$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122ba3fa-93cb-3a0b-b85a-5d911a479cbe.roa File: 122ba3fa-93cb-3a0b-b85a-5d911a479cbe.roa (raw, json) Hash identifier: 2MipzQbrbz3uPNR4hoPCKOmBl2wC5PFAIyl8MWUU3vg= Subject key identifier: 7F:E0:FC:AC:30:D4:E8:AC:7D:32:6D:68:07:AA:46:41:AE:6F:CB:B4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B1C36C7CDBD765DD31DE60D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122ba3fa-93cb-3a0b-b85a-5d911a479cbe.roa Signing time: Sun 07 Sep 2025 01:00:33 +0000 ROA not before: Sun 07 Sep 2025 01:00:33 +0000 ROA not after: Sat 06 Dec 2025 02:00:33 +0000 asID: 63949 IP address blocks: 172.234.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1c:36:c7:cd:bd:76:5d:d3:1d:e6:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 7 01:00:33 2025 GMT Not After : Dec 6 02:00:33 2025 GMT Subject: CN=b87f50a7-083d-43e0-a144-a3f4fca4a5c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4c:09:05:8b:6e:ff:2b:95:fc:42:17:97:d6: c7:68:d6:94:bc:8d:63:ad:cc:95:cf:c8:64:7c:3e: 16:2b:a4:29:0a:5f:c8:c6:1d:37:18:f6:e9:12:8c: 4d:6e:01:92:c8:21:9f:8f:41:55:7e:9b:ca:a0:29: d2:f5:56:70:a9:c9:8e:06:49:a8:93:e4:03:a3:04: 09:89:11:ae:99:51:2a:40:4f:04:da:d8:4e:5e:dd: 5f:97:ef:b9:55:db:dd:ce:57:92:ff:d6:3b:55:4a: bc:bc:56:86:98:35:a7:70:25:bb:a7:4d:94:34:ea: e6:47:a1:e1:56:d9:33:8e:35:d5:0c:d3:ca:7d:fa: 02:cd:fa:ed:05:2c:7f:50:3b:4e:e1:ec:94:95:4e: 9b:5c:1f:9c:c7:fb:a5:ba:4c:21:c0:b4:b6:70:48: ed:ae:78:00:35:ab:8c:26:22:c4:a2:16:62:30:39: 54:80:4e:9d:67:f9:4a:51:fe:75:44:6e:7f:8d:cf: 59:f6:6a:b3:66:52:e8:3c:9a:e3:06:f4:c5:c9:eb: 35:cc:a4:1a:15:c9:2b:5b:51:d7:bb:3d:2f:82:2d: a1:df:c9:ee:9b:8a:46:c8:5d:34:fa:e2:59:8b:ff: f9:3d:6a:48:95:a3:2c:a8:b0:82:c9:cc:60:ec:a3: 55:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:E0:FC:AC:30:D4:E8:AC:7D:32:6D:68:07:AA:46:41:AE:6F:CB:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/122ba3fa-93cb-3a0b-b85a-5d911a479cbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.234.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:93:69:c6:2a:e2:72:48:45:b2:b6:f1:5a:7c:db:c0:3d:aa: a7:74:ca:8c:48:e7:78:bf:75:57:28:f6:99:e4:7f:95:08:e6: 02:ee:8f:1b:70:48:7e:b0:17:1a:07:52:3a:ae:b5:b6:ed:ff: d4:a1:5e:cf:82:f9:68:be:4d:46:0f:76:9b:5b:d9:3e:6b:a4: fe:18:5f:10:15:3e:ef:b6:9e:f4:3a:8d:d7:82:b8:ef:9f:b3: b5:0f:e8:5d:01:4b:fe:2e:39:b6:11:46:33:91:fc:7a:16:91: cc:9d:3b:53:ef:a9:00:fd:d5:33:38:82:5b:a2:e1:51:12:2e: 4f:29:54:30:01:ca:b7:9b:c5:a9:bb:2e:9a:14:d5:a9:48:31: b0:0a:3b:e3:1d:ad:23:ff:2f:2f:a6:d0:bd:b9:60:a8:6e:d1: 21:04:22:17:8d:5e:fb:b9:52:f0:ac:26:81:bb:dd:5c:f5:b9: fc:49:40:25:96:1d:9c:9b:78:4b:6c:bd:c8:e7:b6:ef:56:8d: 7e:e0:03:d6:43:1b:1c:92:a4:c0:dc:d4:33:6c:68:79:ad:4e: 70:c2:8d:e1:49:65:2f:35:a8:03:fe:4a:ee:63:74:4f:18:68: f7:ee:1d:45:2d:91:1d:aa:50:1f:f5:c4:04:34:90:a7:a1:85: 25:62:27:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEscNsfNvXZd0x3mDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwNzAxMDAzM1oXDTI1MTIwNjAyMDAzM1owLzEtMCsGA1UEAxMk Yjg3ZjUwYTctMDgzZC00M2UwLWExNDQtYTNmNGZjYTRhNWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEwJBYtu/yuV/EIXl9bHaNaUvI1jrcyVz8hk fD4WK6QpCl/Ixh03GPbpEoxNbgGSyCGfj0FVfpvKoCnS9VZwqcmOBkmok+QDowQJ iRGumVEqQE8E2thOXt1fl++5VdvdzleS/9Y7VUq8vFaGmDWncCW7p02UNOrmR6Hh VtkzjjXVDNPKffoCzfrtBSx/UDtO4eyUlU6bXB+cx/ulukwhwLS2cEjtrngANauM JiLEohZiMDlUgE6dZ/lKUf51RG5/jc9Z9mqzZlLoPJrjBvTFyes1zKQaFckrW1HX uz0vgi2h38num4pGyF00+uJZi//5PWpIlaMsqLCCycxg7KNVlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/g/Kww1OisfTJtaAeqRkGub8u0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTIyYmEzZmEtOTNjYi0z YTBiLWI4NWEtNWQ5MTFhNDc5Y2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqTacYq4nJIRbK28Vp828A9qqd0yoxI53i/dVco9pnkf5UI5gLujxtw SH6wFxoHUjqutbbt/9ShXs+C+Wi+TUYPdptb2T5rpP4YXxAVPu+2nvQ6jdeCuO+f s7UP6F0BS/4uObYRRjOR/HoWkcydO1PvqQD91TM4glui4VESLk8pVDAByrebxam7 LpoU1alIMbAKO+MdrSP/Ly+m0L25YKhu0SEEIheNXvu5UvCsJoG73Vz1ufxJQCWW HZybeEtsvcjntu9WjX7gA9ZDGxySpMDc1DNsaHmtTnDCjeFJZS81qAP+Su5jdE8Y aPfuHUUtkR2qUB/1xAQ0kKehhSViJ8o= -----END CERTIFICATE-----Generated at Wed Oct 22 07:18:19 2025 by rpki-client