$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa88732e-a027-3852-b338-a0ad1f052d6c.roa File: aa88732e-a027-3852-b338-a0ad1f052d6c.roa (raw, json) Hash identifier: zhtqMfBJf0JJY7ySXDErjtCnRDThuvzwbNv+w+zO2nk= Subject key identifier: FF:5C:97:32:E5:33:D5:2B:82:F5:3C:C0:1F:3C:D0:A9:DC:32:4B:EC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B95A956A140278937F1AC5DE0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa88732e-a027-3852-b338-a0ad1f052d6c.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 36183 IP address blocks: 172.224.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:56:a1:40:27:89:37:f1:ac:5d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=14a8b0e5-a63e-466a-bdd0-9659c2c6e0a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1b:2f:24:4c:1b:61:84:f9:b7:59:a1:1e:d3: e2:a2:35:c4:e8:4d:e2:a0:f4:37:b2:e6:f0:d8:2c: 3a:66:c5:60:5e:23:21:a3:87:f8:69:4e:6c:09:b9: b1:13:f4:3b:74:e7:e4:fd:ad:ca:b8:c8:29:7d:4a: 60:34:1e:c3:9b:43:f7:e2:4b:a1:c9:3e:fe:72:92: d5:8d:e8:bb:a4:16:b0:c3:40:a8:7c:20:b0:d7:44: 3a:dd:12:7a:32:29:9d:be:b9:ca:3f:89:c5:81:6f: d4:8b:bd:0c:a8:76:21:87:a9:f4:04:68:e2:66:36: 08:a2:51:6f:86:f5:16:5a:54:a6:c6:a7:2a:19:da: bd:18:17:27:f1:e2:87:32:05:b8:82:b8:2c:ee:bf: ab:4b:18:da:b6:02:b5:fd:3c:8e:37:85:16:c4:23: 46:19:b8:66:e7:0e:93:c0:96:8f:09:dd:69:2e:89: fd:06:b0:55:b6:b2:92:51:a9:c5:ad:d0:5e:37:11: 8c:a7:74:a4:c3:4f:1c:bc:c6:12:5b:1d:20:70:92: 51:27:f4:60:24:57:20:f6:41:c7:2b:af:b7:16:e9: 8e:19:d4:01:95:32:46:8b:e6:13:a6:e2:65:cb:ba: 00:66:b6:c7:e4:e2:8c:ca:47:d6:bb:a3:4b:32:a8: 30:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5C:97:32:E5:33:D5:2B:82:F5:3C:C0:1F:3C:D0:A9:DC:32:4B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa88732e-a027-3852-b338-a0ad1f052d6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:62:5a:dc:01:02:43:4e:ab:00:16:b6:2b:0d:73:40:9f:95: f3:11:b3:3d:38:b6:49:0f:09:27:8a:71:a5:10:52:81:bb:3c: fd:d9:46:38:40:58:17:4a:ec:2b:47:b8:19:4c:9a:ea:c3:19: 7a:1a:56:28:cf:21:ba:cc:10:1f:ed:40:b9:2f:7e:c8:73:d0: 60:ab:d4:4a:b4:49:8e:66:52:a4:9d:78:2a:07:70:2a:cc:09: 90:72:ce:8a:fe:44:53:6c:55:ee:81:d3:09:12:66:5a:43:04: 67:ab:65:b5:40:cf:47:b8:de:ad:c3:a5:c4:41:9d:03:af:76: 83:60:9a:92:58:bb:d6:03:6a:f4:de:fa:01:8c:f0:4f:2b:20: 2f:ad:17:1a:8f:92:3c:c7:36:41:54:92:24:02:a1:6a:3f:47: 0f:72:2b:1e:fc:fc:43:75:da:30:20:8b:39:c3:4c:b6:b6:f8: 1e:79:aa:f4:22:76:af:8e:ca:90:c7:c5:d5:64:cd:a0:1f:81: 1b:90:98:71:9e:10:51:9c:d6:af:71:ac:7c:35:00:17:4f:25: 0c:cb:bb:c6:19:14:fe:8f:ce:b2:d0:c9:2c:a8:fe:ba:a5:76: da:a2:f8:47:8e:df:74:d5:d5:b7:3f:ce:36:9f:7f:45:d3:85: 97:6d:9c:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqVahQCeJN/GsXeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTRhOGIwZTUtYTYzZS00NjZhLWJkZDAtOTY1OWMyYzZlMGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxsvJEwbYYT5t1mhHtPiojXE6E3ioPQ3subw 2Cw6ZsVgXiMho4f4aU5sCbmxE/Q7dOfk/a3KuMgpfUpgNB7Dm0P34kuhyT7+cpLV jei7pBaww0CofCCw10Q63RJ6MimdvrnKP4nFgW/Ui70MqHYhh6n0BGjiZjYIolFv hvUWWlSmxqcqGdq9GBcn8eKHMgW4grgs7r+rSxjatgK1/TyON4UWxCNGGbhm5w6T wJaPCd1pLon9BrBVtrKSUanFrdBeNxGMp3Skw08cvMYSWx0gcJJRJ/RgJFcg9kHH K6+3FumOGdQBlTJGi+YTpuJly7oAZrbH5OKMykfWu6NLMqgwuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9clzLlM9UrgvU8wB880KncMkvsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWE4ODczMmUtYTAyNy0z ODUyLWIzMzgtYTBhZDFmMDUyZDZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpiWtwBAkNOqwAWtisNc0CflfMRsz04tkkPCSeKcaUQUoG7PP3ZRjhA WBdK7CtHuBlMmurDGXoaVijPIbrMEB/tQLkvfshz0GCr1Eq0SY5mUqSdeCoHcCrM CZByzor+RFNsVe6B0wkSZlpDBGerZbVAz0e43q3DpcRBnQOvdoNgmpJYu9YDavTe +gGM8E8rIC+tFxqPkjzHNkFUkiQCoWo/Rw9yKx78/EN12jAgiznDTLa2+B55qvQi dq+OypDHxdVkzaAfgRuQmHGeEFGc1q9xrHw1ABdPJQzLu8YZFP6PzrLQySyo/rql dtqi+EeO33TV1bc/zjaff0XThZdtnL4= -----END CERTIFICATE-----Generated at Wed Oct 22 04:44:26 2025 by rpki-client