$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e30e365f-7059-338b-a386-05d6c191965e.roa File: e30e365f-7059-338b-a386-05d6c191965e.roa (raw, json) Hash identifier: IjFKDu8/A9kC0HIp5jJ2ThLGyLGMW6KhK4sBn+n4LzM= Subject key identifier: 07:35:34:96:AB:08:F7:88:E7:C1:ED:EE:5E:C7:C9:09:A6:9B:E0:F8 Certificate issuer: /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Certificate serial: 010D0C9F4328584B2496CC7D050E715F92117E00 Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e30e365f-7059-338b-a386-05d6c191965e.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 172.86.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:cc:7d:05:0e:71:5f:92:11:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=a02da9e7-8222-4060-ba90-36896bda9f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b3:b5:33:12:02:75:48:fd:cb:0e:fb:a7:43: 70:d3:1d:80:6b:d0:65:01:7f:cf:aa:4b:5b:9d:13: 1b:df:26:21:7a:8f:2c:fc:2a:27:91:47:05:d6:4c: bc:5c:f7:cf:76:f3:62:2c:03:d6:ff:66:1e:3e:3b: fa:ec:ee:68:ab:01:73:54:e1:b6:aa:31:62:c2:c2: da:f7:b8:4c:e5:de:82:0a:6a:6f:38:e8:3c:b9:09: 04:e9:d7:67:3c:72:25:4e:e7:1a:d6:3b:2e:f7:0c: 64:69:07:39:94:41:fe:e0:d8:ce:0c:7e:29:ed:2b: 5f:e6:dd:09:12:4f:bd:54:04:33:40:06:42:fc:58: 16:65:a9:30:b5:75:b5:82:5a:ed:9e:02:27:b4:6a: 02:60:52:dc:38:3d:b5:6c:90:cc:7e:84:46:a7:38: 78:9e:89:a7:4c:95:b1:ac:67:a9:ad:29:1a:3a:49: d5:13:44:6b:93:ca:a8:f5:9f:4f:d6:89:cb:e6:ca: 84:2c:d7:43:91:f7:81:e5:7c:e4:6b:0c:3f:30:3f: 39:57:b7:d0:61:ef:8f:5a:b8:87:a6:4a:06:f1:81: 65:6a:d5:c2:e5:6f:a3:4d:36:5c:8c:c4:db:ee:96: 14:1a:e6:4c:fd:ba:b9:18:3f:de:7e:20:90:e2:76: ec:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:35:34:96:AB:08:F7:88:E7:C1:ED:EE:5E:C7:C9:09:A6:9B:E0:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e30e365f-7059-338b-a386-05d6c191965e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl X509v3 Authority Key Identifier: keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer sbgp-ipAddrBlock: critical IPv4: 172.86.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:2b:ff:bb:34:0d:fd:7f:35:2c:33:ea:5e:b7:86:96:bd:1d: e5:84:32:56:d8:1b:35:58:52:7d:c6:a2:eb:09:6b:9a:d9:e6: b9:bb:31:61:4b:8e:40:06:3a:db:d3:82:aa:b9:22:5b:b6:ea: 69:3a:e1:e4:39:f5:fa:d8:8d:c3:05:6f:34:6c:6b:74:3d:27: bb:4d:a5:e5:5f:c4:b6:58:0e:d0:19:25:40:42:6f:22:cd:1d: 59:04:b2:be:bf:37:ed:fe:00:a4:39:65:5b:6f:ec:e0:db:52: cf:44:f5:65:79:2a:fa:5b:0c:64:fb:fd:ed:64:36:90:81:40: c3:4a:c7:59:85:73:f8:e0:d7:84:1a:29:6b:52:b5:48:49:34: 56:82:37:80:46:9a:f3:aa:ad:c6:db:3b:17:c4:0e:e4:5a:8e: 80:af:01:62:c4:7e:42:73:96:c3:ef:19:57:8b:eb:79:1d:a6: 4e:d9:bd:d3:8c:27:be:63:55:9a:9d:00:e5:c3:13:ec:71:7f: b1:48:da:f6:1b:46:e9:17:95:db:bc:e1:a1:f7:b3:d7:51:6d: 63:32:4b:0e:2a:5e:00:ca:53:76:e4:de:0a:a6:ee:35:1d:60: 39:10:6b:4e:57:24:98:36:9d:ec:b0:86:61:e0:ee:ff:8d:73: 9a:7b:ab:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsx9BQ5xX5IRfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRjMzJjZGUtNzY5My00ZDEwLWFlMWUtOGI4ZTlkMzYz MDc0MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk YTAyZGE5ZTctODIyMi00MDYwLWJhOTAtMzY4OTZiZGE5ZjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7O1MxICdUj9yw77p0Nw0x2Aa9BlAX/Pqktb nRMb3yYheo8s/ConkUcF1ky8XPfPdvNiLAPW/2YePjv67O5oqwFzVOG2qjFiwsLa 97hM5d6CCmpvOOg8uQkE6ddnPHIlTuca1jsu9wxkaQc5lEH+4NjODH4p7Stf5t0J Ek+9VAQzQAZC/FgWZakwtXW1glrtngIntGoCYFLcOD21bJDMfoRGpzh4nomnTJWx rGeprSkaOknVE0Rrk8qo9Z9P1onL5sqELNdDkfeB5Xzkaww/MD85V7fQYe+PWriH pkoG8YFlatXC5W+jTTZcjMTb7pYUGuZM/bq5GD/efiCQ4nbsrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAc1NJarCPeI58Ht7l7HyQmmm+D4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMz MmNkZS03NjkzLTRkMTAtYWUxZS04YjhlOWQzNjMwNzQvZTMwZTM2NWYtNzA1OS0z MzhiLWEzODYtMDVkNmMxOTE5NjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRjMzJjZGUtNzY5My00ZDEwLWFl MWUtOGI4ZTlkMzYzMDc0L2U0YzMyY2RlLTc2OTMtNGQxMC1hZTFlLThiOGU5ZDM2 MzA3NC5jcmwwHwYDVR0jBBgwFoAUkjFMWL/PeT5XBCYBM6ApayuFfnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMzMmNkZS03NjkzLTRkMTAtYWUxZS04Yjhl OWQzNjMwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADcr/7s0Df1/NSwz6l63hpa9HeWEMlbYGzVYUn3GousJa5rZ5rm7MWFL jkAGOtvTgqq5Ilu26mk64eQ59frYjcMFbzRsa3Q9J7tNpeVfxLZYDtAZJUBCbyLN HVkEsr6/N+3+AKQ5ZVtv7ODbUs9E9WV5KvpbDGT7/e1kNpCBQMNKx1mFc/jg14Qa KWtStUhJNFaCN4BGmvOqrcbbOxfEDuRajoCvAWLEfkJzlsPvGVeL63kdpk7ZvdOM J75jVZqdAOXDE+xxf7FI2vYbRukXldu84aH3s9dRbWMySw4qXgDKU3bk3gqm7jUd YDkQa05XJJg2neywhmHg7v+Nc5p7q8s= -----END CERTIFICATE-----Generated at Mon Oct 20 13:52:27 2025 by rpki-client