$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa File: 2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa (raw, json) Hash identifier: gZ/Xxz7LVFO1f6BiGrVZvxltwMjkP5Hai8R9+PuJwV8= Subject key identifier: A9:C0:42:F0:7E:07:FC:A2:A4:87:A3:45:88:6A:0E:5A:83:52:87:F3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B95A7A237ABB20A88A141B480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 36183 IP address blocks: 172.224.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:a2:37:ab:b2:0a:88:a1:41:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=1847b0db-21e9-4776-9494-aaba4b0f1813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6f:77:b1:09:a6:a8:af:22:de:73:3a:9f:52: c5:f1:ed:2d:97:86:43:8f:45:2d:aa:8b:47:ba:7b: 2a:b8:c4:fc:85:37:95:2f:a5:25:a6:02:e4:8f:b0: 1a:0f:a5:3d:f5:3f:a6:9e:c9:dc:af:3c:e8:60:38: cf:9f:f5:28:a9:6c:42:39:0a:c8:c0:85:53:63:4f: e9:ee:c6:f7:8f:27:51:3b:16:e5:09:6b:61:18:9f: c0:24:6e:8d:47:fb:b4:83:9b:33:77:59:f4:e0:7e: ce:bd:f2:b5:4e:f7:5e:c0:b2:18:9e:06:e2:a1:cf: 52:6e:c0:bc:0f:da:df:77:be:9b:63:a4:a4:3b:b0: 7b:cd:1a:6c:0f:6b:42:93:5b:40:ae:3a:16:3d:5f: 87:59:bd:c4:ab:ec:5d:ab:69:b3:b0:ac:d6:53:f0: df:c5:33:98:bd:d0:81:58:e5:3b:49:f5:83:51:49: 6f:9e:d7:bb:ec:76:87:ab:c0:77:39:38:d1:c0:a3: 8e:10:e7:1f:14:3d:77:26:92:82:ca:72:04:a0:aa: 92:7e:04:b3:18:37:7b:65:1f:fb:70:96:08:44:9b: 23:60:1a:38:f1:50:91:59:a5:50:9d:f8:b8:a4:ff: 21:1f:28:ed:08:47:9e:84:01:d9:c4:6f:15:cc:a6: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C0:42:F0:7E:07:FC:A2:A4:87:A3:45:88:6A:0E:5A:83:52:87:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2705a7d0-6443-3d4f-94cb-54f1a5aeeced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:43:c4:1f:3a:de:43:49:70:9c:8d:5a:a6:26:61:c8:20:40: a3:a9:d0:86:56:e7:60:39:1d:c5:c4:bc:0e:48:2a:7c:08:85: f1:6b:34:c8:ea:64:f5:3a:b9:46:84:2e:24:72:a1:f1:6d:1b: be:8e:3b:7b:59:29:c1:6c:05:ac:84:38:2c:a3:d2:c3:36:eb: 7b:11:ca:93:89:70:ed:01:af:45:9b:9a:3c:ff:a5:cb:47:c9: 14:07:b1:17:20:74:17:47:a9:7d:5c:a4:b8:99:45:18:e5:28: cc:f5:28:1b:79:5e:b7:6e:29:0e:f0:ce:af:b7:7d:c7:13:40: 44:7d:5a:cf:d5:50:15:ee:82:14:74:5e:cf:31:5f:3c:dd:3a: f2:54:b1:3a:c3:4b:c9:d8:70:71:a1:f6:45:4b:21:03:fb:1f: 0a:64:04:d1:a1:4a:7b:d1:2c:5e:d7:a5:ec:8f:bd:36:29:8d: 96:81:18:67:aa:21:cd:b7:36:81:94:6f:14:7e:7b:bb:59:2b: 2d:78:c8:4d:6c:d0:fc:d7:24:67:e8:60:19:26:0d:73:e4:88: 7b:b0:65:09:8c:05:2f:ea:5e:1a:c7:cb:c9:9c:7c:8b:f9:fe: 52:67:0b:34:9c:d5:ac:ef:d7:91:6b:a8:71:e2:3b:9d:6f:45: 61:eb:7b:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6I3q7IKiKFBtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTg0N2IwZGItMjFlOS00Nzc2LTk0OTQtYWFiYTRiMGYxODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmm93sQmmqK8i3nM6n1LF8e0tl4ZDj0UtqotH unsquMT8hTeVL6UlpgLkj7AaD6U99T+mnsncrzzoYDjPn/UoqWxCOQrIwIVTY0/p 7sb3jydROxblCWthGJ/AJG6NR/u0g5szd1n04H7OvfK1TvdewLIYngbioc9SbsC8 D9rfd76bY6SkO7B7zRpsD2tCk1tArjoWPV+HWb3Eq+xdq2mzsKzWU/DfxTOYvdCB WOU7SfWDUUlvnte77HaHq8B3OTjRwKOOEOcfFD13JpKCynIEoKqSfgSzGDd7ZR/7 cJYIRJsjYBo48VCRWaVQnfi4pP8hHyjtCEeehAHZxG8VzKbveQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnAQvB+B/yipIejRYhqDlqDUofzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjcwNWE3ZDAtNjQ0My0z ZDRmLTk0Y2ItNTRmMWE1YWVlY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOB5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdDxB863kNJcJyNWqYmYcggQKOp0IZW52A5HcXEvA5IKnwIhfFrNMjq ZPU6uUaELiRyofFtG76OO3tZKcFsBayEOCyj0sM263sRypOJcO0Br0Wbmjz/pctH yRQHsRcgdBdHqX1cpLiZRRjlKMz1KBt5XrduKQ7wzq+3fccTQER9Ws/VUBXughR0 Xs8xXzzdOvJUsTrDS8nYcHGh9kVLIQP7HwpkBNGhSnvRLF7XpeyPvTYpjZaBGGeq Ic23NoGUbxR+e7tZKy14yE1s0PzXJGfoYBkmDXPkiHuwZQmMBS/qXhrHy8mcfIv5 /lJnCzSc1azv15FrqHHiO51vRWHrezg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:32:32 2025 by rpki-client