$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0355147-df73-3b03-8594-bb233ca6a468.roa File: b0355147-df73-3b03-8594-bb233ca6a468.roa (raw, json) Hash identifier: 5VsxLune10pbW4wc2CBHEjCnKrOOu3qDJ3Um4I7KVoE= Subject key identifier: 9F:94:73:A8:EA:A6:A1:4F:C0:A7:44:A5:BA:30:0F:CF:6F:C4:9A:3C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7DECB97A51E1500EB7C74E80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0355147-df73-3b03-8594-bb233ca6a468.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b9:7a:51:e1:50:0e:b7:c7:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=657e5f7a-6420-4848-848b-2a4df3f47ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:ba:24:a4:52:e9:cc:5f:6d:61:24:51:72: 4c:60:92:e1:8f:32:0d:2a:c5:a5:e6:25:65:bc:62: 25:c8:4d:97:1c:b8:12:41:bb:20:d9:a4:98:ec:16: f7:8d:76:44:16:d9:d6:a5:f4:cc:17:a8:85:d2:34: 8b:21:c7:40:9c:a1:ba:dc:c3:85:5b:90:ce:63:d0: 11:f9:06:fc:75:c6:4e:1a:cb:0b:5f:3d:57:9c:fe: 27:00:e8:bc:20:f2:b2:d0:08:1c:41:22:1a:08:38: c0:41:58:74:f7:5f:57:1b:58:50:d7:11:d4:41:f0: 73:16:5f:b3:a7:b8:53:89:c7:4a:87:4f:fe:11:3a: e2:ee:f3:8f:9a:ee:26:42:12:89:94:35:1f:8a:a2: 3c:0f:b4:a4:2c:72:9e:ac:79:30:09:b4:38:a7:84: 24:72:e5:10:c5:7a:47:c0:cf:6e:43:f3:e6:91:1b: 50:59:f2:7a:5f:c3:69:68:0d:09:bf:44:a9:d7:e6: ab:15:43:13:d6:b6:cd:7d:80:ad:98:c9:59:fa:19: ec:44:3e:e9:9d:b3:27:be:06:c6:ce:12:04:08:e3: 89:d3:38:42:c6:02:b2:82:bb:4b:3a:22:49:65:13: cc:0d:e2:1e:23:5c:dd:86:a3:e5:1b:25:af:18:ce: 2f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:94:73:A8:EA:A6:A1:4F:C0:A7:44:A5:BA:30:0F:CF:6F:C4:9A:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0355147-df73-3b03-8594-bb233ca6a468.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c7:4b:76:52:25:80:78:bd:83:01:d5:e7:c3:ad:47:64:f9: 58:ad:b8:83:c1:99:52:95:e9:b8:2f:83:b8:86:0e:00:9e:86: 59:b2:3e:bd:31:54:26:ab:8b:71:b7:7b:50:87:d8:f1:f6:8b: f3:00:7f:b7:19:c0:ac:ee:65:72:38:5e:67:72:ad:3c:06:25: f5:86:ed:ee:46:5a:41:75:31:4a:f4:42:6c:b8:e7:3f:10:f5: c9:cc:c1:da:d9:83:d7:69:99:89:87:96:18:36:83:e1:4c:47: 51:bb:8f:8f:fb:f7:f0:08:9a:e8:78:c2:c2:e2:9e:b2:19:e9: 13:7c:83:98:1a:45:ea:31:85:40:fa:50:dd:fb:29:a3:82:17: 7f:1e:1d:71:b8:ed:40:5d:40:4f:ff:90:1f:c7:de:4f:2c:99: 9e:03:ec:10:3c:c3:9f:cf:5c:e9:bd:27:4a:f0:fd:f6:53:f9: 0b:96:b1:9e:98:6a:9e:0b:93:41:87:7c:96:bc:ea:f3:28:c9: 15:6e:6c:37:6d:89:81:99:e2:0a:e8:2f:ad:bd:8c:8a:98:8e: 04:28:58:c8:1e:bd:b3:09:48:57:20:18:f7:ec:ba:e1:e1:f0: 4e:22:d6:be:cf:9c:05:70:34:86:2f:07:28:e9:e5:fd:6e:6c: eb:e4:c3:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97Ll6UeFQDrfHToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NjU3ZTVmN2EtNjQyMC00ODQ4LTg0OGItMmE0ZGYzZjQ3YWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuga6JKRS6cxfbWEkUXJMYJLhjzINKsWl5iVl vGIlyE2XHLgSQbsg2aSY7Bb3jXZEFtnWpfTMF6iF0jSLIcdAnKG63MOFW5DOY9AR +Qb8dcZOGssLXz1XnP4nAOi8IPKy0AgcQSIaCDjAQVh0919XG1hQ1xHUQfBzFl+z p7hTicdKh0/+ETri7vOPmu4mQhKJlDUfiqI8D7SkLHKerHkwCbQ4p4QkcuUQxXpH wM9uQ/PmkRtQWfJ6X8NpaA0Jv0Sp1+arFUMT1rbNfYCtmMlZ+hnsRD7pnbMnvgbG zhIECOOJ0zhCxgKygrtLOiJJZRPMDeIeI1zdhqPlGyWvGM4vcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+Uc6jqpqFPwKdEpbowD89vxJo8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjAzNTUxNDctZGY3My0z YjAzLTg1OTQtYmIyMzNjYTZhNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvHS3ZSJYB4vYMB1efDrUdk+VituIPBmVKV6bgvg7iGDgCehlmyPr0x VCari3G3e1CH2PH2i/MAf7cZwKzuZXI4XmdyrTwGJfWG7e5GWkF1MUr0Qmy45z8Q 9cnMwdrZg9dpmYmHlhg2g+FMR1G7j4/79/AImuh4wsLinrIZ6RN8g5gaReoxhUD6 UN37KaOCF38eHXG47UBdQE//kB/H3k8smZ4D7BA8w5/PXOm9J0rw/fZT+QuWsZ6Y ap4Lk0GHfJa86vMoyRVubDdtiYGZ4groL629jIqYjgQoWMgevbMJSFcgGPfsuuHh 8E4i1r7PnAVwNIYvByjp5f1ubOvkw84= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:13 2025 by rpki-client