$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f63660b-93dc-318d-8185-e1102f8c6f76.roa File: 6f63660b-93dc-318d-8185-e1102f8c6f76.roa (raw, json) Hash identifier: LKb2/m1N0I2fp/WN2Bm+HJh4KYE3hWNJn5EGAQSA6d8= Subject key identifier: 33:A9:31:68:BB:E4:47:3E:71:9F:7D:8F:8B:21:C2:A9:66:2D:04:A4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F497562CB2D57E5A3C54C3173 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f63660b-93dc-318d-8185-e1102f8c6f76.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63949 IP address blocks: 172.235.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:62:cb:2d:57:e5:a3:c5:4c:31:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a0ae3722-1280-40ee-894a-3d4696ed007b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:91:23:4c:56:da:0c:24:52:a1:4c:ac:f6:eb: 0b:66:a1:e4:ad:c3:60:d0:9d:db:eb:5f:e4:80:88: 58:b3:72:5d:4c:6f:4e:cf:9d:03:46:5d:b8:bd:83: 1a:00:2b:f7:54:26:80:b8:c7:ff:73:9d:69:f2:3b: ef:6b:55:db:cd:15:3c:9e:71:30:e9:05:73:2a:54: ec:1b:48:76:e4:d8:c6:43:9d:89:c7:25:48:47:f2: 93:40:d2:18:aa:af:78:e2:7f:b6:17:c1:e6:b6:30: db:8a:d4:5f:1b:40:6a:cd:15:95:43:b9:0f:36:53: 0a:df:d5:66:01:4e:41:d1:7f:7a:60:8f:94:8b:80: 25:18:b1:05:5f:29:5a:3f:6f:b7:c1:49:32:8f:46: 7f:fa:a9:cb:e9:72:83:d1:ce:ef:0f:95:91:ae:4f: 80:7c:ae:07:85:de:9a:0f:7c:94:84:70:e2:6b:a7: 07:0b:37:73:47:87:b5:20:e9:ec:7e:4f:be:5b:95: 44:b2:43:82:59:f0:00:76:2c:fa:79:27:c2:19:4f: de:c8:b9:8c:9f:e0:71:cb:89:8a:01:e0:18:de:23: 6a:fe:c0:da:e1:65:1c:51:3f:e9:95:4c:0d:71:a9: 31:09:d1:6a:83:b7:22:3c:51:d0:e5:4b:97:4a:5a: 81:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A9:31:68:BB:E4:47:3E:71:9F:7D:8F:8B:21:C2:A9:66:2D:04:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6f63660b-93dc-318d-8185-e1102f8c6f76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:06:65:0c:69:33:7a:ce:34:a1:65:f3:98:f7:e7:ef:e1:07: f2:9a:9c:e9:ed:f5:56:dc:23:fe:52:fe:59:54:50:b6:5b:42: cb:42:85:33:ca:1b:8f:01:90:a0:cc:89:31:82:08:ed:2e:52: 3c:46:4c:e4:0e:39:15:e3:0c:95:49:26:53:6b:66:6c:37:53: ea:d8:46:57:bb:bc:19:3c:67:ae:c1:fb:d6:cd:7e:b7:17:0e: 7f:2f:cb:cc:95:5a:9a:da:8c:58:9f:e6:f1:68:dc:b3:63:c0: c2:78:e9:c5:f9:d2:4a:1f:31:8a:50:d9:84:a8:c7:31:90:63: 61:40:90:cf:28:68:84:88:ad:06:d7:97:10:8e:84:1b:53:e8: 64:7e:ae:58:ff:fd:45:a2:93:4e:c2:d7:da:ee:60:ac:e7:1b: 41:76:37:e2:fa:0e:24:38:63:a0:cb:08:a6:8d:fb:81:87:ff: 32:96:10:75:f3:b2:98:40:09:0a:42:46:ee:d3:70:6a:b8:5b: 5e:bb:f1:01:6a:6f:1a:a6:53:63:2f:1d:bf:27:e1:c7:29:3b: 72:ef:a3:78:53:20:1f:3d:86:c1:17:94:d0:50:9b:fd:e0:2b: 30:43:a9:cc:e8:32:9e:11:b2:0e:4b:2e:fc:04:c4:8b:03:6b: 27:94:50:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdWLLLVflo8VMMXMwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTBhZTM3MjItMTI4MC00MGVlLTg5NGEtM2Q0Njk2ZWQwMDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5EjTFbaDCRSoUys9usLZqHkrcNg0J3b61/k gIhYs3JdTG9Oz50DRl24vYMaACv3VCaAuMf/c51p8jvva1XbzRU8nnEw6QVzKlTs G0h25NjGQ52JxyVIR/KTQNIYqq944n+2F8HmtjDbitRfG0BqzRWVQ7kPNlMK39Vm AU5B0X96YI+Ui4AlGLEFXylaP2+3wUkyj0Z/+qnL6XKD0c7vD5WRrk+AfK4Hhd6a D3yUhHDia6cHCzdzR4e1IOnsfk++W5VEskOCWfAAdiz6eSfCGU/eyLmMn+Bxy4mK AeAY3iNq/sDa4WUcUT/plUwNcakxCdFqg7ciPFHQ5UuXSlqBhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOpMWi75Ec+cZ99j4shwqlmLQSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmY2MzY2MGItOTNkYy0z MThkLTgxODUtZTExMDJmOGM2Zjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAGZQxpM3rONKFl85j35+/hB/KanOnt9VbcI/5S/llUULZbQstChTPK G48BkKDMiTGCCO0uUjxGTOQOORXjDJVJJlNrZmw3U+rYRle7vBk8Z67B+9bNfrcX Dn8vy8yVWprajFif5vFo3LNjwMJ46cX50kofMYpQ2YSoxzGQY2FAkM8oaISIrQbX lxCOhBtT6GR+rlj//UWik07C19ruYKznG0F2N+L6DiQ4Y6DLCKaN+4GH/zKWEHXz sphACQpCRu7TcGq4W1678QFqbxqmU2MvHb8n4ccpO3Lvo3hTIB89hsEXlNBQm/3g KzBDqczoMp4Rsg5LLvwExIsDayeUUOU= -----END CERTIFICATE-----Generated at Sat Sep 26 03:17:49 2026 by rpki-client