$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86db9463-9242-3ae8-8c19-3e9617952a23.roa File: 86db9463-9242-3ae8-8c19-3e9617952a23.roa (raw, json) Hash identifier: 0cTCNAkARJ74iFujzk0hn33mnMw6Dn4+2eaBZuK9hkE= Subject key identifier: C7:B5:97:58:5F:A6:C4:38:28:C5:AB:C2:8A:AE:DC:49:61:82:45:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F655E682EC62722A13E23C5A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86db9463-9242-3ae8-8c19-3e9617952a23.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 36183 IP address blocks: 172.225.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5e:68:2e:c6:27:22:a1:3e:23:c5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=fd180a00-24a9-4025-95af-802f015a1288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7c:ba:0f:3a:b1:d8:e6:39:b3:75:53:4a:16: 36:7a:b0:87:c2:47:b8:bd:48:9c:fa:35:8f:4c:77: 17:7e:f2:ff:ae:d3:0b:38:47:58:c3:10:02:0a:d1: 5c:00:63:4e:6b:44:0a:fd:70:79:16:91:25:fb:28: f2:75:d1:00:8e:ef:09:cc:b7:5b:f0:3d:77:f6:db: a3:59:33:22:83:3f:d0:a9:c8:11:ac:b8:23:74:c9: 44:28:af:d1:85:21:67:6f:b3:40:ce:25:c4:18:a8: b9:c2:19:32:c3:f3:61:05:9c:5a:f0:dd:fb:35:5d: 9c:1e:bf:ab:d6:a0:36:ef:22:0a:de:9d:51:9d:b9: fc:80:5d:41:ff:a1:33:fd:a9:5b:d8:c8:fd:ce:95: f0:83:27:55:08:c9:7c:87:3d:fe:3e:c8:cb:42:2e: b3:68:97:44:45:4e:1d:d8:b2:64:06:41:fd:8a:99: 1b:f7:a4:c5:f7:cb:62:e9:7e:08:a6:46:cc:02:29: 70:d7:0a:87:0c:0a:49:e3:44:a3:af:88:df:22:13: 82:ae:ec:f3:91:c9:31:84:df:e3:71:57:10:c0:4d: 2f:a4:1e:dd:39:f6:36:b9:47:44:2e:dc:37:ff:a9: e0:4b:a8:4f:00:e0:d4:a4:c7:1a:c1:ad:fc:35:6d: 7b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B5:97:58:5F:A6:C4:38:28:C5:AB:C2:8A:AE:DC:49:61:82:45:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/86db9463-9242-3ae8-8c19-3e9617952a23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:52:b8:7b:ac:13:17:0b:35:17:76:2c:1b:63:44:5b:35:f2: 0b:70:05:05:14:56:67:f6:4a:b7:19:0c:21:47:a3:9b:23:75: 00:78:b3:c6:2b:c0:a6:12:37:1e:5b:f1:5b:8b:28:db:dc:71: b4:22:99:31:08:71:f2:91:e8:9f:69:8a:44:34:8d:09:2e:94: 20:ac:bb:96:91:cf:d3:40:76:86:6d:e7:40:e0:ab:6d:35:65: 6c:8a:fa:2c:b2:1d:c9:1a:2f:24:5f:a7:22:30:92:6f:fd:06: 97:e7:68:58:99:09:20:73:58:7a:9f:af:39:34:27:11:1f:df: 50:e8:3e:71:53:07:43:3d:e9:9e:b2:b2:18:98:ce:66:e8:03: 7f:91:dc:6c:bb:75:f8:81:95:9e:e9:1f:7f:84:83:c8:a3:cc: e4:06:25:ff:cb:7f:46:6a:16:02:3a:a2:12:0e:c9:b0:33:19: 37:63:fe:53:32:d7:ea:2d:a0:e1:2c:b6:35:5b:ee:e4:26:66: 88:a0:60:9d:fe:c4:9f:64:b6:96:7d:0e:ac:8d:fe:23:fa:c9: 32:d3:44:2d:78:4b:6b:16:5f:08:df:ef:63:a0:1b:3b:e9:17: fe:a1:2e:83:47:ce:5b:ae:38:d5:ad:39:c8:97:3b:29:56:7b: eb:20:85:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXmguxicioT4jxaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZmQxODBhMDAtMjRhOS00MDI1LTk1YWYtODAyZjAxNWExMjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXy6Dzqx2OY5s3VTShY2erCHwke4vUic+jWP THcXfvL/rtMLOEdYwxACCtFcAGNOa0QK/XB5FpEl+yjyddEAju8JzLdb8D139tuj WTMigz/QqcgRrLgjdMlEKK/RhSFnb7NAziXEGKi5whkyw/NhBZxa8N37NV2cHr+r 1qA27yIK3p1Rnbn8gF1B/6Ez/alb2Mj9zpXwgydVCMl8hz3+PsjLQi6zaJdERU4d 2LJkBkH9ipkb96TF98ti6X4IpkbMAilw1wqHDApJ40Sjr4jfIhOCruzzkckxhN/j cVcQwE0vpB7dOfY2uUdELtw3/6ngS6hPAODUpMcawa38NW17fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMe1l1hfpsQ4KMWrwoqu3ElhgkWhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODZkYjk0NjMtOTI0Mi0z YWU4LThjMTktM2U5NjE3OTUyYTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOH7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtSuHusExcLNRd2LBtjRFs18gtwBQUUVmf2SrcZDCFHo5sjdQB4s8Yr wKYSNx5b8VuLKNvccbQimTEIcfKR6J9pikQ0jQkulCCsu5aRz9NAdoZt50Dgq201 ZWyK+iyyHckaLyRfpyIwkm/9BpfnaFiZCSBzWHqfrzk0JxEf31DoPnFTB0M96Z6y shiYzmboA3+R3Gy7dfiBlZ7pH3+Eg8ijzOQGJf/Lf0ZqFgI6ohIOybAzGTdj/lMy 1+otoOEstjVb7uQmZoigYJ3+xJ9ktpZ9DqyN/iP6yTLTRC14S2sWXwjf72OgGzvp F/6hLoNHzluuONWtOciXOylWe+sghaU= -----END CERTIFICATE-----Generated at Sat Oct 10 10:53:47 2026 by rpki-client