$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d444ab7-5d92-35ea-964e-d44b820f1cca.roa File: 5d444ab7-5d92-35ea-964e-d44b820f1cca.roa (raw, json) Hash identifier: zGgOmi2glzQadqBbGq/xtCQ/J40aFK1HRdqjDlw53NQ= Subject key identifier: E1:2D:84:8E:99:8D:0B:CF:B4:A0:2A:14:F7:55:C7:D9:8C:9C:9C:4D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4984447E7170E4170CDD8B00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d444ab7-5d92-35ea-964e-d44b820f1cca.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 36183 IP address blocks: 172.224.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:44:7e:71:70:e4:17:0c:dd:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=12a7fa0b-cf25-4b7b-8d47-ee12dae16c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:86:94:62:79:36:94:e7:82:a5:55:e6:98:cb: 13:b1:7b:d4:5d:bd:fa:c1:9f:19:0e:35:9e:74:e2: f1:f1:e0:9f:78:52:dc:9a:8c:ba:fa:38:07:62:e2: 85:5b:0d:0e:62:a6:76:82:a9:d3:e0:4a:a8:1c:73: 22:39:2a:73:19:16:17:7c:2b:72:8b:df:9b:2a:46: 32:e2:21:70:35:2a:f9:52:29:9b:16:99:3d:36:73: e1:12:23:f4:2f:5f:57:78:aa:a0:3d:26:da:c4:ee: dc:45:7c:c0:c2:f3:09:41:ba:e6:45:44:e1:dc:ae: ff:be:10:d5:63:f1:6c:55:b7:e6:b6:0b:62:81:cb: f3:cd:03:3c:39:4e:df:76:39:2f:2b:4c:ef:9a:1d: 5b:eb:1f:b1:df:0c:2c:ae:31:38:1b:87:ad:76:fa: 63:d2:84:ed:3f:c7:99:22:70:c7:ae:3b:ff:1a:8c: 56:ce:fa:49:95:33:03:57:0f:8d:29:37:8d:bd:ed: 2a:6a:c0:af:ba:17:99:ea:7b:30:18:dc:27:12:d1: 8b:0d:70:4c:0b:e4:c1:67:ee:2a:c5:cf:b7:eb:01: 30:a3:da:b8:49:d1:5d:f5:b3:c4:bf:5e:c7:f5:f9: e1:f8:52:3a:44:a0:89:51:90:9f:e9:e5:a3:9a:b4: e8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:2D:84:8E:99:8D:0B:CF:B4:A0:2A:14:F7:55:C7:D9:8C:9C:9C:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d444ab7-5d92-35ea-964e-d44b820f1cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:52:66:fa:18:8d:6a:b1:5c:25:33:17:d8:15:43:90:8b:6e: f9:62:bf:7f:b9:39:4e:96:2f:0e:7a:c1:4b:8a:e3:27:58:20: a3:b2:fb:d6:05:1d:24:71:4b:dd:03:1d:ff:93:bb:a6:43:72: 3a:83:aa:95:92:73:99:a2:ce:28:94:59:ed:8d:e2:df:67:6c: ec:6b:13:8a:8a:85:3a:96:b8:0f:9d:47:e7:1d:fc:d8:8b:e1: 65:e4:27:e5:dd:85:52:39:c8:51:00:09:dd:30:80:39:31:44: fe:fe:72:da:55:be:df:10:42:04:e7:8e:c5:76:3d:62:d1:8d: 10:94:e8:88:5a:e3:73:28:8e:28:95:28:57:99:ee:0e:fd:65: 64:00:34:49:65:52:c6:81:e0:22:6e:d2:9e:3d:f2:81:66:07: c8:c2:ab:7c:99:55:b2:81:bc:2f:b1:92:73:cf:fa:43:d0:ec: ff:51:cb:7f:6e:d1:72:4a:5b:5d:1f:30:e9:39:be:c2:09:26: 1d:41:5d:8b:27:a7:0a:29:e1:23:4e:cc:cb:83:e0:40:aa:65: 9f:52:10:f9:aa:1f:fe:1a:4d:55:de:11:10:83:e9:3e:4a:4a: 0e:1f:97:20:ba:49:bc:ae:58:fc:ef:62:fb:73:21:d3:40:db: c1:66:80:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhER+cXDkFwzdiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTJhN2ZhMGItY2YyNS00YjdiLThkNDctZWUxMmRhZTE2YzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4aUYnk2lOeCpVXmmMsTsXvUXb36wZ8ZDjWe dOLx8eCfeFLcmoy6+jgHYuKFWw0OYqZ2gqnT4EqoHHMiOSpzGRYXfCtyi9+bKkYy 4iFwNSr5UimbFpk9NnPhEiP0L19XeKqgPSbaxO7cRXzAwvMJQbrmRUTh3K7/vhDV Y/FsVbfmtgtigcvzzQM8OU7fdjkvK0zvmh1b6x+x3wwsrjE4G4etdvpj0oTtP8eZ InDHrjv/GoxWzvpJlTMDVw+NKTeNve0qasCvuheZ6nswGNwnEtGLDXBMC+TBZ+4q xc+36wEwo9q4SdFd9bPEv17H9fnh+FI6RKCJUZCf6eWjmrTo7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOEthI6ZjQvPtKAqFPdVx9mMnJxNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ0NDRhYjctNWQ5Mi0z NWVhLTk2NGUtZDQ0YjgyMGYxY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpSZvoYjWqxXCUzF9gVQ5CLbvliv3+5OU6WLw56wUuK4ydYIKOy+9YF HSRxS90DHf+Tu6ZDcjqDqpWSc5miziiUWe2N4t9nbOxrE4qKhTqWuA+dR+cd/NiL 4WXkJ+XdhVI5yFEACd0wgDkxRP7+ctpVvt8QQgTnjsV2PWLRjRCU6Iha43MojiiV KFeZ7g79ZWQANEllUsaB4CJu0p498oFmB8jCq3yZVbKBvC+xknPP+kPQ7P9Ry39u 0XJKW10fMOk5vsIJJh1BXYsnpwop4SNOzMuD4ECqZZ9SEPmqH/4aTVXeERCD6T5K Sg4flyC6SbyuWPzvYvtzIdNA28FmgA8= -----END CERTIFICATE-----Generated at Sun Sep 27 12:29:10 2026 by rpki-client