$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d658f22a-7382-3930-ab13-2d0787071ab4.roa File: d658f22a-7382-3930-ab13-2d0787071ab4.roa (raw, json) Hash identifier: w118FMrznGBlFuRp2FhqHDLamA2vxrrK2cD8ITxSt8o= Subject key identifier: 94:86:44:CC:2F:77:37:05:E8:57:26:46:04:9F:8A:A4:02:B5:FD:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F71EDA9C778E330CDCEFCD780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d658f22a-7382-3930-ab13-2d0787071ab4.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.226.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a9:c7:78:e3:30:cd:ce:fc:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=2a886fc4-e90b-4b5f-832c-af8b5a00e74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:16:ce:79:69:48:8e:42:93:f9:f6:4f:72:70: f9:91:d8:bc:d9:9f:1f:3e:57:ed:ae:32:c2:6d:e5: d6:8c:8f:e7:54:8c:47:7a:5b:88:70:9c:9e:e8:83: 85:6d:06:a5:d6:51:0a:16:8e:18:e4:bc:64:9a:2c: 60:92:45:26:8c:47:a5:bd:20:79:d6:f4:c1:40:1d: 0d:f9:6b:e2:84:22:31:f7:d0:21:af:59:94:6b:3c: 84:c8:f1:1b:ee:d1:cb:0d:4e:7f:77:5f:b7:6b:1d: 22:43:ce:5b:d0:ab:6a:6b:43:62:65:2e:79:b3:be: 51:54:a6:9f:5c:2a:3e:fb:04:80:38:b3:8a:cd:7d: a5:0b:91:07:f2:a2:b3:70:10:04:85:a8:5a:f3:2f: cc:70:8d:f3:a4:0c:ac:9e:6d:a6:7b:9a:4f:b7:75: 90:fa:00:a1:a0:14:bc:0a:db:11:c4:17:df:f9:12: 1d:44:4a:15:26:a7:48:84:2b:26:f1:e6:8c:82:e1: b0:3e:87:8d:b5:19:18:78:ce:dc:34:78:ab:a4:8b: cf:4c:16:94:5e:51:88:29:44:05:cf:3c:6a:76:14: 12:4d:48:ec:d6:2e:77:1b:25:51:fd:88:6e:3e:90: e4:a6:50:95:e4:41:8a:b5:f9:23:75:35:17:b7:d8: a1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:86:44:CC:2F:77:37:05:E8:57:26:46:04:9F:8A:A4:02:B5:FD:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d658f22a-7382-3930-ab13-2d0787071ab4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:2e:1d:00:61:41:f6:33:c7:e6:49:07:16:b1:77:1a:f0:c2: 36:46:7f:49:79:25:d5:be:0f:a7:40:d4:d0:65:0e:d2:83:fb: 5b:13:5e:f3:c9:1c:8f:c4:28:b2:ec:ca:75:43:54:0e:1b:0b: a6:a0:52:97:56:ce:6e:f9:9c:20:3c:13:46:52:3b:02:f4:d2: 8d:8d:f6:32:1e:6c:d8:46:c7:43:72:e5:20:0d:5c:72:b0:35: 32:67:cc:11:8a:29:1d:9e:12:98:40:e8:54:ae:ce:92:fa:36: b8:6f:38:e1:8e:b2:c3:b3:d1:2c:ef:ab:07:43:1a:38:a3:3a: b3:8c:20:3a:0f:bf:bc:f9:c7:f3:63:0e:8e:64:51:4a:b5:92: c8:b6:73:ab:e3:09:3f:3e:f5:16:be:61:d0:a6:7f:18:4e:56: 26:69:1c:b7:68:73:a4:3f:d3:48:72:25:83:5e:85:67:c5:a5: 5d:9a:65:7a:28:9c:6f:7a:76:ba:8b:18:44:b7:dc:e4:43:44: 9e:dd:ee:77:f1:4d:d9:20:2a:07:30:7b:f5:4b:d9:ce:e1:77: 20:82:06:8f:f0:6e:a7:9d:0d:f5:80:f8:6b:5f:42:50:44:5b: d8:3a:d3:d6:ec:b1:7e:d9:42:14:70:16:c5:6b:69:c7:c9:c3: f6:57:24:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7anHeOMwzc7814AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MmE4ODZmYzQtZTkwYi00YjVmLTgzMmMtYWY4YjVhMDBlNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxbOeWlIjkKT+fZPcnD5kdi82Z8fPlftrjLC beXWjI/nVIxHeluIcJye6IOFbQal1lEKFo4Y5LxkmixgkkUmjEelvSB51vTBQB0N +WvihCIx99Ahr1mUazyEyPEb7tHLDU5/d1+3ax0iQ85b0Ktqa0NiZS55s75RVKaf XCo++wSAOLOKzX2lC5EH8qKzcBAEhaha8y/McI3zpAysnm2me5pPt3WQ+gChoBS8 CtsRxBff+RIdREoVJqdIhCsm8eaMguGwPoeNtRkYeM7cNHirpIvPTBaUXlGIKUQF zzxqdhQSTUjs1i53GyVR/YhuPpDkplCV5EGKtfkjdTUXt9ihRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSGRMwvdzcF6FcmRgSfiqQCtf0RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZDY1OGYyMmEtNzM4Mi0z OTMwLWFiMTMtMmQwNzg3MDcxYWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0uHQBhQfYzx+ZJBxaxdxrwwjZGf0l5JdW+D6dA1NBlDtKD+1sTXvPJ HI/EKLLsynVDVA4bC6agUpdWzm75nCA8E0ZSOwL00o2N9jIebNhGx0Ny5SANXHKw NTJnzBGKKR2eEphA6FSuzpL6NrhvOOGOssOz0SzvqwdDGjijOrOMIDoPv7z5x/Nj Do5kUUq1ksi2c6vjCT8+9Ra+YdCmfxhOViZpHLdoc6Q/00hyJYNehWfFpV2aZXoo nG96drqLGES33ORDRJ7d7nfxTdkgKgcwe/VL2c7hdyCCBo/wbqedDfWA+GtfQlBE W9g609bssX7ZQhRwFsVracfJw/ZXJOc= -----END CERTIFICATE-----Generated at Sun Oct 11 15:26:25 2026 by rpki-client