$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0507ac7f-27f1-3bd0-9f13-bdb4b994c645.roa File: 0507ac7f-27f1-3bd0-9f13-bdb4b994c645.roa (raw, json) Hash identifier: nfBkzQ2fQNKjoSnJMWhadfFeVjBDm5jjgS72nmEqKfE= Subject key identifier: 08:72:E2:A4:DE:22:DD:C1:B1:AA:A7:25:51:34:A3:0D:87:90:28:55 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4973EA9E34EBB836C0D0C600 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0507ac7f-27f1-3bd0-9f13-bdb4b994c645.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63949 IP address blocks: 170.187.184.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ea:9e:34:eb:b8:36:c0:d0:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1a39bfdc-6ce1-4213-af91-d26fef6d4e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:39:9f:af:79:46:a8:88:a4:58:07:b5:8d:c6: c3:36:b9:92:e3:55:dc:18:c1:5a:3b:f5:7b:dc:5f: 31:59:fd:91:f8:ca:2c:da:0f:ca:c6:fc:8e:46:0f: 6c:02:25:a5:0d:74:9d:bc:dc:8e:b6:e6:08:f0:dc: cf:5b:61:13:c4:c3:49:9e:83:6e:6a:2d:9e:67:49: be:31:8a:33:ed:b6:1b:41:d1:b2:4b:e1:40:4d:ae: 6a:87:39:74:d8:1d:0b:89:ee:0b:a1:55:79:ef:cb: fa:3e:66:8f:f2:b3:e8:0d:00:59:31:70:e4:fb:8c: 5d:a5:f1:20:28:6d:ab:1d:78:ae:fd:11:6f:7c:41: 62:ab:58:4a:47:82:78:03:8e:e7:0a:32:c8:46:17: 32:56:bf:00:0b:3f:4a:e5:17:bd:21:f7:9c:50:5f: d4:5c:ee:0f:74:25:b9:94:1d:73:fd:e0:68:ec:d5: 39:62:05:6d:4b:18:48:f0:da:3a:d1:5f:17:a9:51: 63:09:14:50:55:0f:25:c9:2a:4d:68:7d:5a:96:65: 1d:1f:a4:dc:0d:b5:5f:89:61:88:20:58:0d:3d:21: fd:c5:07:92:55:df:c6:f7:d9:9f:bd:1c:8d:46:4a: 14:99:40:2a:64:59:0e:20:e8:b4:70:fd:21:32:06: 56:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:72:E2:A4:DE:22:DD:C1:B1:AA:A7:25:51:34:A3:0D:87:90:28:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0507ac7f-27f1-3bd0-9f13-bdb4b994c645.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 170.187.184.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:8a:79:21:27:99:8b:2a:7c:76:c6:05:7d:4a:37:1e:a3:88: 48:d2:62:44:b1:cd:0d:46:9c:27:a5:95:72:3f:67:8d:3f:0f: bd:e1:dd:60:50:44:84:3e:14:c4:98:1b:f7:0c:e7:b8:cb:8d: d2:6f:a2:a5:b5:42:3b:a3:a0:b1:c2:03:c5:0f:c7:12:35:7c: bf:2d:91:48:71:38:67:f1:a5:f6:75:40:e1:4c:59:21:e3:96: 38:7a:95:cf:64:2d:71:0d:07:51:41:08:3a:31:9a:4b:97:ed: 29:cc:2b:36:d5:11:39:35:aa:09:41:03:18:ed:44:e2:57:6e: a2:8f:00:d9:41:73:01:2b:5f:5b:d5:17:a3:b3:5d:27:26:59: 28:e1:5b:f3:97:3a:b7:0d:b0:b8:b1:4d:cb:76:bb:26:b9:75: 40:4a:29:83:90:4c:d6:01:9b:d1:bd:65:8d:b5:15:66:ab:b1: 69:d9:01:5b:dc:40:a1:69:f7:70:e0:0d:a9:90:dd:f1:61:b9: 1f:45:a4:45:56:26:22:d5:4e:75:a5:07:2f:d1:75:5b:eb:10: d0:e9:f9:f1:0d:1f:33:2e:df:ec:5e:7a:9b:97:dd:9d:76:58: d0:6c:8c:99:21:84:5a:3b:dc:3e:40:28:9c:31:ba:cc:72:13: 6f:b5:b6:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc+qeNOu4NsDQxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWEzOWJmZGMtNmNlMS00MjEzLWFmOTEtZDI2ZmVmNmQ0ZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDmfr3lGqIikWAe1jcbDNrmS41XcGMFaO/V7 3F8xWf2R+Mos2g/KxvyORg9sAiWlDXSdvNyOtuYI8NzPW2ETxMNJnoNuai2eZ0m+ MYoz7bYbQdGyS+FATa5qhzl02B0Lie4LoVV578v6PmaP8rPoDQBZMXDk+4xdpfEg KG2rHXiu/RFvfEFiq1hKR4J4A47nCjLIRhcyVr8ACz9K5Re9IfecUF/UXO4PdCW5 lB1z/eBo7NU5YgVtSxhI8No60V8XqVFjCRRQVQ8lySpNaH1almUdH6TcDbVfiWGI IFgNPSH9xQeSVd/G99mfvRyNRkoUmUAqZFkOIOi0cP0hMgZW7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhy4qTeIt3BsaqnJVE0ow2HkChVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDUwN2FjN2YtMjdmMS0z YmQwLTlmMTMtYmRiNGI5OTRjNjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqru4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyKeSEnmYsqfHbGBX1KNx6jiEjSYkSxzQ1GnCellXI/Z40/D73h3WBQ RIQ+FMSYG/cM57jLjdJvoqW1QjujoLHCA8UPxxI1fL8tkUhxOGfxpfZ1QOFMWSHj ljh6lc9kLXENB1FBCDoxmkuX7SnMKzbVETk1qglBAxjtROJXbqKPANlBcwErX1vV F6OzXScmWSjhW/OXOrcNsLixTct2uya5dUBKKYOQTNYBm9G9ZY21FWarsWnZAVvc QKFp93DgDamQ3fFhuR9FpEVWJiLVTnWlBy/RdVvrENDp+fENHzMu3+xeepuX3Z12 WNBsjJkhhFo73D5AKJwxusxyE2+1tpk= -----END CERTIFICATE-----Generated at Mon Sep 28 20:16:21 2026 by rpki-client