$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a9d7845-f35f-3758-b7b0-50154d7c8b13.roa File: 2a9d7845-f35f-3758-b7b0-50154d7c8b13.roa (raw, json) Hash identifier: m4OzCnla7cwKwCEC0V2ecTMVsO7gPnFsSpjU8H0BpSM= Subject key identifier: C0:C6:1A:3F:7E:62:1F:DF:D3:26:9B:39:27:68:55:98:C9:D1:66:0C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F71EDAE43179BC9390DECA800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a9d7845-f35f-3758-b7b0-50154d7c8b13.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 63949 IP address blocks: 172.235.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:ae:43:17:9b:c9:39:0d:ec:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=c575eabf-22e6-4f2d-840e-829f332f728f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:49:ae:6e:c9:e5:7a:d6:32:4c:c1:18:e6:2d: 2a:a5:34:0d:4d:36:fa:a3:9e:5b:da:ed:fd:30:42: b4:72:06:33:e0:e5:38:28:23:cf:76:2c:c1:a5:8d: ab:c8:06:c7:80:f2:64:4c:b2:46:ff:37:57:89:34: dd:40:12:24:5d:98:fb:46:ea:d5:a5:12:77:ae:7d: ad:e9:cf:cc:79:b0:06:18:d3:7a:8e:0c:b9:99:78: 9f:c9:cb:c7:b7:73:a3:61:13:84:d2:bb:cc:53:0b: d3:e6:3b:fb:d9:a6:64:d0:5b:29:42:c1:46:33:cd: 28:9d:7f:e3:9a:7c:1a:24:48:b3:32:93:8e:00:96: 7c:c1:16:1b:7a:8a:6c:7f:91:e2:b1:85:49:76:e7: bf:c0:d1:85:22:84:51:56:23:47:e7:76:3c:bc:60: 72:6e:79:93:c4:34:40:3b:9a:02:cc:f4:86:df:5f: 0a:33:6c:f3:42:d6:a0:0d:73:b5:d1:56:3d:c2:10: 14:c9:7f:b4:0a:94:85:fe:cd:91:04:37:1f:f2:35: ba:32:12:ce:3f:83:13:e7:33:21:39:bc:18:76:f1: 68:b5:8b:28:16:2e:61:b9:28:52:c9:06:4f:88:c8: e4:09:28:0d:b4:7f:91:87:74:0e:56:a7:39:87:3f: 22:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C6:1A:3F:7E:62:1F:DF:D3:26:9B:39:27:68:55:98:C9:D1:66:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a9d7845-f35f-3758-b7b0-50154d7c8b13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:6c:3c:73:a9:be:ce:f1:bf:cf:86:de:00:51:bc:3e:a1:2a: 40:54:67:f0:0b:88:33:23:0d:c7:20:6b:b4:cc:f6:cb:b0:8a: ac:df:26:f6:51:e9:f4:e8:12:5a:47:89:8b:3b:98:42:94:4f: e1:af:84:cf:e5:7b:25:86:7b:9f:6c:be:3a:70:93:9b:ad:d4: e6:a3:a9:69:64:5e:02:f0:a5:2a:ec:53:bd:94:00:60:43:4c: 4a:d2:bc:50:df:e7:4b:f4:6e:42:e3:05:c5:80:06:07:af:7f: 27:b5:3b:bf:c4:ea:b7:3b:e4:35:37:b8:b5:ca:9f:9a:c2:f7: ee:26:21:3c:8a:8e:16:b7:cc:94:2b:5a:4d:d9:b1:f5:98:f0: 8c:58:ef:cf:d9:50:88:1f:d7:6b:0a:9a:3a:cb:ba:90:04:40: 92:be:3c:23:a9:2c:ba:b9:23:2c:3e:59:d6:cd:a5:be:08:a6: f2:50:c7:1b:e5:b5:19:7d:43:4a:dd:58:dc:41:4a:6f:76:dc: 8b:73:e4:c9:f5:61:b5:77:e2:e2:96:f5:b6:71:a0:6a:5c:40: c2:5b:e3:c7:f7:e0:d0:f9:3d:1d:fc:33:0e:8a:17:c3:0b:a8: ef:1d:58:2f:67:14:f8:00:af:a1:18:ca:dd:29:43:bd:96:9e: 20:64:c0:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7a5DF5vJOQ3sqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk YzU3NWVhYmYtMjJlNi00ZjJkLTg0MGUtODI5ZjMzMmY3MjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0mubsnletYyTMEY5i0qpTQNTTb6o55b2u39 MEK0cgYz4OU4KCPPdizBpY2ryAbHgPJkTLJG/zdXiTTdQBIkXZj7RurVpRJ3rn2t 6c/MebAGGNN6jgy5mXifycvHt3OjYROE0rvMUwvT5jv72aZk0FspQsFGM80onX/j mnwaJEizMpOOAJZ8wRYbeopsf5HisYVJdue/wNGFIoRRViNH53Y8vGBybnmTxDRA O5oCzPSG318KM2zzQtagDXO10VY9whAUyX+0CpSF/s2RBDcf8jW6MhLOP4MT5zMh ObwYdvFotYsoFi5huShSyQZPiMjkCSgNtH+Rh3QOVqc5hz8izQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDGGj9+Yh/f0yabOSdoVZjJ0WYMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmE5ZDc4NDUtZjM1Zi0z NzU4LWI3YjAtNTAxNTRkN2M4YjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHlsPHOpvs7xv8+G3gBRvD6hKkBUZ/ALiDMjDccga7TM9suwiqzfJvZR 6fToElpHiYs7mEKUT+GvhM/leyWGe59svjpwk5ut1OajqWlkXgLwpSrsU72UAGBD TErSvFDf50v0bkLjBcWABgevfye1O7/E6rc75DU3uLXKn5rC9+4mITyKjha3zJQr Wk3ZsfWY8IxY78/ZUIgf12sKmjrLupAEQJK+PCOpLLq5Iyw+WdbNpb4IpvJQxxvl tRl9Q0rdWNxBSm923Itz5Mn1YbV34uKW9bZxoGpcQMJb48f34ND5PR38Mw6KF8ML qO8dWC9nFPgAr6EYyt0pQ72WniBkwCE= -----END CERTIFICATE-----Generated at Sun Oct 11 01:25:33 2026 by rpki-client