$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bf059b5-f216-3f16-bd58-ebfb3da13835.roa File: 6bf059b5-f216-3f16-bd58-ebfb3da13835.roa (raw, json) Hash identifier: ztKyul+6K6gPW+uuTmCWTIsLOmI/nluv8qKgD4YgjE8= Subject key identifier: 93:EA:2C:F7:8A:B4:19:C5:62:41:F2:46:81:86:8F:D0:00:24:ED:C8 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B95A957458123F1F4ABB39040 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bf059b5-f216-3f16-bd58-ebfb3da13835.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 36183 IP address blocks: 172.224.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:57:45:81:23:f1:f4:ab:b3:90:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=17aa8bbe-78f6-4b87-8f5b-6c058622ad69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3a:99:39:35:01:03:e9:37:44:48:31:72:d0: 80:e0:7f:dd:06:f3:c7:02:28:8a:a4:48:b7:98:47: f1:ec:44:8d:28:b6:38:57:bd:69:58:f2:d5:3f:8b: 9b:45:9c:6d:aa:1a:36:b4:b2:3e:d4:66:dc:70:04: 2f:c9:6a:61:2c:c0:23:1e:4e:84:67:28:1f:bb:23: ae:09:aa:8c:1e:7d:97:90:80:6c:20:dc:12:73:8b: 60:26:a3:22:47:25:b1:6b:f5:73:85:58:93:83:35: 77:35:06:d5:84:54:1d:87:8f:b6:15:51:ef:ac:81: 46:46:62:8c:c1:7c:6d:44:f1:5f:6d:c3:74:6a:35: 01:13:65:00:29:ad:61:24:fc:65:b5:b4:d8:01:56: f7:e5:33:5b:24:c6:d5:b3:81:9e:97:34:70:a5:3d: ec:c7:8e:b2:cb:b4:bb:84:e3:a5:8a:05:4a:da:f8: a5:36:ac:bc:51:0e:d6:6a:24:87:48:6f:c3:e1:cc: 1b:76:c1:d4:17:e8:be:c5:dd:31:86:ea:b4:c9:3c: f8:3a:5d:5e:25:0b:40:74:07:d9:bf:43:b7:95:25: 4d:fd:fa:16:0e:76:02:b4:15:88:1d:6b:b4:4d:2a: 52:5a:f7:26:7a:3c:18:d0:37:01:b8:6c:0c:db:a6: 94:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EA:2C:F7:8A:B4:19:C5:62:41:F2:46:81:86:8F:D0:00:24:ED:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6bf059b5-f216-3f16-bd58-ebfb3da13835.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:60:95:b1:b4:7f:94:79:89:88:b7:ee:90:2e:ea:b1:06:c7: 79:fa:70:2c:23:c8:58:45:14:97:31:db:d0:6d:a1:17:ac:85: 42:99:f0:99:4f:0e:f0:95:eb:09:7b:2e:e8:b4:71:c7:34:3d: a3:c7:01:d0:47:fb:5e:26:be:83:c1:52:44:2f:b0:53:2d:27: b1:9a:3e:ee:01:2d:a5:d3:57:ac:cb:d2:e8:93:df:0b:99:3f: dd:7e:3f:c2:53:b0:ac:1f:fa:c3:a4:61:a8:46:da:2d:d1:12: ca:71:18:5f:74:60:6e:75:6c:29:43:1f:a5:af:20:e6:a5:99: ed:9c:c9:fd:6b:bd:6d:37:7b:6b:3d:74:68:6d:ef:30:6a:a3: 64:83:32:a0:dc:71:19:d5:e0:dd:6d:f9:ce:bf:bb:a4:39:61: 32:78:35:df:ab:55:5e:cf:22:81:44:34:56:1f:7d:9f:db:8b: 88:c9:a1:f0:6e:12:ca:52:99:3b:78:6c:15:f0:a0:2c:b7:3e: 2a:a1:99:bd:13:70:49:13:42:c6:50:52:e6:01:8c:97:2b:58: f4:6c:22:93:c9:41:14:e6:18:9b:02:38:e6:1b:fd:6a:9d:36: 35:b6:b9:ca:7a:99:c6:1c:d4:97:cd:0a:78:c5:d8:69:0a:cd: ff:24:c8:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqVdFgSPx9KuzkEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTdhYThiYmUtNzhmNi00Yjg3LThmNWItNmMwNTg2MjJhZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizqZOTUBA+k3REgxctCA4H/dBvPHAiiKpEi3 mEfx7ESNKLY4V71pWPLVP4ubRZxtqho2tLI+1GbccAQvyWphLMAjHk6EZygfuyOu CaqMHn2XkIBsINwSc4tgJqMiRyWxa/VzhViTgzV3NQbVhFQdh4+2FVHvrIFGRmKM wXxtRPFfbcN0ajUBE2UAKa1hJPxltbTYAVb35TNbJMbVs4GelzRwpT3sx46yy7S7 hOOligVK2vilNqy8UQ7WaiSHSG/D4cwbdsHUF+i+xd0xhuq0yTz4Ol1eJQtAdAfZ v0O3lSVN/foWDnYCtBWIHWu0TSpSWvcmejwY0DcBuGwM26aUtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPqLPeKtBnFYkHyRoGGj9AAJO3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmJmMDU5YjUtZjIxNi0z ZjE2LWJkNTgtZWJmYjNkYTEzODM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOB+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdglbG0f5R5iYi37pAu6rEGx3n6cCwjyFhFFJcx29BtoReshUKZ8JlP DvCV6wl7Lui0ccc0PaPHAdBH+14mvoPBUkQvsFMtJ7GaPu4BLaXTV6zL0uiT3wuZ P91+P8JTsKwf+sOkYahG2i3REspxGF90YG51bClDH6WvIOalme2cyf1rvW03e2s9 dGht7zBqo2SDMqDccRnV4N1t+c6/u6Q5YTJ4Nd+rVV7PIoFENFYffZ/bi4jJofBu EspSmTt4bBXwoCy3Piqhmb0TcEkTQsZQUuYBjJcrWPRsIpPJQRTmGJsCOOYb/Wqd NjW2ucp6mcYc1JfNCnjF2GkKzf8kyOc= -----END CERTIFICATE-----Generated at Mon Oct 20 15:31:02 2025 by rpki-client