$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f4ce7a4-5029-37a3-9d17-638760f4ee79.roa File: 0f4ce7a4-5029-37a3-9d17-638760f4ee79.roa (raw, json) Hash identifier: qGj3zJpqc2S3lVgPnyWNax0jENPCRNvf+iTVSkahjU0= Subject key identifier: 25:06:F3:7F:C5:65:58:8D:1C:39:A6:72:20:6F:00:08:88:31:96:31 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F5E62ED0B09EB2F5F88F60240 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f4ce7a4-5029-37a3-9d17-638760f4ee79.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 36183 IP address blocks: 172.225.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:ed:0b:09:eb:2f:5f:88:f6:02:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=b12f3d69-88b0-4694-9ef3-026bd7d9a729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a2:ae:5d:9c:cd:d0:d9:a4:69:a3:52:20:a6: 54:d3:6f:d7:b9:ef:b1:61:74:f7:db:e8:7d:7a:7a: ad:80:f8:a9:a4:fb:f1:9a:a0:db:93:fa:da:30:c0: 90:c4:2a:f9:c6:45:41:7f:cf:7e:4c:f1:67:f5:9c: 99:ac:61:13:74:e2:a1:77:7f:d8:4f:9c:f9:ac:6a: f3:a6:a2:7a:46:44:9b:55:9f:97:42:5b:0b:2c:37: 58:49:3e:b8:75:0a:d7:45:3d:fe:76:7a:08:2f:8b: c1:66:1a:ac:30:ad:c8:08:06:54:8a:f7:90:af:47: a2:7e:db:ee:1c:79:3b:60:64:36:cc:42:86:73:8a: db:ee:dc:fb:b2:af:76:8a:1b:ba:7d:52:d3:e2:d6: 43:b9:44:dd:5f:21:0f:76:30:14:8f:85:81:aa:35: d3:bc:0b:e4:28:6e:13:5f:0b:df:56:17:df:97:53: 10:f9:10:05:45:d4:ac:c5:7b:79:e0:60:ca:72:f4: 5c:ba:c0:1f:f4:a1:7b:0d:f9:41:06:c0:f5:cc:56: d5:90:1f:74:65:b9:05:59:d6:f4:54:09:6f:24:3b: c7:b7:9f:86:4f:6c:c9:1c:2f:84:a9:bd:6a:e4:31: a4:ab:b9:0a:65:02:9b:25:35:cf:c2:35:ea:bd:dc: 1b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:06:F3:7F:C5:65:58:8D:1C:39:A6:72:20:6F:00:08:88:31:96:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f4ce7a4-5029-37a3-9d17-638760f4ee79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:22:81:f1:23:62:ca:7c:3b:dd:f7:66:a5:34:16:19:cd:59: af:b0:e5:77:63:22:2a:06:57:c4:f1:cd:b3:e3:04:dd:a6:58: ec:51:25:a5:66:2e:1c:44:6f:4a:ec:aa:ed:10:26:c7:d8:f7: 42:c9:1b:7f:a0:67:be:dd:a5:50:0f:e5:3e:6a:71:73:37:22: 9b:9e:8d:f6:cf:a9:20:94:d7:16:29:fa:f8:34:c3:70:b3:bb: 11:c8:32:79:ee:78:06:9e:85:40:4c:f7:3b:52:14:05:29:a5: 0a:e5:47:2f:4a:d7:96:a8:aa:bc:84:7f:9a:fe:a6:38:26:da: 6d:c8:1e:84:21:bd:c3:35:ab:bd:33:a2:81:e0:6f:db:bb:81: ea:a0:6a:7d:0c:91:04:3e:76:0f:7c:85:f2:ef:55:4f:39:a6: a9:7b:f6:08:eb:82:80:44:da:ff:b0:bb:4b:f2:87:23:79:d5: d1:d5:74:d6:b1:a2:14:58:99:4c:23:c8:cf:1b:88:fd:54:68: 04:35:cd:d8:2e:ad:fa:77:ea:07:ea:08:0a:0b:df:b3:d3:c6: c2:2b:e3:1c:bd:ed:2b:73:5f:06:cb:f8:d5:75:67:bd:9d:a1: f3:28:66:d8:5f:b0:5f:e9:71:ba:1d:cd:ea:b7:af:9b:c0:41: 77:2b:ff:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYu0LCesvX4j2AkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YjEyZjNkNjktODhiMC00Njk0LTllZjMtMDI2YmQ3ZDlhNzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKKuXZzN0NmkaaNSIKZU02/Xue+xYXT32+h9 enqtgPippPvxmqDbk/raMMCQxCr5xkVBf89+TPFn9ZyZrGETdOKhd3/YT5z5rGrz pqJ6RkSbVZ+XQlsLLDdYST64dQrXRT3+dnoIL4vBZhqsMK3ICAZUiveQr0eiftvu HHk7YGQ2zEKGc4rb7tz7sq92ihu6fVLT4tZDuUTdXyEPdjAUj4WBqjXTvAvkKG4T XwvfVhffl1MQ+RAFRdSsxXt54GDKcvRcusAf9KF7DflBBsD1zFbVkB90ZbkFWdb0 VAlvJDvHt5+GT2zJHC+Eqb1q5DGkq7kKZQKbJTXPwjXqvdwbrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUG83/FZViNHDmmciBvAAiIMZYxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGY0Y2U3YTQtNTAyOS0z N2EzLTlkMTctNjM4NzYwZjRlZTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8igfEjYsp8O933ZqU0FhnNWa+w5XdjIioGV8TxzbPjBN2mWOxRJaVm LhxEb0rsqu0QJsfY90LJG3+gZ77dpVAP5T5qcXM3IpuejfbPqSCU1xYp+vg0w3Cz uxHIMnnueAaehUBM9ztSFAUppQrlRy9K15aoqryEf5r+pjgm2m3IHoQhvcM1q70z ooHgb9u7geqgan0MkQQ+dg98hfLvVU85pql79gjrgoBE2v+wu0vyhyN51dHVdNax ohRYmUwjyM8biP1UaAQ1zdgurfp36gfqCAoL37PTxsIr4xy97StzXwbL+NV1Z72d ofMoZthfsF/pcbodzeq3r5vAQXcr/2k= -----END CERTIFICATE-----Generated at Mon Oct 5 11:20:15 2026 by rpki-client