$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba2f9405-5e53-3ba9-977a-58dcc0a104c9.roa File: ba2f9405-5e53-3ba9-977a-58dcc0a104c9.roa (raw, json) Hash identifier: MOAuyzbhmDVREPA4IaJ6r93FlRDf7iOrjgWPeMc12WI= Subject key identifier: F3:1E:63:48:D7:92:23:52:B4:35:6A:C8:8C:74:CF:A6:3A:B1:D2:DF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B821E1EAC00BE81B8DD14CC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba2f9405-5e53-3ba9-977a-58dcc0a104c9.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 36183 IP address blocks: 172.225.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1e:1e:ac:00:be:81:b8:dd:14:cc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=10581c31-940b-4a46-8cde-d6e50c3acb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:9d:88:38:50:18:f3:9a:38:df:0d:b3:14: aa:a2:51:d8:72:8f:8d:4d:6d:30:41:fa:cd:4f:8a: 48:b8:3c:fd:c9:72:4b:0a:e3:66:19:45:09:17:9e: 21:58:ca:c7:e6:9d:77:a7:6e:b9:7f:ca:ea:85:de: da:97:a4:87:fd:d3:0a:f6:4c:47:f2:2f:92:dc:1b: 70:c7:f6:64:b0:8b:fc:61:f3:b8:c0:7d:93:35:de: 2f:af:18:35:60:41:65:a8:ce:dd:a9:ea:ea:90:4a: 53:46:dc:34:12:e5:48:32:fa:00:63:67:1f:f5:e9: 8e:20:79:6e:ce:92:31:c2:7c:19:a9:95:6f:86:cf: 2f:1d:4c:1f:e3:df:66:5b:6a:ca:a8:b3:13:b3:2c: ec:2a:af:51:9d:e5:7b:58:a9:d5:30:82:3b:14:c4: cd:00:9d:ca:ab:55:9c:45:23:25:15:9b:4b:4c:73: 7f:12:69:66:77:3e:37:4e:70:2d:95:ba:b1:18:32: 17:97:3f:9d:12:c9:98:bd:28:4e:61:2c:14:b1:3e: 7f:da:11:ce:8b:bc:71:4c:18:2c:19:7e:02:b7:92: da:e2:4d:d7:dd:8f:d9:d1:11:b5:59:29:33:24:92: 1d:d8:83:64:44:9c:0d:59:d7:08:34:8b:2f:ee:3f: 06:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1E:63:48:D7:92:23:52:B4:35:6A:C8:8C:74:CF:A6:3A:B1:D2:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ba2f9405-5e53-3ba9-977a-58dcc0a104c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:ef:be:9c:b5:b6:9f:65:d2:5e:4f:89:9d:c2:74:ce:67:bb: e3:12:e0:bc:f1:cb:48:73:20:ed:cf:2d:76:ff:c2:5f:af:3e: 2a:70:58:cb:14:5a:d5:4f:a0:d2:cf:fa:e1:09:b3:6d:d8:b4: b3:66:c3:27:69:d6:06:12:ea:b7:e7:07:d7:be:aa:89:4b:b2: 58:e2:e5:f7:c8:01:36:9c:4d:39:3d:7a:af:ed:dd:93:7f:62: ce:54:09:8b:2c:2f:e5:66:a3:7e:e3:9f:34:d2:17:5e:0e:95: 6a:49:a2:d9:bf:96:58:c4:b2:30:5a:31:c5:06:5d:1e:c0:4c: a1:07:7c:fd:b1:f5:96:7f:28:3c:cb:69:b1:b1:6a:f6:00:65: 10:1e:f9:26:d9:a6:3e:d0:5b:1b:ad:b1:66:61:e5:25:fe:5f: 22:a0:f8:7a:9a:51:2b:93:d1:0a:24:3d:79:9a:c1:8e:a6:a2: 79:65:db:7f:32:a1:5e:56:d5:7d:64:32:86:c8:e9:69:8f:0f: 0f:e7:4a:3b:f5:e2:83:60:6d:12:14:ef:99:de:81:de:9a:83: 04:58:72:7f:ac:98:49:a3:a2:1f:1d:a2:7b:27:dc:10:87:6d: e8:a1:b7:cc:b4:93:60:0b:7a:2d:21:1a:b6:55:ca:ba:a8:f3: 36:d2:74:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHh6sAL6BuN0UzEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MTA1ODFjMzEtOTQwYi00YTQ2LThjZGUtZDZlNTBjM2FjYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVSdiDhQGPOaON8NsxSqolHYco+NTW0wQfrN T4pIuDz9yXJLCuNmGUUJF54hWMrH5p13p265f8rqhd7al6SH/dMK9kxH8i+S3Btw x/ZksIv8YfO4wH2TNd4vrxg1YEFlqM7dqerqkEpTRtw0EuVIMvoAY2cf9emOIHlu zpIxwnwZqZVvhs8vHUwf499mW2rKqLMTsyzsKq9RneV7WKnVMII7FMTNAJ3Kq1Wc RSMlFZtLTHN/Emlmdz43TnAtlbqxGDIXlz+dEsmYvShOYSwUsT5/2hHOi7xxTBgs GX4Ct5La4k3X3Y/Z0RG1WSkzJJId2INkRJwNWdcINIsv7j8G3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMeY0jXkiNStDVqyIx0z6Y6sdLfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmEyZjk0MDUtNWU1My0z YmE5LTk3N2EtNThkY2MwYTEwNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOE2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/vvpy1tp9l0l5PiZ3CdM5nu+MS4Lzxy0hzIO3PLXb/wl+vPipwWMsU WtVPoNLP+uEJs23YtLNmwydp1gYS6rfnB9e+qolLslji5ffIATacTTk9eq/t3ZN/ Ys5UCYssL+Vmo37jnzTSF14OlWpJotm/lljEsjBaMcUGXR7ATKEHfP2x9ZZ/KDzL abGxavYAZRAe+SbZpj7QWxutsWZh5SX+XyKg+HqaUSuT0QokPXmawY6monll238y oV5W1X1kMobI6WmPDw/nSjv14oNgbRIU75negd6agwRYcn+smEmjoh8donsn3BCH beiht8y0k2ALei0hGrZVyrqo8zbSdDI= -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:03 2025 by rpki-client