$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa File: b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa (raw, json) Hash identifier: XcyZOs6biCjB0sXqHTvWBx79K+Euyll0StRZzbz9LRE= Subject key identifier: 6E:3C:79:47:84:86:23:3E:B9:D6:D4:70:40:EA:9B:A7:32:ED:D5:D0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B970CFDF0E9FE5D5285ED2880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 36183 IP address blocks: 172.224.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:fd:f0:e9:fe:5d:52:85:ed:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=2801b4ce-f4a2-4ec6-aa36-3d6447812bcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c4:68:c4:1f:5c:d8:c8:8b:4e:6d:76:e9:ef: 6f:0f:93:de:9e:9f:33:0b:77:b4:79:e9:1d:d0:80: 73:c0:c6:08:c3:ee:60:9d:b8:33:fa:36:96:82:d4: c8:26:f3:0b:85:92:31:f8:c7:eb:c5:f7:d9:81:bb: ce:6e:ff:3e:67:22:fd:93:32:ff:ad:fe:e2:a7:fb: df:3b:90:54:eb:78:25:28:5a:69:a6:1c:0f:10:4e: 8c:a9:c7:c7:84:00:62:91:94:d5:b9:2c:3b:89:6a: 39:6a:f2:25:62:4b:92:3c:6a:d1:67:c2:3b:62:8b: c6:e6:03:18:ac:af:bc:45:3c:67:e5:a3:e7:83:6d: 13:91:0f:5c:e5:b9:73:38:84:2f:c3:48:d7:42:94: 9b:67:b6:22:98:1d:23:a2:a0:1c:01:82:73:f7:25: 65:24:01:ff:73:5f:26:b1:4e:fa:df:26:59:75:14: b6:91:0c:e7:e6:2d:68:32:7c:e9:26:f4:a4:ce:45: 7d:47:e6:07:85:83:9a:75:15:76:5a:71:9f:69:05: 0c:6b:f9:1f:36:0a:7f:64:fc:2e:f3:38:c4:97:f0: 97:02:bd:52:64:66:22:3c:1d:a0:35:f7:34:bb:e4: 97:d6:a1:cb:7b:77:bd:80:46:c0:10:3e:c7:05:28: 93:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3C:79:47:84:86:23:3E:B9:D6:D4:70:40:EA:9B:A7:32:ED:D5:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b14c2346-ce84-3082-9bd1-d53b66c6b02d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:0b:33:17:0d:34:7c:fb:70:17:f1:f4:82:77:7c:2b:8c:85: 9c:cd:5c:ef:94:b7:a0:6c:0d:43:18:4d:12:0e:89:60:7f:63: 95:35:28:8e:2f:d9:0d:39:4b:e8:7a:9f:46:68:52:08:8a:67: 63:be:70:f3:ef:d2:dd:17:b5:88:8a:8d:01:ed:12:9c:7e:24: 64:3b:d4:b5:b7:ff:89:45:25:fe:78:8b:8e:46:b7:4c:6f:4e: 81:6e:f1:2f:0f:79:af:fd:71:b7:b6:bf:6c:2e:25:1f:11:b8: 53:09:38:fb:5a:54:3f:64:3a:95:c6:22:e3:0e:43:2e:6c:da: fd:27:b1:c9:73:f9:4a:44:e9:b7:db:92:4b:0f:03:19:eb:03: 26:07:87:ef:f9:c9:bb:12:57:6c:10:9a:0a:1c:da:47:e2:75: 42:22:f9:c6:b2:2d:ae:2c:96:a5:21:11:b0:2f:50:f9:4c:fa: 88:43:cc:29:b7:9c:04:79:e2:67:f3:c8:02:07:11:fe:74:5c: b8:16:4c:ba:db:88:c4:8b:20:ea:5e:09:5f:ba:fd:99:39:da: 78:4d:5a:30:e4:d7:17:16:e1:e5:b2:45:6a:3e:de:c4:b1:74: 18:46:60:d7:85:3d:07:fa:d2:f3:dc:ba:be:15:33:b9:c2:2d: a2:06:49:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDP3w6f5dUoXtKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk MjgwMWI0Y2UtZjRhMi00ZWM2LWFhMzYtM2Q2NDQ3ODEyYmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksRoxB9c2MiLTm126e9vD5Penp8zC3e0eekd 0IBzwMYIw+5gnbgz+jaWgtTIJvMLhZIx+MfrxffZgbvObv8+ZyL9kzL/rf7ip/vf O5BU63glKFppphwPEE6MqcfHhABikZTVuSw7iWo5avIlYkuSPGrRZ8I7YovG5gMY rK+8RTxn5aPng20TkQ9c5blzOIQvw0jXQpSbZ7YimB0joqAcAYJz9yVlJAH/c18m sU763yZZdRS2kQzn5i1oMnzpJvSkzkV9R+YHhYOadRV2WnGfaQUMa/kfNgp/ZPwu 8zjEl/CXAr1SZGYiPB2gNfc0u+SX1qHLe3e9gEbAED7HBSiT9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG48eUeEhiM+udbUcEDqm6cy7dXQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjE0YzIzNDYtY2U4NC0z MDgyLTliZDEtZDUzYjY2YzZiMDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4LMxcNNHz7cBfx9IJ3fCuMhZzNXO+Ut6BsDUMYTRIOiWB/Y5U1KI4v 2Q05S+h6n0ZoUgiKZ2O+cPPv0t0XtYiKjQHtEpx+JGQ71LW3/4lFJf54i45Gt0xv ToFu8S8Pea/9cbe2v2wuJR8RuFMJOPtaVD9kOpXGIuMOQy5s2v0nsclz+UpE6bfb kksPAxnrAyYHh+/5ybsSV2wQmgoc2kfidUIi+cayLa4slqUhEbAvUPlM+ohDzCm3 nAR54mfzyAIHEf50XLgWTLrbiMSLIOpeCV+6/Zk52nhNWjDk1xcW4eWyRWo+3sSx dBhGYNeFPQf60vPcur4VM7nCLaIGSbc= -----END CERTIFICATE-----Generated at Wed Oct 22 06:54:37 2025 by rpki-client