$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab80909-a430-3e11-b205-e1a70373741a.roa File: 0ab80909-a430-3e11-b205-e1a70373741a.roa (raw, json) Hash identifier: c2UT/UGE36h6Y4yWxVBjs7VwiHkTQ0XOk0l7OA9dw70= Subject key identifier: B6:BE:1A:1A:F6:A8:BC:59:7F:6F:E4:0F:29:AE:BB:CE:53:98:46:6A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F5E62ED5DF8638B54A5840A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab80909-a430-3e11-b205-e1a70373741a.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 36183 IP address blocks: 172.225.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ed:5d:f8:63:8b:54:a5:84:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=5caf70fa-2907-4547-9259-309f060b6217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a1:a1:d6:17:c5:d1:62:8a:ff:9a:a4:f2:70: ba:a8:b0:f7:ce:1f:95:ea:ca:10:8e:04:e7:06:e6: 01:94:a7:d0:67:14:a6:00:3c:9f:8e:89:52:b2:ff: 2e:ec:67:ee:73:b4:5f:5f:cb:ae:69:72:4d:e2:14: 8f:75:77:8c:10:cb:54:de:f6:ae:79:33:f6:22:dc: 35:22:a5:91:74:21:4b:c4:c5:94:31:54:f1:8b:27: 10:32:84:87:15:6f:75:d4:77:7c:f7:5c:28:9f:22: 1d:fb:5d:8a:25:e1:17:1a:61:18:27:57:0a:54:55: 94:ae:04:cb:d0:59:78:93:df:56:81:6d:ef:31:bd: 49:1e:60:83:e6:b5:48:89:bd:c9:68:22:19:27:fd: a9:2a:2a:39:27:ce:09:23:54:56:53:01:2f:c8:06: 57:02:4f:ee:9f:f0:1a:c3:20:90:53:74:cc:84:d3: a1:e5:71:a6:c6:2f:7c:02:ca:e5:5a:fe:86:af:5a: a5:bd:46:32:ef:6f:49:8b:17:2e:84:a4:15:6b:de: 1c:9a:91:de:ac:63:58:38:04:e4:10:ee:ba:9b:63: c9:95:b3:64:8e:64:ad:36:f8:d8:4f:d6:e0:63:67: 6e:d0:78:5c:38:b5:be:d5:1c:53:f2:27:2c:8a:a9: d9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BE:1A:1A:F6:A8:BC:59:7F:6F:E4:0F:29:AE:BB:CE:53:98:46:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0ab80909-a430-3e11-b205-e1a70373741a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:26:1e:8e:d7:00:d0:6b:1b:06:83:ff:46:3f:59:e8:9a:29: 66:e1:f5:b2:aa:d9:55:4e:22:b7:16:d0:66:6d:09:6e:eb:e0: 57:d7:7a:c6:40:2a:07:52:ca:55:68:87:28:a6:07:56:e3:f3: 70:19:86:0e:68:07:be:a3:46:39:95:23:5b:06:a5:f3:5c:9e: 8e:91:d4:44:a6:b7:b5:8a:d1:b6:86:f7:e9:c0:0b:ef:b1:af: 88:18:11:cd:3c:8c:c3:e9:e2:6f:08:4c:72:80:27:2d:c1:6b: a8:f8:54:91:76:ab:82:48:50:00:0f:b6:f0:78:70:ae:39:c4: 23:f1:ad:fa:96:c1:55:14:61:93:4d:e5:a0:d1:73:a4:cf:d0: 12:4a:8d:56:fd:5e:25:7d:55:8d:0d:b8:8f:0f:ae:bc:cc:9e: 3c:69:41:eb:3b:39:02:72:a7:d6:7b:54:05:fa:27:5e:ed:49: e8:7b:4d:e4:2a:64:2d:be:a9:15:ff:7b:b1:3d:30:b7:8b:1e: b2:96:3c:0b:ec:ac:ee:a3:b2:09:55:e1:bc:90:dd:0d:ed:f2: 56:5f:61:21:d2:83:84:02:78:9e:79:76:08:1d:a2:29:11:44: ee:a1:56:fc:35:93:a4:49:c8:07:dd:15:ac:9f:1a:17:ea:78: 5e:ae:c3:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYu1d+GOLVKWECoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk NWNhZjcwZmEtMjkwNy00NTQ3LTkyNTktMzA5ZjA2MGI2MjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6Gh1hfF0WKK/5qk8nC6qLD3zh+V6soQjgTn BuYBlKfQZxSmADyfjolSsv8u7Gfuc7RfX8uuaXJN4hSPdXeMEMtU3vaueTP2Itw1 IqWRdCFLxMWUMVTxiycQMoSHFW911Hd891wonyId+12KJeEXGmEYJ1cKVFWUrgTL 0Fl4k99WgW3vMb1JHmCD5rVIib3JaCIZJ/2pKio5J84JI1RWUwEvyAZXAk/un/Aa wyCQU3TMhNOh5XGmxi98AsrlWv6Gr1qlvUYy729JixcuhKQVa94cmpHerGNYOATk EO66m2PJlbNkjmStNvjYT9bgY2du0HhcOLW+1RxT8icsiqnZrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLa+Ghr2qLxZf2/kDymuu85TmEZqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGFiODA5MDktYTQzMC0z ZTExLWIyMDUtZTFhNzAzNzM3NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQmHo7XANBrGwaD/0Y/WeiaKWbh9bKq2VVOIrcW0GZtCW7r4FfXesZA KgdSylVohyimB1bj83AZhg5oB76jRjmVI1sGpfNcno6R1ESmt7WK0baG9+nAC++x r4gYEc08jMPp4m8ITHKAJy3Ba6j4VJF2q4JIUAAPtvB4cK45xCPxrfqWwVUUYZNN 5aDRc6TP0BJKjVb9XiV9VY0NuI8PrrzMnjxpQes7OQJyp9Z7VAX6J17tSeh7TeQq ZC2+qRX/e7E9MLeLHrKWPAvsrO6jsglV4byQ3Q3t8lZfYSHSg4QCeJ55dggdoikR RO6hVvw1k6RJyAfdFayfGhfqeF6uw3Y= -----END CERTIFICATE-----Generated at Mon Oct 5 00:54:47 2026 by rpki-client