$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b62217ee-0525-3fce-82e2-9d7b2f27ae9c.roa File: b62217ee-0525-3fce-82e2-9d7b2f27ae9c.roa (raw, json) Hash identifier: bdfc4QSdryaGuopf4o+qXUFTZX0BSTGc3mDi4qDkSdg= Subject key identifier: E1:E9:8F:43:28:AA:BF:FD:5D:67:DF:16:E9:0D:8E:8B:FB:2A:61:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F20F7C04C90EA82D53FD20380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b62217ee-0525-3fce-82e2-9d7b2f27ae9c.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 172.235.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:c0:4c:90:ea:82:d5:3f:d2:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=46f70999-4089-41a6-b0ab-a99fe76e85f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6f:3c:75:7b:9d:02:c2:3c:ac:5d:b1:6d:77: ea:48:43:3f:6a:04:46:a0:af:83:a7:f0:05:d2:e0: 3c:9a:94:db:a7:df:de:1d:43:c6:a7:25:7b:43:65: 0a:50:79:45:74:5a:05:29:29:e7:05:67:83:4d:4c: 9b:15:ca:bd:c4:bb:16:4b:f5:ac:ab:d4:7a:c1:f7: 87:24:ab:ab:59:31:34:f0:32:b0:81:40:8c:e0:04: f2:9a:ee:ff:60:b4:e9:d5:31:95:9f:87:d4:77:76: 6d:e3:2f:6a:c0:bf:e2:df:21:d3:e9:b4:e7:69:e4: 10:03:a1:7d:43:ab:99:0b:a4:e0:90:09:e2:7b:96: 75:e0:4e:39:ec:f9:5b:59:1b:05:2d:81:6b:d1:d5: 93:41:73:cb:68:ec:06:51:c4:a2:31:4a:9b:5d:b8: ec:1b:a4:f6:ab:d4:de:06:02:8b:89:7b:24:85:92: 62:98:de:d3:54:a7:cb:5b:cd:ef:cd:6c:ba:6c:43: fe:98:45:ea:e1:f7:13:31:cd:46:1f:11:ed:b1:75: f3:24:a0:51:fd:05:a1:79:e6:c4:80:02:91:1b:dd: 7c:74:ae:7b:f7:b1:76:8c:4e:82:60:cb:b4:a8:da: 32:d1:fb:2b:cf:a7:8e:59:82:a7:f4:c0:f5:34:09: 01:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E9:8F:43:28:AA:BF:FD:5D:67:DF:16:E9:0D:8E:8B:FB:2A:61:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b62217ee-0525-3fce-82e2-9d7b2f27ae9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:42:aa:f3:ee:c6:99:44:4d:c7:97:04:d7:83:cf:52:20:a0: f6:3d:b1:48:46:d8:4e:b1:b4:fe:73:56:a8:79:59:b6:48:76: 2f:40:cc:0d:de:f1:87:77:7c:cf:c5:58:6d:18:fd:45:e3:3a: d9:6f:e1:0b:ea:d7:68:21:81:76:b8:9b:20:d1:d8:02:51:d5: 48:77:55:df:36:f0:42:a5:a7:0d:0f:31:74:d4:36:92:36:9d: 28:c9:cc:85:7b:da:90:c7:eb:c9:e8:1f:c8:45:8a:c1:ce:da: f5:da:3b:9b:a8:22:be:2b:37:1c:25:69:d8:1e:43:1e:9a:d3: 55:dc:c1:30:ca:3e:5f:a4:5c:68:b9:19:79:07:73:13:7c:35: 55:ad:53:f4:63:b3:58:0b:9f:fb:14:c5:2b:a7:85:35:b0:33: a9:26:fe:67:20:6e:2e:fa:b4:41:41:8e:26:bd:d9:65:cb:da: 51:54:91:df:b4:3c:97:c9:91:cd:22:4d:90:07:e7:b4:ae:4b: 9d:ff:91:d6:ba:21:9d:4f:3b:a8:32:23:3f:3b:c0:fb:c9:1f: 56:8f:ed:8b:e8:23:55:fa:a9:e3:32:a1:ae:31:ad:29:8c:fb: a3:45:34:bf:a2:a9:4f:b9:d4:45:9f:3a:f2:0b:21:9e:c4:4f: d0:05:63:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g98BMkOqC1T/SA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDZmNzA5OTktNDA4OS00MWE2LWIwYWItYTk5ZmU3NmU4NWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG88dXudAsI8rF2xbXfqSEM/agRGoK+Dp/AF 0uA8mpTbp9/eHUPGpyV7Q2UKUHlFdFoFKSnnBWeDTUybFcq9xLsWS/Wsq9R6wfeH JKurWTE08DKwgUCM4ATymu7/YLTp1TGVn4fUd3Zt4y9qwL/i3yHT6bTnaeQQA6F9 Q6uZC6TgkAnie5Z14E457PlbWRsFLYFr0dWTQXPLaOwGUcSiMUqbXbjsG6T2q9Te BgKLiXskhZJimN7TVKfLW83vzWy6bEP+mEXq4fcTMc1GHxHtsXXzJKBR/QWheebE gAKRG918dK5797F2jE6CYMu0qNoy0fsrz6eOWYKn9MD1NAkBdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOHpj0Moqr/9XWffFukNjov7KmFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjYyMjE3ZWUtMDUyNS0z ZmNlLTgyZTItOWQ3YjJmMjdhZTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRCqvPuxplETceXBNeDz1IgoPY9sUhG2E6xtP5zVqh5WbZIdi9AzA3e 8Yd3fM/FWG0Y/UXjOtlv4Qvq12ghgXa4myDR2AJR1Uh3Vd828EKlpw0PMXTUNpI2 nSjJzIV72pDH68noH8hFisHO2vXaO5uoIr4rNxwladgeQx6a01XcwTDKPl+kXGi5 GXkHcxN8NVWtU/Rjs1gLn/sUxSunhTWwM6km/mcgbi76tEFBjia92WXL2lFUkd+0 PJfJkc0iTZAH57SuS53/kda6IZ1PO6gyIz87wPvJH1aP7YvoI1X6qeMyoa4xrSmM +6NFNL+iqU+51EWfOvILIZ7ET9AFY/g= -----END CERTIFICATE-----Generated at Sun Sep 20 17:23:35 2026 by rpki-client