$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5af13219-031a-3d27-8284-f923631e5f2d.roa File: 5af13219-031a-3d27-8284-f923631e5f2d.roa (raw, json) Hash identifier: S5a2TS+sQoxA9RFyEtCWXcyD9/BjigYtOQCNXdJvo6Q= Subject key identifier: 8F:15:E2:D6:CE:EB:A3:75:E4:CB:01:75:FC:FF:48:10:5C:F4:F3:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B99D7B419BF6E00BB94297630 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5af13219-031a-3d27-8284-f923631e5f2d.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 36183 IP address blocks: 172.224.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:b4:19:bf:6e:00:bb:94:29:76:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=c60c1540-0207-4075-bf62-51b1d23321db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:72:de:06:4a:0f:ec:5d:b7:ce:35:7b:75:72: b0:0e:71:3c:72:f5:7e:e4:8d:8d:4e:66:a3:8b:3c: f6:45:d3:f5:e8:a4:f7:37:df:1d:3b:fb:52:e4:70: af:b9:06:50:c2:3c:e2:68:25:9f:51:5e:e0:a6:ac: 1b:76:d5:27:70:f7:5f:0a:9e:59:8b:ae:cc:5e:cd: d5:8a:14:d1:d7:51:f7:3c:ff:c1:37:85:63:c3:09: 3d:fc:ba:fe:68:6a:89:c9:14:28:f3:9b:07:fe:6b: 5b:fa:62:88:ff:aa:49:07:17:26:69:dd:1a:0a:ec: c6:59:47:d7:0e:5b:7a:ee:b9:01:88:fb:7b:6f:8f: d8:f7:e2:96:ee:36:2f:26:52:78:ed:4a:cb:df:ef: 02:6d:96:6d:1e:c5:85:10:40:1b:39:70:e4:a0:da: f3:0f:ed:69:9d:26:4f:a9:c7:cb:73:01:16:40:c8: 4b:a8:3f:74:31:d8:95:52:7e:89:4b:02:5c:25:e8: 80:fe:79:3c:14:a8:3b:b6:e5:85:4a:94:74:d6:69: 73:c9:89:82:ea:b6:46:5c:fb:0b:7d:8c:8b:d5:ed: 0f:3a:e4:66:a8:b4:fa:a2:49:6a:e0:0f:3c:41:9a: 48:c1:12:6f:d4:78:c5:f3:07:82:1d:71:b6:d3:eb: 75:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:15:E2:D6:CE:EB:A3:75:E4:CB:01:75:FC:FF:48:10:5C:F4:F3:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5af13219-031a-3d27-8284-f923631e5f2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:d8:61:2c:f3:8c:f6:0c:af:af:25:c6:65:8d:e1:9e:0a:16: 77:a1:86:31:2e:fd:c1:9e:7f:a0:e0:50:47:fa:df:a2:5d:5a: 88:46:0a:33:f5:30:8b:0b:75:fa:94:3f:0d:cb:3b:b9:81:df: 1d:b9:14:cc:22:0e:95:ab:70:c2:b1:55:2e:b2:cd:dd:b1:fa: d3:c8:6c:df:af:80:f3:1c:9d:70:5c:54:06:ea:11:5e:3c:4c: d9:42:c6:16:89:ca:60:47:26:7f:06:2e:72:3a:cb:66:02:5c: 38:be:b3:c6:6b:13:83:c6:7d:ce:d8:4c:fb:77:50:ab:02:a5: 97:26:9b:05:bb:6c:95:0e:bc:b8:a0:b0:c9:46:1f:db:53:f7: 93:ec:3e:69:da:25:0e:ea:af:2d:1e:f2:8e:6d:ba:c5:a1:71: 4b:d9:c7:2e:06:4b:eb:cc:0d:51:9a:b0:b9:63:01:19:99:16: cb:23:36:67:76:cd:02:ef:98:9b:c1:c6:d7:b5:77:97:c3:78: b4:c9:34:d6:6d:14:0e:47:a8:84:af:b7:df:bf:36:00:55:de: c5:05:46:eb:f3:a4:2a:d2:07:30:6a:0e:cf:74:cf:e4:ea:53: 8d:60:38:34:3f:fa:b2:82:47:9e:85:bb:d9:c8:e6:99:ea:4c: 2d:ac:b1:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17QZv24Au5QpdjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YzYwYzE1NDAtMDIwNy00MDc1LWJmNjItNTFiMWQyMzMyMWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHLeBkoP7F23zjV7dXKwDnE8cvV+5I2NTmaj izz2RdP16KT3N98dO/tS5HCvuQZQwjziaCWfUV7gpqwbdtUncPdfCp5Zi67MXs3V ihTR11H3PP/BN4Vjwwk9/Lr+aGqJyRQo85sH/mtb+mKI/6pJBxcmad0aCuzGWUfX Dlt67rkBiPt7b4/Y9+KW7jYvJlJ47UrL3+8CbZZtHsWFEEAbOXDkoNrzD+1pnSZP qcfLcwEWQMhLqD90MdiVUn6JSwJcJeiA/nk8FKg7tuWFSpR01mlzyYmC6rZGXPsL fYyL1e0POuRmqLT6oklq4A88QZpIwRJv1HjF8weCHXG20+t1XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8V4tbO66N15MsBdfz/SBBc9PM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWFmMTMyMTktMDMxYS0z ZDI3LTgyODQtZjkyMzYzMWU1ZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDYYSzzjPYMr68lxmWN4Z4KFnehhjEu/cGef6DgUEf636JdWohGCjP1 MIsLdfqUPw3LO7mB3x25FMwiDpWrcMKxVS6yzd2x+tPIbN+vgPMcnXBcVAbqEV48 TNlCxhaJymBHJn8GLnI6y2YCXDi+s8ZrE4PGfc7YTPt3UKsCpZcmmwW7bJUOvLig sMlGH9tT95PsPmnaJQ7qry0e8o5tusWhcUvZxy4GS+vMDVGasLljARmZFssjNmd2 zQLvmJvBxte1d5fDeLTJNNZtFA5HqISvt9+/NgBV3sUFRuvzpCrSBzBqDs90z+Tq U41gODQ/+rKCR56Fu9nI5pnqTC2ssRY= -----END CERTIFICATE-----Generated at Wed Oct 22 04:40:53 2025 by rpki-client