$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa File: 94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa (raw, json) Hash identifier: e9F0QLu2QG4S6R1WtiTP5mmX4XwGnw/niVvw2qK6vm8= Subject key identifier: FF:8E:98:7F:F7:E6:09:AC:B3:06:99:10:22:B4:3B:CE:E3:BF:4A:C5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8EACFE9DA6243ED7EC36478C Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 63949 IP address blocks: 172.235.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:fe:9d:a6:24:3e:d7:ec:36:47:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=d5b09c36-241a-46c0-87c1-e238e2705920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:98:95:ef:f6:35:52:33:31:c5:db:d4:19:86: d1:bc:9f:25:8b:f1:01:3b:52:6d:91:72:d8:56:e8: 99:63:f1:8f:ff:25:5f:f2:8a:73:4a:2c:24:60:95: f4:40:fa:67:02:58:22:34:47:a5:bb:76:74:00:8b: c8:e2:98:0c:26:d8:23:73:35:c1:16:e1:a6:ba:6e: e2:1a:a0:0e:74:d6:fb:c1:79:51:79:ae:31:fd:5b: 25:96:06:60:1d:f6:84:28:c3:22:c6:5b:e2:0b:4d: a6:7d:4b:06:45:6c:55:6b:48:50:37:63:f6:e2:eb: 7f:8b:fa:7a:0a:58:39:5b:3c:d4:16:2c:59:b1:81: 5e:7d:64:0a:c5:75:c4:7c:9b:eb:54:f4:6e:1c:a7: 94:71:80:93:e8:0e:de:9e:b5:8f:cf:d4:32:4f:78: 6c:32:50:46:7d:ff:15:fa:77:57:0b:17:c8:c8:0f: c2:fc:04:a9:ae:ee:51:c1:cd:ab:c7:6a:d1:b0:20: 3d:11:11:08:14:42:a0:ee:17:9d:36:ed:00:22:4d: 49:7a:a6:ad:4f:ae:51:4d:9b:0a:09:b4:fb:82:41: 49:a3:57:7f:2b:f5:08:57:1b:1f:35:33:85:71:f3: fd:1d:25:7e:49:ed:0c:e1:20:01:87:b6:11:26:07: 41:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8E:98:7F:F7:E6:09:AC:B3:06:99:10:22:B4:3B:CE:E3:BF:4A:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94965f57-c948-32a4-8bc5-c31f18fdb0d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c9:59:15:b2:79:6a:bb:0b:34:73:57:40:d5:e8:7f:3a:d3: 28:73:1f:5c:91:ea:1c:5d:ed:18:3f:8d:69:db:b0:0b:82:9b: 5f:fc:ea:2b:5e:af:71:16:52:31:79:70:7d:c1:63:ce:06:03: 0c:c1:af:5c:42:df:51:13:02:49:ca:e4:47:3c:5c:94:1f:49: 29:ba:84:74:39:a1:24:8c:77:fb:6f:fd:2d:c5:db:32:0b:d4: 0a:0d:95:d2:57:9e:4e:fc:f8:f9:84:35:fa:c0:0b:ca:c3:5e: 51:ad:af:bf:4e:9f:b9:b8:85:2e:ac:44:8c:0f:cc:f2:82:17: 04:54:b1:76:43:6b:9d:6b:86:e5:d0:f1:7d:60:cd:67:f3:ab: be:d1:98:6a:23:ea:bf:76:b4:03:a3:f1:61:71:63:ee:4b:26: 00:c7:ec:e0:af:15:8a:e5:17:db:70:c2:20:09:d2:74:76:fa: 7a:c2:08:bb:89:5c:d9:1e:e1:96:1d:6b:3e:ef:6a:26:40:ec: e7:89:20:69:8d:fe:38:f4:df:e2:66:cc:bf:01:97:8d:f3:fc: f7:14:51:c5:93:2f:d9:cf:59:1b:b5:dd:7d:34:a8:e5:6d:85: ad:d1:be:de:f6:e2:4e:09:77:85:36:78:a8:13:55:3c:03:76: e8:59:42:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrP6dpiQ+1+w2R4wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZDViMDljMzYtMjQxYS00NmMwLTg3YzEtZTIzOGUyNzA1OTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5iV7/Y1UjMxxdvUGYbRvJ8li/EBO1JtkXLY VuiZY/GP/yVf8opzSiwkYJX0QPpnAlgiNEelu3Z0AIvI4pgMJtgjczXBFuGmum7i GqAOdNb7wXlRea4x/VsllgZgHfaEKMMixlviC02mfUsGRWxVa0hQN2P24ut/i/p6 Clg5WzzUFixZsYFefWQKxXXEfJvrVPRuHKeUcYCT6A7enrWPz9QyT3hsMlBGff8V +ndXCxfIyA/C/ASpru5Rwc2rx2rRsCA9EREIFEKg7hedNu0AIk1JeqatT65RTZsK CbT7gkFJo1d/K/UIVxsfNTOFcfP9HSV+Se0M4SABh7YRJgdBNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+OmH/35gmsswaZECK0O87jv0rFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTQ5NjVmNTctYzk0OC0z MmE0LThiYzUtYzMxZjE4ZmRiMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOttMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDJWRWyeWq7CzRzV0DV6H860yhzH1yR6hxd7Rg/jWnbsAuCm1/86ite r3EWUjF5cH3BY84GAwzBr1xC31ETAknK5Ec8XJQfSSm6hHQ5oSSMd/tv/S3F2zIL 1AoNldJXnk78+PmENfrAC8rDXlGtr79On7m4hS6sRIwPzPKCFwRUsXZDa51rhuXQ 8X1gzWfzq77RmGoj6r92tAOj8WFxY+5LJgDH7OCvFYrlF9twwiAJ0nR2+nrCCLuJ XNke4ZYdaz7vaiZA7OeJIGmN/jj03+JmzL8Bl43z/PcUUcWTL9nPWRu13X00qOVt ha3Rvt724k4Jd4U2eKgTVTwDduhZQlE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:24 2025 by rpki-client