$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97287c3d-7879-3b8a-a1ff-79f4bcf8c7ec.roa File: 97287c3d-7879-3b8a-a1ff-79f4bcf8c7ec.roa (raw, json) Hash identifier: cmIDiQA0aA/YUPCAOViG9gWMaMY2rabN1OIidM5x5Fo= Subject key identifier: BC:E5:25:54:5C:A5:C9:48:2E:1D:1C:87:BE:2B:3D:C5:98:81:DD:57 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B821D81226122A41842AECB40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97287c3d-7879-3b8a-a1ff-79f4bcf8c7ec.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 36183 IP address blocks: 172.225.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:81:22:61:22:a4:18:42:ae:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=f233fc36-f174-4ff3-b556-a1ea4b337882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:a8:45:7d:07:29:8d:dd:6b:4b:15:5c:67: bf:9e:df:c6:6f:aa:14:26:0a:e1:5b:93:d8:5b:68: f2:b5:b9:ab:3b:3d:81:06:82:f7:a6:aa:8a:18:b3: 84:df:35:47:c5:e1:ff:e4:57:4a:f4:f9:89:25:e6: 61:11:38:e7:d0:d6:e4:1c:7e:79:5a:9a:3e:bd:2f: 73:f8:ce:cb:19:80:8d:d9:9b:a6:b7:17:d2:25:e1: ca:a3:e8:ee:c7:55:ea:37:45:49:1e:c4:00:85:5a: 7e:5f:12:3b:49:61:3e:b4:01:36:0e:58:02:fc:29: ee:84:fe:90:52:32:a7:c8:09:07:80:78:7a:ce:fe: 59:93:cb:d4:2e:4a:5a:72:e4:27:fb:99:a4:9e:05: 87:8b:80:b5:60:57:fa:7f:06:92:4c:d0:6d:f8:91: 16:74:e4:60:33:22:5e:3f:3d:8a:2d:cc:38:94:70: 1a:6f:a1:f6:f6:1f:73:56:95:a9:82:25:d7:46:2e: 68:fb:64:bf:b6:53:77:59:26:9e:f8:a7:bb:ac:a8: cf:44:52:a7:f6:5e:6f:39:c8:e2:ad:44:79:89:02: 58:ee:5f:62:1d:df:61:1f:2b:20:23:5d:55:55:f8: 72:b7:0c:57:43:10:75:d5:f3:57:10:11:cf:5c:e1: 7c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E5:25:54:5C:A5:C9:48:2E:1D:1C:87:BE:2B:3D:C5:98:81:DD:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/97287c3d-7879-3b8a-a1ff-79f4bcf8c7ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:d6:9b:c6:af:9e:22:43:58:b3:9f:19:f4:f5:0d:d4:81:a6: a5:8c:bc:f9:4c:99:22:49:8a:32:f4:9c:47:93:1b:30:37:39: 13:44:0f:97:f0:e2:38:bf:a3:12:4a:cb:1c:81:69:a5:10:1e: af:83:eb:04:9a:3d:69:f1:2f:57:39:1d:d3:ff:25:aa:0c:f8: 06:30:f9:5b:cf:89:27:32:5c:e5:64:ea:93:ab:48:d0:ed:4a: 47:d0:c3:71:8f:3e:37:18:5b:34:e6:41:19:62:87:b0:3f:e5: de:2a:62:3a:c9:db:dc:80:41:e4:6f:48:44:4b:c0:cc:cc:4a: a0:7d:9b:e3:37:a2:7a:59:39:cd:7e:a8:f7:cd:0a:d0:71:85: 31:20:61:4c:cc:9a:71:80:4d:23:ef:4f:22:87:ff:0a:70:ce: 4e:59:10:b9:c6:8b:55:f4:36:20:86:db:f5:dc:d1:a2:8a:36: b6:9c:9b:40:af:70:b8:21:db:9a:82:4f:24:cd:0b:f7:d1:fd: 8e:f4:05:35:92:65:6c:5a:79:80:e5:ad:e5:14:44:c8:83:91: cd:ec:e9:ad:28:c5:18:ef:25:84:6d:40:39:9f:38:87:f7:a7: d4:b9:58:dd:e5:2c:36:75:85:64:4d:09:a8:01:74:d1:a6:d4: e5:0c:50:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHYEiYSKkGEKuy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZjIzM2ZjMzYtZjE3NC00ZmYzLWI1NTYtYTFlYTRiMzM3ODgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI6oRX0HKY3da0sVXGe/nt/Gb6oUJgrhW5PY W2jytbmrOz2BBoL3pqqKGLOE3zVHxeH/5FdK9PmJJeZhETjn0NbkHH55Wpo+vS9z +M7LGYCN2ZumtxfSJeHKo+jux1XqN0VJHsQAhVp+XxI7SWE+tAE2DlgC/CnuhP6Q UjKnyAkHgHh6zv5Zk8vULkpacuQn+5mkngWHi4C1YFf6fwaSTNBt+JEWdORgMyJe Pz2KLcw4lHAab6H29h9zVpWpgiXXRi5o+2S/tlN3WSae+Ke7rKjPRFKn9l5vOcji rUR5iQJY7l9iHd9hHysgI11VVfhytwxXQxB11fNXEBHPXOF8ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzlJVRcpclILh0ch74rPcWYgd1XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTcyODdjM2QtNzg3OS0z YjhhLWExZmYtNzlmNGJjZjhjN2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrWm8avniJDWLOfGfT1DdSBpqWMvPlMmSJJijL0nEeTGzA3ORNED5fw 4ji/oxJKyxyBaaUQHq+D6wSaPWnxL1c5HdP/JaoM+AYw+VvPiScyXOVk6pOrSNDt SkfQw3GPPjcYWzTmQRlih7A/5d4qYjrJ29yAQeRvSERLwMzMSqB9m+M3onpZOc1+ qPfNCtBxhTEgYUzMmnGATSPvTyKH/wpwzk5ZELnGi1X0NiCG2/Xc0aKKNracm0Cv cLgh25qCTyTNC/fR/Y70BTWSZWxaeYDlreUURMiDkc3s6a0oxRjvJYRtQDmfOIf3 p9S5WN3lLDZ1hWRNCagBdNGm1OUMUJI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:50 2025 by rpki-client