$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afa0af0-d84f-3662-9436-b75c9503253d.roa File: 2afa0af0-d84f-3662-9436-b75c9503253d.roa (raw, json) Hash identifier: E6eZnIJRjXgNN5gRpawT6Zt/1sOqadGtaE5FBRq8jD0= Subject key identifier: 86:9B:9F:25:F0:AF:AC:7B:25:BA:6D:02:C1:0C:45:05:6E:9A:05:10 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B95A7A2123F29D48DC5FC9C00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afa0af0-d84f-3662-9436-b75c9503253d.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 36183 IP address blocks: 172.224.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a7:a2:12:3f:29:d4:8d:c5:fc:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=dd6779c0-bedd-45b9-9a78-009431e1f0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bf:be:2b:41:de:5a:b4:6f:7a:c5:2e:67:10: 4b:41:14:db:8e:3e:3d:d0:07:68:40:84:3b:db:58: bf:6e:e3:c4:22:41:91:9a:e9:a3:a0:98:78:fd:87: ea:ce:cd:7e:37:0c:d0:88:67:fb:b1:4a:02:c2:c5: 20:50:1e:8c:18:e7:cc:0b:ff:30:b3:ba:c6:e6:f8: 54:b2:e3:36:6a:c6:b7:df:ef:56:08:77:22:11:65: d4:28:97:a9:9f:aa:13:77:05:73:24:71:42:82:93: 23:df:04:07:4f:5b:e6:71:6f:f5:05:8e:d8:1b:91: f4:e0:7a:04:aa:96:9c:31:55:68:84:4d:b3:91:8e: 88:aa:d9:f4:be:9c:e6:1b:58:25:65:8a:cb:55:77: f7:c1:ba:60:e8:36:aa:ff:54:f6:64:49:13:4b:0f: 0c:db:58:6b:4c:e0:9f:ad:b2:29:cb:69:5d:a1:28: 15:c2:2f:5c:fa:fb:fd:cf:26:30:78:57:8a:34:16: ab:93:27:de:9e:c3:02:5a:c9:11:c7:aa:78:29:70: da:91:b2:33:dd:c3:a5:aa:71:0a:17:8e:74:15:79: b1:a3:cc:f6:64:6c:41:1d:4a:4a:aa:35:82:ae:b7: 72:68:ca:32:5f:f7:fb:74:7a:1e:83:28:cb:71:03: 2d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9B:9F:25:F0:AF:AC:7B:25:BA:6D:02:C1:0C:45:05:6E:9A:05:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2afa0af0-d84f-3662-9436-b75c9503253d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:10:35:ea:e0:5a:df:7c:9d:47:30:d5:c6:40:93:8b:37:93: 03:43:aa:15:2b:b0:1c:60:71:ba:95:ac:e6:55:9c:a8:50:da: e6:ed:8b:8b:2a:20:40:af:06:eb:28:51:36:74:63:0f:53:25: 4e:23:52:d5:b6:c8:9f:14:36:58:d8:41:89:9e:43:e6:0e:f8: 66:e5:c1:aa:c6:5a:2d:a6:f0:09:10:3e:1b:69:8b:4d:97:74: d5:80:2b:39:cb:0b:35:a5:28:4d:06:99:c2:a5:3a:70:02:70: 31:a6:37:5f:77:1e:c5:cb:9e:a3:08:7d:b5:6c:28:cd:03:e4: c2:38:a4:8e:a9:8c:62:6e:ca:f0:c1:eb:60:f6:38:2f:f7:ea: 96:93:e8:cf:4f:40:f7:8c:28:01:d2:6c:65:2d:e9:a6:af:55: 87:93:40:99:79:1e:ba:29:76:2c:b8:22:34:fc:92:62:fd:e6: 41:fb:30:8c:d9:d3:c7:2c:4a:5c:47:5c:ac:e1:53:ca:d7:66: 5e:8d:de:04:41:78:7d:20:2d:1b:53:f3:1f:84:8f:f0:82:38: 93:f5:41:26:bd:bd:1e:42:5e:0e:23:2b:fb:4d:b5:e3:e5:ca: 88:94:95:fc:88:0a:74:9f:4b:f9:c7:9e:c6:e6:91:70:05:74: 6b:5c:5c:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVp6ISPynUjcX8nAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZGQ2Nzc5YzAtYmVkZC00NWI5LTlhNzgtMDA5NDMxZTFmMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL++K0HeWrRvesUuZxBLQRTbjj490AdoQIQ7 21i/buPEIkGRmumjoJh4/Yfqzs1+NwzQiGf7sUoCwsUgUB6MGOfMC/8ws7rG5vhU suM2asa33+9WCHciEWXUKJepn6oTdwVzJHFCgpMj3wQHT1vmcW/1BY7YG5H04HoE qpacMVVohE2zkY6Iqtn0vpzmG1glZYrLVXf3wbpg6Daq/1T2ZEkTSw8M21hrTOCf rbIpy2ldoSgVwi9c+vv9zyYweFeKNBarkyfensMCWskRx6p4KXDakbIz3cOlqnEK F450FXmxo8z2ZGxBHUpKqjWCrrdyaMoyX/f7dHoegyjLcQMtdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIabnyXwr6x7JbptAsEMRQVumgUQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMmFmYTBhZjAtZDg0Zi0z NjYyLTk0MzYtYjc1Yzk1MDMyNTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOB2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4QNergWt98nUcw1cZAk4s3kwNDqhUrsBxgcbqVrOZVnKhQ2ubti4sq IECvBusoUTZ0Yw9TJU4jUtW2yJ8UNljYQYmeQ+YO+GblwarGWi2m8AkQPhtpi02X dNWAKznLCzWlKE0GmcKlOnACcDGmN193HsXLnqMIfbVsKM0D5MI4pI6pjGJuyvDB 62D2OC/36paT6M9PQPeMKAHSbGUt6aavVYeTQJl5Hropdiy4IjT8kmL95kH7MIzZ 08csSlxHXKzhU8rXZl6N3gRBeH0gLRtT8x+Ej/CCOJP1QSa9vR5CXg4jK/tNtePl yoiUlfyICnSfS/nHnsbmkXAFdGtcXDo= -----END CERTIFICATE-----Generated at Mon Oct 20 15:22:09 2025 by rpki-client