$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d444ab7-5d92-35ea-964e-d44b820f1cca.roa File: 5d444ab7-5d92-35ea-964e-d44b820f1cca.roa (raw, json) Hash identifier: CfjhczWQGIbYO+oXUvcjm3S1laFCxOanCcVClrbJ4xQ= Subject key identifier: 03:F8:D1:6E:89:F6:BD:07:47:31:F8:4B:C4:84:9F:AE:78:50:F8:4C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081C0B8654260FCAE185440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d444ab7-5d92-35ea-964e-d44b820f1cca.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 36183 IP address blocks: 172.224.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:c0:b8:65:42:60:fc:ae:18:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=b2da9df7-534f-469f-b021-baeee4943203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:12:c3:4d:22:6b:c4:c7:59:04:cb:ad:41:dd: d5:f1:bc:08:71:40:2f:c0:4a:92:04:a9:5a:7f:cc: 72:e7:92:92:4d:80:c5:15:b6:a7:51:05:0b:9a:79: ee:7f:b9:7c:b6:c5:0b:f0:47:4b:95:ad:ef:d1:b6: f0:a4:b6:95:1d:64:85:c0:91:c5:46:47:61:c8:54: 87:a1:bd:83:16:ab:d1:70:76:78:91:a9:53:ee:d8: 70:bd:f0:8c:b8:ad:00:96:70:40:88:7a:51:28:9f: 41:5d:e0:4a:98:24:de:8b:93:02:26:50:91:5c:4c: 74:6a:91:82:c4:62:60:7a:f3:95:3c:3b:e2:0c:07: 10:0f:4c:73:24:64:b1:3e:c5:a2:a7:3e:61:70:ef: 1d:59:3b:c4:f7:90:ce:43:ca:b7:73:1f:ba:b4:11: 35:32:d7:fe:48:dc:1e:70:17:a4:e8:cb:7c:a9:e2: 75:74:bd:92:79:24:bd:36:13:85:bd:c4:4a:39:84: 0b:aa:c0:88:95:a9:94:b4:1a:7d:ff:3e:e5:3c:5c: 79:95:67:e5:cd:87:38:b7:25:5d:92:88:02:a4:a8: 78:94:0f:5c:47:05:3a:78:15:0f:80:44:10:a5:08: 36:93:e8:69:59:f2:45:a8:e7:64:12:e1:68:5d:24: 65:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F8:D1:6E:89:F6:BD:07:47:31:F8:4B:C4:84:9F:AE:78:50:F8:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d444ab7-5d92-35ea-964e-d44b820f1cca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:28:bf:6b:89:94:d8:08:4d:43:b5:a0:d3:25:0b:e8:09:8e: f8:f3:10:28:3a:de:45:ab:55:46:de:86:8a:ff:e7:0d:22:ff: 3b:08:ef:eb:68:79:54:0e:c8:d6:5e:6b:d9:1b:9b:76:19:95: 96:fd:04:65:58:7a:33:84:28:cd:54:03:cc:4c:b7:bb:8a:7b: ca:2f:03:d3:6a:eb:5e:68:24:3a:98:55:b7:fa:50:f1:dd:db: 65:0e:0d:a8:e7:96:70:78:04:a1:70:0a:19:99:2c:16:6e:bd: 67:c1:e3:a8:be:fa:f8:2f:88:d1:79:4f:63:7f:9b:5f:9c:2d: 89:af:a3:b6:77:aa:14:f6:52:29:33:3f:de:e6:b7:5d:85:8d: 6d:3a:6b:b7:ce:46:5f:1d:84:6d:ba:07:42:8f:3b:3b:ed:70: 1e:61:81:fe:75:e7:77:f7:aa:6b:52:af:84:f0:58:c3:dd:3b: 9f:e9:33:82:40:41:66:b8:ec:b5:4e:fc:e9:a6:53:8c:f6:0e: 72:0b:80:fd:b0:46:f4:90:d7:f4:c8:58:d7:4e:a5:a8:16:93: f7:5c:a8:4a:72:59:2f:13:da:e8:1c:5c:8e:3d:03:1a:51:94: 43:85:41:be:3e:cf:7d:82:90:20:16:c3:4f:2c:8e:4a:7e:ca: dd:f7:df:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgcC4ZUJg/K4YVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YjJkYTlkZjctNTM0Zi00NjlmLWIwMjEtYmFlZWU0OTQzMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RLDTSJrxMdZBMutQd3V8bwIcUAvwEqSBKla f8xy55KSTYDFFbanUQULmnnuf7l8tsUL8EdLla3v0bbwpLaVHWSFwJHFRkdhyFSH ob2DFqvRcHZ4kalT7thwvfCMuK0AlnBAiHpRKJ9BXeBKmCTei5MCJlCRXEx0apGC xGJgevOVPDviDAcQD0xzJGSxPsWipz5hcO8dWTvE95DOQ8q3cx+6tBE1Mtf+SNwe cBek6Mt8qeJ1dL2SeSS9NhOFvcRKOYQLqsCIlamUtBp9/z7lPFx5lWflzYc4tyVd kogCpKh4lA9cRwU6eBUPgEQQpQg2k+hpWfJFqOdkEuFoXSRlFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP40W6J9r0HRzH4S8SEn654UPhMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWQ0NDRhYjctNWQ5Mi0z NWVhLTk2NGUtZDQ0YjgyMGYxY2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOD8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4ov2uJlNgITUO1oNMlC+gJjvjzECg63kWrVUbehor/5w0i/zsI7+to eVQOyNZea9kbm3YZlZb9BGVYejOEKM1UA8xMt7uKe8ovA9Nq615oJDqYVbf6UPHd 22UODajnlnB4BKFwChmZLBZuvWfB46i++vgviNF5T2N/m1+cLYmvo7Z3qhT2Uikz P97mt12FjW06a7fORl8dhG26B0KPOzvtcB5hgf5153f3qmtSr4TwWMPdO5/pM4JA QWa47LVO/OmmU4z2DnILgP2wRvSQ1/TIWNdOpagWk/dcqEpyWS8T2ugcXI49AxpR lEOFQb4+z32CkCAWw08sjkp+yt3339A= -----END CERTIFICATE-----Generated at Mon Oct 20 17:54:12 2025 by rpki-client