$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/717284ca-0bf6-3928-987d-375d53d3228a.roa File: 717284ca-0bf6-3928-987d-375d53d3228a.roa (raw, json) Hash identifier: 32gfEYJhute4Zo39PgoTP/ybJ4M6N43xDEhLpr+8UGw= Subject key identifier: 37:43:4A:90:99:1B:29:82:E4:B9:2D:45:12:87:CC:41:6C:00:9A:7C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F629304C81732D4307DFB5100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/717284ca-0bf6-3928-987d-375d53d3228a.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 36183 IP address blocks: 172.225.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:93:04:c8:17:32:d4:30:7d:fb:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=e747201f-b4ec-4ebf-b91c-63629f55f0b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1b:c7:b3:94:54:9c:7b:24:a5:94:e1:52:0b: 1b:cc:ce:fd:a8:51:43:04:74:83:5c:c5:68:74:1f: 09:4e:cd:6b:42:fc:ff:60:69:3a:62:df:ea:07:8b: 0e:08:79:c7:7e:5d:ef:9d:e4:35:79:64:45:82:86: b8:16:d7:5e:fb:46:8b:cc:9d:94:25:8d:0c:2d:8e: c0:e8:35:be:68:2b:f2:7e:ba:16:02:9a:0c:99:04: c3:4e:73:2b:ca:6c:ac:0e:77:8c:ef:89:83:27:da: 38:23:15:df:09:8a:77:51:37:e3:fb:7f:1d:3d:8d: b2:ec:31:29:b0:29:2e:4e:0c:9f:e7:24:fa:ea:ef: 69:72:7e:ca:19:9c:06:c8:92:c2:0e:e1:80:7a:17: 67:d6:75:00:26:d0:d6:b6:3d:4a:74:eb:4f:db:42: 35:fd:f5:da:8d:19:c1:cc:89:a9:cb:95:4b:0a:fa: 79:46:0c:45:4c:9c:f2:8d:e9:32:d2:ac:b9:bd:3f: 6a:0d:32:a2:53:22:63:68:83:75:ff:65:ff:7a:3e: f6:00:89:92:d8:25:9d:aa:7a:71:4e:6c:eb:43:15: a7:67:75:57:8b:3b:35:0e:5d:7c:47:b2:98:4d:1d: 52:bb:fb:a7:dc:e0:6c:8f:b7:33:a5:73:1d:0e:82: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:43:4A:90:99:1B:29:82:E4:B9:2D:45:12:87:CC:41:6C:00:9A:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/717284ca-0bf6-3928-987d-375d53d3228a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:50:60:60:6b:f5:26:71:f1:38:e3:8a:3e:d0:8e:c2:a5:95: fd:8c:c7:93:89:62:6f:b6:28:bc:cb:4c:94:49:05:3f:5c:02: ca:94:10:38:ed:e9:58:f8:22:e9:cb:1f:fc:0d:53:7f:29:11: e8:49:89:45:7d:c3:5b:fb:44:35:39:a4:fd:cc:a2:6d:76:e6: a0:f1:35:d7:d8:66:d6:d0:60:aa:c8:79:34:24:77:1b:1f:2d: 5b:af:1f:fb:67:ec:3b:97:c8:36:75:2e:ef:e5:ee:db:85:ec: 54:8b:19:f3:bc:7a:70:8d:9c:bd:70:97:9f:d0:88:51:79:37: 05:f2:c0:b6:44:bb:c3:31:ff:ce:69:86:71:8f:41:14:e5:f5: 52:45:84:cd:68:a2:65:43:37:a5:dc:f8:9e:ef:4e:74:7d:70: 4d:23:bf:db:88:41:94:a8:67:dc:ac:1d:e3:f8:8a:39:23:51: b4:16:c4:f5:cc:f3:ea:ed:e7:17:ab:27:12:6c:2d:59:bd:2e: 99:bd:33:57:db:2e:df:b2:ae:be:04:a0:3f:e7:6d:45:57:69: a4:88:aa:7b:e5:89:7a:bb:e9:d2:4a:10:f6:04:4b:cb:5c:2a: 8c:87:d2:09:ff:ed:a5:c5:03:ea:4d:e5:5b:c0:52:ca:01:ac: 78:60:08:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikwTIFzLUMH37UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk ZTc0NzIwMWYtYjRlYy00ZWJmLWI5MWMtNjM2MjlmNTVmMGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBvHs5RUnHskpZThUgsbzM79qFFDBHSDXMVo dB8JTs1rQvz/YGk6Yt/qB4sOCHnHfl3vneQ1eWRFgoa4Ftde+0aLzJ2UJY0MLY7A 6DW+aCvyfroWApoMmQTDTnMrymysDneM74mDJ9o4IxXfCYp3UTfj+38dPY2y7DEp sCkuTgyf5yT66u9pcn7KGZwGyJLCDuGAehdn1nUAJtDWtj1KdOtP20I1/fXajRnB zImpy5VLCvp5RgxFTJzyjeky0qy5vT9qDTKiUyJjaIN1/2X/ej72AImS2CWdqnpx TmzrQxWnZ3VXizs1Dl18R7KYTR1Su/un3OBsj7czpXMdDoLvswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdDSpCZGymC5LktRRKHzEFsAJp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzE3Mjg0Y2EtMGJmNi0z OTI4LTk4N2QtMzc1ZDUzZDMyMjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFQYGBr9SZx8Tjjij7QjsKllf2Mx5OJYm+2KLzLTJRJBT9cAsqUEDjt 6Vj4IunLH/wNU38pEehJiUV9w1v7RDU5pP3Mom125qDxNdfYZtbQYKrIeTQkdxsf LVuvH/tn7DuXyDZ1Lu/l7tuF7FSLGfO8enCNnL1wl5/QiFF5NwXywLZEu8Mx/85p hnGPQRTl9VJFhM1oomVDN6Xc+J7vTnR9cE0jv9uIQZSoZ9ysHeP4ijkjUbQWxPXM 8+rt5xerJxJsLVm9Lpm9M1fbLt+yrr4EoD/nbUVXaaSIqnvliXq76dJKEPYES8tc KoyH0gn/7aXFA+pN5VvAUsoBrHhgCLY= -----END CERTIFICATE-----Generated at Sun Oct 4 08:17:22 2026 by rpki-client