$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa File: 310aa2b6-46c7-3c3f-be18-80729877d42a.roa (raw, json) Hash identifier: SeAE1+H7x1KZIGvmdB7clnRyDf1v3bhNH3VV7/K5jhs= Subject key identifier: BE:AB:CD:29:D9:7F:D7:F9:05:60:83:FC:27:A7:E0:D5:F5:BB:6E:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F629305CBBE6EE6DB638F4380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36183 IP address blocks: 172.225.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:05:cb:be:6e:e6:db:63:8f:43:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=b2a89e5a-2be7-496a-bdf1-f6bbb9a864dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fd:be:56:67:e6:c7:c6:a4:95:67:e5:b1:94: 22:b0:e6:c9:75:58:a8:f4:a2:85:82:13:f1:41:63: 28:ee:a3:69:68:3c:cd:97:cb:a0:7e:10:73:9a:ad: 31:7b:56:c6:b8:97:c4:44:c4:79:fc:c3:0d:f2:5c: c1:9c:9c:9b:06:7c:64:3f:7f:3a:82:52:3b:e1:d4: 87:66:87:b9:62:38:0e:7b:2a:a6:49:34:52:a3:b9: 04:67:98:5f:08:01:fb:1e:39:fe:ef:94:4e:ad:a0: f0:07:2e:fe:ca:4e:1e:8d:65:99:10:3f:df:49:5a: ff:6f:d4:fc:af:57:71:13:fa:da:dd:55:9d:10:36: f8:ac:75:7c:8e:f7:d3:4c:4b:ea:8c:50:81:37:8f: ad:3d:fa:45:fc:3b:e8:c7:56:76:fa:aa:78:b6:a2: 15:0d:d6:11:e1:cc:b8:37:9f:f5:b5:98:35:a5:ec: 4a:ab:ee:85:6c:ee:7a:95:5f:f8:15:69:8b:e9:c8: b2:3c:13:69:a7:28:10:04:d6:b2:e8:c5:f0:36:58: 45:15:62:8e:3e:6e:5e:8a:9a:f7:0d:69:45:63:9d: d5:5f:61:f9:ee:c0:de:54:4a:25:64:cc:ee:3a:e5: 14:d1:a5:f1:b9:32:79:bb:a6:d3:90:1c:18:35:79: 84:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AB:CD:29:D9:7F:D7:F9:05:60:83:FC:27:A7:E0:D5:F5:BB:6E:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/310aa2b6-46c7-3c3f-be18-80729877d42a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:87:28:17:a8:35:7d:ec:58:ab:61:c2:cc:e5:6b:40:44:ac: 6d:df:ed:17:4e:c1:ed:7c:1e:40:43:10:af:c2:2d:4f:a0:2e: 06:6e:ae:77:89:ed:66:99:90:3b:70:6c:54:aa:48:b0:1e:3c: 07:3b:0f:68:16:20:b2:17:e1:4a:db:15:6a:50:35:41:b3:f2: d8:4f:1a:1f:45:a1:33:0d:fa:88:84:10:4c:18:18:8d:15:b8: cf:28:2d:ef:50:68:69:40:ec:07:6f:c5:23:6a:23:12:93:22: 08:56:49:82:dd:10:c8:b7:51:e5:7b:a0:b5:3d:65:86:cc:22: e6:43:36:d2:09:4d:15:9b:78:ec:90:84:1b:49:d5:46:6c:b2: f4:44:92:4f:df:d1:c7:e1:4c:7e:cf:c4:0d:2b:61:f6:dc:3e: 20:25:34:d9:e8:4f:ba:53:71:11:b0:4e:67:94:53:26:e4:86: 17:8e:cb:09:56:e2:73:a6:c8:80:e8:e7:87:dc:5e:97:45:fb: 48:91:0b:65:b9:e8:fb:c2:a3:48:c5:de:6d:85:80:f4:c3:4d: 43:e9:0a:6e:bc:3c:4b:3a:f3:c6:ef:29:7b:fc:c7:99:af:2d: 7b:bc:75:26:0b:d5:cb:d1:40:cb:87:b6:b2:f5:97:03:93:37: b0:3e:ca:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwXLvm7m22OPQ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk YjJhODllNWEtMmJlNy00OTZhLWJkZjEtZjZiYmI5YTg2NGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv2+Vmfmx8aklWflsZQisObJdVio9KKFghPx QWMo7qNpaDzNl8ugfhBzmq0xe1bGuJfERMR5/MMN8lzBnJybBnxkP386glI74dSH Zoe5YjgOeyqmSTRSo7kEZ5hfCAH7Hjn+75ROraDwBy7+yk4ejWWZED/fSVr/b9T8 r1dxE/ra3VWdEDb4rHV8jvfTTEvqjFCBN4+tPfpF/Dvox1Z2+qp4tqIVDdYR4cy4 N5/1tZg1pexKq+6FbO56lV/4FWmL6ciyPBNppygQBNay6MXwNlhFFWKOPm5eipr3 DWlFY53VX2H57sDeVEolZMzuOuUU0aXxuTJ5u6bTkBwYNXmEDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6rzSnZf9f5BWCD/Cen4NX1u26iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzEwYWEyYjYtNDZjNy0z YzNmLWJlMTgtODA3Mjk4NzdkNDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOECMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCHKBeoNX3sWKthwszla0BErG3f7RdOwe18HkBDEK/CLU+gLgZurneJ 7WaZkDtwbFSqSLAePAc7D2gWILIX4UrbFWpQNUGz8thPGh9FoTMN+oiEEEwYGI0V uM8oLe9QaGlA7AdvxSNqIxKTIghWSYLdEMi3UeV7oLU9ZYbMIuZDNtIJTRWbeOyQ hBtJ1UZssvREkk/f0cfhTH7PxA0rYfbcPiAlNNnoT7pTcRGwTmeUUybkhheOywlW 4nOmyIDo54fcXpdF+0iRC2W56PvCo0jF3m2FgPTDTUPpCm68PEs688bvKXv8x5mv LXu8dSYL1cvRQMuHtrL1lwOTN7A+ysw= -----END CERTIFICATE-----Generated at Mon Oct 5 11:32:26 2026 by rpki-client