$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa File: 884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa (raw, json) Hash identifier: 59CLsqhIXOSXMTro/+gwajkm9NftvsWfBupu3q+W+gg= Subject key identifier: 7B:70:3A:B5:60:EE:5C:B1:9F:6F:22:41:3C:9B:03:C3:54:A9:DD:96 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B95A957542A8744BE357DA900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 36183 IP address blocks: 172.224.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:57:54:2a:87:44:be:35:7d:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=db3ab700-ef7f-42eb-8308-d196007dc67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:54:9a:88:04:ed:6e:13:b4:a9:3d:88:14:f9: d8:e4:67:4e:5a:66:36:41:7d:a9:ca:2c:ec:98:00: 48:0a:1f:7a:80:cb:5d:dd:ce:0a:b4:4e:2b:89:60: 3b:db:fb:05:65:83:e6:b4:39:21:23:d3:bd:16:22: 58:e5:6c:36:72:e6:2a:58:c1:4a:de:e5:30:08:ce: bb:a4:7e:b4:23:45:81:30:98:73:06:c2:80:fd:12: d9:fd:0e:95:69:0a:c6:9d:c5:b9:c2:27:cd:64:e9: 7d:1b:82:e9:7a:fe:57:2d:1e:60:ac:96:f8:c1:25: cf:58:1d:db:d1:e3:f3:e8:84:33:cd:ad:37:50:24: c7:fc:41:d5:d9:75:c2:93:8e:c2:8d:7c:8f:53:7a: a6:be:92:d7:42:1b:7f:d9:8f:19:5d:b5:2a:d7:b0: 53:8e:39:89:95:17:26:de:01:ff:57:76:a9:00:69: 9d:95:4a:24:37:ac:15:cd:39:ac:f5:b3:72:e3:04: e4:1d:12:13:bd:68:4e:59:f2:55:cb:52:c1:ac:61: e1:dd:21:aa:a2:16:1c:6d:9d:08:3a:3f:89:5e:a9: 93:af:eb:6d:f3:f0:73:ff:59:01:ab:98:1e:33:77: df:a2:ce:01:f9:38:1f:8a:cb:59:65:33:8f:f1:0c: be:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:70:3A:B5:60:EE:5C:B1:9F:6F:22:41:3C:9B:03:C3:54:A9:DD:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/884e1bb4-f6e9-307e-a49e-51e7a6ca3d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:21:8a:27:44:70:98:38:94:27:7e:83:6e:7a:3a:26:46:aa: 4a:98:77:4d:96:2f:cf:b1:2d:72:ab:e8:ba:fa:54:29:ee:cd: 47:ac:d2:15:b8:c7:4a:15:78:52:7a:68:d5:54:b8:2a:0b:54: 42:d1:bc:2a:fe:3d:81:bd:41:66:52:db:9f:a8:50:ff:f9:f0: 24:1b:59:8b:77:87:f4:5b:90:14:6e:c8:2f:53:63:b0:11:e6: 3f:ad:a8:29:4c:9e:93:da:a2:62:c9:c9:af:03:be:64:d2:9b: 62:6a:1e:b1:1a:2c:f3:bc:1e:f3:22:92:47:42:bd:50:47:80: af:b3:dc:e1:1b:32:81:ce:ae:58:00:97:b7:84:fc:3c:8c:95: ff:9a:5c:2d:6b:ab:23:66:d4:ac:02:30:84:1a:61:62:d1:d3: 38:57:84:c7:bd:97:80:6e:24:2f:da:65:91:41:70:93:df:7a: 7f:af:03:76:45:b5:4f:06:02:7e:cb:9b:ec:40:65:32:2b:08: 6f:f2:a1:28:eb:2e:0d:99:14:97:f7:10:ae:b3:cd:97:f2:e6: 84:04:15:3a:06:0e:b7:39:94:56:05:8a:05:45:5a:23:3b:61: 01:8a:d9:02:f5:59:20:74:bf:82:41:72:54:54:e4:e4:6d:93: 39:51:90:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqVdUKodEvjV9qQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZGIzYWI3MDAtZWY3Zi00MmViLTgzMDgtZDE5NjAwN2RjNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7FSaiATtbhO0qT2IFPnY5GdOWmY2QX2pyizs mABICh96gMtd3c4KtE4riWA72/sFZYPmtDkhI9O9FiJY5Ww2cuYqWMFK3uUwCM67 pH60I0WBMJhzBsKA/RLZ/Q6VaQrGncW5wifNZOl9G4Lpev5XLR5grJb4wSXPWB3b 0ePz6IQzza03UCTH/EHV2XXCk47CjXyPU3qmvpLXQht/2Y8ZXbUq17BTjjmJlRcm 3gH/V3apAGmdlUokN6wVzTms9bNy4wTkHRITvWhOWfJVy1LBrGHh3SGqohYcbZ0I Oj+JXqmTr+tt8/Bz/1kBq5geM3ffos4B+TgfistZZTOP8Qy+ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtwOrVg7lyxn28iQTybA8NUqd2WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODg0ZTFiYjQtZjZlOS0z MDdlLWE0OWUtNTFlN2E2Y2EzZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOB/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACghiidEcJg4lCd+g256OiZGqkqYd02WL8+xLXKr6Lr6VCnuzUes0hW4 x0oVeFJ6aNVUuCoLVELRvCr+PYG9QWZS25+oUP/58CQbWYt3h/RbkBRuyC9TY7AR 5j+tqClMnpPaomLJya8DvmTSm2JqHrEaLPO8HvMikkdCvVBHgK+z3OEbMoHOrlgA l7eE/DyMlf+aXC1rqyNm1KwCMIQaYWLR0zhXhMe9l4BuJC/aZZFBcJPfen+vA3ZF tU8GAn7Lm+xAZTIrCG/yoSjrLg2ZFJf3EK6zzZfy5oQEFToGDrc5lFYFigVFWiM7 YQGK2QL1WSB0v4JBclRU5ORtkzlRkAw= -----END CERTIFICATE-----Generated at Wed Oct 22 06:49:20 2025 by rpki-client