$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9eeee94f-99c3-3e60-8ff4-29875927ed7a.roa File: 9eeee94f-99c3-3e60-8ff4-29875927ed7a.roa (raw, json) Hash identifier: DA0ZcW4UJJ5QGtK3IFpDY0q+4GOiXxOyZDC9ZxmlZnA= Subject key identifier: 85:AA:C9:C6:E4:9B:B0:69:74:48:D7:5F:79:B9:C2:6A:53:9E:4F:6D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B80B77302C7A69ECF0CA98A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9eeee94f-99c3-3e60-8ff4-29875927ed7a.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 36183 IP address blocks: 172.225.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:73:02:c7:a6:9e:cf:0c:a9:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=bc76fd3a-1e22-4875-9f7d-3cf0cd2b0427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:d6:0d:bb:42:c1:2a:ff:44:53:ac:fb:a7: d4:3b:d7:8c:46:67:23:c6:b5:ce:be:28:4b:58:94: 47:79:30:53:73:01:97:50:33:35:50:7f:48:0e:70: 39:5b:3c:39:55:01:4f:8f:e4:8f:8c:e7:cb:2b:a4: 50:61:e9:e9:ee:b7:81:2b:c6:38:73:b2:25:0c:93: a9:84:a3:de:58:af:a2:f2:2f:bf:20:01:d2:1e:d0: 16:2d:af:96:9f:93:0a:d9:5c:54:c4:26:45:34:52: 6d:ea:1a:dd:2b:3c:f5:b8:f6:2a:04:9c:38:8e:c1: dc:32:e9:12:6e:9d:d5:ff:4a:53:df:fb:a7:49:9b: 00:9f:a3:cd:e9:12:25:38:a9:0b:68:15:68:51:51: 97:43:17:cd:11:8c:a8:6d:c1:91:ed:87:20:0b:90: 62:66:e8:85:12:0f:a6:b8:eb:9a:5a:e5:51:7d:82: 7d:89:af:9d:2f:e3:e6:f0:7b:78:6f:9a:0f:73:cf: 04:34:61:70:f6:e5:6e:5d:4f:40:ae:26:7d:bf:33: 4b:25:14:1c:0b:d7:05:c6:c1:38:dd:29:2a:35:0e: 0d:8b:88:c5:19:aa:56:83:b4:dc:b7:23:2b:1c:7c: bb:4b:4e:98:48:73:88:29:c2:5a:ea:b9:7e:24:04: c4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:AA:C9:C6:E4:9B:B0:69:74:48:D7:5F:79:B9:C2:6A:53:9E:4F:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9eeee94f-99c3-3e60-8ff4-29875927ed7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:0e:d4:fa:23:18:fc:02:56:87:09:5c:bf:71:9d:9e:11:8d: a3:4c:a8:4f:4b:a6:bd:f0:f8:46:34:d2:1f:cf:58:33:6a:fe: 24:f5:ac:33:d9:6c:bf:f0:7e:46:ec:9b:6f:90:2c:6e:1c:ff: 40:1a:84:a6:8a:de:68:4a:35:a3:27:fd:6a:7c:31:2c:2a:80: 28:46:5e:e0:3a:36:a6:59:17:a2:c1:28:69:88:88:af:78:88: 9a:35:77:3b:79:97:d6:c5:e8:c0:e5:2e:3d:2c:03:24:a1:bb: 36:07:9d:3f:02:93:e6:f1:fa:33:fd:0e:e0:e7:8a:ab:0b:ad: d7:c9:df:9a:d4:b3:97:ea:93:94:c7:ba:5d:aa:07:61:7d:dd: e8:da:51:bd:2b:77:17:86:88:60:8e:fa:67:35:0c:c1:47:21: 64:a8:d9:db:b3:e6:32:b4:54:a3:e1:15:e5:a4:7b:fc:a5:80: a5:ff:fa:26:00:4f:07:01:b8:79:47:98:70:a3:b1:22:12:fc: 7e:c6:df:75:bd:ed:20:19:df:2b:85:53:a1:9d:b0:3b:85:98: fd:de:a0:f8:8a:01:16:d5:f6:cc:51:2b:95:38:51:72:52:c6: 9a:ce:d1:2e:d5:fe:0e:7a:06:84:7a:43:2b:93:e6:16:ff:7f: 0d:a3:d3:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt3MCx6aezwypigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk YmM3NmZkM2EtMWUyMi00ODc1LTlmN2QtM2NmMGNkMmIwNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTvWDbtCwSr/RFOs+6fUO9eMRmcjxrXOvihL WJRHeTBTcwGXUDM1UH9IDnA5Wzw5VQFPj+SPjOfLK6RQYenp7reBK8Y4c7IlDJOp hKPeWK+i8i+/IAHSHtAWLa+Wn5MK2VxUxCZFNFJt6hrdKzz1uPYqBJw4jsHcMukS bp3V/0pT3/unSZsAn6PN6RIlOKkLaBVoUVGXQxfNEYyobcGR7YcgC5BiZuiFEg+m uOuaWuVRfYJ9ia+dL+Pm8Ht4b5oPc88ENGFw9uVuXU9AriZ9vzNLJRQcC9cFxsE4 3SkqNQ4Ni4jFGapWg7TctyMrHHy7S06YSHOIKcJa6rl+JATEBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWqycbkm7BpdEjXX3m5wmpTnk9tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOWVlZWU5NGYtOTljMy0z ZTYwLThmZjQtMjk4NzU5MjdlZDdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEsO1PojGPwCVocJXL9xnZ4RjaNMqE9Lpr3w+EY00h/PWDNq/iT1rDPZ bL/wfkbsm2+QLG4c/0AahKaK3mhKNaMn/Wp8MSwqgChGXuA6NqZZF6LBKGmIiK94 iJo1dzt5l9bF6MDlLj0sAyShuzYHnT8Ck+bx+jP9DuDniqsLrdfJ35rUs5fqk5TH ul2qB2F93ejaUb0rdxeGiGCO+mc1DMFHIWSo2duz5jK0VKPhFeWke/ylgKX/+iYA TwcBuHlHmHCjsSIS/H7G33W97SAZ3yuFU6GdsDuFmP3eoPiKARbV9sxRK5U4UXJS xprO0S7V/g56BoR6QyuT5hb/fw2j00k= -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:33 2025 by rpki-client