$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c98121cf-82dd-3abe-87f7-157a1a3e4f58.roa File: c98121cf-82dd-3abe-87f7-157a1a3e4f58.roa (raw, json) Hash identifier: kw5L54Q+dvHz+r4ttKCrgV37AjeBas20zXK8GZev8XY= Subject key identifier: 4E:E2:97:92:4C:E8:DE:D0:1D:66:ED:04:F9:12:55:66:E9:1B:5A:B7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8EACF5AA3204A7C6BE6AF840 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c98121cf-82dd-3abe-87f7-157a1a3e4f58.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.226.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f5:aa:32:04:a7:c6:be:6a:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=58cd5c5e-c42c-4eea-8848-45217956e844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b9:94:9b:01:fe:db:29:ea:ae:09:53:d1:b4: fa:d4:f0:67:06:69:4d:c3:97:3c:16:70:fd:89:6e: 9f:ba:19:04:e2:49:7c:ca:66:40:03:57:13:93:49: 71:0e:48:23:1f:e4:59:91:6c:a9:59:8a:08:68:ab: 9f:21:81:67:7a:ea:56:c7:36:09:43:40:23:24:12: a6:12:27:27:28:bb:e1:1c:2c:6a:98:e0:52:e2:aa: bc:20:01:90:ff:fc:31:04:1e:c6:38:30:11:d8:7e: d4:f4:94:c0:72:e1:49:22:09:80:b6:08:f0:57:88: 4c:ba:c5:c6:99:a9:d5:24:99:22:48:5e:19:51:3c: 3a:d1:4a:93:ca:8b:b5:8f:a4:b1:c8:f2:1e:2f:18: 2f:5c:e2:ae:f0:af:80:8b:d3:fe:2d:2a:ff:3a:d6: 7b:75:30:8b:22:30:3f:ae:8c:13:3f:74:2f:1a:a2: a6:70:98:45:96:21:c2:96:0d:22:3d:61:6c:44:7a: 92:23:dd:19:79:87:4e:13:df:8e:00:7e:83:76:a4: b5:ac:5f:46:ab:6f:f8:dd:41:9b:94:f8:cd:d3:83: 8d:b0:7e:c2:58:6e:98:7a:0f:23:04:b8:38:d4:eb: 68:d4:b4:4a:5d:c5:01:c7:1f:b6:af:6c:fb:bd:d8: fb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E2:97:92:4C:E8:DE:D0:1D:66:ED:04:F9:12:55:66:E9:1B:5A:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c98121cf-82dd-3abe-87f7-157a1a3e4f58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:7d:c4:0f:40:a5:b0:27:75:0e:ea:75:1c:7d:8e:b1:30:73: 06:15:a6:e8:c9:21:18:69:62:46:7e:21:46:14:20:90:d0:2f: e0:93:0b:bb:a5:f6:0c:84:9a:ea:2f:8c:ab:0e:f7:e0:08:12: f3:5b:94:b0:e6:2e:06:29:3d:8e:60:e9:ed:74:b3:74:b0:a1: c1:d9:02:80:67:b0:75:72:8e:5c:04:7d:c0:db:06:7d:49:bc: 22:44:2d:a1:31:22:0e:0c:09:b1:91:da:eb:a5:99:a6:0b:76: a8:17:a8:56:06:3d:d2:af:a8:0f:85:57:34:28:2c:ae:8a:70: a3:cb:ec:04:27:f7:0d:08:24:05:1f:ef:de:f6:05:d0:d6:54: da:68:27:36:0f:a6:65:79:bb:81:39:04:d6:f8:5b:56:d5:8b: 7d:cb:16:ba:43:b2:96:f5:c2:c6:65:32:39:13:8c:3c:67:42: e0:99:ff:69:01:c7:ee:9c:24:af:4d:85:5e:b3:9f:b3:c3:d5: 68:60:47:82:ef:62:28:fa:c8:bb:c0:6a:df:73:b3:a0:7d:8b: 7e:65:ed:be:72:a2:1d:c0:50:31:5c:35:96:c2:5e:2d:93:63: 89:2a:27:92:00:d2:46:ec:fb:62:c7:d9:29:a3:13:db:13:64: 1f:fe:86:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPWqMgSnxr5q+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NThjZDVjNWUtYzQyYy00ZWVhLTg4NDgtNDUyMTc5NTZlODQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7mUmwH+2ynqrglT0bT61PBnBmlNw5c8FnD9 iW6fuhkE4kl8ymZAA1cTk0lxDkgjH+RZkWypWYoIaKufIYFneupWxzYJQ0AjJBKm EicnKLvhHCxqmOBS4qq8IAGQ//wxBB7GODAR2H7U9JTAcuFJIgmAtgjwV4hMusXG manVJJkiSF4ZUTw60UqTyou1j6SxyPIeLxgvXOKu8K+Ai9P+LSr/OtZ7dTCLIjA/ rowTP3QvGqKmcJhFliHClg0iPWFsRHqSI90ZeYdOE9+OAH6DdqS1rF9Gq2/43UGb lPjN04ONsH7CWG6Yeg8jBLg41Oto1LRKXcUBxx+2r2z7vdj7yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7il5JM6N7QHWbtBPkSVWbpG1q3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzk4MTIxY2YtODJkZC0z YWJlLTg3ZjctMTU3YTFhM2U0ZjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAF9xA9ApbAndQ7qdRx9jrEwcwYVpujJIRhpYkZ+IUYUIJDQL+CTC7ul 9gyEmuovjKsO9+AIEvNblLDmLgYpPY5g6e10s3SwocHZAoBnsHVyjlwEfcDbBn1J vCJELaExIg4MCbGR2uulmaYLdqgXqFYGPdKvqA+FVzQoLK6KcKPL7AQn9w0IJAUf 7972BdDWVNpoJzYPpmV5u4E5BNb4W1bVi33LFrpDspb1wsZlMjkTjDxnQuCZ/2kB x+6cJK9NhV6zn7PD1WhgR4LvYij6yLvAat9zs6B9i35l7b5yoh3AUDFcNZbCXi2T Y4kqJ5IA0kbs+2LH2SmjE9sTZB/+hto= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:15 2025 by rpki-client