$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa4775c4-bb35-352c-9f50-5d54b942fc8e.roa File: aa4775c4-bb35-352c-9f50-5d54b942fc8e.roa (raw, json) Hash identifier: HnpYP2dZHO4JA5aYAEJnXFXd12oQ4ZPvqMJiY9E35P8= Subject key identifier: 8D:72:2A:57:19:BC:73:99:DD:34:56:C7:2E:CE:47:9B:24:22:3C:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD3CE4C954160A213DB660 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa4775c4-bb35-352c-9f50-5d54b942fc8e.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 63949 IP address blocks: 172.235.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:3c:e4:c9:54:16:0a:21:3d:b6:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=0694d665-9c37-41a3-8224-789c97473e0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:45:23:7e:41:84:18:3f:eb:fb:36:5c:5c:ec: 83:b4:db:89:53:bb:8b:77:0d:b5:f5:cf:66:24:05: dd:43:f8:9c:11:51:65:78:52:cd:0b:18:18:4e:7b: e9:87:32:f5:ca:73:f3:44:73:fa:e1:6e:58:5c:bd: b4:57:f3:ad:74:9d:e9:30:6b:69:7e:47:36:cb:60: 92:56:a2:79:14:5b:0b:a7:f6:27:03:02:15:ee:4f: f7:8a:80:ce:6e:ef:3f:46:8e:00:08:42:51:63:c4: 04:dd:7d:10:0c:3f:b7:6c:c8:e8:2d:44:26:fd:72: 53:f7:dd:51:d4:74:27:ab:39:4f:dd:c7:2d:04:33: af:0d:19:72:cb:db:da:52:96:bf:c2:fd:32:87:af: 7c:2e:f8:82:b1:3b:bd:82:b9:03:f9:8a:86:61:20: 64:32:12:7c:e7:aa:42:c4:60:a4:fd:20:af:40:3f: 08:b9:7b:6e:27:d8:04:09:b7:e3:34:d7:eb:c9:ca: d9:04:1a:9f:ef:87:3c:c1:a3:c4:07:67:b6:7d:fb: 32:2a:d5:03:53:12:ab:e8:f2:a1:5b:94:21:93:de: c4:5b:2b:19:d3:e2:ed:56:eb:01:0d:45:50:b2:4d: 1c:cf:49:65:39:69:11:e3:06:7b:d0:b3:6e:bd:65: 6e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:72:2A:57:19:BC:73:99:DD:34:56:C7:2E:CE:47:9B:24:22:3C:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa4775c4-bb35-352c-9f50-5d54b942fc8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:fd:f5:a1:89:c0:8f:f1:4f:df:dd:2c:03:c9:83:e2:92:ad: 62:ea:8f:93:da:0c:eb:35:7c:bf:65:7d:92:67:69:17:55:58: 02:9b:dd:25:1a:ee:7e:79:fb:12:70:7f:6b:fd:49:05:88:6a: 93:db:df:ab:f1:78:9f:c8:69:11:6e:00:f4:a6:c5:4f:84:c0: bd:49:12:50:4d:63:39:3f:e2:71:3e:5a:31:90:b3:2a:0a:39: c3:e4:b8:e8:d7:bf:38:86:94:65:72:63:a6:1b:83:91:ec:af: 0d:cd:82:75:0f:7d:14:af:ea:7e:95:4b:62:38:28:d9:a8:2c: db:5c:f7:6e:c8:b4:d2:3d:67:fe:b4:1a:d4:35:13:14:17:40: db:ef:54:26:be:e3:f3:fb:41:ba:de:ae:9e:1b:a8:2d:63:00: c7:17:3b:fb:1e:c8:e4:64:70:e0:a1:4d:86:35:46:02:ca:53: 97:e4:b3:10:9c:41:f1:98:ac:dd:cf:46:39:3c:b5:4a:ab:e2: 05:1e:aa:d8:93:08:52:51:0f:af:98:f5:f9:0a:cf:0e:33:11: 12:d5:1f:b3:d8:e6:db:43:95:28:9a:f9:bc:fb:c1:ae:98:fa: 16:79:48:6a:87:da:93:87:dc:33:11:e2:87:3c:82:5f:88:4c: b0:44:88:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTzkyVQWCiE9tmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MDY5NGQ2NjUtOWMzNy00MWEzLTgyMjQtNzg5Yzk3NDczZTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUUjfkGEGD/r+zZcXOyDtNuJU7uLdw219c9m JAXdQ/icEVFleFLNCxgYTnvphzL1ynPzRHP64W5YXL20V/OtdJ3pMGtpfkc2y2CS VqJ5FFsLp/YnAwIV7k/3ioDObu8/Ro4ACEJRY8QE3X0QDD+3bMjoLUQm/XJT991R 1HQnqzlP3cctBDOvDRlyy9vaUpa/wv0yh698LviCsTu9grkD+YqGYSBkMhJ856pC xGCk/SCvQD8IuXtuJ9gECbfjNNfrycrZBBqf74c8waPEB2e2ffsyKtUDUxKr6PKh W5Qhk97EWysZ0+LtVusBDUVQsk0cz0llOWkR4wZ70LNuvWVuLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1yKlcZvHOZ3TRWxy7OR5skIjwRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE0Nzc1YzQtYmIzNS0z NTJjLTlmNTAtNWQ1NGI5NDJmYzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOsAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP99aGJwI/xT9/dLAPJg+KSrWLqj5PaDOs1fL9lfZJnaRdVWAKb3SUa 7n55+xJwf2v9SQWIapPb36vxeJ/IaRFuAPSmxU+EwL1JElBNYzk/4nE+WjGQsyoK OcPkuOjXvziGlGVyY6Ybg5Hsrw3NgnUPfRSv6n6VS2I4KNmoLNtc927ItNI9Z/60 GtQ1ExQXQNvvVCa+4/P7Qbrerp4bqC1jAMcXO/seyORkcOChTYY1RgLKU5fksxCc QfGYrN3PRjk8tUqr4gUeqtiTCFJRD6+Y9fkKzw4zERLVH7PY5ttDlSia+bz7wa6Y +hZ5SGqH2pOH3DMR4oc8gl+ITLBEiHg= -----END CERTIFICATE-----Generated at Wed Sep 23 07:58:00 2026 by rpki-client