$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb966b9e-da4a-3378-a555-e5e78d02ddc8.roa File: fb966b9e-da4a-3378-a555-e5e78d02ddc8.roa (raw, json) Hash identifier: Ztzt62EdO334gVkbeNfA7hCqlrCxQW0Ten2Lz2Ag8qw= Subject key identifier: AE:B9:7F:7F:B1:71:FD:65:A5:2E:5F:0F:C2:E9:3D:E5:D6:B4:F4:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B970CF7DBF7EC427560B0FE80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb966b9e-da4a-3378-a555-e5e78d02ddc8.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 36183 IP address blocks: 172.224.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f7:db:f7:ec:42:75:60:b0:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=bf04b263-52ee-4277-bdb2-e23e074949c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:05:ea:bf:c0:cd:04:8a:12:fa:51:9c:bf: d6:e8:21:49:b0:50:84:50:6b:0c:ae:04:f2:03:7b: 33:5e:f4:21:bd:51:3f:1a:4d:38:75:f3:2f:2d:77: 25:8d:b7:0d:27:80:ba:4b:16:89:97:d1:1e:68:87: 84:d7:f8:17:4d:00:3f:23:cf:7f:d9:7b:54:c0:c0: 27:3b:b5:44:db:b7:ac:3c:8c:f6:1f:aa:bf:f8:4d: 23:4c:61:7d:ed:47:bc:7a:26:7f:9a:86:9d:c2:74: 4d:6e:47:ee:7b:85:f1:54:c0:74:62:1b:ae:92:4d: e5:ad:75:84:43:32:7f:b2:f1:4f:95:08:bb:42:3f: 91:68:87:26:10:24:09:25:dd:cc:8e:e5:3d:a4:3c: 3c:33:d9:10:d7:77:e5:f5:bc:00:11:3e:02:63:eb: 34:7d:42:48:ae:10:85:5d:5b:a5:d2:35:b3:10:6e: 46:aa:00:70:54:e0:3d:27:9a:39:f5:79:6f:a0:6b: 28:7c:7c:e0:b4:2d:37:ed:a2:a1:5a:af:f5:4e:79: 63:06:8c:bb:da:5c:2c:04:ee:98:3c:ad:16:bc:2d: 04:58:43:f6:18:8a:8e:83:49:c8:67:81:ca:44:85: 14:24:01:91:06:04:f8:34:04:c0:69:55:1e:54:80: 0a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B9:7F:7F:B1:71:FD:65:A5:2E:5F:0F:C2:E9:3D:E5:D6:B4:F4:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb966b9e-da4a-3378-a555-e5e78d02ddc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2b:ed:5d:1c:c1:f3:b1:c7:7f:3f:8a:d5:ed:88:66:18:b6: 4a:64:76:e6:d5:f3:65:d6:4f:76:24:7f:41:78:42:f4:78:07: 85:66:81:c6:f5:84:f0:67:9e:04:d8:15:1c:aa:cd:8e:d2:45: fc:19:a2:f7:cb:9b:40:51:11:72:e5:35:bb:53:38:ac:01:fd: 90:40:9a:4a:63:f2:b7:24:06:a4:6d:60:21:e4:0b:2e:03:8d: b6:38:c5:25:7d:3f:02:78:e3:c2:e8:c1:35:77:55:76:4b:da: 31:80:36:1d:4f:24:d7:91:66:6a:65:8b:e0:cf:a4:9f:71:c5: d4:37:43:00:96:b6:33:b2:4f:63:73:03:95:02:f4:95:fb:8f: 42:4f:78:58:59:e8:22:66:42:ae:46:86:4a:06:50:8f:50:f5: f0:7c:a1:66:9d:36:36:5f:e1:6f:8a:aa:d8:8b:f6:45:6e:c0: cf:80:b1:d4:3d:51:d2:e3:5a:a1:b3:61:3c:30:b6:0d:4d:29: 98:b6:c7:78:18:a0:f7:a3:36:fd:04:5c:d8:5c:8d:11:1d:8e: 64:5a:e1:71:35:46:de:76:d0:d0:b7:4f:4f:5b:76:1c:d5:65: fc:76:63:09:04:d8:48:c6:c5:7d:c5:c7:a3:40:79:13:d8:ba: ea:d2:55:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPfb9+xCdWCw/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk YmYwNGIyNjMtNTJlZS00Mjc3LWJkYjItZTIzZTA3NDk0OWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6sF6r/AzQSKEvpRnL/W6CFJsFCEUGsMrgTy A3szXvQhvVE/Gk04dfMvLXcljbcNJ4C6SxaJl9EeaIeE1/gXTQA/I89/2XtUwMAn O7VE27esPIz2H6q/+E0jTGF97Ue8eiZ/moadwnRNbkfue4XxVMB0Yhuukk3lrXWE QzJ/svFPlQi7Qj+RaIcmECQJJd3MjuU9pDw8M9kQ13fl9bwAET4CY+s0fUJIrhCF XVul0jWzEG5GqgBwVOA9J5o59XlvoGsofHzgtC037aKhWq/1TnljBoy72lwsBO6Y PK0WvC0EWEP2GIqOg0nIZ4HKRIUUJAGRBgT4NATAaVUeVIAK1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK65f3+xcf1lpS5fD8LpPeXWtPQPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmI5NjZiOWUtZGE0YS0z Mzc4LWE1NTUtZTVlNzhkMDJkZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsr7V0cwfOxx38/itXtiGYYtkpkdubV82XWT3Ykf0F4QvR4B4Vmgcb1 hPBnngTYFRyqzY7SRfwZovfLm0BREXLlNbtTOKwB/ZBAmkpj8rckBqRtYCHkCy4D jbY4xSV9PwJ448LowTV3VXZL2jGANh1PJNeRZmpli+DPpJ9xxdQ3QwCWtjOyT2Nz A5UC9JX7j0JPeFhZ6CJmQq5GhkoGUI9Q9fB8oWadNjZf4W+KqtiL9kVuwM+AsdQ9 UdLjWqGzYTwwtg1NKZi2x3gYoPejNv0EXNhcjREdjmRa4XE1Rt520NC3T09bdhzV Zfx2YwkE2EjGxX3Fx6NAeRPYuurSVdw= -----END CERTIFICATE-----Generated at Wed Oct 22 04:38:22 2025 by rpki-client