$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09d275ee-51b9-3e0b-8d49-9d3153ecaabc.roa File: 09d275ee-51b9-3e0b-8d49-9d3153ecaabc.roa (raw, json) Hash identifier: gTGqKTLNYbFjQLF7AYcMpAwTxWCxVUhN2ZbgMv5brJQ= Subject key identifier: 31:83:AB:4F:57:09:89:D0:70:6C:93:30:0C:5E:AE:30:37:E0:25:CD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8EACF878834F289C35AD5780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09d275ee-51b9-3e0b-8d49-9d3153ecaabc.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.226.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f8:78:83:4f:28:9c:35:ad:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=082f0bde-7ebf-4bd6-9651-4335f38e1a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:fe:89:dc:93:94:4a:67:66:4c:94:58:a3: 01:07:21:8f:8d:b3:da:a8:4c:45:b0:6c:01:b9:54: 6e:b3:2d:ac:47:ff:d0:37:da:4a:ce:5c:40:9c:a2: b2:ec:bf:da:27:94:25:f0:91:84:9b:8a:1e:3d:3c: d4:23:ec:9a:30:95:1d:6d:1c:85:ba:36:85:24:68: 12:13:f3:53:f5:c5:3c:3a:22:fb:64:2f:88:ab:79: bf:d0:0e:14:19:02:6f:81:3e:36:80:0d:ca:99:b7: 66:a5:cc:25:d4:98:20:06:4d:8d:36:58:7a:8f:ad: ad:c6:1f:26:8b:ea:90:72:d8:f5:51:4f:35:30:27: 61:af:67:d4:a7:c3:a8:52:f0:0c:05:9e:76:3f:0f: 82:5c:e3:db:c8:07:a3:84:e1:41:92:ee:5a:56:22: 1b:7d:13:37:62:bc:27:42:ba:21:8f:1f:b9:4a:49: cf:84:c4:a7:e1:fa:9c:29:7a:d9:fd:7c:72:09:57: 8f:64:87:71:d3:d7:f2:27:08:1d:4c:52:8d:63:25: b5:56:20:0f:be:83:72:c0:c3:63:67:70:8b:cd:f9: 5d:d0:71:da:aa:c4:69:96:f1:e3:39:4e:b5:8e:99: a4:5b:b2:77:6b:96:07:47:3e:79:ed:2e:d0:44:18: e9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:83:AB:4F:57:09:89:D0:70:6C:93:30:0C:5E:AE:30:37:E0:25:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/09d275ee-51b9-3e0b-8d49-9d3153ecaabc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a9:12:22:eb:be:56:1b:68:58:fd:a4:f0:d9:63:84:54:da: a5:bb:33:1f:e2:ee:7a:eb:0f:af:4c:b3:96:ae:10:9c:ec:10: ba:50:d0:64:be:e8:a1:9e:1e:47:da:49:ba:71:7b:1a:7d:83: 6c:37:f5:66:2c:22:bd:93:46:fb:0e:83:db:75:7b:81:a2:7d: 06:00:2e:3c:86:7b:5e:bd:f2:4a:11:49:51:37:f3:63:f8:53: 0e:11:5f:c4:e2:b6:7e:ad:81:73:cd:e6:16:e3:d8:5d:e6:6e: 5a:f2:89:c8:3e:10:e3:ba:89:ca:1d:fa:32:01:a7:1d:a6:28: cc:b4:9d:40:4b:5b:77:37:c4:d1:72:18:7c:89:5c:18:95:b0: 55:93:57:a2:59:17:7d:74:47:85:5e:85:67:56:55:ca:12:76: da:37:6a:9f:35:6b:38:53:e6:9c:9b:e6:b9:f2:ce:74:23:6b: 06:5a:64:be:28:bf:a2:bf:0c:1e:e9:7d:ac:6f:2a:c9:0a:64: a9:82:21:55:dd:3b:99:a7:c6:82:97:78:49:8d:a3:39:31:03: ab:e3:84:e5:f8:fc:9e:01:55:ff:41:5d:75:a1:d6:ab:e9:db: 02:f0:22:de:ea:76:e2:97:fa:0b:79:67:d5:e2:c7:7a:8f:7e: a9:a2:c3:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPh4g08onDWtV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MDgyZjBiZGUtN2ViZi00YmQ2LTk2NTEtNDMzNWYzOGUxYTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPf+idyTlEpnZkyUWKMBByGPjbPaqExFsGwB uVRusy2sR//QN9pKzlxAnKKy7L/aJ5Ql8JGEm4oePTzUI+yaMJUdbRyFujaFJGgS E/NT9cU8OiL7ZC+Iq3m/0A4UGQJvgT42gA3Kmbdmpcwl1JggBk2NNlh6j62txh8m i+qQctj1UU81MCdhr2fUp8OoUvAMBZ52Pw+CXOPbyAejhOFBku5aViIbfRM3Yrwn Qrohjx+5SknPhMSn4fqcKXrZ/XxyCVePZIdx09fyJwgdTFKNYyW1ViAPvoNywMNj Z3CLzfld0HHaqsRplvHjOU61jpmkW7J3a5YHRz557S7QRBjpfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGDq09XCYnQcGyTMAxerjA34CXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDlkMjc1ZWUtNTFiOS0z ZTBiLThkNDktOWQzMTUzZWNhYWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOLJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFapEiLrvlYbaFj9pPDZY4RU2qW7Mx/i7nrrD69Ms5auEJzsELpQ0GS+ 6KGeHkfaSbpxexp9g2w39WYsIr2TRvsOg9t1e4GifQYALjyGe1698koRSVE382P4 Uw4RX8Titn6tgXPN5hbj2F3mblryicg+EOO6icod+jIBpx2mKMy0nUBLW3c3xNFy GHyJXBiVsFWTV6JZF310R4VehWdWVcoSdto3ap81azhT5pyb5rnyznQjawZaZL4o v6K/DB7pfaxvKskKZKmCIVXdO5mnxoKXeEmNozkxA6vjhOX4/J4BVf9BXXWh1qvp 2wLwIt7qduKX+gt5Z9Xix3qPfqmiw8Y= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:57 2025 by rpki-client