$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68f8ddb-7db1-3734-bfd0-1cf7a8089c79.roa File: a68f8ddb-7db1-3734-bfd0-1cf7a8089c79.roa (raw, json) Hash identifier: yJc2SLEZsx/DS+6AZWNyDbqrN+nmm6IyU/Nz94ctiNY= Subject key identifier: 38:B5:2A:70:58:0A:FD:EB:29:01:27:DD:47:78:04:F1:9E:13:F5:57 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B583C8227CA1C5924EE2B3D00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68f8ddb-7db1-3734-bfd0-1cf7a8089c79.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 63949 IP address blocks: 172.232.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:82:27:ca:1c:59:24:ee:2b:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=4ff7725a-8c09-4510-a67d-98ebb6630f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:d2:af:4c:56:d4:7d:fc:eb:98:1b:e7:f6: 06:81:d6:e2:c5:d6:c7:46:0e:7c:e7:a8:71:0a:58: 9a:94:f1:28:0b:10:fd:5c:32:3a:ea:ad:8f:c0:06: ea:6e:82:33:17:cd:0b:de:7f:17:a3:3e:ea:fa:b8: c3:ba:47:61:b7:c4:0c:82:c3:91:db:28:bc:72:e6: e9:15:76:c9:97:dd:f1:12:5a:b8:9a:9d:a0:43:4c: 56:a2:f9:b2:8d:f0:9e:f6:9e:80:14:8f:9c:40:96: 1e:1f:3f:26:a4:8e:63:86:d5:72:a7:e0:03:41:1b: 5f:ca:51:27:72:44:da:d9:6b:81:d8:83:86:7b:a7: 23:7c:c3:17:59:71:c1:f6:f4:01:a3:d4:23:77:65: de:77:9b:17:98:53:e5:1d:24:81:7e:3d:98:4c:b5: c4:f8:93:2a:42:54:db:16:83:79:15:4f:15:ff:35: 99:68:f7:a1:71:43:36:d5:47:4c:c4:cf:20:aa:c4: 68:85:8c:c8:8c:fe:39:a5:15:d2:ed:3e:fd:f2:ca: b9:46:5b:d8:dc:fb:13:69:c3:ea:76:f1:f3:f1:1a: 98:fa:34:ef:5e:5d:61:42:51:6f:9c:74:e4:b8:52: f7:9c:b2:aa:41:02:73:d8:65:06:38:22:b4:3a:00: a2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:B5:2A:70:58:0A:FD:EB:29:01:27:DD:47:78:04:F1:9E:13:F5:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68f8ddb-7db1-3734-bfd0-1cf7a8089c79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.232.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:51:9a:44:74:d0:ad:73:47:ba:8e:2d:89:b7:8d:70:95:63: eb:f4:31:ec:2d:a8:bd:2d:1c:14:4d:dc:9f:ab:fb:d6:ad:82: 35:06:bc:16:98:81:ea:1a:47:d4:00:b4:f5:70:41:a7:b1:8b: 9b:99:4c:2f:eb:7a:64:b8:b7:cd:f6:c5:7c:57:79:5e:54:26: 2f:dc:a2:5b:2a:f4:6d:d6:9b:69:6f:69:9e:41:d2:8a:d1:22: 5b:43:6e:14:b4:9a:ef:99:28:3d:53:1c:1b:ec:55:e7:41:66: d5:50:00:b4:e7:b3:10:62:f2:6e:c3:df:63:5d:80:8f:7b:bf: 2a:56:02:3e:ea:5a:a9:49:fb:a4:37:70:71:79:95:9a:ce:44: f2:fc:7d:cb:5f:1a:81:ef:9e:e7:41:d4:fb:ec:34:be:65:35: 59:b8:d7:60:13:81:a4:25:f2:b7:7a:4e:7f:4e:11:61:d8:84: 1d:8f:96:5f:b7:71:33:a9:45:0e:43:e3:78:a9:58:01:0f:05: 37:23:33:d3:8a:3f:13:fb:9b:45:99:e2:6b:35:ad:f1:a2:39: 7f:cb:c3:37:cc:c8:67:93:24:02:5e:36:44:5e:a4:aa:6d:b9: 30:93:40:a8:d3:ab:91:bb:06:a8:3c:d2:ae:d4:aa:5e:86:fb: ac:08:38:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIInyhxZJO4rPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NGZmNzcyNWEtOGMwOS00NTEwLWE2N2QtOThlYmI2NjMwZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzALSr0xW1H3865gb5/YGgdbixdbHRg5856hx ClialPEoCxD9XDI66q2PwAbqboIzF80L3n8Xoz7q+rjDukdht8QMgsOR2yi8cubp FXbJl93xElq4mp2gQ0xWovmyjfCe9p6AFI+cQJYeHz8mpI5jhtVyp+ADQRtfylEn ckTa2WuB2IOGe6cjfMMXWXHB9vQBo9Qjd2Xed5sXmFPlHSSBfj2YTLXE+JMqQlTb FoN5FU8V/zWZaPehcUM21UdMxM8gqsRohYzIjP45pRXS7T798sq5RlvY3PsTacPq dvHz8RqY+jTvXl1hQlFvnHTkuFL3nLKqQQJz2GUGOCK0OgCipQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDi1KnBYCv3rKQEn3Ud4BPGeE/VXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTY4ZjhkZGItN2RiMS0z NzM0LWJmZDAtMWNmN2E4MDg5Yzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJRmkR00K1zR7qOLYm3jXCVY+v0MewtqL0tHBRN3J+r+9atgjUGvBaY geoaR9QAtPVwQaexi5uZTC/remS4t832xXxXeV5UJi/colsq9G3Wm2lvaZ5B0orR IltDbhS0mu+ZKD1THBvsVedBZtVQALTnsxBi8m7D32NdgI97vypWAj7qWqlJ+6Q3 cHF5lZrORPL8fctfGoHvnudB1PvsNL5lNVm412ATgaQl8rd6Tn9OEWHYhB2Pll+3 cTOpRQ5D43ipWAEPBTcjM9OKPxP7m0WZ4ms1rfGiOX/LwzfMyGeTJAJeNkRepKpt uTCTQKjTq5G7Bqg80q7Uql6G+6wIOFw= -----END CERTIFICATE-----Generated at Mon Oct 20 12:34:07 2025 by rpki-client