$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a527ae8-b733-3767-ae90-40b729f96f24.roa File: 4a527ae8-b733-3767-ae90-40b729f96f24.roa (raw, json) Hash identifier: wT5VL5V/com605EcWomWdFdso8wtKJW0fEMOvpvvbDs= Subject key identifier: 03:5F:D7:62:FA:C8:50:32:AD:84:D3:79:DF:2C:4C:4B:6A:1E:C4:71 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3DBA29841ECFCD073F27BF00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a527ae8-b733-3767-ae90-40b729f96f24.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 63949 IP address blocks: 172.239.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:29:84:1e:cf:cd:07:3f:27:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=3b6c25c3-b37b-488f-bacb-3df97b5ca1cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bb:c5:f8:21:50:df:6c:7b:d7:ae:9b:75:ca: 87:b7:65:df:da:a7:81:ee:53:92:9c:12:91:8c:1a: 26:04:fe:78:b8:53:e9:30:b3:7f:66:35:45:14:12: 64:27:65:48:2d:13:7a:1e:43:c9:eb:7b:10:08:08: 7c:2f:f3:27:b6:73:fb:73:fa:86:08:db:b2:ef:c0: c9:8d:d0:35:66:0f:e8:63:1c:98:c2:3c:98:c4:d2: 61:01:3a:69:35:c5:09:d3:04:7c:a9:80:3b:8a:30: 0e:b9:89:55:37:86:c5:c0:35:a8:96:9d:d3:00:13: e9:a6:07:07:14:90:98:f6:ee:e4:e1:3b:00:f7:24: ef:b3:61:f2:0e:b6:9c:5b:f0:36:c8:ee:1b:38:49: 07:a2:a3:aa:25:00:bb:96:10:cf:ce:af:8d:72:e4: a4:c9:cd:1f:d5:c9:7e:01:cd:06:88:a5:9d:4a:3a: eb:94:9c:04:45:1f:80:67:fb:95:75:c1:14:e9:49: 0b:9d:01:6a:1f:cd:1e:7a:11:f8:b7:2f:3d:96:57: c1:af:da:71:5d:f3:17:f6:a6:aa:90:75:44:d5:ce: be:61:53:70:b7:1b:87:19:4e:a1:2c:35:7e:f3:ae: 22:16:38:92:80:38:5f:41:82:e1:32:88:31:1b:02: e9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5F:D7:62:FA:C8:50:32:AD:84:D3:79:DF:2C:4C:4B:6A:1E:C4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4a527ae8-b733-3767-ae90-40b729f96f24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.239.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:68:44:db:71:48:75:13:60:fe:f8:ff:d2:d6:4a:4a:2f:86: 3d:57:85:80:8f:dd:6d:1e:e3:0e:b2:5f:1e:47:20:ea:f0:89: da:a8:08:64:95:91:25:c3:ab:12:b1:fb:08:c0:96:6b:99:08: d1:b1:f0:cc:6d:dc:79:27:cb:69:d0:16:96:52:e9:93:76:46: 67:55:5a:64:38:e2:d8:53:f2:b6:b4:db:df:b5:8e:dd:aa:93: 77:6f:12:33:1a:e0:35:d2:80:b1:f9:94:f7:5e:1d:08:e4:20: d9:0a:b5:d7:33:8d:69:55:27:c8:f8:bb:76:01:80:a2:d5:a8: a2:bf:7e:5d:15:81:ec:ee:3a:e4:f6:66:25:a6:92:e0:4c:48: d1:fd:88:f5:07:b4:43:47:71:4c:b7:28:62:8f:32:fb:da:a5: e6:9e:da:4b:01:a4:af:ac:8c:f7:90:d2:68:5c:3c:7c:b3:e3: df:b5:36:90:75:20:57:3f:0b:91:0e:9e:83:d2:b7:28:ea:e2: 1e:cf:39:f6:4f:74:10:a0:6d:fc:3e:48:29:e6:37:cc:b2:21: 94:9c:30:4b:43:50:92:8e:47:3e:05:4c:ac:a1:67:11:ce:d9: 32:91:f2:c8:86:93:72:64:7a:31:23:e4:20:76:27:7b:8e:f8: 93:28:1b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uimEHs/NBz8nvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk M2I2YzI1YzMtYjM3Yi00ODhmLWJhY2ItM2RmOTdiNWNhMWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrvF+CFQ32x7166bdcqHt2Xf2qeB7lOSnBKR jBomBP54uFPpMLN/ZjVFFBJkJ2VILRN6HkPJ63sQCAh8L/MntnP7c/qGCNuy78DJ jdA1Zg/oYxyYwjyYxNJhATppNcUJ0wR8qYA7ijAOuYlVN4bFwDWolp3TABPppgcH FJCY9u7k4TsA9yTvs2HyDracW/A2yO4bOEkHoqOqJQC7lhDPzq+NcuSkyc0f1cl+ Ac0GiKWdSjrrlJwERR+AZ/uVdcEU6UkLnQFqH80eehH4ty89llfBr9pxXfMX9qaq kHVE1c6+YVNwtxuHGU6hLDV+864iFjiSgDhfQYLhMogxGwLp6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFANf12L6yFAyrYTTed8sTEtqHsRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNGE1MjdhZTgtYjczMy0z NzY3LWFlOTAtNDBiNzI5Zjk2ZjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrO8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVoRNtxSHUTYP74/9LWSkovhj1XhYCP3W0e4w6yXx5HIOrwidqoCGSV kSXDqxKx+wjAlmuZCNGx8Mxt3Hkny2nQFpZS6ZN2RmdVWmQ44thT8ra029+1jt2q k3dvEjMa4DXSgLH5lPdeHQjkINkKtdczjWlVJ8j4u3YBgKLVqKK/fl0VgezuOuT2 ZiWmkuBMSNH9iPUHtENHcUy3KGKPMvvapeae2ksBpK+sjPeQ0mhcPHyz49+1NpB1 IFc/C5EOnoPStyjq4h7POfZPdBCgbfw+SCnmN8yyIZScMEtDUJKORz4FTKyhZxHO 2TKR8siGk3JkejEj5CB2J3uO+JMoG+s= -----END CERTIFICATE-----Generated at Mon Oct 20 09:40:59 2025 by rpki-client