$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/004eaf1d-8f6b-3208-8a9a-03774a6f2dbd.roa File: 004eaf1d-8f6b-3208-8a9a-03774a6f2dbd.roa (raw, json) Hash identifier: T3B0/R4kWaZ1HPd5YfgBp03JvbptV6gXUGGY2brrXjE= Subject key identifier: 10:AF:25:EE:2A:ED:7C:46:26:4E:E3:0F:AF:E9:DE:23:22:6F:44:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7DECB2061A9E7C0C5E9C9F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/004eaf1d-8f6b-3208-8a9a-03774a6f2dbd.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b2:06:1a:9e:7c:0c:5e:9c:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=eb6fd391-73fe-4587-8002-386fcdcbbfc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d9:4c:40:62:3e:50:aa:64:e9:f2:46:97:dd: 83:64:9f:63:ef:e7:37:25:3f:fb:46:01:34:49:7c: 31:f9:25:28:5f:79:44:b8:75:eb:8e:aa:70:f2:ca: 6f:69:4d:f4:1c:b1:e3:13:56:5c:40:65:c3:89:d1: 49:0d:a9:40:80:b4:c6:16:e0:d6:d1:58:63:e0:1a: 0c:48:1b:5a:2a:0b:33:5e:4c:7d:4a:b6:a7:4a:94: 70:d5:20:59:4a:28:6e:f2:61:6e:06:9f:b7:56:74: c1:10:35:ac:89:c7:f1:2d:3c:72:3d:da:c1:07:97: db:3c:3d:dd:4f:31:01:0d:ad:e2:b8:ac:97:c5:b7: 9b:36:4e:92:a1:62:a7:d9:cb:92:c4:1b:5c:83:0b: 50:82:e2:35:98:78:f7:9a:ad:68:04:b3:25:14:64: 20:08:e0:65:2f:2e:6e:50:2e:21:79:86:6c:a9:24: 94:cc:bf:75:3d:e1:e2:7e:ec:d9:04:18:5b:75:64: 42:19:e1:c7:fa:35:07:63:90:17:5f:21:a2:d6:e7: 79:1e:03:32:74:fe:9f:eb:e0:b6:f7:c7:34:d2:4d: 8a:c3:e5:11:71:fd:77:99:28:1a:08:5f:c4:d8:38: 3e:33:ea:c3:0e:68:39:79:1d:0d:61:ee:27:53:7b: 45:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AF:25:EE:2A:ED:7C:46:26:4E:E3:0F:AF:E9:DE:23:22:6F:44:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/004eaf1d-8f6b-3208-8a9a-03774a6f2dbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:92:53:02:d2:f8:52:0b:24:94:e7:75:ff:90:f8:06:00:89: 79:74:db:7f:cc:4a:b3:d8:0a:aa:7e:16:e7:08:83:10:62:1e: 61:23:da:c7:13:85:4f:63:56:8b:e2:44:c4:a1:b7:4e:f3:8c: 5a:04:bc:8f:5c:db:97:84:0e:99:b7:f9:e0:5b:9f:91:96:e5: e2:34:2a:29:55:80:5b:a0:d7:ed:4d:16:af:7b:4a:e1:df:d7: bd:e0:84:03:ad:6c:6e:c6:ac:f6:a2:9d:ff:85:f2:96:2e:7e: fc:d0:e3:b5:44:a6:b6:f4:94:c8:b1:d3:94:33:73:93:bf:d6: 98:21:6a:75:ab:b1:f3:6b:8f:43:89:72:d4:ac:0b:0c:94:fc: 04:ef:ed:b1:cd:83:e4:ce:c4:45:3e:4a:0d:82:60:7f:d3:cd: dc:43:51:9e:9d:ec:af:31:69:03:bd:de:d7:2d:29:00:d1:29: 91:a3:fa:4c:59:c9:c9:12:63:95:f1:13:0d:cf:1f:44:aa:46: 16:68:ee:e2:48:11:06:13:b4:90:0e:93:86:37:d4:dd:af:6b: 86:6e:6b:bd:d1:d7:f8:67:f2:6c:d7:03:c9:c0:a3:fa:ed:c5: 4c:80:0c:21:2d:d4:98:c2:5a:8d:92:eb:b5:9d:87:22:4d:23: 8c:36:34:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LIGGp58DF6cnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZWI2ZmQzOTEtNzNmZS00NTg3LTgwMDItMzg2ZmNkY2JiZmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9lMQGI+UKpk6fJGl92DZJ9j7+c3JT/7RgE0 SXwx+SUoX3lEuHXrjqpw8spvaU30HLHjE1ZcQGXDidFJDalAgLTGFuDW0Vhj4BoM SBtaKgszXkx9SranSpRw1SBZSihu8mFuBp+3VnTBEDWsicfxLTxyPdrBB5fbPD3d TzEBDa3iuKyXxbebNk6SoWKn2cuSxBtcgwtQguI1mHj3mq1oBLMlFGQgCOBlLy5u UC4heYZsqSSUzL91PeHifuzZBBhbdWRCGeHH+jUHY5AXXyGi1ud5HgMydP6f6+C2 98c00k2Kw+URcf13mSgaCF/E2Dg+M+rDDmg5eR0NYe4nU3tFfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBCvJe4q7XxGJk7jD6/p3iMib0RCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDA0ZWFmMWQtOGY2Yi0z MjA4LThhOWEtMDM3NzRhNmYyZGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOESMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKSUwLS+FILJJTndf+Q+AYAiXl023/MSrPYCqp+FucIgxBiHmEj2scT hU9jVoviRMSht07zjFoEvI9c25eEDpm3+eBbn5GW5eI0KilVgFug1+1NFq97SuHf 173ghAOtbG7GrPainf+F8pYufvzQ47VEprb0lMix05Qzc5O/1pghanWrsfNrj0OJ ctSsCwyU/ATv7bHNg+TOxEU+Sg2CYH/TzdxDUZ6d7K8xaQO93tctKQDRKZGj+kxZ yckSY5XxEw3PH0SqRhZo7uJIEQYTtJAOk4Y31N2va4Zua73R1/hn8mzXA8nAo/rt xUyADCEt1JjCWo2S67WdhyJNI4w2NCw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:19 2025 by rpki-client