$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7444bf38-3dda-388c-b825-9312daf39f7e.roa File: 7444bf38-3dda-388c-b825-9312daf39f7e.roa (raw, json) Hash identifier: lx4rT887AS60gYxSfAt3sjsCNJA5U4Ivn5yZ4kgLfLI= Subject key identifier: BA:D5:52:03:BB:BC:18:A2:1F:D9:C0:6C:E0:AC:47:AC:C9:23:96:95 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B821E1E9C4DE08780E7DC4D80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7444bf38-3dda-388c-b825-9312daf39f7e.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 36183 IP address blocks: 172.225.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:1e:9c:4d:e0:87:80:e7:dc:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=80346b02-ef81-4f1d-a1dc-f54d77363151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ef:12:80:8c:d8:bb:f0:7a:5c:c7:04:d1:d8: 2c:c4:21:09:03:9f:3b:7d:8f:4d:c4:cc:fa:bb:f3: 1e:65:1f:85:a6:e8:04:a4:34:20:01:61:4e:9f:12: be:71:ac:73:1c:71:69:eb:e7:d4:82:30:d7:17:ef: b0:3a:be:4d:94:0c:40:45:9a:4c:56:a9:f3:b9:23: 0d:9e:fe:96:c7:20:b4:dd:7a:09:94:2c:c3:bc:7e: ac:ce:05:5f:fd:f7:68:d7:de:18:68:ca:1f:a2:0d: d2:04:0b:be:5b:e5:81:16:34:7b:1b:9d:46:f9:c4: 02:a4:ec:25:a6:9e:ae:3b:5c:f8:0c:78:23:0a:13: 63:fe:d5:f6:5a:5e:74:22:cc:a1:bf:5f:8c:e3:0d: 43:4f:cd:3f:a5:d6:f4:15:af:ca:fb:18:89:83:01: 4a:2e:29:f6:c1:0d:16:a6:a3:72:7b:b0:36:6b:76: 2a:14:ee:9a:a7:b2:8e:b0:a4:51:32:e2:a9:fa:28: 11:5f:61:60:c0:2c:00:2e:23:9a:bf:11:5c:ab:e9: 15:b5:b2:46:a5:14:37:1a:8c:65:be:d4:9f:46:91: e7:cb:50:4c:b8:f0:d9:37:c0:88:7e:1b:33:8e:58: 66:bd:7e:f9:5f:e6:c9:77:2d:e8:a5:8b:c7:54:a8: 3d:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D5:52:03:BB:BC:18:A2:1F:D9:C0:6C:E0:AC:47:AC:C9:23:96:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7444bf38-3dda-388c-b825-9312daf39f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:d7:49:36:83:52:ec:56:a4:9b:87:0c:25:a6:e5:41:aa:a7: dd:a6:98:b2:7d:5d:03:88:d1:23:e2:01:ae:76:33:8c:e3:6a: b2:19:a4:85:d6:f9:63:9e:08:ac:41:9d:1b:56:9d:3a:ea:04: be:d6:a4:03:3e:3a:be:62:0a:ee:ed:43:0c:a8:2e:f8:e5:eb: 75:43:1f:39:1e:83:81:b2:43:74:9d:40:d3:92:21:bf:57:37: 0c:a8:72:02:12:82:39:bb:e5:53:7a:c6:b7:62:5f:e4:23:91: f9:71:67:83:b3:f8:cf:06:aa:7e:db:93:31:e2:17:c2:cc:74: 7e:87:5a:8c:bd:74:38:9b:12:ea:f2:0e:77:66:54:d6:99:50: 1a:7d:2e:a9:dc:20:b1:3b:24:91:a0:77:11:f6:fd:cb:b1:72: 3e:41:cd:c8:f5:80:da:63:37:5f:c6:4c:23:d4:76:d9:38:42: 71:e3:25:3b:12:c6:33:4b:e1:d5:44:89:fb:d9:08:07:b9:12: c2:0e:9a:f0:3f:b2:0f:19:0f:4a:cf:67:c3:29:c4:70:8e:bc: 10:ba:6f:40:4d:8d:8f:d9:29:e5:72:e3:17:10:dd:ba:95:1b: 5b:b5:02:85:d3:06:4b:e0:f7:f3:61:13:46:82:62:07:11:c6: 6f:37:da:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHh6cTeCHgOfcTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ODAzNDZiMDItZWY4MS00ZjFkLWExZGMtZjU0ZDc3MzYzMTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe8SgIzYu/B6XMcE0dgsxCEJA587fY9NxMz6 u/MeZR+FpugEpDQgAWFOnxK+caxzHHFp6+fUgjDXF++wOr5NlAxARZpMVqnzuSMN nv6WxyC03XoJlCzDvH6szgVf/fdo194YaMofog3SBAu+W+WBFjR7G51G+cQCpOwl pp6uO1z4DHgjChNj/tX2Wl50Isyhv1+M4w1DT80/pdb0Fa/K+xiJgwFKLin2wQ0W pqNye7A2a3YqFO6ap7KOsKRRMuKp+igRX2FgwCwALiOavxFcq+kVtbJGpRQ3Goxl vtSfRpHny1BMuPDZN8CIfhszjlhmvX75X+bJdy3opYvHVKg91wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrVUgO7vBiiH9nAbOCsR6zJI5aVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzQ0NGJmMzgtM2RkYS0z ODhjLWI4MjUtOTMxMmRhZjM5ZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOE0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfXSTaDUuxWpJuHDCWm5UGqp92mmLJ9XQOI0SPiAa52M4zjarIZpIXW +WOeCKxBnRtWnTrqBL7WpAM+Or5iCu7tQwyoLvjl63VDHzkeg4GyQ3SdQNOSIb9X NwyocgISgjm75VN6xrdiX+QjkflxZ4Oz+M8Gqn7bkzHiF8LMdH6HWoy9dDibEury DndmVNaZUBp9LqncILE7JJGgdxH2/cuxcj5Bzcj1gNpjN1/GTCPUdtk4QnHjJTsS xjNL4dVEifvZCAe5EsIOmvA/sg8ZD0rPZ8MpxHCOvBC6b0BNjY/ZKeVy4xcQ3bqV G1u1AoXTBkvg9/NhE0aCYgcRxm832gw= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:58 2025 by rpki-client