$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578c0eaf-1b74-300d-911f-899673def303.roa File: 578c0eaf-1b74-300d-911f-899673def303.roa (raw, json) Hash identifier: nmVhVt4oixPcD7/cCCPc5YI4XNWclqom65zB9tI7mNM= Subject key identifier: AA:6F:8A:B2:4D:47:1F:5A:EA:30:B8:DE:4B:EA:CA:3A:8E:9F:8B:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B821E1EC237EE35F3072C8380 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578c0eaf-1b74-300d-911f-899673def303.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 36183 IP address blocks: 172.225.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:1e:c2:37:ee:35:f3:07:2c:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=8efb6502-759f-46ae-bef8-ec079d84cd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:00:b4:99:1f:9c:cc:ca:0a:70:d7:c0:0d:e2: e4:f5:b6:d6:f5:b9:e5:0b:20:33:f3:31:d6:7a:89: e0:aa:d3:05:3f:96:f1:9f:d5:ed:eb:92:b6:f5:19: f7:1b:29:a1:e5:21:a9:7a:6a:89:05:15:c4:be:76: a8:77:7f:e3:81:0c:f6:09:fc:e4:cf:72:7e:64:c2: 6c:f8:c2:1f:5b:c5:eb:91:5c:c8:11:1a:8f:91:8c: 82:ee:a2:9d:43:39:4e:71:ba:e9:95:75:a5:de:2c: 81:1d:66:c1:62:2b:9d:54:0d:70:54:ef:89:f3:00: 46:be:15:ce:31:1c:2b:58:d0:4a:83:dc:9a:1c:26: 3e:8c:08:a6:06:66:27:39:24:30:05:14:e2:d4:20: c7:10:1b:65:fc:fe:67:f6:79:02:54:d4:ca:b4:d6: 31:94:52:1d:ce:9b:6d:cb:be:0d:86:ac:15:4c:34: c2:6a:08:af:b5:aa:b1:9f:35:13:3e:46:59:40:a0: 5c:39:86:67:65:63:f0:cf:b8:84:b9:ec:20:09:6e: d9:8f:a6:7d:6d:77:7a:c7:b6:5b:44:b8:7d:3e:0f: 83:90:8c:c6:c0:7b:90:2f:b4:e3:78:be:97:33:81: 18:e8:d3:b1:69:ea:a3:9c:dc:a3:16:3e:15:b0:0f: 1a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:6F:8A:B2:4D:47:1F:5A:EA:30:B8:DE:4B:EA:CA:3A:8E:9F:8B:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/578c0eaf-1b74-300d-911f-899673def303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:aa:85:90:e1:8b:69:09:68:b6:eb:0a:19:79:bc:b5:75:04: 20:fd:8a:5c:fa:e0:ec:a4:97:3c:43:bb:1d:5a:96:d4:4c:66: fc:6b:c7:23:fc:92:3c:2b:e4:b1:79:f1:5f:99:dd:bf:c8:31: 68:06:70:92:e7:18:1f:90:f6:bb:10:5d:a1:bf:17:ee:88:ed: bb:8e:6c:ff:39:c7:d8:21:6c:f3:4c:39:d0:c0:f8:a9:e2:d6: e8:c5:8a:ed:ea:30:98:68:c2:d0:e7:14:23:d8:9c:7e:0b:82: 2d:0b:bf:e7:38:ef:6d:6c:2e:d6:54:80:76:f9:f2:fe:37:d2: f9:c5:9d:08:e4:e9:39:26:a6:9d:72:b5:cb:0a:f6:36:76:1d: f9:91:5f:3f:c1:0f:90:fe:04:5e:6f:f4:b5:80:72:38:c5:66: 86:f6:48:a5:6b:a5:03:7d:2a:a0:e7:e2:8e:fc:9d:0a:ee:32: 2f:94:80:26:7b:4e:56:95:b1:da:9f:83:d4:d5:d4:42:0d:0c: 32:f7:e7:94:36:74:7a:94:e6:53:3e:fb:62:5f:13:6d:d9:9d: b5:bb:b8:2f:63:22:cf:ce:3c:68:9b:ce:f5:6b:7d:63:fa:a9: f8:21:3e:e1:fb:05:82:79:6c:a5:9a:f3:37:b5:26:e6:6d:36: a0:8f:62:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHh7CN+418wcsg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OGVmYjY1MDItNzU5Zi00NmFlLWJlZjgtZWMwNzlkODRjZDE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AC0mR+czMoKcNfADeLk9bbW9bnlCyAz8zHW eongqtMFP5bxn9Xt65K29Rn3Gymh5SGpemqJBRXEvnaod3/jgQz2Cfzkz3J+ZMJs +MIfW8XrkVzIERqPkYyC7qKdQzlOcbrplXWl3iyBHWbBYiudVA1wVO+J8wBGvhXO MRwrWNBKg9yaHCY+jAimBmYnOSQwBRTi1CDHEBtl/P5n9nkCVNTKtNYxlFIdzptt y74NhqwVTDTCagivtaqxnzUTPkZZQKBcOYZnZWPwz7iEuewgCW7Zj6Z9bXd6x7Zb RLh9Pg+DkIzGwHuQL7TjeL6XM4EY6NOxaeqjnNyjFj4VsA8a8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpvirJNRx9a6jC43kvqyjqOn4uuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTc4YzBlYWYtMWI3NC0z MDBkLTkxMWYtODk5NjczZGVmMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOE5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqqhZDhi2kJaLbrChl5vLV1BCD9ilz64OyklzxDux1altRMZvxrxyP8 kjwr5LF58V+Z3b/IMWgGcJLnGB+Q9rsQXaG/F+6I7buObP85x9ghbPNMOdDA+Kni 1ujFiu3qMJhowtDnFCPYnH4Lgi0Lv+c4721sLtZUgHb58v430vnFnQjk6Tkmpp1y tcsK9jZ2HfmRXz/BD5D+BF5v9LWAcjjFZob2SKVrpQN9KqDn4o78nQruMi+UgCZ7 TlaVsdqfg9TV1EINDDL355Q2dHqU5lM++2JfE23ZnbW7uC9jIs/OPGibzvVrfWP6 qfghPuH7BYJ5bKWa8ze1JuZtNqCPYo0= -----END CERTIFICATE-----Generated at Mon Oct 20 15:26:03 2025 by rpki-client