$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3cb6788-29fe-330c-85da-eeb44260aa62.roa File: e3cb6788-29fe-330c-85da-eeb44260aa62.roa (raw, json) Hash identifier: l1h60Y5mtX2wddAgOG1rCmBL8U8MSbMuat9FMSqNoRo= Subject key identifier: 0D:4C:E0:DD:B0:39:77:A0:5F:4F:B8:82:7E:4E:43:EC:7E:6D:D2:59 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8EAD0257C7923CDC3D62A900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3cb6788-29fe-330c-85da-eeb44260aa62.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.226.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:02:57:c7:92:3c:dc:3d:62:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=ffb17d53-9c93-4294-a534-e56773f1adb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b3:f1:13:8a:12:5f:3c:00:56:05:63:87:5e: 1b:ee:b3:3b:3f:9a:32:b4:30:0a:ce:75:a7:03:8a: 07:eb:9c:1a:07:32:a0:4d:15:02:78:db:dc:4f:e2: e0:9d:e4:c2:03:fe:2a:50:eb:7e:8d:7d:04:ac:c4: 74:92:d4:21:ec:7b:f3:ea:2f:14:f4:26:a3:22:1c: 08:e3:31:cf:50:d4:2c:4a:b1:b6:b1:ec:f6:c8:19: 14:e1:32:c8:d8:33:2c:2f:0c:3c:f6:d8:7f:1b:33: fa:6d:d2:ce:69:53:9f:e3:5d:70:ca:28:5d:97:ca: 96:40:2f:67:46:f1:a5:43:df:07:9c:4a:78:14:1b: 7c:d1:9b:87:49:4f:fc:62:8d:f5:09:9b:ca:5b:bb: e8:9c:75:fd:f6:ec:a5:80:a9:b6:3d:fe:af:01:f1: 57:35:99:67:f5:85:6a:b6:dd:31:ee:51:65:1f:80: 8e:64:51:75:52:99:27:d8:f1:eb:4a:c0:a8:a0:89: b0:39:ba:1b:2e:fe:12:83:16:04:60:d9:70:0f:b8: 93:c8:b6:a3:af:9f:c9:b2:ea:aa:46:1e:76:49:56: bc:cc:9c:43:82:b7:1f:2f:d4:0b:8a:67:5a:31:23: cc:d6:84:c0:71:0b:0c:0d:ff:77:e0:1d:24:58:df: a8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:4C:E0:DD:B0:39:77:A0:5F:4F:B8:82:7E:4E:43:EC:7E:6D:D2:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e3cb6788-29fe-330c-85da-eeb44260aa62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f6:80:2c:fe:84:11:d7:d6:32:28:88:f4:ea:a5:3a:91:75: 0a:2c:69:7e:1e:47:99:d0:85:40:e5:e7:8f:f7:05:bd:f1:32: 96:af:e4:4c:24:5b:7f:c2:08:8d:15:63:db:ad:c4:16:02:27: b6:70:c7:d2:21:b0:00:8b:d7:f9:3c:34:97:f3:88:4f:14:70: a5:38:c0:a1:c4:d1:14:89:46:2e:fc:89:1b:0e:90:b4:67:f5: c5:ef:fb:db:31:9e:81:cd:48:7f:12:e1:df:b7:cc:52:56:9f: 06:9f:48:63:82:8d:0c:05:b3:10:a6:7a:9c:40:7e:78:ca:19: d9:a6:14:30:b8:0d:7d:e2:bf:a0:38:e3:50:cf:df:44:7f:a4: ae:35:2a:e7:d5:90:2b:eb:79:cd:26:e7:fc:70:19:17:d9:1e: ad:a7:7b:de:3a:fc:87:23:1d:e2:67:89:79:f2:9b:90:55:72: 61:15:5e:05:5f:fa:8a:28:42:98:fb:66:d6:ff:bd:44:ba:9f: 7b:b1:1d:f1:01:1b:d6:49:fa:e6:66:dc:73:e2:f6:e2:f1:d6: 4f:f6:79:0d:d5:ac:93:cd:5c:db:a1:33:46:94:9e:ef:ef:28: a1:c3:59:41:a0:c9:1f:8b:5f:95:7d:05:9e:51:bc:92:d8:07: e6:6d:fb:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQJXx5I83D1iqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZmZiMTdkNTMtOWM5My00Mjk0LWE1MzQtZTU2NzczZjFhZGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbPxE4oSXzwAVgVjh14b7rM7P5oytDAKznWn A4oH65waBzKgTRUCeNvcT+LgneTCA/4qUOt+jX0ErMR0ktQh7Hvz6i8U9CajIhwI 4zHPUNQsSrG2sez2yBkU4TLI2DMsLww89th/GzP6bdLOaVOf411wyihdl8qWQC9n RvGlQ98HnEp4FBt80ZuHSU/8Yo31CZvKW7vonHX99uylgKm2Pf6vAfFXNZln9YVq tt0x7lFlH4COZFF1Upkn2PHrSsCooImwObobLv4SgxYEYNlwD7iTyLajr5/Jsuqq Rh52SVa8zJxDgrcfL9QLimdaMSPM1oTAcQsMDf934B0kWN+oawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1M4N2wOXegX0+4gn5OQ+x+bdJZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTNjYjY3ODgtMjlmZS0z MzBjLTg1ZGEtZWViNDQyNjBhYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOITMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEL2gCz+hBHX1jIoiPTqpTqRdQosaX4eR5nQhUDl54/3Bb3xMpav5Ewk W3/CCI0VY9utxBYCJ7Zwx9IhsACL1/k8NJfziE8UcKU4wKHE0RSJRi78iRsOkLRn 9cXv+9sxnoHNSH8S4d+3zFJWnwafSGOCjQwFsxCmepxAfnjKGdmmFDC4DX3iv6A4 41DP30R/pK41KufVkCvrec0m5/xwGRfZHq2ne946/IcjHeJniXnym5BVcmEVXgVf +oooQpj7Ztb/vUS6n3uxHfEBG9ZJ+uZm3HPi9uLx1k/2eQ3VrJPNXNuhM0aUnu/v KKHDWUGgyR+LX5V9BZ5RvJLYB+Zt+/I= -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:03 2025 by rpki-client