$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f93ed7-442a-3a28-8eaf-48a8e51bd8ac.roa File: 79f93ed7-442a-3a28-8eaf-48a8e51bd8ac.roa (raw, json) Hash identifier: 262maew+umt5DP1vL37kWA1GYZayrn5kqavAO41li4A= Subject key identifier: 80:B2:AA:DF:C8:19:C9:D2:1A:B0:35:58:09:5D:7B:16:A2:D4:44:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B821D8265825D9E834112F780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f93ed7-442a-3a28-8eaf-48a8e51bd8ac.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 36183 IP address blocks: 172.225.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:82:65:82:5d:9e:83:41:12:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=584701cd-940c-4913-801d-2fc911aebdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2b:70:01:5c:23:e2:34:85:9d:84:b2:b7:37: 5e:0a:39:65:7c:e4:c6:47:50:d2:61:3c:f2:5e:00: a0:93:7b:d4:59:ff:94:af:55:af:ce:59:99:f3:f9: 9e:25:e7:71:98:d8:32:1b:15:a9:84:3f:b2:86:c4: 25:8a:2c:d1:0e:fe:b2:f8:70:27:92:9b:e0:f4:3c: 4c:23:4b:e2:ff:87:6a:2a:07:e5:34:21:4f:e9:af: 3f:d7:66:ad:8e:e3:32:1a:fc:70:7a:a5:02:aa:a6: ad:ba:e8:de:2e:a2:f2:ea:7a:cb:5c:89:d8:ce:85: 8c:bc:07:12:10:03:48:96:cb:bb:0e:b0:71:6d:0a: d0:b7:5f:e6:e4:30:ce:e9:12:75:a3:3b:51:2d:94: cf:3d:e4:8f:b6:1e:d1:af:86:5b:77:9d:4d:3f:1e: 8a:42:31:e2:2b:75:eb:c4:73:bd:6a:1d:a7:08:9f: 4b:26:1d:2e:d6:95:6f:8d:8d:87:85:43:b8:ef:39: 89:12:e4:d6:22:e0:20:81:b8:c8:da:60:2d:a4:d0: ac:74:ca:8a:f1:88:e9:f7:e8:26:93:5b:be:da:05: 53:6b:61:e6:57:c3:91:4a:70:46:c3:73:06:18:b2: 4b:40:8e:1d:75:0f:37:2c:57:5a:e4:d6:ab:7b:33: 14:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B2:AA:DF:C8:19:C9:D2:1A:B0:35:58:09:5D:7B:16:A2:D4:44:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/79f93ed7-442a-3a28-8eaf-48a8e51bd8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:78:42:63:de:e1:93:00:73:ce:2b:f5:7c:be:ab:1f:93:cf: 20:91:d6:d5:e5:cb:c4:a5:92:a0:93:7b:c7:67:4f:8a:b9:58: 99:c2:01:f7:d5:65:7f:e4:7b:b6:7a:5b:e3:b0:ca:cd:0c:0f: d9:b0:54:d8:67:c9:5c:3e:9e:da:e3:fa:9c:34:29:ad:74:87: 1b:27:10:2f:62:18:88:b3:dc:53:ba:dd:0b:df:10:b8:ee:4d: 73:e3:ee:29:3c:f1:50:fd:42:ef:a2:31:94:2c:c1:8c:63:fc: b5:8a:40:f6:49:06:25:b9:75:d7:11:74:7a:b6:15:dc:9f:13: 94:64:90:74:54:16:1f:e6:08:4c:f9:70:fb:a0:97:7d:8d:a8: 83:ea:ac:63:85:bf:6f:80:40:3d:f8:e6:7f:26:fc:bd:e2:b6: 2d:d1:42:05:3d:8b:aa:b3:0b:48:97:30:af:0a:ad:f4:d4:39: 42:60:a3:c3:62:59:a3:92:08:e5:59:08:c3:64:61:5f:f1:76: b6:ce:90:a9:ff:3b:89:f6:df:25:a7:49:44:45:23:f1:8d:f2: 91:a0:2b:7e:df:e7:bb:8a:6c:98:ac:f7:d3:55:62:3f:31:7c: 58:35:4a:2d:8f:f2:f2:5f:46:57:62:41:a9:a0:f3:58:5e:82: c2:2d:ed:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHYJlgl2eg0ES94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NTg0NzAxY2QtOTQwYy00OTEzLTgwMWQtMmZjOTExYWViZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgytwAVwj4jSFnYSytzdeCjllfOTGR1DSYTzy XgCgk3vUWf+Ur1WvzlmZ8/meJedxmNgyGxWphD+yhsQliizRDv6y+HAnkpvg9DxM I0vi/4dqKgflNCFP6a8/12atjuMyGvxweqUCqqatuujeLqLy6nrLXInYzoWMvAcS EANIlsu7DrBxbQrQt1/m5DDO6RJ1oztRLZTPPeSPth7Rr4Zbd51NPx6KQjHiK3Xr xHO9ah2nCJ9LJh0u1pVvjY2HhUO47zmJEuTWIuAggbjI2mAtpNCsdMqK8Yjp9+gm k1u+2gVTa2HmV8ORSnBGw3MGGLJLQI4ddQ83LFda5NarezMUlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICyqt/IGcnSGrA1WAldexai1ESCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNzlmOTNlZDctNDQyYS0z YTI4LThlYWYtNDhhOGU1MWJkOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOE/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN4QmPe4ZMAc84r9Xy+qx+TzyCR1tXly8SlkqCTe8dnT4q5WJnCAffV ZX/ke7Z6W+Owys0MD9mwVNhnyVw+ntrj+pw0Ka10hxsnEC9iGIiz3FO63QvfELju TXPj7ik88VD9Qu+iMZQswYxj/LWKQPZJBiW5ddcRdHq2FdyfE5RkkHRUFh/mCEz5 cPugl32NqIPqrGOFv2+AQD345n8m/L3iti3RQgU9i6qzC0iXMK8KrfTUOUJgo8Ni WaOSCOVZCMNkYV/xdrbOkKn/O4n23yWnSURFI/GN8pGgK37f57uKbJis99NVYj8x fFg1Si2P8vJfRldiQamg81hegsIt7f8= -----END CERTIFICATE-----Generated at Mon Oct 20 15:23:12 2025 by rpki-client