$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87dc928d-56d9-335f-8791-38a1a46bbb9d.roa File: 87dc928d-56d9-335f-8791-38a1a46bbb9d.roa (raw, json) Hash identifier: DtRRPtMaMq5jU3j9hjpn6LyCUJ4UH2UUX06tcb6e2dA= Subject key identifier: 9B:C1:2D:D2:CD:51:DE:EB:4F:90:D8:01:AA:17:96:17:27:DF:2E:4E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8EAD00F423F45877336ABA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87dc928d-56d9-335f-8791-38a1a46bbb9d.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.226.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:00:f4:23:f4:58:77:33:6a:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=13c0efa7-a8d9-4c0a-a04e-e4c2b7be3f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:53:48:9a:dd:76:b5:c8:e4:d5:18:00:da:9f: 77:63:27:f3:3e:22:e6:df:8e:7b:fb:90:2c:e4:92: 0c:4f:d4:db:79:0b:53:54:0a:b8:96:21:60:7b:48: a0:98:d3:42:84:9d:80:91:2c:66:5a:b2:cc:49:3e: ad:7c:92:19:80:2c:21:0c:15:a6:49:43:f4:00:e1: f6:64:ec:46:6b:1f:ab:2d:33:18:0c:95:fa:8e:bf: c9:ac:60:29:9a:77:ec:3d:b4:9b:bc:fd:73:1c:65: 24:c0:f5:93:61:2c:79:29:0f:68:fe:a2:30:be:ec: 84:ec:2c:cb:a1:93:8a:f5:52:62:3f:c2:f8:d6:26: 9f:9d:01:51:9e:45:ca:b5:af:b0:36:86:11:d3:14: 97:b9:52:c6:d1:33:03:80:e6:6c:b3:62:6c:4f:8c: 9b:16:57:40:e1:55:3d:a4:35:1f:7b:34:5a:38:bf: 59:0a:56:a8:e4:a9:29:1e:fb:1f:d4:8a:79:6b:bf: b8:5c:ce:4b:81:f5:6d:07:59:d8:05:79:f1:52:58: ca:1f:93:ef:25:64:b1:43:4f:7e:37:8a:10:8c:b4: 35:3d:b4:1e:35:e3:5a:d5:5d:b4:e0:0f:8f:19:a1: 05:40:88:73:d7:57:f3:e9:6b:0d:ae:d6:37:21:fc: 59:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C1:2D:D2:CD:51:DE:EB:4F:90:D8:01:AA:17:96:17:27:DF:2E:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87dc928d-56d9-335f-8791-38a1a46bbb9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:bb:ab:90:c2:bb:c0:9a:e1:a4:14:42:ca:85:27:de:e9:80: dc:39:c8:5a:00:d1:58:e4:31:1f:49:5e:d2:57:17:72:b0:4a: 05:f1:07:1c:0f:aa:8f:ab:51:b8:a6:d5:09:21:8d:7b:87:ba: 5d:38:2f:b8:6e:82:02:8c:b9:25:e4:b6:f1:f0:28:73:32:8f: 8e:14:cb:ab:ed:43:c6:a5:28:9f:64:6d:06:3d:79:25:6e:7e: 46:65:51:66:a5:f5:10:4b:6b:a3:ca:f4:ac:4f:2e:e3:0c:4a: 18:7f:37:3c:5e:8b:19:81:43:d1:2d:a0:9b:11:f4:cd:53:19: cc:ad:15:fd:5f:2c:cb:a8:a6:25:ac:29:e5:f0:71:7f:83:16: ca:70:8c:2e:95:0d:3d:9f:13:90:b3:9b:4e:69:aa:06:ff:62: 93:6c:19:87:8a:4f:65:60:2a:c5:9e:7b:08:93:ce:49:91:ca: 42:aa:c6:20:0e:b3:d0:7c:d2:e1:4d:4c:9d:0f:74:7a:f5:b4: d2:f3:51:d8:17:49:2e:03:17:8f:46:ee:8a:fc:96:d6:32:fc: f1:68:b6:9c:0f:60:01:fa:d6:f1:eb:20:a3:2f:bf:2c:fb:e7: 4d:4c:4a:18:90:84:61:31:d0:1f:30:22:7c:8f:8b:66:e8:cc: 89:b7:0f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQD0I/RYdzNqugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MTNjMGVmYTctYThkOS00YzBhLWEwNGUtZTRjMmI3YmUzZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFNImt12tcjk1RgA2p93YyfzPiLm3457+5As 5JIMT9TbeQtTVAq4liFge0igmNNChJ2AkSxmWrLMST6tfJIZgCwhDBWmSUP0AOH2 ZOxGax+rLTMYDJX6jr/JrGApmnfsPbSbvP1zHGUkwPWTYSx5KQ9o/qIwvuyE7CzL oZOK9VJiP8L41iafnQFRnkXKta+wNoYR0xSXuVLG0TMDgOZss2JsT4ybFldA4VU9 pDUfezRaOL9ZClao5KkpHvsf1Ip5a7+4XM5LgfVtB1nYBXnxUljKH5PvJWSxQ09+ N4oQjLQ1PbQeNeNa1V204A+PGaEFQIhz11fz6WsNrtY3IfxZ2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvBLdLNUd7rT5DYAaoXlhcn3y5OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODdkYzkyOGQtNTZkOS0z MzVmLTg3OTEtMzhhMWE0NmJiYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK7q5DCu8Ca4aQUQsqFJ97pgNw5yFoA0VjkMR9JXtJXF3KwSgXxBxwP qo+rUbim1QkhjXuHul04L7huggKMuSXktvHwKHMyj44Uy6vtQ8alKJ9kbQY9eSVu fkZlUWal9RBLa6PK9KxPLuMMShh/NzxeixmBQ9EtoJsR9M1TGcytFf1fLMuopiWs KeXwcX+DFspwjC6VDT2fE5Czm05pqgb/YpNsGYeKT2VgKsWeewiTzkmRykKqxiAO s9B80uFNTJ0PdHr1tNLzUdgXSS4DF49G7or8ltYy/PFotpwPYAH61vHrIKMvvyz7 501MShiQhGEx0B8wInyPi2bozIm3D2Y= -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:33 2025 by rpki-client