$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21121190-c709-304d-9477-0e0a0ca38ccc.roa File: 21121190-c709-304d-9477-0e0a0ca38ccc.roa (raw, json) Hash identifier: wRwPLWfCrw3aHC+pT4RHRy8N8lDGw2n5zUYM0FGdrBE= Subject key identifier: A4:9F:8D:24:C3:F0:3F:D8:64:F1:84:1E:F5:0D:2E:2A:EA:97:AB:FD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B80B77DD090E0208958B60E40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21121190-c709-304d-9477-0e0a0ca38ccc.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 36183 IP address blocks: 172.225.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:7d:d0:90:e0:20:89:58:b6:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=796e0d77-1eba-4bd0-98d5-6795829ff248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:e9:e3:38:d7:fe:58:6b:51:38:eb:41:0e: f4:4a:4e:8a:ff:85:48:38:34:48:28:c1:41:93:66: dc:48:f9:f2:dd:d9:42:b5:ba:da:0e:4a:ef:9e:36: fd:67:6c:48:f1:f1:c2:de:d6:5e:fd:08:fc:0b:d2: ec:7e:85:5e:69:d4:84:c9:79:fd:de:f5:8a:90:68: 62:8c:76:23:65:d2:7e:eb:f1:10:58:2b:3a:1b:39: 8f:68:87:b9:75:05:ac:d5:6c:ed:18:eb:e4:c5:a8: 1e:98:a9:37:88:e0:aa:13:e1:ea:40:e8:71:fe:bc: a9:e4:9d:8e:9a:db:ec:17:09:1c:8f:89:ba:e5:8d: 5c:99:3e:3b:ce:81:1f:3c:03:88:b5:37:12:23:51: 39:f8:56:20:2a:5f:e6:72:e4:18:83:4b:5e:36:54: 84:9f:9d:b7:82:f1:2a:c5:20:87:00:c9:bf:ec:36: eb:4e:7f:c3:81:fa:04:ac:18:59:b8:0b:8c:31:46: 72:f4:78:ce:17:be:f1:44:2b:f7:64:d0:ce:da:ef: 0a:c2:79:1d:a1:80:4a:db:ee:91:18:4c:9d:84:f2: 0f:f2:9f:e4:7e:cb:23:4b:e6:8d:97:0c:9b:76:e9: 3a:bb:ad:f5:25:1d:7e:39:03:e8:03:1c:e1:3c:f3: 0c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9F:8D:24:C3:F0:3F:D8:64:F1:84:1E:F5:0D:2E:2A:EA:97:AB:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/21121190-c709-304d-9477-0e0a0ca38ccc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:74:f2:6b:0d:b7:98:47:44:95:54:49:e7:08:65:34:9c:80: 22:bc:8f:2c:03:09:94:c9:e1:f0:c6:21:8d:da:b7:7e:72:e5: da:32:ef:9e:87:24:e7:5f:fb:bf:04:a0:c1:0b:37:1f:eb:29: cf:14:fe:8d:a0:a2:76:4a:b5:b4:1e:0f:7c:8e:df:bc:61:d9: 22:fd:1c:38:f6:d1:c1:95:63:a1:ae:20:74:0f:2c:9d:39:f4: 94:4b:c3:19:f8:b6:0b:47:ee:56:a4:06:27:9e:f5:5c:67:af: 4c:7e:82:b6:e0:29:d9:66:70:78:b7:72:66:5d:8f:7c:3d:3b: 4c:43:95:a4:d0:0a:a3:fa:15:5c:35:4b:9d:4d:db:5e:1a:55: 34:03:20:4b:5d:ef:0f:7c:1a:38:f4:f2:7f:9b:46:f5:ff:90: 86:49:2d:d6:60:ca:ed:0b:33:b4:ec:85:2a:ff:96:be:89:1c: 56:f5:80:1f:73:1c:4d:ad:9d:20:a5:bd:a4:91:15:05:3a:40: 67:57:80:88:62:07:57:b6:91:54:06:b8:ee:35:0e:61:51:53: b5:cb:0e:97:ff:e6:b2:3f:21:6e:5a:ae:85:97:f6:c3:9e:d4: 08:63:68:9d:ad:ad:1b:02:bc:0b:43:d2:29:11:47:81:d3:82: 11:f3:1e:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt33QkOAgiVi2DkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk Nzk2ZTBkNzctMWViYS00YmQwLTk4ZDUtNjc5NTgyOWZmMjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW3p4zjX/lhrUTjrQQ70Sk6K/4VIODRIKMFB k2bcSPny3dlCtbraDkrvnjb9Z2xI8fHC3tZe/Qj8C9LsfoVeadSEyXn93vWKkGhi jHYjZdJ+6/EQWCs6GzmPaIe5dQWs1WztGOvkxagemKk3iOCqE+HqQOhx/ryp5J2O mtvsFwkcj4m65Y1cmT47zoEfPAOItTcSI1E5+FYgKl/mcuQYg0teNlSEn523gvEq xSCHAMm/7DbrTn/DgfoErBhZuAuMMUZy9HjOF77xRCv3ZNDO2u8KwnkdoYBK2+6R GEydhPIP8p/kfssjS+aNlwybduk6u631JR1+OQPoAxzhPPMMjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKSfjSTD8D/YZPGEHvUNLirql6v9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjExMjExOTAtYzcwOS0z MDRkLTk0NzctMGUwYTBjYTM4Y2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB908msNt5hHRJVUSecIZTScgCK8jywDCZTJ4fDGIY3at35y5doy756H JOdf+78EoMELNx/rKc8U/o2gonZKtbQeD3yO37xh2SL9HDj20cGVY6GuIHQPLJ05 9JRLwxn4tgtH7lakBiee9Vxnr0x+grbgKdlmcHi3cmZdj3w9O0xDlaTQCqP6FVw1 S51N214aVTQDIEtd7w98Gjj08n+bRvX/kIZJLdZgyu0LM7TshSr/lr6JHFb1gB9z HE2tnSClvaSRFQU6QGdXgIhiB1e2kVQGuO41DmFRU7XLDpf/5rI/IW5aroWX9sOe 1AhjaJ2trRsCvAtD0ikRR4HTghHzHgQ= -----END CERTIFICATE-----Generated at Mon Oct 20 15:23:08 2025 by rpki-client