$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2f9684-b3ad-3044-969a-672ea6b74bed.roa File: 4a2f9684-b3ad-3044-969a-672ea6b74bed.roa (raw, json) Hash identifier: QgrS8UEYRCCoZ0oGt2dEM23uAefmnvwvEOH3p4TFPQs= Subject key identifier: 92:22:4F:A5:D7:8F:09:37:CA:EB:70:83:BB:29:88:D2:48:A6:B9:FD Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B665F7F9259BAEF69F4D3B510 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2f9684-b3ad-3044-969a-672ea6b74bed.roa Signing time: Fri 03 Oct 2025 14:32:34 +0000 ROA not before: Fri 03 Oct 2025 14:32:34 +0000 ROA not after: Thu 01 Jan 2026 15:32:34 +0000 asID: 63949 IP address blocks: 172.235.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:5f:7f:92:59:ba:ef:69:f4:d3:b5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 3 14:32:34 2025 GMT Not After : Jan 1 15:32:34 2026 GMT Subject: CN=d50008e8-5768-4ebd-aa47-b1f666e59261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d7:68:fb:a0:90:99:1b:88:b2:10:d5:61:ea: 92:87:a8:4f:5c:f5:39:e0:d0:b8:ea:a3:5b:7c:ab: f3:e4:e8:80:47:f9:b8:36:e3:4f:ae:7f:98:bc:d9: 4e:f7:4b:e1:ff:d5:03:70:dd:d2:0d:14:99:30:e1: ee:6c:59:fb:fc:ba:98:90:37:18:04:71:b4:bf:a8: f2:9e:57:e9:c9:c1:68:81:7a:21:46:3e:25:ed:9c: 2a:b2:37:44:a8:ee:ef:7b:f4:4a:41:61:5c:34:42: 4b:94:62:2f:43:86:2e:c5:8b:ec:ac:fe:43:a7:63: 29:1d:47:e6:de:83:27:3c:cc:39:1c:42:df:97:fc: cd:27:ba:cf:c9:77:21:e7:8c:62:3c:94:af:fb:70: 05:0b:a3:aa:35:c4:ce:e2:50:65:87:f2:f3:6f:f3: c6:7b:e3:2d:ab:78:e8:25:4d:99:66:a0:ea:5a:eb: b7:64:21:ed:33:53:be:4f:98:6d:61:92:d6:2f:db: ba:02:d8:20:c5:a8:46:02:61:4b:fb:4d:71:02:f5: e7:a4:98:44:3f:77:9c:8d:38:9f:68:b9:52:b8:e5: b0:9e:73:d7:65:3f:83:ad:8c:a3:ac:c6:14:d3:52: c8:64:bc:4b:72:3e:65:e8:0f:16:8b:58:59:15:27: 64:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:22:4F:A5:D7:8F:09:37:CA:EB:70:83:BB:29:88:D2:48:A6:B9:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a2f9684-b3ad-3044-969a-672ea6b74bed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a0:29:26:ca:78:be:e7:9b:de:d6:b9:01:99:78:2b:7e:33: a9:37:2f:d5:34:3f:99:b4:ca:d8:f8:a9:25:9c:31:ec:f4:15: 9e:d6:21:a5:49:c7:8a:8a:1b:68:3f:36:80:da:36:96:fa:4d: 63:cb:1e:01:c9:ef:eb:ca:44:a7:21:92:0c:1f:77:4b:19:67: b1:5e:10:34:c9:f6:21:ac:37:ff:d0:07:84:13:c5:92:36:7e: 9f:87:62:bc:7c:02:c8:86:5f:a1:79:33:9f:8c:0c:71:33:31: d7:6d:eb:d2:03:a4:01:b5:8f:de:9c:2d:1b:33:d2:bd:4a:75: 6f:63:0c:59:f8:c4:e4:78:62:d2:15:42:37:72:57:24:40:8e: c5:65:94:14:5b:98:d4:3e:bf:53:4b:91:74:0b:ba:3e:8e:ec: 43:c5:db:f6:74:e3:19:1d:47:4e:06:c1:56:57:20:f1:a8:5f: ce:3d:2b:19:7f:e5:52:f0:3f:b8:c9:55:6c:85:20:b8:e4:44: b1:f1:ef:d0:f2:d1:0a:f2:d5:cd:3d:2c:58:6f:48:ac:24:63: d3:79:a6:9f:4e:04:98:aa:38:7f:ae:ff:43:4f:ef:68:68:0e: e4:37:e7:b8:0c:d9:db:8b:3c:65:e3:47:f5:dd:d1:c6:26:ce: 4a:b6:7d:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmX3+SWbrvafTTtRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAwMzE0MzIzNFoXDTI2MDEwMTE1MzIzNFowLzEtMCsGA1UEAxMk ZDUwMDA4ZTgtNTc2OC00ZWJkLWFhNDctYjFmNjY2ZTU5MjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgddo+6CQmRuIshDVYeqSh6hPXPU54NC46qNb fKvz5OiAR/m4NuNPrn+YvNlO90vh/9UDcN3SDRSZMOHubFn7/LqYkDcYBHG0v6jy nlfpycFogXohRj4l7ZwqsjdEqO7ve/RKQWFcNEJLlGIvQ4YuxYvsrP5Dp2MpHUfm 3oMnPMw5HELfl/zNJ7rPyXch54xiPJSv+3AFC6OqNcTO4lBlh/Lzb/PGe+Mtq3jo JU2ZZqDqWuu3ZCHtM1O+T5htYZLWL9u6AtggxahGAmFL+01xAvXnpJhEP3ecjTif aLlSuOWwnnPXZT+DrYyjrMYU01LIZLxLcj5l6A8Wi1hZFSdkCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIiT6XXjwk3yutwg7spiNJIprn9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGEyZjk2ODQtYjNhZC0z MDQ0LTk2OWEtNjcyZWE2Yjc0YmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACagKSbKeL7nm97WuQGZeCt+M6k3L9U0P5m0ytj4qSWcMez0FZ7WIaVJ x4qKG2g/NoDaNpb6TWPLHgHJ7+vKRKchkgwfd0sZZ7FeEDTJ9iGsN//QB4QTxZI2 fp+HYrx8AsiGX6F5M5+MDHEzMddt69IDpAG1j96cLRsz0r1KdW9jDFn4xOR4YtIV QjdyVyRAjsVllBRbmNQ+v1NLkXQLuj6O7EPF2/Z04xkdR04GwVZXIPGoX849Kxl/ 5VLwP7jJVWyFILjkRLHx79Dy0Qry1c09LFhvSKwkY9N5pp9OBJiqOH+u/0NP72ho DuQ357gM2duLPGXjR/Xd0cYmzkq2fYA= -----END CERTIFICATE-----Generated at Mon Oct 20 22:16:44 2025 by rpki-client