$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa File: 1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa (raw, json) Hash identifier: DyG19vG5CRDlyh6/jjuF6Xt1jQO7QhR6rOxpLBDHWLw= Subject key identifier: 9E:7A:A0:AC:CB:05:4D:9E:A8:90:13:CB:FA:5C:CB:F9:3C:FF:59:36 Certificate issuer: /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Certificate serial: 010D0C9F4328584B2496D3E65F7E2898AC3CCD80 Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 172.86.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d3:e6:5f:7e:28:98:ac:3c:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=5e31eb9d-197d-4eaf-b5a9-7de59080ca08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4a:da:67:c0:21:a0:9b:6f:43:87:d8:fe:47: 0a:2c:40:2a:13:d1:dc:e1:b3:10:17:c3:3e:9a:35: a9:50:4b:4d:31:54:af:81:29:d7:31:52:6e:c6:7c: 44:57:35:f3:96:8d:b3:f9:9b:9f:d9:f5:99:d1:c8: 96:39:e4:21:88:a8:ab:4e:be:ba:2d:40:89:d2:08: 91:bd:ce:66:6a:8c:fa:ad:dd:14:a6:ae:36:78:a2: 53:98:ff:6a:59:5c:4d:72:94:c4:33:98:2f:6d:26: b1:e2:70:de:05:87:fe:1f:47:a2:fe:7f:8c:a7:d8: e5:5a:80:a5:e2:7f:08:ee:d1:70:3e:9b:29:95:52: a5:b0:ec:b1:df:bf:ec:64:a0:39:99:99:f7:3f:44: 4d:9f:6d:5a:42:6c:c0:bb:12:c2:81:72:ba:ec:22: 70:07:a8:9e:30:39:5f:e7:bf:c8:7e:01:98:1a:2b: c6:82:d9:78:58:29:b3:b5:68:16:56:49:88:9b:25: cb:6b:ec:bc:12:bd:4d:1a:17:ff:2c:25:78:07:27: 9c:ed:bf:f6:96:6d:ce:9e:bb:7c:e8:c6:36:f0:1d: 47:8a:61:99:6b:b2:d0:18:32:05:a3:75:b2:4a:48: 48:1e:9b:55:6c:f2:ff:a2:4f:bc:5e:61:5a:39:74: 00:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7A:A0:AC:CB:05:4D:9E:A8:90:13:CB:FA:5C:CB:F9:3C:FF:59:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/1de7e21b-7af3-3e84-89ee-3bc73d0de617.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl X509v3 Authority Key Identifier: keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer sbgp-ipAddrBlock: critical IPv4: 172.86.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:d7:8c:dd:0a:76:ee:7e:b7:5c:43:b6:72:68:0a:71:0a:34: 85:77:e3:7d:17:dc:87:6e:4f:2a:1c:b9:3d:c9:a1:a0:40:4d: eb:9d:1d:8d:ad:14:24:41:ac:46:14:ee:b9:86:d8:5e:2e:78: 36:4e:c7:68:e5:8f:6f:47:f6:5d:16:d4:6b:08:0a:93:da:f7: 48:d7:5f:23:fe:24:ee:4e:d4:51:3e:9a:3b:a9:19:4a:e4:a8: 2f:84:75:13:f3:39:62:5c:67:64:c6:ea:d3:da:e7:f4:a6:e3: 3d:90:dc:71:cf:fe:72:07:c9:a5:58:05:43:d7:72:4a:ee:76: ea:9b:1d:fe:ce:23:e3:ee:ef:2b:bf:ac:8e:fe:57:87:ab:08: 53:88:7b:9e:ab:0f:14:c1:a3:e6:b9:59:c4:7e:25:20:59:18: 06:1c:47:dc:80:e4:7b:f9:08:22:49:2b:16:32:55:55:e3:88: 34:96:1b:d9:fe:e2:79:bb:79:80:f7:ff:b8:f8:38:7d:2d:b3: ff:00:18:bf:e1:55:20:bc:dc:6e:c9:31:e9:92:f2:a6:5b:8a: 36:5f:b6:be:c3:36:33:0b:8c:ca:db:e8:dd:8e:99:66:c2:cc: 9a:8d:b2:27:a3:a6:af:3c:e2:4a:17:6b:b3:1f:e3:93:b0:10: a3:2c:1e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltPmX34omKw8zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRjMzJjZGUtNzY5My00ZDEwLWFlMWUtOGI4ZTlkMzYz MDc0MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk NWUzMWViOWQtMTk3ZC00ZWFmLWI1YTktN2RlNTkwODBjYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUraZ8AhoJtvQ4fY/kcKLEAqE9Hc4bMQF8M+ mjWpUEtNMVSvgSnXMVJuxnxEVzXzlo2z+Zuf2fWZ0ciWOeQhiKirTr66LUCJ0giR vc5maoz6rd0Upq42eKJTmP9qWVxNcpTEM5gvbSax4nDeBYf+H0ei/n+Mp9jlWoCl 4n8I7tFwPpsplVKlsOyx37/sZKA5mZn3P0RNn21aQmzAuxLCgXK67CJwB6ieMDlf 57/IfgGYGivGgtl4WCmztWgWVkmImyXLa+y8Er1NGhf/LCV4Byec7b/2lm3Onrt8 6MY28B1HimGZa7LQGDIFo3WySkhIHptVbPL/ok+8XmFaOXQAHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ56oKzLBU2eqJATy/pcy/k8/1k2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMz MmNkZS03NjkzLTRkMTAtYWUxZS04YjhlOWQzNjMwNzQvMWRlN2UyMWItN2FmMy0z ZTg0LTg5ZWUtM2JjNzNkMGRlNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRjMzJjZGUtNzY5My00ZDEwLWFl MWUtOGI4ZTlkMzYzMDc0L2U0YzMyY2RlLTc2OTMtNGQxMC1hZTFlLThiOGU5ZDM2 MzA3NC5jcmwwHwYDVR0jBBgwFoAUkjFMWL/PeT5XBCYBM6ApayuFfnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMzMmNkZS03NjkzLTRkMTAtYWUxZS04Yjhl OWQzNjMwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbXjN0Kdu5+t1xDtnJoCnEKNIV3430X3IduTyocuT3JoaBATeudHY2t FCRBrEYU7rmG2F4ueDZOx2jlj29H9l0W1GsICpPa90jXXyP+JO5O1FE+mjupGUrk qC+EdRPzOWJcZ2TG6tPa5/Sm4z2Q3HHP/nIHyaVYBUPXckruduqbHf7OI+Pu7yu/ rI7+V4erCFOIe56rDxTBo+a5WcR+JSBZGAYcR9yA5Hv5CCJJKxYyVVXjiDSWG9n+ 4nm7eYD3/7j4OH0ts/8AGL/hVSC83G7JMemS8qZbijZftr7DNjMLjMrb6N2OmWbC zJqNsiejpq884koXa7Mf45OwEKMsHqg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:31:55 2025 by rpki-client