$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a31d15c-be9f-3a94-a0a9-0945319ba794.roa File: 6a31d15c-be9f-3a94-a0a9-0945319ba794.roa (raw, json) Hash identifier: 4OfJzRlPdsULKw0J/wSU6EeZE3WONh3yLiBcZUEsfXU= Subject key identifier: B8:30:01:A8:16:A7:6F:99:CA:78:E3:A5:AC:9E:48:93:B9:70:A7:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B21CC22332137BADB454EB520 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a31d15c-be9f-3a94-a0a9-0945319ba794.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 63949 IP address blocks: 172.233.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:22:33:21:37:ba:db:45:4e:b5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=70ca1a31-e4c7-4690-a484-49b80117b9fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:8c:f7:64:bf:92:8b:29:6f:5b:33:68:40:28: 30:b2:af:45:28:e7:2d:09:4c:f8:5d:2f:5a:2f:db: fe:7e:42:cc:e3:61:72:ef:9a:ca:01:2a:31:e1:0d: e6:52:54:b9:a7:22:db:d9:80:74:ba:ca:59:d9:cb: fd:52:6c:14:4f:5b:76:90:81:fe:fc:dc:45:88:fd: 86:a6:47:c4:51:dd:e2:49:e0:84:94:de:ae:5e:e8: e4:2b:60:63:be:d1:87:60:20:06:56:f3:d0:25:b6: 02:51:d8:57:70:39:d7:77:87:9f:9b:e5:b3:22:47: 09:9e:1b:f3:6d:4a:12:ed:7c:b9:fd:ec:6a:6d:ba: 0e:a6:70:f7:27:70:f0:e6:e6:1e:db:86:ce:6f:47: be:9e:bf:1e:19:c4:90:54:00:53:4f:98:cf:3c:63: 89:3c:f3:d2:fc:c2:c9:ac:b0:bb:80:df:e8:d0:1c: 58:8b:9a:7e:66:ff:9e:fa:76:3f:56:fc:d5:ce:ba: af:1d:16:4c:cb:fd:e2:81:33:c3:83:e5:bf:a7:31: 06:80:a5:19:91:f1:91:99:c8:bc:07:f0:fe:60:3d: e6:fd:0e:ea:77:e8:77:f5:6b:36:82:60:36:bb:8b: c0:48:fb:f1:e8:a5:d0:b4:d5:dc:57:e1:18:0a:8e: 4e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:30:01:A8:16:A7:6F:99:CA:78:E3:A5:AC:9E:48:93:B9:70:A7:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6a31d15c-be9f-3a94-a0a9-0945319ba794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.233.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:78:67:7a:a6:d7:35:7f:27:c2:f6:ff:bf:1b:f3:8e:7b:d1: 29:d2:ba:0d:53:8b:5d:7c:ee:40:76:6a:3f:f5:f2:7a:a3:76: b0:e8:75:0f:ae:b1:93:49:9d:20:6f:95:c7:47:25:63:1c:9b: 51:7a:ed:c4:1f:c7:09:33:7d:01:8b:9e:7d:fc:c0:b8:d8:1e: c1:d5:f6:c0:d9:a1:55:8f:7c:d0:3e:fd:31:70:b2:60:d0:eb: 29:c0:33:86:56:e0:4f:4f:54:ac:e6:12:57:38:c8:8a:95:a1: b0:33:d7:45:6f:ba:d4:24:ac:85:4e:bc:79:3a:55:ac:6c:5b: 63:32:e6:d8:5a:9a:e8:74:da:34:1a:ea:40:5d:35:ce:3f:31: d0:c9:e2:b0:66:77:9b:90:df:72:68:55:0f:6e:7a:a4:8e:a6: 75:c4:6a:8b:3e:9a:33:96:74:17:f4:b8:ff:36:b7:5e:18:db: 74:e1:5b:b7:dd:d4:cc:38:18:75:2c:5d:8a:30:c5:c3:a0:7a: 6e:61:07:8e:bb:0b:3e:46:41:fb:d3:d5:6a:48:88:6b:1a:65: 69:50:ed:de:ba:a1:5b:bc:68:72:3a:0f:b1:9a:f8:6c:ca:e6: c7:eb:24:37:4a:0c:61:62:76:3c:d7:f4:bf:ca:e9:96:5e:a1: 73:c4:00:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzCIzITe620VOtSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk NzBjYTFhMzEtZTRjNy00NjkwLWE0ODQtNDliODAxMTdiOWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoz3ZL+SiylvWzNoQCgwsq9FKOctCUz4XS9a L9v+fkLM42Fy75rKASox4Q3mUlS5pyLb2YB0uspZ2cv9UmwUT1t2kIH+/NxFiP2G pkfEUd3iSeCElN6uXujkK2BjvtGHYCAGVvPQJbYCUdhXcDnXd4efm+WzIkcJnhvz bUoS7Xy5/exqbboOpnD3J3Dw5uYe24bOb0e+nr8eGcSQVABTT5jPPGOJPPPS/MLJ rLC7gN/o0BxYi5p+Zv+e+nY/VvzVzrqvHRZMy/3igTPDg+W/pzEGgKUZkfGRmci8 B/D+YD3m/Q7qd+h39Ws2gmA2u4vASPvx6KXQtNXcV+EYCo5OoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgwAagWp2+ZynjjpayeSJO5cKcgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmEzMWQxNWMtYmU5Zi0z YTk0LWEwYTktMDk0NTMxOWJhNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErOnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh4Z3qm1zV/J8L2/78b84570SnSug1Ti1187kB2aj/18nqjdrDodQ+u sZNJnSBvlcdHJWMcm1F67cQfxwkzfQGLnn38wLjYHsHV9sDZoVWPfNA+/TFwsmDQ 6ynAM4ZW4E9PVKzmElc4yIqVobAz10VvutQkrIVOvHk6VaxsW2My5thamuh02jQa 6kBdNc4/MdDJ4rBmd5uQ33JoVQ9ueqSOpnXEaos+mjOWdBf0uP82t14Y23ThW7fd 1Mw4GHUsXYowxcOgem5hB467Cz5GQfvT1WpIiGsaZWlQ7d66oVu8aHI6D7Ga+GzK 5sfrJDdKDGFidjzX9L/K6ZZeoXPEAJA= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:02 2025 by rpki-client