$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9117d7be-37c1-3d2d-b08b-fb93d8453276.roa File: 9117d7be-37c1-3d2d-b08b-fb93d8453276.roa (raw, json) Hash identifier: sMrePrn4eCj/Q18CAigs8wayhdSx36D4RcP0QO4IyrI= Subject key identifier: 1E:F4:0C:59:0E:12:4B:03:EB:AF:33:8A:B6:13:23:31:45:E2:C8:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7B21FCA208927AA0125E1E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9117d7be-37c1-3d2d-b08b-fb93d8453276.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:fc:a2:08:92:7a:a0:12:5e:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=bdc57dfc-aff7-4445-93fa-a450b0be699d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:86:ad:14:9b:d9:5e:a5:31:a7:c3:da:0d:dc: 9e:50:ef:37:d1:88:a3:82:a9:2a:aa:57:3b:63:4d: 08:26:f2:04:8b:61:01:dc:ff:f5:f2:85:68:28:db: eb:78:a6:04:6c:86:ab:72:c2:c7:b3:79:c4:57:5e: f8:36:56:43:82:02:f0:f6:41:50:1d:06:ac:6f:83: f0:d5:02:86:d4:b7:df:47:fb:24:23:a6:8a:6a:0b: ac:e9:85:34:3c:59:fd:bf:cc:7a:d4:50:11:89:7b: 59:93:df:0d:b4:60:57:cc:8f:fd:ff:52:51:79:8f: a5:75:ab:da:bd:d7:9d:f2:e3:92:fb:5f:7f:f2:05: 8e:23:af:d8:c1:ff:77:ed:84:a4:b2:21:3c:6e:99: 26:a5:92:1b:6d:43:5a:be:3e:d7:ea:c8:19:32:63: 0f:04:a6:75:1d:1b:d7:38:50:35:04:0b:ee:f5:de: b6:05:a9:36:6b:bb:24:bf:11:2b:c9:68:a6:63:4a: db:b5:92:fc:d6:6f:23:25:1c:55:48:28:fe:c2:31: 8e:2f:92:0a:29:d9:52:c7:36:2c:40:21:eb:b3:b4: 34:88:97:fb:b4:39:0c:74:c2:ef:91:d8:0b:bc:73: 09:b7:ee:d5:2c:6c:34:c5:36:7b:05:61:5f:25:c3: 94:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F4:0C:59:0E:12:4B:03:EB:AF:33:8A:B6:13:23:31:45:E2:C8:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9117d7be-37c1-3d2d-b08b-fb93d8453276.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:2e:bd:e2:55:03:49:83:bf:f8:da:99:37:6f:6e:c1:ea:fc: f9:96:af:af:46:ce:b9:e6:f2:24:85:3e:e7:61:68:de:12:ad: e2:9d:a3:8c:f2:b2:59:cc:df:a1:bb:fb:a3:59:c1:b1:f5:17: 6c:64:98:3d:f5:bb:5d:93:7b:f1:58:01:b5:10:cf:29:3b:df: 17:8f:09:4f:39:3d:be:96:a8:26:a7:a0:2a:5b:aa:3b:73:08: 4d:83:0d:16:df:5d:cf:e5:f1:99:57:b6:8a:7d:24:57:7d:bd: 0d:bb:2a:3a:0c:d6:07:a7:f2:e6:3d:e4:c7:d1:82:c2:a4:2b: a9:20:f2:98:9a:f3:85:df:de:b6:59:a2:11:19:03:64:e6:8f: 3f:fa:66:54:c5:b7:4e:a6:5d:b5:45:f1:2a:25:fb:e5:c5:94: 09:ee:90:d9:cd:c7:b6:80:ec:08:34:ee:2c:af:ec:8d:6f:9f: 91:53:e8:8e:34:49:98:da:45:97:7f:fc:32:33:6a:fb:92:c6: bf:dd:62:d5:22:65:77:e1:8c:cd:24:f9:92:6f:b6:d9:31:73: 85:ca:b7:14:42:0e:d1:1b:cb:ae:20:bb:59:2d:da:06:75:2e: d0:6a:b7:02:45:94:2f:c8:e1:39:bf:b1:0d:42:f4:bf:93:32: 78:56:34:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfyiCJJ6oBJeHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk YmRjNTdkZmMtYWZmNy00NDQ1LTkzZmEtYTQ1MGIwYmU2OTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIatFJvZXqUxp8PaDdyeUO830Yijgqkqqlc7 Y00IJvIEi2EB3P/18oVoKNvreKYEbIarcsLHs3nEV174NlZDggLw9kFQHQasb4Pw 1QKG1LffR/skI6aKagus6YU0PFn9v8x61FARiXtZk98NtGBXzI/9/1JReY+ldava vded8uOS+19/8gWOI6/Ywf937YSksiE8bpkmpZIbbUNavj7X6sgZMmMPBKZ1HRvX OFA1BAvu9d62Bak2a7skvxEryWimY0rbtZL81m8jJRxVSCj+wjGOL5IKKdlSxzYs QCHrs7Q0iJf7tDkMdMLvkdgLvHMJt+7VLGw0xTZ7BWFfJcOUqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB70DFkOEksD668zirYTIzFF4sjEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTExN2Q3YmUtMzdjMS0z ZDJkLWIwOGItZmI5M2Q4NDUzMjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOF/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYuveJVA0mDv/jamTdvbsHq/PmWr69Gzrnm8iSFPudhaN4SreKdo4zy slnM36G7+6NZwbH1F2xkmD31u12Te/FYAbUQzyk73xePCU85Pb6WqCanoCpbqjtz CE2DDRbfXc/l8ZlXtop9JFd9vQ27KjoM1gen8uY95MfRgsKkK6kg8pia84Xf3rZZ ohEZA2Tmjz/6ZlTFt06mXbVF8Sol++XFlAnukNnNx7aA7Ag07iyv7I1vn5FT6I40 SZjaRZd//DIzavuSxr/dYtUiZXfhjM0k+ZJvttkxc4XKtxRCDtEby64gu1kt2gZ1 LtBqtwJFlC/I4Tm/sQ1C9L+TMnhWNNM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:43 2025 by rpki-client