$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b4bb1d3-e378-3d27-a28a-5dab1c437713.roa File: 4b4bb1d3-e378-3d27-a28a-5dab1c437713.roa (raw, json) Hash identifier: T7d8d5lfTMzB37/Q8t3oGIdP2ZQadw5ZEIIfNdYkTPE= Subject key identifier: 01:3F:4F:E6:8E:4B:25:20:F7:3D:AA:B4:01:1E:F4:3E:A1:73:14:ED Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B970CFD4A73AD6ED51938FF20 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b4bb1d3-e378-3d27-a28a-5dab1c437713.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 36183 IP address blocks: 172.224.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:fd:4a:73:ad:6e:d5:19:38:ff:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=f0af1fd0-9e11-4fc6-a414-9d75a7eac55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:81:88:d4:7a:64:bc:93:df:f2:8c:3d:69:12: 81:ec:bc:84:01:2a:5d:1f:a0:6f:a2:71:ce:b3:95: a5:60:31:14:b8:1e:76:95:a6:79:d4:bc:d0:6e:65: 88:4e:98:b4:cd:c2:91:36:a8:d7:db:9d:e5:59:96: 7b:8c:a1:82:91:f7:dc:41:7c:41:69:09:69:58:4a: e2:02:e2:73:33:58:1f:ff:a7:01:a7:76:71:09:c8: a5:14:af:50:38:e9:50:ba:1e:e3:8b:b5:fa:56:db: 0d:6d:76:46:fa:a8:38:a2:d4:78:77:6f:be:2c:89: 9d:f9:4d:ea:1b:e6:0b:0e:85:c8:b2:2d:ed:6d:19: 16:ff:87:22:5c:4f:8a:6c:08:a6:e2:fd:d8:8f:39: 93:eb:7d:28:d7:a1:d1:0f:55:a0:43:cf:c3:a0:0a: a0:bb:3a:84:ad:92:0e:98:d5:46:61:f8:38:a4:8e: dc:38:85:16:85:ff:dc:c8:61:c2:51:5e:73:04:81: 19:b4:f4:30:e4:2d:85:a9:f1:53:ce:4a:25:ea:f0: 6e:32:7d:7f:da:2f:ce:66:2f:b7:5b:57:37:a2:af: bd:d2:29:de:d8:8f:46:8b:0d:96:5a:69:b3:be:b3: 3b:00:69:e9:c6:87:76:64:52:6b:58:d0:be:f7:bb: 6c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3F:4F:E6:8E:4B:25:20:F7:3D:AA:B4:01:1E:F4:3E:A1:73:14:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b4bb1d3-e378-3d27-a28a-5dab1c437713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ef:4b:9e:de:c9:d3:70:ce:25:83:aa:35:25:fb:d0:4f:57: 92:1b:fd:fa:18:2c:3d:c5:19:ce:cb:06:70:b2:47:2f:85:94: 25:96:c0:96:32:6d:a3:4a:f3:d9:60:93:f5:7f:2c:ee:36:12: 0a:49:6d:f6:22:19:29:11:55:48:d7:98:ee:fd:09:da:f8:d0: 27:0d:13:82:a0:df:f5:2b:74:39:18:e5:99:d1:40:3c:26:32: f0:e4:4d:8b:85:d5:97:81:43:5e:17:24:75:76:77:6c:90:35: ba:24:ad:ce:71:7d:f6:e9:8b:0b:9b:03:b6:57:27:63:1d:a1: 30:d4:34:3c:1a:8c:69:f5:e7:68:dc:91:58:6e:c6:38:32:ec: f4:57:58:d7:98:bb:b2:1a:de:1c:a6:49:8d:3c:16:4e:67:3e: 8a:6e:a4:08:cf:bc:16:05:46:ef:e3:79:38:97:29:9d:bb:87: 90:78:bb:90:40:db:19:5a:4f:63:ac:32:fb:90:51:af:c3:e5: 61:2d:38:8f:f5:69:1d:b8:28:2f:9d:30:61:a1:73:2c:b3:a1: e2:46:6a:09:50:90:5e:2d:dc:dc:0a:62:81:52:f1:25:e1:10: b3:8b:ae:4d:6d:db:eb:29:a1:2d:55:7d:ae:41:3e:cf:40:b0: 09:10:eb:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDP1Kc61u1Rk4/yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk ZjBhZjFmZDAtOWUxMS00ZmM2LWE0MTQtOWQ3NWE3ZWFjNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIGI1HpkvJPf8ow9aRKB7LyEASpdH6BvonHO s5WlYDEUuB52laZ51LzQbmWITpi0zcKRNqjX253lWZZ7jKGCkffcQXxBaQlpWEri AuJzM1gf/6cBp3ZxCcilFK9QOOlQuh7ji7X6VtsNbXZG+qg4otR4d2++LImd+U3q G+YLDoXIsi3tbRkW/4ciXE+KbAim4v3YjzmT630o16HRD1WgQ8/DoAqguzqErZIO mNVGYfg4pI7cOIUWhf/cyGHCUV5zBIEZtPQw5C2FqfFTzkol6vBuMn1/2i/OZi+3 W1c3oq+90ine2I9Giw2WWmmzvrM7AGnpxod2ZFJrWNC+97tsaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAE/T+aOSyUg9z2qtAEe9D6hcxTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGI0YmIxZDMtZTM3OC0z ZDI3LWEyOGEtNWRhYjFjNDM3NzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOARMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjvS57eydNwziWDqjUl+9BPV5Ib/foYLD3FGc7LBnCyRy+FlCWWwJYy baNK89lgk/V/LO42EgpJbfYiGSkRVUjXmO79Cdr40CcNE4Kg3/UrdDkY5ZnRQDwm MvDkTYuF1ZeBQ14XJHV2d2yQNbokrc5xffbpiwubA7ZXJ2MdoTDUNDwajGn152jc kVhuxjgy7PRXWNeYu7Ia3hymSY08Fk5nPopupAjPvBYFRu/jeTiXKZ27h5B4u5BA 2xlaT2OsMvuQUa/D5WEtOI/1aR24KC+dMGGhcyyzoeJGaglQkF4t3NwKYoFS8SXh ELOLrk1t2+spoS1Vfa5BPs9AsAkQ6ys= -----END CERTIFICATE-----Generated at Wed Oct 22 02:23:32 2025 by rpki-client