$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5829486-fe0d-303c-a36d-fd0d32e7f5a1.roa File: f5829486-fe0d-303c-a36d-fd0d32e7f5a1.roa (raw, json) Hash identifier: UX75ji5PDDCp5x7mXwXM5zx63cruVuZS1FIy45Ak7Y8= Subject key identifier: 94:4F:06:35:96:B5:76:2E:F8:7F:98:7C:08:45:DF:43:0F:25:9B:90 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B970CFA5FFF2697F9F731D480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5829486-fe0d-303c-a36d-fd0d32e7f5a1.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 36183 IP address blocks: 172.224.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:fa:5f:ff:26:97:f9:f7:31:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=babaa443-6dda-4295-9ed8-d451c9ecedf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:13:e1:32:47:f2:df:f2:0f:86:71:7b:62:7e: 98:cd:29:27:db:ea:1b:15:56:91:2b:d4:b4:38:dc: 27:52:ba:89:6b:65:ab:af:e4:6e:dd:7b:cd:2a:91: f6:c3:b5:87:77:20:0c:0d:cc:4d:9a:02:5d:20:13: f4:df:59:7b:d7:f8:23:6e:4e:8b:88:72:df:d5:76: 04:90:59:24:e3:e8:8d:2f:06:91:0b:e4:5a:3b:dc: f8:79:92:c2:14:e8:4f:b5:14:a1:18:59:c6:f8:58: 8b:aa:23:1b:00:ea:3c:6e:dc:10:d0:35:ce:56:a3: c0:5a:3b:ef:57:3a:90:4c:aa:4f:77:28:a5:c0:91: b7:b7:5d:b1:6a:ba:6a:74:21:ec:56:2b:39:8f:e2: 2b:09:d1:6a:c5:39:e3:12:f9:be:33:74:68:94:03: aa:f9:30:9b:22:5f:82:fa:40:a3:73:87:58:6a:73: 83:ea:f0:5b:fa:86:28:92:a1:f8:9b:6f:01:3a:6e: e8:bf:73:b6:a0:95:83:38:a0:ad:bb:68:e4:3f:51: dd:35:93:4a:e9:45:97:1c:fc:a1:4d:8d:3a:f8:a8: bd:15:fe:d3:d5:b8:9a:1e:9b:f4:64:34:63:3e:33: e3:a3:62:1f:ed:10:aa:bf:bf:63:31:a6:b0:5d:62: 03:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:4F:06:35:96:B5:76:2E:F8:7F:98:7C:08:45:DF:43:0F:25:9B:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5829486-fe0d-303c-a36d-fd0d32e7f5a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ab:68:7c:bb:1d:14:17:3a:a1:21:bd:aa:2d:4e:cd:07:2b: 66:12:39:9c:10:25:7a:c5:57:77:2c:6b:9a:2c:3a:7f:9d:d1: 67:06:bb:44:80:8d:29:43:4f:20:0f:7e:d4:7c:5f:85:36:16: 0b:54:62:5b:19:c1:d4:b5:5e:37:29:03:d2:2e:e0:31:94:04: 09:0c:19:59:54:8c:dd:f7:12:3b:1f:6c:97:bd:16:44:40:bf: 13:13:a4:94:b6:f2:bd:87:43:6c:20:06:b0:1e:7b:38:5b:73: 4f:68:16:14:9d:5b:d7:42:20:e4:08:65:b3:fb:33:db:b8:3f: cb:da:c9:5f:b1:43:db:58:2e:66:eb:4a:67:5f:c3:c5:d9:a8: e3:28:4f:e1:48:91:9b:51:12:18:3a:75:f8:f2:45:7c:4e:79: 4f:13:66:e6:9a:ec:78:0b:21:63:6f:d4:03:85:dd:c1:ed:a5: 49:82:bd:cd:cb:49:13:af:be:61:47:be:f3:d3:4d:0f:87:c4: 3d:90:b5:72:76:1b:01:a8:e0:c3:85:be:60:e0:fb:a7:23:c0: 6a:c4:e6:e9:38:83:fe:9c:0c:6e:6f:13:18:4e:fa:7b:df:0a: fb:cc:bd:62:28:a0:32:9e:b7:3e:d2:f8:09:e0:e1:25:8f:e0: 3b:ca:43:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPpf/yaX+fcx1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YmFiYWE0NDMtNmRkYS00Mjk1LTllZDgtZDQ1MWM5ZWNlZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxPhMkfy3/IPhnF7Yn6YzSkn2+obFVaRK9S0 ONwnUrqJa2Wrr+Ru3XvNKpH2w7WHdyAMDcxNmgJdIBP031l71/gjbk6LiHLf1XYE kFkk4+iNLwaRC+RaO9z4eZLCFOhPtRShGFnG+FiLqiMbAOo8btwQ0DXOVqPAWjvv VzqQTKpPdyilwJG3t12xarpqdCHsVis5j+IrCdFqxTnjEvm+M3RolAOq+TCbIl+C +kCjc4dYanOD6vBb+oYokqH4m28BOm7ov3O2oJWDOKCtu2jkP1HdNZNK6UWXHPyh TY06+Ki9Ff7T1biaHpv0ZDRjPjPjo2If7RCqv79jMaawXWIDbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRPBjWWtXYu+H+YfAhF30MPJZuQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjU4Mjk0ODYtZmUwZC0z MDNjLWEzNmQtZmQwZDMyZTdmNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOAqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2raHy7HRQXOqEhvaotTs0HK2YSOZwQJXrFV3csa5osOn+d0WcGu0SA jSlDTyAPftR8X4U2FgtUYlsZwdS1XjcpA9Iu4DGUBAkMGVlUjN33EjsfbJe9FkRA vxMTpJS28r2HQ2wgBrAeezhbc09oFhSdW9dCIOQIZbP7M9u4P8vayV+xQ9tYLmbr Smdfw8XZqOMoT+FIkZtREhg6dfjyRXxOeU8TZuaa7HgLIWNv1AOF3cHtpUmCvc3L SROvvmFHvvPTTQ+HxD2QtXJ2GwGo4MOFvmDg+6cjwGrE5uk4g/6cDG5vExhO+nvf CvvMvWIooDKetz7S+Ang4SWP4DvKQ0Q= -----END CERTIFICATE-----Generated at Wed Oct 22 00:08:50 2025 by rpki-client