$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87c612ef-b957-323e-a378-35bff79a6e24.roa File: 87c612ef-b957-323e-a378-35bff79a6e24.roa (raw, json) Hash identifier: QeV17IAUz7qgE4jYuykivOHpB5+p3xz3YP9Xh2ulD9Y= Subject key identifier: E8:52:1F:62:3F:43:D7:57:F7:76:6D:89:48:F5:FB:D4:02:25:1A:FE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F4973B2963A5A3504DE3F9800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87c612ef-b957-323e-a378-35bff79a6e24.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63949 IP address blocks: 170.187.224.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:b2:96:3a:5a:35:04:de:3f:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8551e566-3db2-4e1a-adb6-4759cde6b8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9d:86:b1:b0:f6:16:7e:8a:ac:77:7e:46:d5: a1:b4:aa:5c:d9:f8:90:ee:71:81:75:4b:e8:12:af: 5e:ee:bd:82:4f:df:79:b1:f2:2e:2f:65:41:c0:de: e6:00:36:3c:db:66:50:a0:e4:19:95:1d:38:2d:8d: 88:bf:b6:6a:30:66:7c:b8:9e:86:3c:86:a4:ea:1d: e2:1c:ee:ad:a9:99:1d:4b:33:38:9f:f3:e3:12:02: fa:ba:38:b8:0d:c6:8d:9f:63:21:d2:19:da:a3:7b: e9:95:cc:cf:12:42:cc:f4:56:de:18:a7:cb:8f:f1: a5:ef:b9:5a:5c:89:cb:68:46:53:e8:71:76:70:c7: 03:01:36:60:77:8f:02:52:77:e7:49:49:88:ac:4c: 6b:80:66:09:9d:46:39:b7:1d:95:66:8d:ed:5a:b9: 9a:08:39:85:d8:e5:55:29:e3:29:02:71:ea:d4:23: 94:50:78:ab:7b:c7:83:33:bf:b5:5a:c9:50:df:b7: 35:85:9d:f3:8d:7f:68:a9:7d:98:92:c3:82:ee:c8: 66:8b:46:1d:e3:a7:02:6c:e9:60:8a:4d:e9:71:fb: d6:67:fc:35:6a:35:48:cc:e5:77:0a:69:76:64:8d: 8c:05:4b:7c:f8:65:ba:e9:b8:64:9b:85:8e:84:92: 5a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:52:1F:62:3F:43:D7:57:F7:76:6D:89:48:F5:FB:D4:02:25:1A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87c612ef-b957-323e-a378-35bff79a6e24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 170.187.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:fb:b0:d5:d6:2d:66:02:f6:0f:e2:9a:42:29:a0:b0:43:d4: ec:39:71:bc:c0:21:09:8e:83:46:a0:52:41:eb:10:11:8c:cc: fb:ab:5b:13:1f:34:2c:f8:9c:4e:97:96:e9:0c:9f:c6:5e:8b: e7:11:80:b9:1f:8d:e0:13:30:d7:39:b4:9f:b7:da:b8:74:e0: 6b:54:a9:79:41:5a:d4:56:53:b3:6e:e6:f0:b9:4b:9e:8e:69: 47:d7:16:a5:f0:c0:80:fc:de:a3:67:cb:e8:3a:fb:20:92:32: 2c:e0:25:f2:1b:93:52:84:93:88:06:27:e7:a7:76:d1:ba:b4: 1f:35:65:e9:c5:c4:e4:d4:40:3d:a5:ee:70:05:8b:8a:a3:f8: c9:45:29:03:e6:a9:20:f7:10:03:4b:c1:16:18:cc:b0:a5:b7: 32:4b:0a:45:dd:b8:0a:a1:76:28:1f:d7:99:0f:98:99:08:5f: 60:fc:0d:f4:d9:1d:0a:25:66:a1:56:fe:4c:4c:91:56:17:a7: 5b:89:df:ef:dc:28:00:0e:08:48:af:de:c4:5c:02:5f:af:ff: ae:7e:bd:3b:53:55:81:3c:f1:44:8b:ec:80:e9:96:2d:39:4c: ab:46:54:e8:90:9e:6c:aa:73:59:9b:83:be:66:94:f5:ea:35: dd:d6:c2:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc7KWOlo1BN4/mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODU1MWU1NjYtM2RiMi00ZTFhLWFkYjYtNDc1OWNkZTZiOGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj52GsbD2Fn6KrHd+RtWhtKpc2fiQ7nGBdUvo Eq9e7r2CT995sfIuL2VBwN7mADY822ZQoOQZlR04LY2Iv7ZqMGZ8uJ6GPIak6h3i HO6tqZkdSzM4n/PjEgL6uji4DcaNn2Mh0hnao3vplczPEkLM9FbeGKfLj/Gl77la XInLaEZT6HF2cMcDATZgd48CUnfnSUmIrExrgGYJnUY5tx2VZo3tWrmaCDmF2OVV KeMpAnHq1COUUHire8eDM7+1WslQ37c1hZ3zjX9oqX2YksOC7shmi0Yd46cCbOlg ik3pcfvWZ/w1ajVIzOV3Cml2ZI2MBUt8+GW66bhkm4WOhJJaEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhSH2I/Q9dX93ZtiUj1+9QCJRr+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODdjNjEyZWYtYjk1Ny0z MjNlLWEzNzgtMzViZmY3OWE2ZTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqrvgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFH7sNXWLWYC9g/imkIpoLBD1Ow5cbzAIQmOg0agUkHrEBGMzPurWxMf NCz4nE6XlukMn8Zei+cRgLkfjeATMNc5tJ+32rh04GtUqXlBWtRWU7Nu5vC5S56O aUfXFqXwwID83qNny+g6+yCSMizgJfIbk1KEk4gGJ+endtG6tB81ZenFxOTUQD2l 7nAFi4qj+MlFKQPmqSD3EANLwRYYzLCltzJLCkXduAqhdigf15kPmJkIX2D8DfTZ HQolZqFW/kxMkVYXp1uJ3+/cKAAOCEiv3sRcAl+v/65+vTtTVYE88USL7IDpli05 TKtGVOiQnmyqc1mbg75mlPXqNd3Wwv0= -----END CERTIFICATE-----Generated at Mon Sep 28 23:48:36 2026 by rpki-client