$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4747a11a-ffc1-383e-9c8b-52d17a5d90fc.roa File: 4747a11a-ffc1-383e-9c8b-52d17a5d90fc.roa (raw, json) Hash identifier: 1uu5ignQVpbVAvzl+Mj//lpk2LzN15jcGSiTHozOQuQ= Subject key identifier: 42:C7:10:A0:BF:D8:49:54:2A:89:CA:86:7D:14:71:FA:94:AC:2D:D7 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B970CF9B28BCD7F328121B480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4747a11a-ffc1-383e-9c8b-52d17a5d90fc.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 36183 IP address blocks: 172.224.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f9:b2:8b:cd:7f:32:81:21:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=32782308-63eb-462b-b871-02bdba0cd266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ae:76:73:a6:79:aa:7d:94:11:04:b2:9f:93: 33:96:b8:57:4e:14:10:fd:c1:6d:85:11:91:f7:55: ca:36:b9:44:fa:e3:30:ce:35:c3:9b:5c:d5:d5:8c: 97:6c:9f:e8:e5:21:50:11:38:c9:9b:93:3d:29:5a: 9f:95:43:94:1d:81:b7:4c:79:37:01:3b:9c:5b:3b: b6:a9:35:27:2f:fc:6c:ea:30:b8:13:f3:06:26:59: 66:25:5e:dd:e0:91:e0:d2:39:33:51:ea:fa:b8:d4: 9c:79:fa:e5:fa:5a:6a:3a:0a:cb:53:b5:12:6e:3f: 33:9b:3c:f9:16:52:c8:d4:86:90:60:80:18:1f:8f: 31:d3:ea:4c:f2:fb:70:15:76:9d:f1:a4:27:2c:9d: e5:6a:af:a8:96:3a:85:6c:a2:eb:5c:b3:49:c6:14: c7:6d:f0:c5:7c:e3:75:25:2c:46:b7:55:09:23:7c: 0a:8d:22:1b:6e:1c:7d:51:de:25:63:ac:14:b4:54: 4b:e2:3b:4c:3d:68:74:d6:f2:ec:8b:e9:b0:5b:75: 10:13:b5:6b:9d:ff:bc:b8:ce:b2:0d:4e:b1:90:ba: d7:20:20:ed:1a:d5:48:d6:ea:8c:c2:ec:97:91:48: 2d:b4:9c:c4:6e:82:f8:1c:af:e7:07:e0:08:03:7c: 3d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C7:10:A0:BF:D8:49:54:2A:89:CA:86:7D:14:71:FA:94:AC:2D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4747a11a-ffc1-383e-9c8b-52d17a5d90fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4e:b7:d5:dc:39:15:ed:fd:89:7c:80:1a:2b:4c:49:75:30: 43:69:46:ea:90:8e:23:17:b8:70:27:2d:6a:bf:c5:e5:31:2b: 97:51:0b:4a:8a:17:ae:72:b6:1b:dc:45:23:c9:67:b5:21:36: 57:ea:2c:fd:c4:8e:74:17:9b:4e:c9:bd:62:f4:f6:17:13:55: 42:06:02:9a:2d:34:a5:18:52:84:1d:f1:31:56:80:bd:2a:f7: af:50:11:f7:dc:25:2b:e4:47:e5:00:5c:cc:55:8b:47:7e:52: de:a6:ea:d5:14:22:4c:fb:44:07:02:13:cb:03:a1:a2:43:65: 65:2a:64:6d:92:b9:17:b5:89:54:22:af:7f:6a:61:6d:f8:1e: f5:09:c4:c7:30:a7:5e:e2:06:37:ae:49:65:1a:1f:91:dc:22: e0:34:f7:ea:b6:80:4f:33:8c:a9:01:3d:7c:e7:2c:8a:33:00: 86:ce:52:80:0f:c4:d1:be:ab:c7:a3:cf:e5:14:87:ff:3b:eb: 0c:b6:a7:55:a1:57:8f:f5:c5:37:a0:73:9c:cf:a9:96:06:18: a2:7c:2a:6b:82:af:a3:8b:52:ee:bf:66:cf:aa:5d:de:61:14: ee:e9:d9:bd:29:1b:04:8b:bf:d9:84:09:9d:47:a4:1c:f7:8b: ce:61:b7:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPmyi81/MoEhtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MzI3ODIzMDgtNjNlYi00NjJiLWI4NzEtMDJiZGJhMGNkMjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka52c6Z5qn2UEQSyn5MzlrhXThQQ/cFthRGR 91XKNrlE+uMwzjXDm1zV1YyXbJ/o5SFQETjJm5M9KVqflUOUHYG3THk3ATucWzu2 qTUnL/xs6jC4E/MGJllmJV7d4JHg0jkzUer6uNScefrl+lpqOgrLU7USbj8zmzz5 FlLI1IaQYIAYH48x0+pM8vtwFXad8aQnLJ3laq+oljqFbKLrXLNJxhTHbfDFfON1 JSxGt1UJI3wKjSIbbhx9Ud4lY6wUtFRL4jtMPWh01vLsi+mwW3UQE7Vrnf+8uM6y DU6xkLrXICDtGtVI1uqMwuyXkUgttJzEboL4HK/nB+AIA3w9UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELHEKC/2ElUKonKhn0UcfqUrC3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDc0N2ExMWEtZmZjMS0z ODNlLTljOGItNTJkMTdhNWQ5MGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVOt9XcORXt/Yl8gBorTEl1MENpRuqQjiMXuHAnLWq/xeUxK5dRC0qK F65ythvcRSPJZ7UhNlfqLP3EjnQXm07JvWL09hcTVUIGApotNKUYUoQd8TFWgL0q 969QEffcJSvkR+UAXMxVi0d+Ut6m6tUUIkz7RAcCE8sDoaJDZWUqZG2SuRe1iVQi r39qYW34HvUJxMcwp17iBjeuSWUaH5HcIuA09+q2gE8zjKkBPXznLIozAIbOUoAP xNG+q8ejz+UUh/876wy2p1WhV4/1xTegc5zPqZYGGKJ8KmuCr6OLUu6/Zs+qXd5h FO7p2b0pGwSLv9mECZ1HpBz3i85htyg= -----END CERTIFICATE-----Generated at Wed Oct 22 02:23:36 2025 by rpki-client