$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa File: 3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa (raw, json) Hash identifier: 3lewQUAR92Ulc3uD5B+mXH2oBHgUuylzCnJfXQortUs= Subject key identifier: BE:3B:96:04:4B:0D:D7:C7:25:B3:D0:F1:FD:77:09:29:78:73:A8:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B80B773A1142406E0250FB100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 36183 IP address blocks: 172.225.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:73:a1:14:24:06:e0:25:0f:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=cae82463-d9c3-4707-a5ce-918234d834eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:11:46:4d:6b:3c:f8:c2:7e:19:a1:d7:8d: 2a:e7:96:2c:e8:2a:d8:79:bc:06:51:db:1a:fc:7e: 5a:38:65:76:7c:eb:ae:b3:09:70:86:a7:fa:c4:5f: a3:7a:26:65:cb:1a:98:86:d1:8a:2f:f1:1e:ae:d9: 50:57:3d:66:8b:ee:a4:9f:de:f5:48:95:1a:8c:cd: f2:ff:b9:95:15:de:50:40:98:af:0b:f4:fd:76:d1: 02:fc:2b:39:83:e1:aa:df:3e:10:28:3d:ee:e8:85: 3d:ff:1c:8b:39:9f:84:2b:d0:b1:43:f8:cd:5a:24: 66:68:88:5e:ee:0c:85:a8:48:79:fd:aa:9d:d3:a6: 1b:58:f8:be:6d:ef:f5:fc:39:6d:64:84:61:5c:ad: d2:86:bb:33:eb:31:3f:3e:bb:66:df:a0:a8:a9:57: 9b:f3:3e:20:1c:c9:7e:c6:2b:6f:88:fa:9c:0e:e9: 9e:df:8c:57:c4:bc:a1:9b:54:2f:2d:2a:b9:30:ed: b7:74:ab:99:56:45:02:0e:a6:3b:f5:88:44:d4:0c: 15:cc:87:44:90:79:57:bd:23:33:59:43:45:12:34: a9:d5:8b:c0:3d:14:bc:20:cc:e2:c0:d4:2e:a0:99: cd:5d:5d:d7:9e:ec:4a:c3:a6:78:9f:74:0c:b3:84: 69:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3B:96:04:4B:0D:D7:C7:25:B3:D0:F1:FD:77:09:29:78:73:A8:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3e91f6e5-4b3b-3af9-b09f-6f1fe1a8fce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:01:41:bc:dc:f5:d8:79:18:b3:3f:b8:37:a6:9e:ca:27:fa: 71:57:93:a4:09:82:46:d8:dc:62:18:2e:44:d5:be:a3:6f:e4: 0e:23:4f:94:90:c0:c2:a4:05:11:ef:05:c1:ca:f0:34:7f:eb: 2e:ec:0f:e8:4d:51:a3:8f:ee:54:96:86:75:0b:54:42:01:85: 0b:84:e6:49:43:e7:80:42:33:98:d7:48:d0:60:40:87:30:02: 7c:46:87:9c:1c:4f:26:2b:c1:62:cd:01:25:dd:24:8a:08:98: 61:26:b5:b0:e5:af:77:ae:d9:9b:87:34:d0:15:71:60:3f:52: c0:e1:cf:1e:a5:d2:fa:ef:a2:06:75:8e:ba:ea:7c:f9:00:0a: 78:ee:80:07:8b:95:c1:25:a5:d7:e7:82:72:ab:01:57:8b:94: e7:4a:3f:79:cf:a2:14:9f:a7:29:b1:38:37:b8:9a:be:bd:70: 31:be:9f:82:57:ca:ce:aa:9a:ed:d5:fb:70:b4:b5:10:c6:80: fd:0a:c0:c7:58:e8:9d:e1:a8:5d:b0:e4:54:c3:d1:4e:bf:ed: a7:91:15:51:27:9f:34:7c:b6:d6:13:b4:5f:c3:1f:48:bd:a5: 65:41:60:04:92:59:97:93:ec:0a:b7:0d:65:6a:bb:e6:d1:58: 95:9a:c7:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt3OhFCQG4CUPsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk Y2FlODI0NjMtZDljMy00NzA3LWE1Y2UtOTE4MjM0ZDgzNGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvoRRk1rPPjCfhmh140q55Ys6CrYebwGUdsa /H5aOGV2fOuuswlwhqf6xF+jeiZlyxqYhtGKL/EertlQVz1mi+6kn971SJUajM3y /7mVFd5QQJivC/T9dtEC/Cs5g+Gq3z4QKD3u6IU9/xyLOZ+EK9CxQ/jNWiRmaIhe 7gyFqEh5/aqd06YbWPi+be/1/DltZIRhXK3Shrsz6zE/Prtm36CoqVeb8z4gHMl+ xitviPqcDume34xXxLyhm1QvLSq5MO23dKuZVkUCDqY79YhE1AwVzIdEkHlXvSMz WUNFEjSp1YvAPRS8IMziwNQuoJnNXV3XnuxKw6Z4n3QMs4RpswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL47lgRLDdfHJbPQ8f13CSl4c6iAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2U5MWY2ZTUtNGIzYi0z YWY5LWIwOWYtNmYxZmUxYThmY2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC4BQbzc9dh5GLM/uDemnson+nFXk6QJgkbY3GIYLkTVvqNv5A4jT5SQ wMKkBRHvBcHK8DR/6y7sD+hNUaOP7lSWhnULVEIBhQuE5klD54BCM5jXSNBgQIcw AnxGh5wcTyYrwWLNASXdJIoImGEmtbDlr3eu2ZuHNNAVcWA/UsDhzx6l0vrvogZ1 jrrqfPkACnjugAeLlcElpdfngnKrAVeLlOdKP3nPohSfpymxODe4mr69cDG+n4JX ys6qmu3V+3C0tRDGgP0KwMdY6J3hqF2w5FTD0U6/7aeRFVEnnzR8ttYTtF/DH0i9 pWVBYASSWZeT7Aq3DWVqu+bRWJWax7c= -----END CERTIFICATE-----Generated at Mon Oct 20 14:58:28 2025 by rpki-client