$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c25853d9-3d04-379e-9d63-b30abc9b3675.roa File: c25853d9-3d04-379e-9d63-b30abc9b3675.roa (raw, json) Hash identifier: 5h7Z4HxWj9IYgv1APYz+h/BSCeXmrHfRNqDx3P3Wip4= Subject key identifier: 42:A1:0F:42:38:04:EA:A0:28:CA:5C:D3:34:08:8D:29:43:82:38:75 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8EACF9186D6B649B98085880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c25853d9-3d04-379e-9d63-b30abc9b3675.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.226.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f9:18:6d:6b:64:9b:98:08:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=ffc2e63a-8cac-41b9-9b2d-17d1a4d7fc39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:85:ad:57:4e:16:10:c3:5c:42:0c:47:47: fd:9e:c1:6b:0b:ea:53:2e:2e:78:55:05:83:e4:1c: 74:c0:8a:c6:3c:52:18:10:4f:f7:04:cd:1e:ea:fc: c0:a6:b7:7f:0f:ba:68:55:77:96:64:6d:79:a4:10: 8b:c4:05:2b:f6:75:46:1f:1f:67:05:cb:7c:2e:c5: 0c:1f:f3:19:1c:75:8f:24:db:ab:2e:98:80:c7:de: 6c:16:d2:7a:68:14:1e:9c:8d:ae:df:7f:59:06:5b: 85:79:7b:6b:16:96:c8:fd:1c:ac:df:b3:cc:44:fc: 87:94:5b:75:c0:a0:a2:45:a7:de:79:c6:00:5c:76: bf:3b:41:5f:49:10:4e:78:5e:06:a6:e6:3c:27:51: 32:e0:65:f0:02:9d:1a:7c:1e:c9:cb:d8:eb:f8:7d: 6b:42:76:ad:a1:87:0d:26:92:6a:96:0f:ea:d6:99: ea:f0:4b:a5:15:11:71:49:29:af:7c:77:fe:36:d6: 4c:46:aa:c7:48:94:89:57:1b:ff:c5:ec:96:8d:97: 8d:50:67:ea:a6:b3:2f:25:60:99:82:c3:36:bf:61: f7:7a:78:45:1c:38:ed:d5:ec:46:0b:63:f0:ac:4b: 6a:40:8f:db:07:e8:ae:ee:4b:61:f3:76:93:cd:aa: 45:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A1:0F:42:38:04:EA:A0:28:CA:5C:D3:34:08:8D:29:43:82:38:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c25853d9-3d04-379e-9d63-b30abc9b3675.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:37:62:21:6d:07:f6:ee:6d:31:24:9c:85:40:ef:f6:53:3c: 2b:20:30:2b:e7:cc:f4:52:ef:0a:27:a4:85:44:57:33:39:8a: b9:42:51:50:36:89:e8:ca:5f:39:24:e9:53:1d:3e:03:80:ed: d6:16:6b:93:55:d4:63:f5:6a:33:34:8b:18:8f:2a:f1:50:f6: a1:25:11:b3:af:8f:74:e4:6f:ec:38:d0:de:88:18:56:7b:76: 71:80:68:50:c1:58:3a:9f:06:11:c1:38:50:9b:31:60:2c:23: 76:b3:a0:04:fc:e6:d6:b4:6a:ca:2d:26:32:6d:5d:d3:17:5c: b2:46:28:38:e3:7b:1d:48:d3:c7:64:70:ed:44:d3:85:8b:cc: 4f:5c:11:6d:a3:9b:69:4c:3e:50:45:21:2d:20:82:01:51:cb: 64:a5:c2:d8:3f:bc:79:82:76:1c:10:5d:30:8a:94:27:b7:07: dd:52:fa:01:17:83:d6:68:1e:c7:e1:8b:be:bc:1b:d8:f5:a6: e7:55:1e:49:0f:fa:36:42:39:db:6b:11:e2:0b:41:b2:23:e9: 28:c0:be:38:9d:6d:85:85:73:1c:0a:70:e0:96:e3:b0:78:a5: 97:38:11:61:cf:b5:0f:28:24:8d:08:cf:5a:6d:14:1e:f4:a9: 6f:94:95:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPkYbWtkm5gIWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZmZjMmU2M2EtOGNhYy00MWI5LTliMmQtMTdkMWE0ZDdmYzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/mFrVdOFhDDXEIMR0f9nsFrC+pTLi54VQWD 5Bx0wIrGPFIYEE/3BM0e6vzAprd/D7poVXeWZG15pBCLxAUr9nVGHx9nBct8LsUM H/MZHHWPJNurLpiAx95sFtJ6aBQenI2u339ZBluFeXtrFpbI/Rys37PMRPyHlFt1 wKCiRafeecYAXHa/O0FfSRBOeF4GpuY8J1Ey4GXwAp0afB7Jy9jr+H1rQnatoYcN JpJqlg/q1pnq8EulFRFxSSmvfHf+NtZMRqrHSJSJVxv/xeyWjZeNUGfqprMvJWCZ gsM2v2H3enhFHDjt1exGC2PwrEtqQI/bB+iu7kth83aTzapFFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKhD0I4BOqgKMpc0zQIjSlDgjh1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzI1ODUzZDktM2QwNC0z NzllLTlkNjMtYjMwYWJjOWIzNjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOIoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI3YiFtB/bubTEknIVA7/ZTPCsgMCvnzPRS7wonpIVEVzM5irlCUVA2 iejKXzkk6VMdPgOA7dYWa5NV1GP1ajM0ixiPKvFQ9qElEbOvj3Tkb+w40N6IGFZ7 dnGAaFDBWDqfBhHBOFCbMWAsI3azoAT85ta0asotJjJtXdMXXLJGKDjjex1I08dk cO1E04WLzE9cEW2jm2lMPlBFIS0gggFRy2Slwtg/vHmCdhwQXTCKlCe3B91S+gEX g9ZoHsfhi768G9j1pudVHkkP+jZCOdtrEeILQbIj6SjAvjidbYWFcxwKcOCW47B4 pZc4EWHPtQ8oJI0Iz1ptFB70qW+UlZg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:55 2025 by rpki-client