$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bed431d5-e318-30ac-a137-89150fbcc189.roa File: bed431d5-e318-30ac-a137-89150fbcc189.roa (raw, json) Hash identifier: An87v2J9bw18RcaW9kb8FqcnxV2o03yvxW9yWAXCjr0= Subject key identifier: 94:3A:C5:60:E4:33:90:98:F3:18:9D:FB:99:E8:2E:CF:0E:1A:04:E6 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B970CF98EB8628CCD2646FB98 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bed431d5-e318-30ac-a137-89150fbcc189.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 36183 IP address blocks: 172.224.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f9:8e:b8:62:8c:cd:26:46:fb:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=4e8dd554-8ded-4d5b-b9dd-290d0086823a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fc:77:bc:f6:ea:a7:88:29:81:0e:40:00:c6: b8:25:2a:29:ae:a3:21:31:99:14:90:f4:23:18:61: d2:05:9e:c2:47:d4:6c:47:ba:72:c6:18:00:cc:7e: f0:59:5d:79:6e:b0:34:ef:37:6b:4d:1c:ac:bb:a7: 5d:0e:9f:75:79:d0:a6:9e:31:e3:a3:09:73:ff:c0: f0:7f:6a:99:69:04:14:61:4e:80:63:e3:5f:41:fa: bc:90:8b:a3:e2:7a:16:c0:4c:ab:0e:0f:d2:c8:f7: fd:8b:9b:13:43:46:32:70:a6:d3:48:a8:32:e0:66: f0:a8:7a:4a:53:68:df:88:33:5e:5e:d2:3d:0e:8e: 8c:cb:56:23:58:16:b2:9b:06:b2:63:8d:43:b0:16: ce:b1:cd:09:3d:18:fe:fa:b4:cd:a1:76:bc:a6:4a: b1:9f:da:ec:b3:56:e0:18:fd:e4:a1:75:07:31:ed: 45:c2:75:e7:7d:96:29:25:75:36:85:92:75:35:71: b6:84:65:91:f2:3c:8b:59:8f:5f:cb:fe:69:56:e5: d2:d4:4a:c3:4f:55:a2:78:79:e0:ee:db:ad:5d:2b: 2c:94:ef:93:3c:90:8f:16:d8:73:02:16:28:5d:28: 81:6f:03:ac:9a:bc:b0:10:44:c1:01:4d:e3:45:ae: 6a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:3A:C5:60:E4:33:90:98:F3:18:9D:FB:99:E8:2E:CF:0E:1A:04:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bed431d5-e318-30ac-a137-89150fbcc189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:6e:fc:ed:11:e8:bf:ad:c6:bc:ef:e4:ea:91:d8:48:3e:e3: 26:b4:87:91:5a:75:f2:85:25:55:eb:50:74:aa:da:9b:c1:b2: b0:62:d6:d8:b2:67:f5:25:69:24:47:b6:48:6d:fe:d0:9b:74: a2:c3:b8:6f:18:ba:fc:16:df:cd:3c:26:90:32:77:2e:67:31: 29:37:b0:dc:6c:c0:b3:cd:3f:f8:95:0f:77:0c:af:08:73:9b: 74:55:25:4f:73:d1:70:0a:31:59:de:21:87:51:3d:a7:23:81: a6:9c:e5:6b:56:03:9b:c0:0f:58:c7:db:fc:f6:e2:92:a1:e1: ff:25:13:08:2b:98:b4:26:c5:ad:65:9e:22:fb:53:f0:dc:53: 6a:b1:44:3e:e4:fd:7f:de:3f:33:77:00:b7:eb:f0:34:1e:95: 5e:fc:2b:a5:14:fc:25:e1:5f:39:52:83:9f:8c:ae:1b:21:5d: 32:b8:1b:63:df:aa:7c:bf:aa:48:4b:d9:63:ac:ec:b8:21:c8: bb:ac:e0:78:e2:e5:b4:a5:c5:8d:c0:fd:27:1b:0b:a8:77:c0: 15:54:c7:2c:e9:e3:8a:a4:e5:8f:35:88:b0:ed:d0:15:97:87: 7a:c9:ae:b4:9a:a0:f4:c3:4b:b2:83:8c:77:34:c2:d2:5d:87: 13:5b:24:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPmOuGKMzSZG+5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NGU4ZGQ1NTQtOGRlZC00ZDViLWI5ZGQtMjkwZDAwODY4MjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfx3vPbqp4gpgQ5AAMa4JSoprqMhMZkUkPQj GGHSBZ7CR9RsR7pyxhgAzH7wWV15brA07zdrTRysu6ddDp91edCmnjHjowlz/8Dw f2qZaQQUYU6AY+NfQfq8kIuj4noWwEyrDg/SyPf9i5sTQ0YycKbTSKgy4GbwqHpK U2jfiDNeXtI9Do6My1YjWBaymwayY41DsBbOsc0JPRj++rTNoXa8pkqxn9rss1bg GP3koXUHMe1FwnXnfZYpJXU2hZJ1NXG2hGWR8jyLWY9fy/5pVuXS1ErDT1WieHng 7tutXSsslO+TPJCPFthzAhYoXSiBbwOsmrywEETBAU3jRa5qwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQ6xWDkM5CY8xid+5noLs8OGgTmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmVkNDMxZDUtZTMxOC0z MGFjLWExMzctODkxNTBmYmNjMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRu/O0R6L+txrzv5OqR2Eg+4ya0h5FadfKFJVXrUHSq2pvBsrBi1tiy Z/UlaSRHtkht/tCbdKLDuG8YuvwW3808JpAydy5nMSk3sNxswLPNP/iVD3cMrwhz m3RVJU9z0XAKMVneIYdRPacjgaac5WtWA5vAD1jH2/z24pKh4f8lEwgrmLQmxa1l niL7U/DcU2qxRD7k/X/ePzN3ALfr8DQelV78K6UU/CXhXzlSg5+MrhshXTK4G2Pf qny/qkhL2WOs7LghyLus4Hji5bSlxY3A/ScbC6h3wBVUxyzp44qk5Y81iLDt0BWX h3rJrrSaoPTDS7KDjHc0wtJdhxNbJAU= -----END CERTIFICATE-----Generated at Wed Oct 22 02:50:53 2025 by rpki-client