$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b923eb8b-4768-33b2-aab2-ec3ecab7256b.roa File: b923eb8b-4768-33b2-aab2-ec3ecab7256b.roa (raw, json) Hash identifier: c3O0gilTmHn+RAx+OpTizxFzJ9TPdMo863h0HShwQdQ= Subject key identifier: AE:E1:FB:B2:4E:53:EC:B8:71:BC:40:45:3A:7E:62:73:B1:43:E4:B0 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081C024696A60D1CF1DDF80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b923eb8b-4768-33b2-aab2-ec3ecab7256b.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 36183 IP address blocks: 172.224.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:c0:24:69:6a:60:d1:cf:1d:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=5deeaea2-988a-4a9c-a7d2-bde33cffb192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1f:cd:99:17:1e:22:35:7c:d0:96:5d:f4:d7: fd:ed:2b:91:18:53:26:c5:e3:ca:e1:5a:83:0c:1e: 42:a7:57:25:88:aa:c9:32:bb:69:e2:db:1e:dd:d5: b8:b9:db:99:6b:65:4f:be:4e:67:ea:60:da:1f:e8: 5b:75:63:8a:28:cc:60:13:98:4b:f6:05:6e:c1:3f: 1f:6a:49:f4:a9:5e:a0:bd:61:00:f2:b9:8c:f9:0a: 68:e6:42:d0:b6:62:96:9c:af:3c:24:ce:f9:95:af: 9e:ca:da:23:55:9a:e8:bc:9a:c6:1f:c2:8b:8c:71: 19:ea:ee:7d:15:00:60:18:a6:ec:37:21:fc:c2:26: b7:13:2e:ef:b6:36:3f:da:67:74:d4:8f:8f:3c:6b: 39:e0:bc:23:5d:a5:82:3e:1b:01:4c:dc:30:a3:bb: 83:45:93:e3:87:3a:07:dd:4d:21:2b:e5:3b:e0:71: cf:77:d8:e1:43:ee:76:3e:a9:23:f7:0f:18:0a:84: d1:94:ba:ae:9a:3e:4d:d2:e1:fe:70:14:8f:6a:5b: 96:e5:c9:5b:35:2a:5b:04:0c:b9:84:64:4d:b5:6c: ec:e4:1b:3c:2e:c3:a1:a8:66:ed:fd:9a:9a:e2:e8: ab:ea:cb:a1:d9:5f:3a:92:f3:38:ae:e7:24:43:04: 04:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E1:FB:B2:4E:53:EC:B8:71:BC:40:45:3A:7E:62:73:B1:43:E4:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b923eb8b-4768-33b2-aab2-ec3ecab7256b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:40:55:69:f4:89:fa:13:18:d9:56:f1:73:35:fe:e7:77:84: 3d:61:4b:2e:b5:42:28:2d:81:51:6f:fa:fd:a8:3e:a2:31:60: 06:46:da:63:c1:2e:12:1a:11:48:c0:65:09:75:9a:29:3c:4c: 2e:0a:cc:23:15:ba:19:40:c4:c8:09:be:74:2b:d7:b5:41:fe: 5f:ce:30:f4:65:a3:02:e0:1e:f0:7d:d0:c4:65:41:f5:ca:6b: 10:e6:c2:c3:ec:97:35:69:85:cf:72:eb:34:57:55:4a:37:96: 3f:ae:a5:de:80:d9:b8:6a:74:b6:c5:e7:e7:e4:38:a1:a4:79: 49:d4:15:16:8e:b6:4d:9c:b4:54:18:ab:fc:c3:8e:e7:32:e3: 23:ac:ba:a5:a9:f5:c8:b0:cf:98:53:69:c4:62:d0:e4:9f:b9: ff:c4:ab:f5:29:0b:3b:16:86:ef:11:a8:a1:ab:45:ac:31:95: 7f:3b:5a:89:88:98:dd:da:1a:2a:4d:92:1b:b3:93:85:ee:7c: 1d:fe:9f:65:70:d9:d4:fc:1b:51:09:b7:7c:00:30:f5:11:48: d9:67:40:72:c9:00:62:e7:23:fb:f2:de:94:d3:27:bd:24:56: 6d:c8:33:5d:10:91:4a:43:82:7e:3c:27:8f:2a:91:73:e3:9b: 0b:82:71:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgcAkaWpg0c8d34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NWRlZWFlYTItOTg4YS00YTljLWE3ZDItYmRlMzNjZmZiMTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR/NmRceIjV80JZd9Nf97SuRGFMmxePK4VqD DB5Cp1cliKrJMrtp4tse3dW4uduZa2VPvk5n6mDaH+hbdWOKKMxgE5hL9gVuwT8f akn0qV6gvWEA8rmM+Qpo5kLQtmKWnK88JM75la+eytojVZrovJrGH8KLjHEZ6u59 FQBgGKbsNyH8wia3Ey7vtjY/2md01I+PPGs54LwjXaWCPhsBTNwwo7uDRZPjhzoH 3U0hK+U74HHPd9jhQ+52Pqkj9w8YCoTRlLqumj5N0uH+cBSPaluW5clbNSpbBAy5 hGRNtWzs5Bs8LsOhqGbt/Zqa4uir6suh2V86kvM4ruckQwQEQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK7h+7JOU+y4cbxARTp+YnOxQ+SwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjkyM2ViOGItNDc2OC0z M2IyLWFhYjItZWMzZWNhYjcyNTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJAVWn0ifoTGNlW8XM1/ud3hD1hSy61QigtgVFv+v2oPqIxYAZG2mPB LhIaEUjAZQl1mik8TC4KzCMVuhlAxMgJvnQr17VB/l/OMPRlowLgHvB90MRlQfXK axDmwsPslzVphc9y6zRXVUo3lj+upd6A2bhqdLbF5+fkOKGkeUnUFRaOtk2ctFQY q/zDjucy4yOsuqWp9ciwz5hTacRi0OSfuf/Eq/UpCzsWhu8RqKGrRawxlX87WomI mN3aGipNkhuzk4XufB3+n2Vw2dT8G1EJt3wAMPURSNlnQHLJAGLnI/vy3pTTJ70k Vm3IM10QkUpDgn48J48qkXPjmwuCcRo= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:22 2025 by rpki-client