$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6177a3d9-aa56-3068-91b2-a12fc2baff92.roa File: 6177a3d9-aa56-3068-91b2-a12fc2baff92.roa (raw, json) Hash identifier: o7Z8mCgCORg+c0Nrq1bFa5ZdXs0vXy0iCjw2mkEgSIc= Subject key identifier: B6:34:84:03:28:B1:12:AE:41:18:C1:31:15:49:F3:57:36:E2:35:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B821D8142650DBD5686995500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6177a3d9-aa56-3068-91b2-a12fc2baff92.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 36183 IP address blocks: 172.225.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:81:42:65:0d:bd:56:86:99:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=14408461-09ff-43ca-9d64-89089d304601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b8:c4:fa:3e:b2:a9:79:a2:d8:5a:64:b1:df: 47:d5:c2:76:f8:4a:00:de:be:4f:80:cd:33:88:ef: 0b:f7:a1:b3:40:75:8e:c2:23:ab:69:84:6a:82:58: e2:3f:3c:c6:46:4a:e6:30:ba:23:1c:0c:6e:1a:de: 16:c6:09:c3:8e:1a:44:6e:b0:f4:da:35:b2:17:8e: 2e:82:22:24:c4:2c:2b:c8:f5:c1:4a:ad:6f:f5:41: 2d:f0:43:cb:03:c4:1a:8c:37:f3:b8:3d:d3:83:cc: 1f:c1:fd:10:7d:41:c4:36:f6:dc:ac:e3:91:4e:6a: 2a:f7:66:fd:13:2e:74:5c:20:49:30:bd:b1:3f:19: 93:57:c2:e7:49:e7:d2:00:6b:96:42:53:d4:37:5f: 5c:95:3c:ef:d2:6c:b7:68:80:55:1f:61:21:57:3e: 73:9b:12:fd:95:f6:84:c1:8b:48:37:3b:2d:9f:89: 1c:a6:74:6f:5d:ef:80:87:00:59:d7:c3:32:22:ed: 1f:31:34:a5:24:48:b6:dc:e0:47:2d:2e:c1:7b:66: ee:9c:9e:63:95:ff:6e:cc:82:da:77:a4:d1:6e:fb: 34:70:e1:37:7e:50:19:8c:2e:40:85:62:85:3f:e1: b1:05:c8:2f:7f:0c:0e:19:4f:35:fc:c0:48:37:54: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:34:84:03:28:B1:12:AE:41:18:C1:31:15:49:F3:57:36:E2:35:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6177a3d9-aa56-3068-91b2-a12fc2baff92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:b9:fd:0d:04:5d:ec:3f:9d:06:c8:2a:db:b9:2c:1d:91:11: f2:6d:43:6b:82:8e:9b:e6:83:6b:de:1e:7f:25:5a:f6:05:1e: 18:6b:27:75:99:6f:43:8e:46:64:9b:62:ee:fc:cd:bb:f3:74: 14:58:78:13:27:34:0d:a8:64:29:57:4a:58:ce:9c:21:6b:5a: 4f:5e:01:eb:28:65:63:e3:80:2e:46:55:e4:3d:0f:f3:ed:c0: 01:30:eb:c7:11:ab:86:a9:ea:e9:b6:d1:eb:1c:a5:b0:f1:d3: 96:a7:84:97:1a:ba:b7:ae:46:a6:3b:d3:64:57:4d:aa:12:21: 5f:98:7d:b3:d2:8b:e6:42:b1:be:ed:84:70:88:7b:f5:e1:41: 49:b0:06:e0:e3:8d:92:e8:d8:49:c8:5d:ee:3f:00:8a:cb:11: e0:9a:8e:92:39:e5:fa:d1:5f:6c:89:f7:3c:6a:45:7b:a5:94: 12:83:a7:58:bc:23:d0:f6:fc:23:bf:6a:e8:a4:96:d5:22:e9: de:d5:b6:df:0e:d9:3e:4b:16:2c:ae:2d:8b:af:f0:15:e0:44: e7:bc:b3:24:cd:07:f1:32:c5:a4:d6:47:ec:c7:80:3f:63:fb: f8:a3:c6:9f:0e:9b:ba:6e:66:05:eb:eb:44:84:f2:5f:3c:1c: f6:28:0f:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHYFCZQ29VoaZVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MTQ0MDg0NjEtMDlmZi00M2NhLTlkNjQtODkwODlkMzA0NjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbjE+j6yqXmi2Fpksd9H1cJ2+EoA3r5PgM0z iO8L96GzQHWOwiOraYRqgljiPzzGRkrmMLojHAxuGt4WxgnDjhpEbrD02jWyF44u giIkxCwryPXBSq1v9UEt8EPLA8QajDfzuD3Tg8wfwf0QfUHENvbcrOORTmoq92b9 Ey50XCBJML2xPxmTV8LnSefSAGuWQlPUN19clTzv0my3aIBVH2EhVz5zmxL9lfaE wYtINzstn4kcpnRvXe+AhwBZ18MyIu0fMTSlJEi23OBHLS7Be2bunJ5jlf9uzILa d6TRbvs0cOE3flAZjC5AhWKFP+GxBcgvfwwOGU81/MBIN1QqbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLY0hAMosRKuQRjBMRVJ81c24jWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjE3N2EzZDktYWE1Ni0z MDY4LTkxYjItYTEyZmMyYmFmZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFO5/Q0EXew/nQbIKtu5LB2REfJtQ2uCjpvmg2veHn8lWvYFHhhrJ3WZ b0OORmSbYu78zbvzdBRYeBMnNA2oZClXSljOnCFrWk9eAesoZWPjgC5GVeQ9D/Pt wAEw68cRq4ap6um20escpbDx05anhJcaureuRqY702RXTaoSIV+YfbPSi+ZCsb7t hHCIe/XhQUmwBuDjjZLo2EnIXe4/AIrLEeCajpI55frRX2yJ9zxqRXullBKDp1i8 I9D2/CO/auikltUi6d7Vtt8O2T5LFiyuLYuv8BXgROe8syTNB/EyxaTWR+zHgD9j +/ijxp8Om7puZgXr60SE8l88HPYoDy4= -----END CERTIFICATE-----Generated at Mon Oct 20 17:53:46 2025 by rpki-client