$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c93e39-14b8-3624-91c9-ad64c899269f.roa File: 36c93e39-14b8-3624-91c9-ad64c899269f.roa (raw, json) Hash identifier: dZbdyJGZ7lBz4iXjWcvLVEt0p86trVYmUogPBelq4wQ= Subject key identifier: 84:5B:A8:C8:53:0C:FB:AB:9E:95:93:93:F0:58:00:00:5E:E2:BA:AD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7B21FBBF6C15A3849F630A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c93e39-14b8-3624-91c9-ad64c899269f.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:fb:bf:6c:15:a3:84:9f:63:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=b427bb9c-38fb-4795-b31c-7865362c882e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:1d:85:00:09:f5:63:fb:ee:51:e0:5e:b6:90: cf:22:c3:c3:46:48:f3:23:42:2b:65:ed:cf:7b:6e: 86:b5:1d:92:f4:cb:ba:60:5a:76:a4:3b:3a:99:a6: 8f:99:b6:fd:0d:34:94:4c:ac:b8:2c:11:8e:51:a9: 65:37:ab:2f:66:29:35:9c:64:d0:8e:9e:32:c4:31: 2a:6c:b8:e2:31:ba:a1:ae:b3:08:5f:83:41:3a:78: 0f:c4:2e:89:90:b2:78:f3:c0:c9:e0:f4:cc:68:b9: 97:bb:df:f1:c7:b4:8b:95:a0:3c:18:62:07:58:ce: df:6d:89:59:a2:ee:32:3b:26:f7:57:2b:71:de:17: 96:cb:81:5d:12:78:47:b0:f1:14:0d:9b:8b:1c:73: 06:d1:ca:0d:43:f4:10:93:1b:25:74:0a:5b:95:99: cc:6f:1d:11:9b:61:b3:0d:3a:e0:05:a0:39:aa:54: f6:ce:90:90:8d:fc:43:e0:87:92:45:e5:b1:df:85: 5b:2f:0c:06:54:37:af:3f:10:b1:ba:68:b6:64:79: bd:aa:b6:f9:a2:9e:3a:43:da:d7:57:af:20:19:62: 43:54:96:e1:bd:9d:a8:63:3c:a1:c5:63:56:cf:8a: 70:46:3d:ef:ba:15:43:72:65:cd:03:4e:4c:b8:8e: de:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:5B:A8:C8:53:0C:FB:AB:9E:95:93:93:F0:58:00:00:5E:E2:BA:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c93e39-14b8-3624-91c9-ad64c899269f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:fc:c5:6c:02:b7:bb:1c:b7:eb:99:00:c7:a2:71:b3:be:a3: cb:c8:35:47:45:36:b4:58:34:fb:51:8e:37:22:ce:30:0d:f6: d5:3f:69:d6:64:b7:d0:ad:02:8b:b1:f3:ea:dc:24:bd:27:c3: 5b:23:ba:d3:6c:d3:da:22:51:8f:a9:8c:1f:c3:da:19:a2:cb: 8e:75:77:c4:ed:12:04:23:a5:b8:85:bb:4b:de:a2:36:e1:52: 4a:4e:0c:06:6e:ee:d3:eb:21:f6:56:7d:a4:ec:62:19:ec:ca: 21:fa:b6:72:24:1f:3e:a4:40:32:bc:56:43:f7:e7:1f:cc:ce: 86:d4:08:56:d5:25:aa:a9:56:c1:21:90:27:ee:c9:7c:d8:f2: 43:ed:a1:33:c4:20:7a:d8:f1:f7:03:15:c9:5b:a4:df:83:4e: f5:27:98:a8:c5:48:a4:63:75:b6:84:c7:fb:b8:23:99:3c:0a: 42:d9:e9:2c:60:96:9a:45:cf:27:72:a1:b7:49:05:fa:b5:91: 94:50:ca:ab:a8:5b:2a:cb:92:65:65:bb:a3:09:8d:9f:98:f9: 19:69:25:1f:17:f4:f1:ca:fc:7c:12:47:2e:c8:93:ea:38:d4: 3a:e5:32:82:a1:0b:a9:f9:00:85:b1:68:bf:34:f9:7a:b2:2c: 9f:51:65:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7Ifu/bBWjhJ9jCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk YjQyN2JiOWMtMzhmYi00Nzk1LWIzMWMtNzg2NTM2MmM4ODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2h2FAAn1Y/vuUeBetpDPIsPDRkjzI0IrZe3P e26GtR2S9Mu6YFp2pDs6maaPmbb9DTSUTKy4LBGOUallN6svZik1nGTQjp4yxDEq bLjiMbqhrrMIX4NBOngPxC6JkLJ488DJ4PTMaLmXu9/xx7SLlaA8GGIHWM7fbYlZ ou4yOyb3Vytx3heWy4FdEnhHsPEUDZuLHHMG0coNQ/QQkxsldApblZnMbx0Rm2Gz DTrgBaA5qlT2zpCQjfxD4IeSReWx34VbLwwGVDevPxCxumi2ZHm9qrb5op46Q9rX V68gGWJDVJbhvZ2oYzyhxWNWz4pwRj3vuhVDcmXNA05MuI7egwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRbqMhTDPurnpWTk/BYAABe4rqtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzZjOTNlMzktMTRiOC0z NjI0LTkxYzktYWQ2NGM4OTkyNjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJP8xWwCt7sct+uZAMeicbO+o8vINUdFNrRYNPtRjjcizjAN9tU/adZk t9CtAoux8+rcJL0nw1sjutNs09oiUY+pjB/D2hmiy451d8TtEgQjpbiFu0veojbh UkpODAZu7tPrIfZWfaTsYhnsyiH6tnIkHz6kQDK8VkP35x/MzobUCFbVJaqpVsEh kCfuyXzY8kPtoTPEIHrY8fcDFclbpN+DTvUnmKjFSKRjdbaEx/u4I5k8CkLZ6Sxg lppFzydyobdJBfq1kZRQyquoWyrLkmVlu6MJjZ+Y+RlpJR8X9PHK/HwSRy7Ik+o4 1DrlMoKhC6n5AIWxaL80+XqyLJ9RZTI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:28:38 2025 by rpki-client