$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fd6bc71-c754-3d0d-9333-9280e5b663a6.roa File: 7fd6bc71-c754-3d0d-9333-9280e5b663a6.roa (raw, json) Hash identifier: /DQdH0mcVGVMSoZiAxfjDLM0halnXGtdJiGeyzN/7eE= Subject key identifier: 30:BB:FB:FA:AD:34:07:51:E2:5D:5C:B4:3C:81:B5:D1:15:D5:E0:CB Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B821D81ACA6644C29EA50BE00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fd6bc71-c754-3d0d-9333-9280e5b663a6.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 36183 IP address blocks: 172.225.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:81:ac:a6:64:4c:29:ea:50:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=4b5dd582-58ec-4951-a561-cabb9f4d570e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:4c:8b:0f:ed:68:18:03:dc:39:4f:85:2f: fe:39:19:45:96:2a:18:63:17:18:ba:c7:76:96:fb: 79:87:02:f5:ae:ba:fa:79:be:15:a1:d3:51:e6:5d: 52:0d:2d:c2:d2:26:ba:b0:6e:1d:46:fd:2d:33:86: c7:a9:12:23:7d:09:c8:90:62:a8:e1:c7:1f:39:be: 8a:d7:a2:09:35:99:c1:19:fd:30:b4:e7:4a:4e:14: da:6d:9a:52:d6:ee:e3:49:63:f8:76:45:26:6b:53: a9:ae:cd:cc:07:50:3a:2f:b0:aa:c4:81:2b:98:72: 38:f6:40:85:2d:9f:07:19:d1:48:71:4e:6f:68:71: 6e:4c:21:25:a7:79:40:c2:fb:52:d7:fb:5f:70:b1: ee:23:9b:5e:f3:ee:9e:9a:e1:2b:47:eb:59:ff:a6: 1b:e1:bf:17:e6:d9:ac:60:37:30:db:8f:f7:c4:9f: c8:f3:d9:82:f6:d6:72:8b:4e:6c:27:a8:d1:b0:46: 99:61:ad:84:2e:4b:c3:2a:2e:da:45:6c:3b:4a:da: 49:c8:85:4c:7d:e1:69:f3:30:a3:f3:b3:f0:0a:12: 4a:f2:39:55:81:d4:e5:e1:fe:55:70:9f:44:b2:01: 00:0d:3e:9c:44:eb:8b:97:5e:5f:14:95:1c:64:a3: 08:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:BB:FB:FA:AD:34:07:51:E2:5D:5C:B4:3C:81:B5:D1:15:D5:E0:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7fd6bc71-c754-3d0d-9333-9280e5b663a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:1a:31:14:3d:f1:ab:60:77:b3:5a:78:ee:3f:1a:2c:fb:0e: cf:d1:a7:1b:42:ff:d9:fa:e3:3d:a7:5f:97:0d:b4:a5:66:48: 96:73:15:46:37:59:84:b4:f4:33:e9:0a:16:ac:85:f4:5f:d8: ca:97:2e:3f:b3:53:9f:a3:cd:29:17:8e:6d:42:00:c3:54:20: 6f:f7:98:13:28:a6:e9:3f:11:4f:76:e6:18:2d:5f:d4:d9:1b: 4b:ed:fe:3a:91:75:9c:59:5a:eb:89:6f:fd:bd:1a:0a:46:f1: f5:07:b7:60:5f:00:74:84:83:57:c9:23:22:67:a8:e8:c7:cd: 8f:7b:bf:92:cd:e1:c7:e4:80:2a:bc:1a:35:ae:9a:77:94:1c: 19:82:ec:e3:37:a8:4b:73:0c:b8:1d:9f:1b:0d:b8:98:b6:ad: 32:b6:45:f2:66:0e:da:2f:ae:38:14:bd:e3:63:96:3f:c3:42: 58:22:76:75:09:7f:4c:f2:de:f5:38:b0:61:a4:a8:41:5e:d0: b9:bc:39:61:cd:a4:e0:41:a1:ca:c0:8e:f2:ea:c7:8c:29:8d: 5d:af:04:c4:30:87:4e:2e:94:b3:ef:8f:d7:d9:58:4c:78:1b: 8b:c4:62:32:72:d8:a5:87:19:0b:e9:f4:08:9c:68:58:1b:41: 98:30:9f:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHYGspmRMKepQvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NGI1ZGQ1ODItNThlYy00OTUxLWE1NjEtY2FiYjlmNGQ1NzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdlMiw/taBgD3DlPhS/+ORlFlioYYxcYusd2 lvt5hwL1rrr6eb4VodNR5l1SDS3C0ia6sG4dRv0tM4bHqRIjfQnIkGKo4ccfOb6K 16IJNZnBGf0wtOdKThTabZpS1u7jSWP4dkUma1Oprs3MB1A6L7CqxIErmHI49kCF LZ8HGdFIcU5vaHFuTCElp3lAwvtS1/tfcLHuI5te8+6emuErR+tZ/6Yb4b8X5tms YDcw24/3xJ/I89mC9tZyi05sJ6jRsEaZYa2ELkvDKi7aRWw7StpJyIVMfeFp8zCj 87PwChJK8jlVgdTl4f5VcJ9EsgEADT6cROuLl15fFJUcZKMIEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDC7+/qtNAdR4l1ctDyBtdEV1eDLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvN2ZkNmJjNzEtYzc1NC0z ZDBkLTkzMzMtOTI4MGU1YjY2M2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOErMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsaMRQ98atgd7NaeO4/Giz7Ds/RpxtC/9n64z2nX5cNtKVmSJZzFUY3 WYS09DPpChashfRf2MqXLj+zU5+jzSkXjm1CAMNUIG/3mBMopuk/EU925hgtX9TZ G0vt/jqRdZxZWuuJb/29GgpG8fUHt2BfAHSEg1fJIyJnqOjHzY97v5LN4cfkgCq8 GjWumneUHBmC7OM3qEtzDLgdnxsNuJi2rTK2RfJmDtovrjgUveNjlj/DQlgidnUJ f0zy3vU4sGGkqEFe0Lm8OWHNpOBBocrAjvLqx4wpjV2vBMQwh04ulLPvj9fZWEx4 G4vEYjJy2KWHGQvp9AicaFgbQZgwn48= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:56 2025 by rpki-client