$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01e3175c-9a98-3f59-966b-eb025d784ae7.roa File: 01e3175c-9a98-3f59-966b-eb025d784ae7.roa (raw, json) Hash identifier: u7seTM8cUOYMPjdPp5hQ4qZ2Ishw8NrTUEl1KtSPPhg= Subject key identifier: 03:E2:D6:25:94:D5:1F:E7:24:05:08:FD:16:0A:AC:CD:2F:A8:EB:39 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7DECB1CD2F3B7F16F82864A0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01e3175c-9a98-3f59-966b-eb025d784ae7.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b1:cd:2f:3b:7f:16:f8:28:64:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=8f5caef0-b8ea-47ed-bd93-b8ba80bca347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d0:a9:48:27:5b:dc:72:a2:34:17:bb:e5:b1: 6b:b5:ad:da:33:dd:91:bb:d5:82:3c:6e:ab:bd:24: f6:87:c5:d5:60:4c:0b:02:27:59:d1:0c:dc:cf:0a: c0:ae:e2:c9:34:65:73:31:7c:42:98:4c:e6:4a:9b: 81:21:c6:b4:e9:00:d0:76:28:49:30:e6:b9:67:51: fb:bf:72:54:55:61:ed:20:a3:c5:f1:af:75:4b:d7: 60:e8:fc:f9:2d:8e:dd:a3:31:0b:be:3f:07:9b:b9: 30:3a:f9:fb:48:f0:6c:9b:c7:81:e9:1f:e3:f9:30: 0b:04:88:2b:65:eb:32:2e:7c:1f:11:c6:22:ff:c5: 81:de:1f:eb:01:ed:89:96:5f:ce:b6:f8:69:62:68: f6:c0:d8:bf:49:ec:e7:ee:25:d9:ad:d2:d4:9a:ae: a2:b5:d4:09:ff:c0:87:59:2f:a7:7d:f2:53:b4:80: 86:33:33:50:93:c4:07:79:e4:3e:6e:2a:13:da:35: f3:17:1a:b4:d7:06:e9:10:fc:9f:3e:6b:3c:37:71: fc:2d:ed:eb:49:51:c8:11:3b:f7:d7:ba:ce:e4:6b: ca:2f:2b:4d:8e:b4:c3:d3:e7:02:37:cb:e5:58:2c: 6a:f1:d3:8e:72:2d:4c:90:c8:74:80:17:1f:68:8f: 58:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E2:D6:25:94:D5:1F:E7:24:05:08:FD:16:0A:AC:CD:2F:A8:EB:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01e3175c-9a98-3f59-966b-eb025d784ae7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:bc:cc:99:f9:a7:72:85:1b:a6:4d:61:92:01:20:a8:6c:2d: a4:6b:5d:74:91:34:d1:a3:75:bd:5f:38:b6:73:8a:4a:34:84: 19:ba:67:da:89:da:9f:94:f1:c3:af:f4:ba:32:b8:7a:72:35: a8:d3:e0:13:89:7c:ef:fa:3b:52:fb:20:d6:74:8a:2d:97:ef: ca:e0:0f:4d:6e:29:72:2f:a0:2e:0a:bc:25:9c:9c:5c:97:59: 0e:39:91:af:c8:f8:03:b5:7f:94:5a:4e:27:30:1e:e0:3e:22: da:99:f5:7d:41:e8:12:cf:65:c9:33:87:d1:99:d9:38:9d:50: 1b:4f:a1:92:4b:d6:d1:d3:12:7f:96:a1:7e:14:74:9e:d3:bd: 7c:db:65:74:43:16:d8:7e:76:e3:5a:23:65:24:35:c2:c1:38: 93:ee:75:98:00:4e:6d:f8:a3:bf:c1:6a:d6:cd:9e:ce:be:bd: f1:63:ab:6b:87:61:82:84:6c:6c:e3:ee:a2:72:56:67:7c:79: 92:5c:90:a8:54:31:10:08:f1:68:00:0b:c6:f3:e5:38:8a:4d: 1f:cc:e8:25:2b:52:80:c5:b3:7a:79:8f:db:4d:87:90:e5:ec: 66:0a:1b:d3:57:db:7d:c7:aa:b3:3d:96:7f:5a:26:29:b9:dc: 37:27:47:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LHNLzt/FvgoZKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk OGY1Y2FlZjAtYjhlYS00N2VkLWJkOTMtYjhiYTgwYmNhMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotCpSCdb3HKiNBe75bFrta3aM92Ru9WCPG6r vST2h8XVYEwLAidZ0QzczwrAruLJNGVzMXxCmEzmSpuBIca06QDQdihJMOa5Z1H7 v3JUVWHtIKPF8a91S9dg6Pz5LY7dozELvj8Hm7kwOvn7SPBsm8eB6R/j+TALBIgr ZesyLnwfEcYi/8WB3h/rAe2Jll/OtvhpYmj2wNi/Sezn7iXZrdLUmq6itdQJ/8CH WS+nffJTtICGMzNQk8QHeeQ+bioT2jXzFxq01wbpEPyfPms8N3H8Le3rSVHIETv3 17rO5GvKLytNjrTD0+cCN8vlWCxq8dOOci1MkMh0gBcfaI9YJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPi1iWU1R/nJAUI/RYKrM0vqOs5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDFlMzE3NWMtOWE5OC0z ZjU5LTk2NmItZWIwMjVkNzg0YWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIy8zJn5p3KFG6ZNYZIBIKhsLaRrXXSRNNGjdb1fOLZziko0hBm6Z9qJ 2p+U8cOv9LoyuHpyNajT4BOJfO/6O1L7INZ0ii2X78rgD01uKXIvoC4KvCWcnFyX WQ45ka/I+AO1f5RaTicwHuA+ItqZ9X1B6BLPZckzh9GZ2TidUBtPoZJL1tHTEn+W oX4UdJ7TvXzbZXRDFth+duNaI2UkNcLBOJPudZgATm34o7/BatbNns6+vfFjq2uH YYKEbGzj7qJyVmd8eZJckKhUMRAI8WgAC8bz5TiKTR/M6CUrUoDFs3p5j9tNh5Dl 7GYKG9NX233HqrM9ln9aJim53DcnRxs= -----END CERTIFICATE-----Generated at Mon Oct 20 20:17:58 2025 by rpki-client