$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3977c5e0-97fe-3813-a99c-515d58ec0c7c.roa File: 3977c5e0-97fe-3813-a99c-515d58ec0c7c.roa (raw, json) Hash identifier: XevyUYoPEmDJZ39T44Sw263h21YR9FB4YDR1oohv/yM= Subject key identifier: C9:35:83:46:2C:76:C6:9A:BF:63:A5:23:CC:55:47:AD:50:8D:CF:9C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7B21FE144EBEF428E85E4900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3977c5e0-97fe-3813-a99c-515d58ec0c7c.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:fe:14:4e:be:f4:28:e8:5e:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=ba63dc69-3f84-41b7-9285-140fef57c9c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:41:d3:76:20:d1:12:d8:8d:61:d6:c4:48:50: 6f:91:ba:da:6c:39:cb:79:c9:6b:ff:32:00:bf:d8: b3:f6:7f:b8:63:bf:df:a4:86:fa:10:a8:f5:51:f0: d3:35:71:48:8a:ac:13:6c:ec:ca:77:09:4a:04:c5: c5:f7:ef:51:18:79:2c:13:5d:d4:a7:3c:ea:31:29: e9:62:d2:24:e4:42:e8:51:4c:1b:e0:d5:c1:d1:12: 0c:67:bc:a2:6f:eb:83:64:65:54:b5:2b:1d:4c:ac: ee:cb:70:61:ef:6b:1b:a3:a4:fe:a2:08:59:8b:df: 6e:30:9f:51:8a:28:32:59:7e:1e:58:6d:fa:65:cd: 2e:15:ca:12:92:4c:5f:d3:0d:67:58:3a:86:93:db: b6:27:96:d5:ab:28:f6:6d:f6:9d:d0:7f:68:05:cd: c8:be:dd:5d:dc:60:7b:72:e5:de:fd:6d:b6:f4:60: cd:53:96:04:25:1b:44:f6:50:51:51:1f:98:09:9a: d0:af:ac:cf:b0:44:5c:18:ad:8a:ca:31:95:cd:c8: 9f:70:c6:53:70:d4:d9:f7:69:b0:a9:f3:10:10:b4: 5d:1d:a2:13:0d:5a:05:fe:09:a4:d4:4d:70:5b:6a: fa:2f:8d:02:6d:46:11:fa:50:12:c8:b6:75:bc:72: b9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:35:83:46:2C:76:C6:9A:BF:63:A5:23:CC:55:47:AD:50:8D:CF:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3977c5e0-97fe-3813-a99c-515d58ec0c7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:4c:36:63:bf:fb:6f:43:b5:df:e6:6a:7a:74:60:b6:87:40: 0a:d9:c1:8c:f1:a6:a6:d0:7f:e2:e2:57:cd:8c:03:92:59:09: 40:e8:2c:ad:09:b3:64:f1:5b:48:91:c0:33:78:10:3f:6b:23: c5:9a:f4:bd:50:25:a7:7e:48:42:d2:2e:50:0c:31:e1:9e:b5: 6f:3a:8f:5a:d9:00:fe:f7:a2:5d:c2:f2:81:00:41:a9:77:15: 4a:d0:9e:00:8d:f2:85:06:14:d7:28:1f:1f:b4:59:ef:6c:d8: b8:ec:7f:9e:d0:f8:4a:a8:b6:4a:ee:c9:55:6f:5c:39:a9:a1: c8:67:92:7d:13:f0:3f:64:47:76:9f:4d:75:7d:20:77:a3:a4: 91:16:c9:1f:06:0b:7d:20:7e:80:69:f1:1c:e5:e9:43:01:74: ea:e9:08:9e:d1:10:bc:15:2c:c6:03:80:67:68:a5:19:28:1a: 16:73:d5:96:b6:fb:04:da:a6:5a:3e:48:73:cc:0c:cb:86:f6: ad:2d:b9:9e:8c:c6:94:ec:37:7e:ad:6f:11:5e:b2:98:74:7a: 0d:c6:0d:35:6b:75:4a:53:8c:cf:4b:35:52:e1:5b:5c:68:07: c6:53:3d:72:5b:62:c5:43:20:19:31:e5:05:22:b9:4a:b1:2c: c7:66:00:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7If4UTr70KOheSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk YmE2M2RjNjktM2Y4NC00MWI3LTkyODUtMTQwZmVmNTdjOWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0HTdiDREtiNYdbESFBvkbrabDnLeclr/zIA v9iz9n+4Y7/fpIb6EKj1UfDTNXFIiqwTbOzKdwlKBMXF9+9RGHksE13UpzzqMSnp YtIk5ELoUUwb4NXB0RIMZ7yib+uDZGVUtSsdTKzuy3Bh72sbo6T+oghZi99uMJ9R iigyWX4eWG36Zc0uFcoSkkxf0w1nWDqGk9u2J5bVqyj2bfad0H9oBc3Ivt1d3GB7 cuXe/W229GDNU5YEJRtE9lBRUR+YCZrQr6zPsERcGK2KyjGVzcifcMZTcNTZ92mw qfMQELRdHaITDVoF/gmk1E1wW2r6L40CbUYR+lASyLZ1vHK53wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk1g0Ysdsaav2OlI8xVR61Qjc+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzk3N2M1ZTAtOTdmZS0z ODEzLWE5OWMtNTE1ZDU4ZWMwYzdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZMNmO/+29Dtd/manp0YLaHQArZwYzxpqbQf+LiV82MA5JZCUDoLK0J s2TxW0iRwDN4ED9rI8Wa9L1QJad+SELSLlAMMeGetW86j1rZAP73ol3C8oEAQal3 FUrQngCN8oUGFNcoHx+0We9s2Ljsf57Q+EqotkruyVVvXDmpochnkn0T8D9kR3af TXV9IHejpJEWyR8GC30gfoBp8Rzl6UMBdOrpCJ7RELwVLMYDgGdopRkoGhZz1Za2 +wTaplo+SHPMDMuG9q0tuZ6MxpTsN36tbxFesph0eg3GDTVrdUpTjM9LNVLhW1xo B8ZTPXJbYsVDIBkx5QUiuUqxLMdmAOI= -----END CERTIFICATE-----Generated at Mon Oct 20 14:56:57 2025 by rpki-client