$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa File: 8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa (raw, json) Hash identifier: 6aykY8+HsYYMGB8vKLa7w7DmhY+eEiK1J66SdoDv+Xg= Subject key identifier: AA:73:51:B9:3B:4D:B4:E5:BD:5C:99:5B:72:A5:BB:ED:31:28:52:38 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F1B62540EDB579267E3C4B980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 36183 IP address blocks: 172.224.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:54:0e:db:57:92:67:e3:c4:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=24534758-7560-42a5-9d09-3fe86e3b7134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:24:15:1c:cb:b9:62:6f:8e:24:73:d0:90:7c: 74:b2:81:23:be:29:55:a6:0c:41:92:39:64:ff:24: 7c:34:6d:44:4b:40:00:d5:c1:61:f0:15:d9:d5:94: b2:5c:cb:b3:0f:b6:f1:d5:1f:4a:7e:33:f8:4e:79: ec:eb:0c:48:b3:e1:b5:da:7e:1e:29:fe:5c:25:fb: e8:9a:4b:cb:b7:84:81:1b:c7:75:db:79:91:6b:49: bc:1a:b1:e1:1b:c3:72:81:21:4b:13:86:20:a1:9b: d0:fa:0d:6b:12:f1:c2:64:1d:2d:63:f9:13:ef:1b: 4d:8d:0d:19:70:4d:8e:4b:fa:e9:4f:58:b8:cf:ce: 07:e4:57:78:0e:53:65:2b:c9:d9:9c:f2:06:e8:6e: 26:df:76:93:73:80:dc:33:05:4f:49:43:47:42:fb: 81:14:fb:cc:ea:78:98:a0:1d:16:25:4d:0a:b8:d0: c4:31:50:ca:bb:7c:b3:72:54:7d:1f:f1:be:39:72: 12:36:27:a7:a5:e9:6a:f3:a0:04:9e:5c:57:b5:85: 95:26:c0:72:56:0e:ef:27:d2:7f:7b:ca:93:d5:33: 62:48:cf:23:a1:75:fd:3e:b3:ee:6f:5d:79:83:18: 2c:98:a3:71:68:7e:96:d1:bc:2b:29:f5:b0:62:4d: 3a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:73:51:B9:3B:4D:B4:E5:BD:5C:99:5B:72:A5:BB:ED:31:28:52:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8a96f8b6-5bd6-3cb3-9c94-cca87f4425db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:97:8d:a5:2e:cb:90:e3:ad:03:91:07:09:da:20:73:ba:2d: de:df:98:a5:fc:0c:0f:1a:31:bf:c9:ca:29:f3:bc:e9:80:8e: 7d:7c:98:26:54:8e:b3:b0:f1:17:a2:cd:5f:e4:bf:c9:d6:22: 5d:a8:b4:42:eb:83:c6:9d:13:9c:f7:ea:e8:ab:d6:cd:0b:bf: 1f:75:be:f1:01:a3:e4:74:85:ff:59:7f:a9:16:62:38:5f:36: 04:73:e6:d5:84:da:a2:75:5b:f2:60:9c:f2:8e:db:f1:bf:bc: 94:fe:e7:9e:4d:62:55:17:72:2b:4a:c1:8d:ea:d8:9c:e4:ec: 3a:c4:66:4a:48:d3:ce:18:e2:6c:69:0e:33:d8:73:7a:c2:f0: 4e:58:3b:85:0e:40:e7:cf:90:8c:da:36:6b:b0:7c:64:50:7a: 07:56:fd:1f:f6:77:35:4f:f5:42:96:ea:c8:dd:06:a6:06:62: 5d:8e:a1:68:17:89:f9:fe:e0:c4:9a:7a:0b:e0:6d:cb:1c:fe: c0:2f:9a:a6:44:1a:07:7a:c7:f4:b8:60:34:60:35:ae:ba:c8: 6f:3a:17:4f:09:e5:ab:f2:c4:50:57:12:0d:92:65:d8:dd:31: 53:7e:a6:50:d6:8f:be:a7:cb:9e:b9:61:2f:c5:41:55:1e:9f: a6:ef:67:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlQO21eSZ+PEuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MjQ1MzQ3NTgtNzU2MC00MmE1LTlkMDktM2ZlODZlM2I3MTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiQVHMu5Ym+OJHPQkHx0soEjvilVpgxBkjlk /yR8NG1ES0AA1cFh8BXZ1ZSyXMuzD7bx1R9KfjP4Tnns6wxIs+G12n4eKf5cJfvo mkvLt4SBG8d123mRa0m8GrHhG8NygSFLE4YgoZvQ+g1rEvHCZB0tY/kT7xtNjQ0Z cE2OS/rpT1i4z84H5Fd4DlNlK8nZnPIG6G4m33aTc4DcMwVPSUNHQvuBFPvM6niY oB0WJU0KuNDEMVDKu3yzclR9H/G+OXISNienpelq86AEnlxXtYWVJsByVg7vJ9J/ e8qT1TNiSM8joXX9PrPub115gxgsmKNxaH6W0bwrKfWwYk06qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpzUbk7TbTlvVyZW3Klu+0xKFI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOGE5NmY4YjYtNWJkNi0z Y2IzLTljOTQtY2NhODdmNDQyNWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOXjaUuy5DjrQORBwnaIHO6Ld7fmKX8DA8aMb/JyinzvOmAjn18mCZU jrOw8ReizV/kv8nWIl2otELrg8adE5z36uir1s0Lvx91vvEBo+R0hf9Zf6kWYjhf NgRz5tWE2qJ1W/JgnPKO2/G/vJT+555NYlUXcitKwY3q2Jzk7DrEZkpI084Y4mxp DjPYc3rC8E5YO4UOQOfPkIzaNmuwfGRQegdW/R/2dzVP9UKW6sjdBqYGYl2OoWgX ifn+4MSaegvgbcsc/sAvmqZEGgd6x/S4YDRgNa66yG86F08J5avyxFBXEg2SZdjd MVN+plDWj76ny565YS/FQVUen6bvZ7s= -----END CERTIFICATE-----Generated at Thu Sep 24 23:07:18 2026 by rpki-client