$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c8dbaf7-918d-3f6d-bc65-0747f72a7260.roa File: 0c8dbaf7-918d-3f6d-bc65-0747f72a7260.roa (raw, json) Hash identifier: Scr7n6JSTELqk2g1+Kc3bH32281LiuEn8+Op76irGAQ= Subject key identifier: D2:24:70:AA:A7:F9:2C:AA:A2:78:B9:99:E5:E2:56:2F:61:81:39:A1 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7B21FEC01E1B1A0939956F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c8dbaf7-918d-3f6d-bc65-0747f72a7260.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:fe:c0:1e:1b:1a:09:39:95:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=9fdd6aed-ed07-4a10-9588-b7c93c8530f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:62:64:0c:24:40:aa:9d:40:12:60:18:87:47: 0f:1f:9a:76:31:ba:c3:1e:54:8b:2a:02:ff:30:c8: bf:8c:af:97:80:d3:f5:91:3a:c0:78:3e:a1:cc:fc: a5:53:a5:05:de:7a:12:4d:f1:cd:50:2e:ad:37:f1: a2:f6:c4:48:2a:2c:6b:64:bb:50:66:59:31:79:d3: 85:b4:bf:5c:35:32:e2:3c:09:92:6a:b6:83:9c:51: 2f:48:7f:b6:a4:03:13:7b:2e:b6:63:7c:da:e1:b1: 3e:65:6c:73:a3:d5:8d:aa:5b:2b:a5:c3:17:77:6c: ad:32:fe:89:e3:36:de:a6:a3:ac:46:d4:40:b2:6b: f5:00:80:4b:42:74:95:75:b6:c4:6b:21:7f:2c:25: b3:be:2f:ae:30:7b:37:9a:af:68:76:8c:bc:a1:ab: a0:10:65:6b:a5:b9:0f:02:c4:f6:98:75:fc:dc:57: d2:4d:c3:41:54:d1:01:f5:be:45:58:42:e7:33:18: 35:4c:ca:c3:4b:e5:49:d7:ed:60:ef:4b:1b:36:9a: fa:d8:4c:9b:ee:5b:06:b5:46:31:35:0e:cc:aa:8b: 2d:62:11:3e:37:53:42:3f:a3:52:7a:41:81:e3:3d: a7:f8:22:86:fe:79:38:19:f1:1f:15:e6:9b:e4:6c: 5b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:24:70:AA:A7:F9:2C:AA:A2:78:B9:99:E5:E2:56:2F:61:81:39:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c8dbaf7-918d-3f6d-bc65-0747f72a7260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:98:1f:36:e3:db:e0:cb:36:17:b0:39:1d:c0:9e:8b:31:19: eb:8f:10:52:6c:99:94:ea:03:61:ce:c3:78:76:d3:94:40:4f: a5:97:22:23:dc:e6:c5:bc:ac:a7:e3:75:c5:27:f7:a8:9f:d2: 3d:5c:e6:36:55:89:1e:d6:2d:6f:b7:34:8d:57:8a:a0:7a:9e: 92:a0:bf:01:76:93:95:a0:69:0e:c4:63:16:be:34:87:4b:a9: 54:ea:df:36:06:e4:db:b2:e2:ee:4a:6a:52:2d:2c:27:61:96: d8:5e:65:70:92:a5:4a:8f:00:c4:b0:f7:ca:35:0e:e6:92:25: 24:36:bd:67:42:b6:b7:30:0e:9e:90:26:c4:a1:0c:dc:f7:43: 22:37:63:ed:17:d5:27:a0:cf:8f:97:e5:85:5c:4b:a8:44:3e: 0e:19:a2:f3:70:50:60:ed:1a:46:61:45:88:bd:25:13:32:ff: 06:f5:31:0e:5a:d9:00:75:d0:6f:3a:88:7b:cf:2d:6b:8f:0c: 59:2c:fb:c4:78:85:0d:be:0c:4d:11:dc:d3:64:1a:1e:74:14: 9b:65:f1:a9:b9:f1:28:8c:78:59:97:a9:af:fb:6a:d7:1d:be: a7:e3:87:84:d0:26:1c:67:e3:20:b6:5c:fa:97:74:53:22:38: fb:06:58:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7If7AHhsaCTmVb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk OWZkZDZhZWQtZWQwNy00YTEwLTk1ODgtYjdjOTNjODUzMGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2JkDCRAqp1AEmAYh0cPH5p2MbrDHlSLKgL/ MMi/jK+XgNP1kTrAeD6hzPylU6UF3noSTfHNUC6tN/Gi9sRIKixrZLtQZlkxedOF tL9cNTLiPAmSaraDnFEvSH+2pAMTey62Y3za4bE+ZWxzo9WNqlsrpcMXd2ytMv6J 4zbepqOsRtRAsmv1AIBLQnSVdbbEayF/LCWzvi+uMHs3mq9odoy8oaugEGVrpbkP AsT2mHX83FfSTcNBVNEB9b5FWELnMxg1TMrDS+VJ1+1g70sbNpr62Eyb7lsGtUYx NQ7MqostYhE+N1NCP6NSekGB4z2n+CKG/nk4GfEfFeab5GxbmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIkcKqn+Syqoni5meXiVi9hgTmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGM4ZGJhZjctOTE4ZC0z ZjZkLWJjNjUtMDc0N2Y3MmE3MjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOF6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKYHzbj2+DLNhewOR3AnosxGeuPEFJsmZTqA2HOw3h205RAT6WXIiPc 5sW8rKfjdcUn96if0j1c5jZViR7WLW+3NI1XiqB6npKgvwF2k5WgaQ7EYxa+NIdL qVTq3zYG5Nuy4u5KalItLCdhltheZXCSpUqPAMSw98o1DuaSJSQ2vWdCtrcwDp6Q JsShDNz3QyI3Y+0X1Segz4+X5YVcS6hEPg4ZovNwUGDtGkZhRYi9JRMy/wb1MQ5a 2QB10G86iHvPLWuPDFks+8R4hQ2+DE0R3NNkGh50FJtl8am58SiMeFmXqa/7atcd vqfjh4TQJhxn4yC2XPqXdFMiOPsGWII= -----END CERTIFICATE-----Generated at Mon Oct 20 22:46:48 2025 by rpki-client