$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bec975bd-2d76-38fc-b8c4-cd13e9310f9c.roa File: bec975bd-2d76-38fc-b8c4-cd13e9310f9c.roa (raw, json) Hash identifier: MH/P3fPO609G2vbYsjfBbuJXJcRj8yQYV07ruZ48qyU= Subject key identifier: E5:F8:DE:83:B9:9B:A5:43:10:77:56:63:0E:1F:A9:6C:D3:27:F2:13 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B821D827539113986FD6F3680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bec975bd-2d76-38fc-b8c4-cd13e9310f9c.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 36183 IP address blocks: 172.225.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:82:75:39:11:39:86:fd:6f:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=86e8e201-612a-4007-b979-420722524d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:fc:b7:08:09:d9:32:26:8a:c3:d4:b6:de:b4: 20:b3:9f:dd:d9:3b:a9:f6:17:2b:cf:71:07:1e:ef: 79:18:8d:e7:3d:ec:3d:6c:ac:31:b2:99:f8:8c:4e: ff:e5:90:de:68:8a:83:43:21:56:bb:c2:72:05:53: 60:de:6d:d9:21:8a:4d:bf:f7:a5:0e:10:27:a6:4e: 49:0a:74:10:34:68:f6:a8:3d:70:fc:29:24:0a:fa: b2:ee:4f:2b:70:93:c1:95:73:57:9b:d0:3b:b6:0a: c1:88:b6:df:51:cc:10:ad:14:7a:23:dc:70:bc:43: 28:c4:cb:e3:14:8f:1a:95:91:10:e2:63:cf:64:c4: 16:90:2e:83:66:b9:3e:3a:45:03:bb:c1:d5:e9:c7: 42:61:94:61:65:5e:3c:58:1b:a2:72:fc:8e:55:20: 6f:cd:a6:45:79:ae:e2:7c:6c:c9:77:c6:21:08:62: 11:26:85:d8:3a:6a:c4:65:45:2c:68:97:c9:74:5f: c3:fc:c0:71:ca:61:d4:55:20:12:76:58:86:ed:fc: 2c:7a:db:b6:75:0e:a2:71:46:55:70:1b:98:78:92: 59:0d:2b:c6:1e:cb:8a:df:c4:d6:1a:13:b9:2f:a5: 89:d6:6c:58:ef:32:91:1a:6e:fc:89:b3:a4:45:c4: e5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:F8:DE:83:B9:9B:A5:43:10:77:56:63:0E:1F:A9:6C:D3:27:F2:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bec975bd-2d76-38fc-b8c4-cd13e9310f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ec:6d:02:fa:6b:6e:c6:f4:c8:23:b0:03:af:c3:c6:a6:7b: 2d:83:5e:07:55:9d:a2:ad:78:5f:a8:ab:1b:86:7f:13:2c:41: 64:7c:0d:8d:16:6e:e3:63:18:26:b5:82:97:ec:e3:20:2e:5f: 88:da:78:2e:01:cc:f4:97:51:11:51:2f:60:29:65:4c:c2:c1: 3c:cb:04:84:45:f6:8d:52:c6:90:2b:a0:c9:c1:4b:3a:32:96: e1:56:35:bd:68:dc:3f:bc:f0:85:2d:dd:1e:13:14:ce:63:af: dc:9b:e4:5c:52:e3:71:30:90:f3:59:56:c3:7b:02:7b:ed:f4: 31:97:d3:1c:2b:54:64:56:30:eb:bb:e9:f6:73:0e:9c:af:c1: d1:72:d4:4e:f6:8a:a0:44:e3:2d:eb:3b:f6:27:e4:b0:13:ee: 34:59:c9:f4:fb:33:e6:9d:c3:1d:5e:19:92:60:63:42:d9:39: 59:e7:42:f3:2c:42:98:28:69:be:e1:63:00:58:91:4e:ee:7c: 6d:f7:51:92:01:6d:46:82:91:f9:8c:58:80:04:07:fe:c4:87: d8:f6:5d:62:e5:bf:d2:ae:b1:0f:54:18:ee:6e:66:87:4a:f2: 87:b1:ef:8d:7f:17:fc:63:eb:89:f7:56:88:e1:5a:b0:bd:ef: 52:b9:1b:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHYJ1ORE5hv1vNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ODZlOGUyMDEtNjEyYS00MDA3LWI5NzktNDIwNzIyNTI0ZDVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfy3CAnZMiaKw9S23rQgs5/d2Tup9hcrz3EH Hu95GI3nPew9bKwxspn4jE7/5ZDeaIqDQyFWu8JyBVNg3m3ZIYpNv/elDhAnpk5J CnQQNGj2qD1w/CkkCvqy7k8rcJPBlXNXm9A7tgrBiLbfUcwQrRR6I9xwvEMoxMvj FI8alZEQ4mPPZMQWkC6DZrk+OkUDu8HV6cdCYZRhZV48WBuicvyOVSBvzaZFea7i fGzJd8YhCGIRJoXYOmrEZUUsaJfJdF/D/MBxymHUVSASdliG7fwsetu2dQ6icUZV cBuYeJJZDSvGHsuK38TWGhO5L6WJ1mxY7zKRGm78ibOkRcTlhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOX43oO5m6VDEHdWYw4fqWzTJ/ITMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmVjOTc1YmQtMmQ3Ni0z OGZjLWI4YzQtY2QxM2U5MzEwZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXsbQL6a27G9MgjsAOvw8amey2DXgdVnaKteF+oqxuGfxMsQWR8DY0W buNjGCa1gpfs4yAuX4jaeC4BzPSXURFRL2ApZUzCwTzLBIRF9o1SxpAroMnBSzoy luFWNb1o3D+88IUt3R4TFM5jr9yb5FxS43EwkPNZVsN7Anvt9DGX0xwrVGRWMOu7 6fZzDpyvwdFy1E72iqBE4y3rO/Yn5LAT7jRZyfT7M+adwx1eGZJgY0LZOVnnQvMs Qpgoab7hYwBYkU7ufG33UZIBbUaCkfmMWIAEB/7Eh9j2XWLlv9KusQ9UGO5uZodK 8oex741/F/xj64n3VojhWrC971K5G6o= -----END CERTIFICATE-----Generated at Mon Oct 20 12:28:38 2025 by rpki-client