x7yz+ejgZp/61SxJFupu8+AeR0oaTArhs1/em2Ndh /KIx5PK3v4VdH9B4f6BTu8bE1Hata2wT6uCLQrIOh6oXW5IsMQ0ecbkgmJ3k4REv ckfnA9Ch8Dog/zCkFgXp0r2Yta0lRrsY855kbbOdUvtyOgh0QW8DtIQcfq87AcPm roJTNVX7NHe9TgiHar0dnTPffOOKJH62eQ1AGDYW9pn4kgroEBY1h746cS9NXiwC JZwVV94W190+B/7jRTDEGiKsc37tDclEfXCMNq6Hhke2ijDHOJEimqLd8e0La768 Bc9EP4eY4yE6TTyM1iEv2InFeu4ffeA= -----END CERTIFICATE-----Generated at Thu Oct 8 17:42:03 2026 by rpki-client