$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa File: 649189b4-bfc0-35b4-931b-45e2843949b0.roa (raw, json) Hash identifier: CLOGRRHtcXHbbBbj30SE2lLftR4U7/3696n/OSLiv18= Subject key identifier: 9F:7B:19:3B:C9:C6:47:1A:A1:64:80:36:50:B2:C8:1B:C7:D2:1D:05 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7DECB294265BF41496A75640 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b2:94:26:5b:f4:14:96:a7:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=65d814fe-bc5d-4827-8666-e553cfcf77eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:49:97:9f:c2:a8:af:22:7a:23:1b:e7:ea:82: b4:25:41:4f:e6:53:86:f2:e4:57:bd:08:7f:c9:7f: 05:d9:0d:0d:3e:01:ab:01:df:74:8e:28:84:65:69: 82:f7:e2:56:88:bb:5e:66:2b:0b:81:6d:ac:35:e5: 43:0b:7b:d4:0e:61:25:66:84:ac:66:7a:42:2e:6c: 1e:02:23:df:17:2c:51:28:6f:22:f2:2f:ce:47:1c: 8b:45:93:ea:07:d8:b3:fa:b9:ad:46:88:ca:45:2c: 81:0b:6a:aa:2b:01:29:f4:26:19:66:72:2e:52:92: 94:5f:15:a8:89:8c:af:d5:34:30:28:17:89:19:a0: a0:fb:a8:12:9d:8e:11:45:6d:b1:7d:8f:1b:63:87: 23:5e:62:b0:a4:f6:86:36:63:07:3a:d9:22:2e:c1: 30:1c:c6:13:f9:48:48:a3:c4:02:0a:96:f2:a0:44: 1a:43:4a:d9:46:c2:e7:5b:83:92:48:28:85:fd:77: 5c:62:e1:03:91:da:d3:ee:ac:00:ba:a9:5b:4a:92: 31:7a:11:e9:bd:49:c3:d6:c1:f0:63:4b:5d:c0:e4: 8e:f0:3f:34:b0:4f:45:2a:13:e9:79:c7:d5:18:88: e3:71:4b:5d:44:6d:f9:0a:82:d6:8e:0a:87:aa:33: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7B:19:3B:C9:C6:47:1A:A1:64:80:36:50:B2:C8:1B:C7:D2:1D:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/649189b4-bfc0-35b4-931b-45e2843949b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:cf:0d:70:be:c9:f5:f8:cd:dc:11:2c:af:35:8d:ba:55:a8: 39:3d:cc:79:84:04:86:3d:31:1b:7d:bf:5f:17:f7:90:84:2c: 48:12:f4:43:52:68:11:72:4d:d6:53:81:e5:57:8f:30:0b:db: 11:b5:8b:04:44:0d:8d:78:2e:a0:f7:e1:7d:3b:74:4a:de:7d: 0b:fb:84:5b:b7:dd:20:d8:d7:8f:c3:1e:e6:b8:5a:83:73:1e: 61:a7:07:78:df:d5:c3:55:33:24:54:b6:b6:8f:d1:6c:f9:70: de:b1:00:11:0b:af:02:06:6d:a6:3d:8c:61:ac:2b:3c:33:0d: e2:11:10:4a:d3:9c:c2:93:8e:f6:9a:72:52:7c:86:da:80:c3: 38:26:4a:a7:78:1e:93:79:3f:c5:47:b1:9c:5b:28:59:8e:8a: 69:fd:aa:de:1d:72:6f:94:cb:95:71:fa:a5:10:00:3a:fd:59: 2d:35:08:a3:3e:a9:13:79:ca:12:8f:03:26:82:1d:00:0e:93: 2b:51:b9:30:ba:26:c0:78:59:16:67:38:77:29:8f:17:0a:6e: c7:de:50:66:7a:58:40:e1:f0:d8:0f:ac:8c:25:dc:55:c6:07: fe:90:ac:d7:ee:71:2f:a8:4f:5a:aa:eb:07:70:5d:ea:dd:f5: 83:a3:b2:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LKUJlv0FJanVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NjVkODE0ZmUtYmM1ZC00ODI3LTg2NjYtZTU1M2NmY2Y3N2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkmXn8KoryJ6Ixvn6oK0JUFP5lOG8uRXvQh/ yX8F2Q0NPgGrAd90jiiEZWmC9+JWiLteZisLgW2sNeVDC3vUDmElZoSsZnpCLmwe AiPfFyxRKG8i8i/ORxyLRZPqB9iz+rmtRojKRSyBC2qqKwEp9CYZZnIuUpKUXxWo iYyv1TQwKBeJGaCg+6gSnY4RRW2xfY8bY4cjXmKwpPaGNmMHOtkiLsEwHMYT+UhI o8QCCpbyoEQaQ0rZRsLnW4OSSCiF/XdcYuEDkdrT7qwAuqlbSpIxehHpvUnD1sHw Y0tdwOSO8D80sE9FKhPpecfVGIjjcUtdRG35CoLWjgqHqjMUbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ97GTvJxkcaoWSANlCyyBvH0h0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNjQ5MTg5YjQtYmZjMC0z NWI0LTkzMWItNDVlMjg0Mzk0OWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjPDXC+yfX4zdwRLK81jbpVqDk9zHmEBIY9MRt9v18X95CELEgS9ENS aBFyTdZTgeVXjzAL2xG1iwREDY14LqD34X07dErefQv7hFu33SDY14/DHua4WoNz HmGnB3jf1cNVMyRUtraP0Wz5cN6xABELrwIGbaY9jGGsKzwzDeIREErTnMKTjvaa clJ8htqAwzgmSqd4HpN5P8VHsZxbKFmOimn9qt4dcm+Uy5Vx+qUQADr9WS01CKM+ qRN5yhKPAyaCHQAOkytRuTC6JsB4WRZnOHcpjxcKbsfeUGZ6WEDh8NgPrIwl3FXG B/6QrNfucS+oT1qq6wdwXerd9YOjsgY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:04 2025 by rpki-client