$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/970cb531-2a50-39b8-9486-6ed2b0b9d958.roa File: 970cb531-2a50-39b8-9486-6ed2b0b9d958.roa (raw, json) Hash identifier: Xcbeibwgxof+O/XCwv8JtfpoQCob3/4QsNtEJvovDzc= Subject key identifier: 68:CE:A2:4E:C7:D0:60:BA:B9:CB:B2:9D:4A:7D:68:BE:C6:48:5E:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F63F8250862DC51B085C559E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/970cb531-2a50-39b8-9486-6ed2b0b9d958.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 36183 IP address blocks: 172.225.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:25:08:62:dc:51:b0:85:c5:59:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=35829809-48fb-41c7-8dc8-7a5493067046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2c:36:77:35:df:77:c4:bf:21:5d:3e:d5:f4: 7d:f5:fb:41:73:7d:46:53:40:0d:a2:c3:d3:ad:8d: e0:de:14:1a:cf:35:9d:43:85:03:a1:f6:68:08:bf: 24:cd:9a:a9:3d:0a:66:8f:22:9e:66:95:cd:a2:97: 3f:3c:fb:42:0f:2f:15:f3:f2:95:cf:47:b0:23:40: 42:bf:ef:20:a2:04:50:5c:d2:43:9f:a3:f1:41:56: 36:90:9e:f5:29:ca:e3:df:96:fd:7f:0c:36:7c:4c: 97:c7:d2:ed:0b:2e:e0:4d:49:0a:24:71:71:59:23: 12:fa:ab:21:cc:a9:4b:71:60:37:02:d8:a0:68:fa: 5c:25:57:18:b9:b3:3a:6e:64:60:71:29:ef:39:98: 28:2f:95:06:37:a8:e4:93:7e:85:fa:74:94:3d:cc: 00:f9:4d:12:fa:c5:4a:cd:77:a1:f6:2b:43:ce:7e: 5d:ca:e9:40:ce:c8:4d:2f:0b:1f:f7:26:f6:1d:94: 96:35:e0:1f:17:4e:f8:e4:99:fb:b2:a3:37:a5:0c: 9e:c0:b8:5e:53:40:b4:a7:15:44:0d:df:ab:e3:b7: 35:d2:ff:32:23:b0:8a:16:28:dc:d1:d9:e3:6a:a9: 06:98:5e:17:af:ec:55:01:08:45:67:4e:37:c5:4a: 17:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CE:A2:4E:C7:D0:60:BA:B9:CB:B2:9D:4A:7D:68:BE:C6:48:5E:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/970cb531-2a50-39b8-9486-6ed2b0b9d958.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:85:64:60:61:2b:c1:44:6d:c9:e7:51:c4:cf:62:5c:cc:18: 21:3c:b2:77:70:69:00:96:94:8a:b2:02:52:df:ec:56:d8:d7: 17:24:2f:bd:66:0d:58:ae:ff:e0:72:e3:6d:2a:ef:b5:35:82: 3e:ac:2b:75:c9:ed:c5:6e:dd:c4:be:90:1e:15:c7:18:a4:a4: 31:5c:83:6e:fc:03:89:3a:70:18:89:9f:7d:e4:0d:f4:db:49: 74:a6:8a:dd:c8:2b:dc:2d:a7:79:85:ad:f8:ed:e0:6c:6a:33: 46:e2:27:60:48:cc:93:03:a0:1d:ce:7e:7c:99:4b:c0:56:27: 48:31:d2:a6:9d:f7:e2:06:e5:c5:f3:e6:e0:01:31:37:7a:e6: 0c:2c:22:5e:c6:25:c5:d4:e5:8e:37:d0:de:c7:75:a0:a9:11: 50:78:b5:5b:02:e7:bf:30:fd:a9:6f:4a:aa:26:db:08:8e:59: e5:79:eb:9c:62:bb:f4:85:9c:0d:1d:04:d1:03:b8:71:7d:6a: 79:d2:61:cb:3d:af:f0:dd:32:90:b9:de:a5:6c:a7:5a:d4:fe: 9c:76:0c:a2:bd:7b:14:28:1a:72:d0:d7:43:a8:19:72:23:45: 24:2f:99:e5:b3:92:1f:24:5e:43:8f:09:70:c1:41:97:12:1d: 5f:5d:a0:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+CUIYtxRsIXFWeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MzU4Mjk4MDktNDhmYi00MWM3LThkYzgtN2E1NDkzMDY3MDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSw2dzXfd8S/IV0+1fR99ftBc31GU0ANosPT rY3g3hQazzWdQ4UDofZoCL8kzZqpPQpmjyKeZpXNopc/PPtCDy8V8/KVz0ewI0BC v+8gogRQXNJDn6PxQVY2kJ71Kcrj35b9fww2fEyXx9LtCy7gTUkKJHFxWSMS+qsh zKlLcWA3AtigaPpcJVcYubM6bmRgcSnvOZgoL5UGN6jkk36F+nSUPcwA+U0S+sVK zXeh9itDzn5dyulAzshNLwsf9yb2HZSWNeAfF0745Jn7sqM3pQyewLheU0C0pxVE Dd+r47c10v8yI7CKFijc0dnjaqkGmF4Xr+xVAQhFZ043xUoXtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjOok7H0GC6ucuynUp9aL7GSF4vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTcwY2I1MzEtMmE1MC0z OWI4LTk0ODYtNmVkMmIwYjlkOTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeFZGBhK8FEbcnnUcTPYlzMGCE8sndwaQCWlIqyAlLf7FbY1xckL71m DViu/+By420q77U1gj6sK3XJ7cVu3cS+kB4VxxikpDFcg278A4k6cBiJn33kDfTb SXSmit3IK9wtp3mFrfjt4GxqM0biJ2BIzJMDoB3OfnyZS8BWJ0gx0qad9+IG5cXz 5uABMTd65gwsIl7GJcXU5Y430N7HdaCpEVB4tVsC578w/alvSqom2wiOWeV565xi u/SFnA0dBNEDuHF9annSYcs9r/DdMpC53qVsp1rU/px2DKK9exQoGnLQ10OoGXIj RSQvmeWzkh8kXkOPCXDBQZcSHV9doNk= -----END CERTIFICATE-----Generated at Thu Oct 22 12:13:26 2026 by rpki-client