$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61e3d0e0-0e8e-3cdf-b27f-f83d6b0f1b5a.roa File: 61e3d0e0-0e8e-3cdf-b27f-f83d6b0f1b5a.roa (raw, json) Hash identifier: to0dd/B8agQT+eLx9NFaXGZ0o5ovqX/T0bTPepIiDGE= Subject key identifier: 04:F7:7B:E1:0D:F5:C3:2E:AC:49:2C:77:E2:1C:5D:BD:2A:F1:8A:3D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B3F1C59BE72723B00C6A81680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61e3d0e0-0e8e-3cdf-b27f-f83d6b0f1b5a.roa Signing time: Fri 19 Sep 2025 13:00:41 +0000 ROA not before: Fri 19 Sep 2025 13:00:41 +0000 ROA not after: Thu 18 Dec 2025 14:00:41 +0000 asID: 63949 IP address blocks: 172.237.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3f:1c:59:be:72:72:3b:00:c6:a8:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 19 13:00:41 2025 GMT Not After : Dec 18 14:00:41 2025 GMT Subject: CN=23c89c5d-1ed6-4f35-aae9-65c83d29c241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2c:e8:9d:ac:8f:92:26:0c:b7:a0:28:ee:8f: 6b:c1:e8:25:b9:d6:29:ee:d4:94:92:c8:49:b0:6e: 30:ac:5a:96:e3:3f:92:4e:2b:eb:d7:0c:fd:7f:57: 4c:c4:c8:79:16:09:18:9d:3f:eb:0d:2c:85:3c:2d: 29:c3:e1:62:e6:37:fb:7c:d8:22:13:79:69:43:49: e2:c4:19:27:53:0a:04:cb:01:21:91:68:e9:e8:cc: 4e:da:41:e9:36:ca:7b:c2:d1:f8:2e:30:5c:e4:ed: 70:f2:99:4c:d4:ca:14:5c:b4:63:d0:4e:33:e4:18: 3d:3c:1a:7e:be:19:26:28:06:d8:fd:31:73:5f:d9: 43:61:01:6f:f6:26:16:3e:1c:1d:9d:b8:3f:a1:a6: ad:a7:a7:14:5c:23:44:99:30:35:c6:41:58:13:5a: 00:48:71:06:58:34:a3:56:bc:f9:ed:e1:ba:c5:7a: 2d:34:d6:0c:97:25:bd:70:6d:77:dc:0c:3d:6c:bd: 73:4b:41:6e:d5:3b:26:c9:63:b3:37:a3:9e:fb:4d: 37:b9:ae:82:58:55:c7:56:74:45:fb:92:cc:0f:0a: b7:6d:d2:ea:39:ec:c1:d0:6a:ef:8d:a8:ad:dd:29: b4:5d:d7:a6:72:4c:9f:dd:3e:04:b2:20:66:2d:07: fe:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F7:7B:E1:0D:F5:C3:2E:AC:49:2C:77:E2:1C:5D:BD:2A:F1:8A:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/61e3d0e0-0e8e-3cdf-b27f-f83d6b0f1b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.237.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:43:ac:e9:e2:4e:34:3b:18:bb:f2:8c:69:1b:12:3f:55:87: 86:da:fb:f6:f2:bc:70:58:10:b3:f1:87:96:3e:00:7c:2e:da: 73:25:45:4e:a2:78:ef:43:ca:97:85:9b:98:db:c8:67:b8:e8: 54:46:dd:69:68:b4:ef:b6:cd:e6:fe:61:75:70:45:e5:c9:2d: b2:4c:14:0c:7e:1f:a6:9b:5b:03:c8:c2:13:d3:cc:b0:92:47: 4a:3a:2a:a2:55:d2:7f:71:cc:3c:44:23:8c:75:83:34:47:38: f1:4c:25:1d:d2:78:95:0f:56:d8:c8:39:26:50:fd:2d:23:1c: 37:c6:af:2f:ec:6a:e5:39:17:86:63:ee:00:81:0b:50:cd:07: 29:df:60:90:fc:01:db:de:23:f2:eb:36:12:21:c0:ab:4f:60: 82:f6:2b:5c:51:85:1b:85:d6:c3:b7:46:16:ab:8d:60:df:f4: 1f:ad:32:e7:9f:4d:d7:8c:f4:80:d5:06:5e:29:4d:60:33:cb: d4:3d:f6:b8:79:f1:a5:62:fa:90:45:48:08:d4:d7:72:49:ed: b4:09:a1:29:21:f2:8a:10:eb:ba:04:b6:4f:33:08:16:c3:f2: 3a:89:1c:05:c1:7e:ce:84:59:47:31:8a:f4:fc:89:ff:86:db: 62:f4:78:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs/HFm+cnI7AMaoFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkxOTEzMDA0MVoXDTI1MTIxODE0MDA0MVowLzEtMCsGA1UEAxMk MjNjODljNWQtMWVkNi00ZjM1LWFhZTktNjVjODNkMjljMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjizonayPkiYMt6Ao7o9rwegludYp7tSUkshJ sG4wrFqW4z+STivr1wz9f1dMxMh5FgkYnT/rDSyFPC0pw+Fi5jf7fNgiE3lpQ0ni xBknUwoEywEhkWjp6MxO2kHpNsp7wtH4LjBc5O1w8plM1MoUXLRj0E4z5Bg9PBp+ vhkmKAbY/TFzX9lDYQFv9iYWPhwdnbg/oaatp6cUXCNEmTA1xkFYE1oASHEGWDSj Vrz57eG6xXotNNYMlyW9cG133Aw9bL1zS0Fu1TsmyWOzN6Oe+003ua6CWFXHVnRF +5LMDwq3bdLqOezB0Grvjait3Sm0Xdemckyf3T4EsiBmLQf+WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAT3e+EN9cMurEksd+IcXb0q8Yo9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjFlM2QwZTAtMGU4ZS0z Y2RmLWIyN2YtZjgzZDZiMGYxYjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrO1AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEtDrOniTjQ7GLvyjGkbEj9Vh4ba+/byvHBYELPxh5Y+AHwu2nMlRU6i eO9DypeFm5jbyGe46FRG3WlotO+2zeb+YXVwReXJLbJMFAx+H6abWwPIwhPTzLCS R0o6KqJV0n9xzDxEI4x1gzRHOPFMJR3SeJUPVtjIOSZQ/S0jHDfGry/sauU5F4Zj 7gCBC1DNBynfYJD8AdveI/LrNhIhwKtPYIL2K1xRhRuF1sO3RharjWDf9B+tMuef TdeM9IDVBl4pTWAzy9Q99rh58aVi+pBFSAjU13JJ7bQJoSkh8ooQ67oEtk8zCBbD 8jqJHAXBfs6EWUcxivT8if+G22L0eGk= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:09 2025 by rpki-client