$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cb2b02f-4866-31a6-bdf5-3d93d40ade67.roa File: 3cb2b02f-4866-31a6-bdf5-3d93d40ade67.roa (raw, json) Hash identifier: UkVIYMMe2CDbxvT1y+nYK+euNi9ieeSTrF/jRzL6XjA= Subject key identifier: 0F:D2:8C:0E:50:07:20:A5:7B:CC:73:16:79:20:2A:30:8B:4C:6A:23 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8EACF8AE293F5A840ED7F940 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cb2b02f-4866-31a6-bdf5-3d93d40ade67.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.226.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f8:ae:29:3f:5a:84:0e:d7:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=992ca8c4-403a-4ed2-8595-7e0c29329a4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:7e:18:31:e3:b6:40:2a:9c:7d:32:96:1a: 5e:6b:10:0d:87:15:fe:7e:84:c0:7d:a3:70:42:b4: 74:2a:b0:81:31:1e:ce:c7:b4:8f:da:37:db:cf:cf: f6:a8:33:88:45:11:63:45:26:b4:59:02:00:e8:be: 9c:fd:e2:79:74:34:81:37:53:65:b2:3e:17:22:ce: 14:62:34:e0:4c:70:a4:52:f1:19:c9:d2:e9:5f:a4: 53:53:9c:7a:ff:48:7a:7e:a0:5c:bd:29:71:e6:d5: 54:f6:3a:c8:7d:e6:75:9c:4e:66:1d:15:09:21:5f: cf:69:9f:d1:9d:f2:6f:84:9c:e8:84:ec:be:61:e4: d3:c0:53:61:3b:d6:2e:b0:3d:ef:e6:75:e7:ec:46: 31:a8:fd:b9:ff:71:9f:9b:b7:8e:fc:e3:61:3d:8d: 6c:3c:e7:fc:06:fd:11:51:dd:ec:c9:dd:a1:af:0f: 1c:b6:42:d5:d1:09:7e:23:12:d5:e5:f2:ea:f3:05: 17:c7:23:83:2d:c6:69:cc:39:89:1b:81:35:c9:42: 85:60:ec:10:bb:41:24:73:b8:2f:2f:f7:4a:07:2e: f9:ad:16:91:a7:fd:0b:4b:35:26:29:a4:f8:db:df: 17:e6:85:c2:7b:2f:bd:2c:af:8d:f8:67:58:eb:0a: 7c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D2:8C:0E:50:07:20:A5:7B:CC:73:16:79:20:2A:30:8B:4C:6A:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3cb2b02f-4866-31a6-bdf5-3d93d40ade67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:74:d7:54:8a:d4:2f:a0:36:ae:dd:c4:75:f0:40:42:0a:41: c6:85:50:54:8e:8f:1e:1a:35:dd:d8:27:a2:9b:e2:68:d2:ca: 42:31:07:89:4c:de:36:68:ac:43:67:3c:85:00:a3:3d:02:6d: 52:52:02:c0:d4:96:47:b8:1c:5e:0d:3e:f1:54:84:c5:d2:eb: 88:18:53:b5:d9:96:1d:35:d0:0d:4d:40:40:7d:98:c2:01:e8: 92:58:02:54:21:32:fd:be:9d:23:18:e3:4a:4f:24:17:90:a8: 3a:28:24:3d:d1:97:9a:ef:5e:16:36:d2:cc:cc:68:58:68:c6: 63:0a:16:c7:2b:3f:ae:fc:58:33:7d:31:a4:02:af:27:cd:4f: aa:12:a9:69:c4:fa:bb:86:58:80:40:fe:67:f2:77:dd:56:85: 5d:af:c4:50:cd:c7:78:bf:28:9c:a9:7e:63:8e:62:81:67:74: d5:1b:fb:d5:d9:c6:26:d4:e0:7a:18:4b:ed:5a:17:6a:b0:e6: 78:c3:f3:28:3f:3a:56:94:fc:a5:e5:3c:b8:ed:4b:78:06:aa: be:03:48:e0:41:36:91:f6:a7:da:63:9e:06:fc:d5:9e:ec:20: 87:fd:d6:ec:4f:04:ab:06:10:7e:3b:37:30:e1:f3:34:ce:bd: c9:5a:3c:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPiuKT9ahA7X+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OTkyY2E4YzQtNDAzYS00ZWQyLTg1OTUtN2UwYzI5MzI5YTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyt+GDHjtkAqnH0ylhpeaxANhxX+foTAfaNw QrR0KrCBMR7Ox7SP2jfbz8/2qDOIRRFjRSa0WQIA6L6c/eJ5dDSBN1Nlsj4XIs4U YjTgTHCkUvEZydLpX6RTU5x6/0h6fqBcvSlx5tVU9jrIfeZ1nE5mHRUJIV/PaZ/R nfJvhJzohOy+YeTTwFNhO9YusD3v5nXn7EYxqP25/3Gfm7eO/ONhPY1sPOf8Bv0R Ud3syd2hrw8ctkLV0Ql+IxLV5fLq8wUXxyODLcZpzDmJG4E1yUKFYOwQu0Ekc7gv L/dKBy75rRaRp/0LSzUmKaT4298X5oXCey+9LK+N+GdY6wp8owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/SjA5QByCle8xzFnkgKjCLTGojMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2NiMmIwMmYtNDg2Ni0z MWE2LWJkZjUtM2Q5M2Q0MGFkZTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJ011SK1C+gNq7dxHXwQEIKQcaFUFSOjx4aNd3YJ6Kb4mjSykIxB4lM 3jZorENnPIUAoz0CbVJSAsDUlke4HF4NPvFUhMXS64gYU7XZlh010A1NQEB9mMIB 6JJYAlQhMv2+nSMY40pPJBeQqDooJD3Rl5rvXhY20szMaFhoxmMKFscrP678WDN9 MaQCryfNT6oSqWnE+ruGWIBA/mfyd91WhV2vxFDNx3i/KJypfmOOYoFndNUb+9XZ xibU4HoYS+1aF2qw5njD8yg/OlaU/KXlPLjtS3gGqr4DSOBBNpH2p9pjngb81Z7s IIf91uxPBKsGEH47NzDh8zTOvclaPJM= -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:15 2025 by rpki-client