$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c900af37-6896-3434-803d-f9ee24686159.roa File: c900af37-6896-3434-803d-f9ee24686159.roa (raw, json) Hash identifier: 2NvTjT6tllCo7t80zAk4BcgHQ+OIefJoovJyw13g97o= Subject key identifier: 7B:28:CA:98:3B:4D:6B:2A:55:95:5E:44:2A:03:08:19:74:57:30:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F7BB306D5D01E2F43D2E6AB40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c900af37-6896-3434-803d-f9ee24686159.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 36183 IP address blocks: 172.224.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:06:d5:d0:1e:2f:43:d2:e6:ab:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=ff07a369-22eb-4ed7-a598-1fee8213ae5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3c:f9:8e:cb:87:55:c6:1e:c4:4d:8f:e5:3d: 40:ae:04:58:c3:22:9b:e7:1b:fc:52:15:75:47:6b: 4e:a5:49:df:0f:97:97:25:74:99:e9:ab:4b:9e:3a: a7:58:b2:1a:2a:46:50:49:8a:a8:d6:38:f4:ff:a0: 9c:09:9e:73:4f:8b:34:3a:22:4c:17:22:af:9e:fd: 1b:01:c2:c7:f2:b8:cb:a0:9c:51:a3:3b:fe:3f:e1: 0e:f6:8b:48:fa:c5:9c:b6:f9:bf:31:f3:9d:1a:cb: 0a:ed:28:80:4d:30:f8:0e:e5:7f:e9:0f:c9:b9:0e: 1d:e7:45:c3:73:e9:01:00:eb:7a:67:17:72:0c:44: ef:ca:4e:7b:67:94:1e:96:32:4c:47:d7:78:e9:8c: e2:1a:ba:55:f6:b8:51:28:4a:76:02:fb:88:e0:9a: b4:93:7c:70:de:fe:8f:67:f9:fb:39:05:ed:84:cf: 8b:e2:37:78:1e:aa:0d:5a:ff:54:06:3e:64:6c:81: ab:28:61:95:3a:ba:41:19:a7:a6:fb:03:58:aa:ae: 02:3b:27:64:6e:f2:79:46:98:a0:44:96:d4:42:8c: 50:d3:ac:ab:cf:40:81:a9:45:a8:ff:7b:37:ad:68: c0:64:f3:93:bd:96:49:bb:71:c0:7f:cf:ee:de:4b: e4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:28:CA:98:3B:4D:6B:2A:55:95:5E:44:2A:03:08:19:74:57:30:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c900af37-6896-3434-803d-f9ee24686159.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4c:1b:da:90:8e:3d:ce:e7:77:8f:4f:fd:94:43:66:1b:1f: e3:40:0a:4e:a1:15:97:13:c7:1a:81:a5:55:50:cc:2e:13:82: a2:ab:9f:ce:2a:b2:04:b0:bc:b8:df:e4:9f:6e:d9:3a:da:c6: 1b:0f:4b:a1:82:00:2b:83:7c:1d:e1:12:09:9f:80:5c:bc:f5: f5:9d:d1:52:f2:e3:6a:66:d0:f6:f2:62:10:c7:6b:b5:10:ae: 10:0f:64:71:7d:29:89:42:17:0e:00:f1:69:9b:e9:90:51:dd: 74:9b:5f:43:8f:44:42:57:98:e4:57:11:32:1c:37:93:37:c2: d4:6f:0a:34:f6:66:c7:36:57:18:37:57:bf:a6:1a:4a:89:9a: b6:bf:c9:33:97:be:01:86:a1:e6:29:60:6a:b4:77:07:09:b6: 02:97:f8:25:56:8d:32:66:9e:fb:31:4a:12:c2:1b:dd:ad:6d: 79:b5:02:5d:c0:70:79:49:1a:bd:ef:86:3f:c0:09:93:f8:d0: 27:4f:a7:1e:33:79:2e:de:4b:ad:57:a5:a8:a0:42:53:56:4f: 0b:54:10:05:13:9b:50:ba:45:82:c7:96:e3:f1:93:51:8a:66: 3d:9f:f3:f4:ac:56:bc:18:bc:e6:1b:6e:f6:b7:ea:48:74:0b: 33:9a:8c:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swbV0B4vQ9Lmq0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk ZmYwN2EzNjktMjJlYi00ZWQ3LWE1OTgtMWZlZTgyMTNhZTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTz5jsuHVcYexE2P5T1ArgRYwyKb5xv8UhV1 R2tOpUnfD5eXJXSZ6atLnjqnWLIaKkZQSYqo1jj0/6CcCZ5zT4s0OiJMFyKvnv0b AcLH8rjLoJxRozv+P+EO9otI+sWctvm/MfOdGssK7SiATTD4DuV/6Q/JuQ4d50XD c+kBAOt6ZxdyDETvyk57Z5QeljJMR9d46YziGrpV9rhRKEp2AvuI4Jq0k3xw3v6P Z/n7OQXthM+L4jd4HqoNWv9UBj5kbIGrKGGVOrpBGaem+wNYqq4COydkbvJ5Rpig RJbUQoxQ06yrz0CBqUWo/3s3rWjAZPOTvZZJu3HAf8/u3kvkTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsoypg7TWsqVZVeRCoDCBl0VzDUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzkwMGFmMzctNjg5Ni0z NDM0LTgwM2QtZjllZTI0Njg2MTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRMG9qQjj3O53ePT/2UQ2YbH+NACk6hFZcTxxqBpVVQzC4TgqKrn84q sgSwvLjf5J9u2TraxhsPS6GCACuDfB3hEgmfgFy89fWd0VLy42pm0PbyYhDHa7UQ rhAPZHF9KYlCFw4A8Wmb6ZBR3XSbX0OPREJXmORXETIcN5M3wtRvCjT2Zsc2Vxg3 V7+mGkqJmra/yTOXvgGGoeYpYGq0dwcJtgKX+CVWjTJmnvsxShLCG92tbXm1Al3A cHlJGr3vhj/ACZP40CdPpx4zeS7eS61XpaigQlNWTwtUEAUTm1C6RYLHluPxk1GK Zj2f8/SsVrwYvOYbbva36kh0CzOajFM= -----END CERTIFICATE-----Generated at Wed Oct 14 15:30:34 2026 by rpki-client