$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bad9792b-6063-3e52-a798-ee347c386436.roa File: bad9792b-6063-3e52-a798-ee347c386436.roa (raw, json) Hash identifier: kjlxNJxoE3vR0Ad8SXcff1DSfTJettfCimjD7T4RN+8= Subject key identifier: F3:86:B8:90:B8:2B:28:0B:DC:17:69:E7:B0:5E:BF:DF:EF:BF:21:EF Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8EAD00D6503FBA3D6765DDAC Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bad9792b-6063-3e52-a798-ee347c386436.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.226.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:00:d6:50:3f:ba:3d:67:65:dd:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=9a92a9ff-3f53-44b4-a0a1-4b246e2ed0ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f2:b6:92:d6:74:a9:37:a8:42:d9:34:8c:72: 72:96:f8:27:88:34:c5:f3:a9:bd:3b:42:33:49:0c: 4e:ea:38:47:bd:23:11:08:ff:bd:34:f1:9e:b2:bb: 7c:bb:7b:12:4d:04:ec:8b:d9:ba:93:d0:9b:2a:88: 75:d0:57:2a:48:cd:6a:12:4b:9f:b7:c9:e3:c7:28: 02:29:76:bc:22:08:c1:01:2d:17:d9:60:a2:69:91: e2:3a:82:51:dd:d0:19:09:2b:63:ce:ee:23:96:dc: 0f:52:32:38:1d:06:0d:26:96:79:85:cf:6a:85:78: d1:fa:31:14:ce:07:80:92:dd:4f:72:ff:42:7e:c8: c4:1f:0b:1d:bd:6f:67:49:3e:c4:44:78:09:ef:29: 64:38:79:72:c0:98:b0:ec:34:88:9f:13:5d:02:5e: df:e1:46:b4:ed:72:1e:0d:ad:23:31:c2:fe:df:f6: 5d:78:8c:4e:3e:72:d2:83:43:77:d8:4f:e2:3d:90: 16:c2:44:ac:54:19:1c:5b:a5:e6:b5:57:57:49:7d: c3:7b:94:8b:1a:18:4d:75:e1:f7:6f:46:38:94:dd: 5c:c2:7c:02:44:3f:11:ef:17:ca:c8:a4:f2:9f:d4: c6:c9:53:cd:9d:79:fd:43:ba:48:a3:6b:60:53:a0: 6c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:86:B8:90:B8:2B:28:0B:DC:17:69:E7:B0:5E:BF:DF:EF:BF:21:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bad9792b-6063-3e52-a798-ee347c386436.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:24:34:61:5d:13:0f:69:52:61:4b:23:f3:05:32:67:0c:08: 6f:ea:af:4a:b5:c0:8e:3b:ac:28:ea:aa:fe:ea:06:d5:76:4d: c3:b8:d6:35:93:58:da:bb:c4:9d:ab:56:c9:a1:6f:3f:9e:11: f2:01:6c:6e:77:91:17:b4:86:70:b9:8c:b7:8a:a3:25:b2:8b: 82:d5:b2:64:5f:a5:46:df:e4:ef:dd:14:aa:3d:4b:f4:77:ba: 7c:e9:25:45:cc:eb:54:5b:7e:8a:cd:39:0f:66:19:ca:41:02: b6:c5:6b:6a:25:d7:83:1f:81:65:10:07:73:11:79:df:24:c6: ed:53:6e:71:5e:db:a7:b8:89:27:93:fd:71:0b:d6:75:e7:df: f1:d8:96:f6:c6:74:90:57:99:5c:9f:41:50:9a:05:4f:dc:e7: b9:91:e0:32:f1:3a:42:4c:86:3a:6d:b7:7e:ec:62:ba:92:d8: d9:da:29:bd:93:60:b8:8e:f1:26:b0:b3:39:27:2d:dc:c3:0f: 08:06:3a:88:1a:f6:81:05:73:0c:64:7e:7e:27:76:10:4b:28: 7b:8c:4c:80:45:1b:18:57:a3:f8:49:e4:58:88:fa:b9:91:62: cb:26:cc:fa:db:9d:95:9e:94:20:92:0c:98:80:bc:52:ff:b3: 89:cb:8f:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQDWUD+6PWdl3awwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk OWE5MmE5ZmYtM2Y1My00NGI0LWEwYTEtNGIyNDZlMmVkMGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/K2ktZ0qTeoQtk0jHJylvgniDTF86m9O0Iz SQxO6jhHvSMRCP+9NPGesrt8u3sSTQTsi9m6k9CbKoh10FcqSM1qEkuft8njxygC KXa8IgjBAS0X2WCiaZHiOoJR3dAZCStjzu4jltwPUjI4HQYNJpZ5hc9qhXjR+jEU zgeAkt1Pcv9CfsjEHwsdvW9nST7ERHgJ7ylkOHlywJiw7DSInxNdAl7f4Ua07XIe Da0jMcL+3/ZdeIxOPnLSg0N32E/iPZAWwkSsVBkcW6XmtVdXSX3De5SLGhhNdeH3 b0Y4lN1cwnwCRD8R7xfKyKTyn9TGyVPNnXn9Q7pIo2tgU6BsQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOGuJC4KygL3Bdp57Bev9/vvyHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmFkOTc5MmItNjA2My0z ZTUyLWE3OTgtZWUzNDdjMzg2NDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUkNGFdEw9pUmFLI/MFMmcMCG/qr0q1wI47rCjqqv7qBtV2TcO41jWT WNq7xJ2rVsmhbz+eEfIBbG53kRe0hnC5jLeKoyWyi4LVsmRfpUbf5O/dFKo9S/R3 unzpJUXM61RbforNOQ9mGcpBArbFa2ol14MfgWUQB3MRed8kxu1TbnFe26e4iSeT /XEL1nXn3/HYlvbGdJBXmVyfQVCaBU/c57mR4DLxOkJMhjptt37sYrqS2NnaKb2T YLiO8SawszknLdzDDwgGOoga9oEFcwxkfn4ndhBLKHuMTIBFGxhXo/hJ5FiI+rmR YssmzPrbnZWelCCSDJiAvFL/s4nLj5A= -----END CERTIFICATE-----Generated at Mon Oct 20 12:38:33 2025 by rpki-client