$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2b302a7-7472-36be-b827-81ff12827b21.roa File: c2b302a7-7472-36be-b827-81ff12827b21.roa (raw, json) Hash identifier: f0zNLHizy9f+StZEwOdwhIjsaeR+v7OiGSJQEhjgxrQ= Subject key identifier: 2B:BA:A5:F7:C0:9B:6C:80:97:CF:3D:A3:2D:A3:29:88:B2:BC:EE:62 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B80B772BF8E323C6ECAF63880 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2b302a7-7472-36be-b827-81ff12827b21.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 36183 IP address blocks: 172.225.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:72:bf:8e:32:3c:6e:ca:f6:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=ec6c3d0c-199d-4705-8151-20657cbcbb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8e:36:1e:4a:28:ad:32:0c:83:ee:a0:1b:bc: 87:79:3c:75:7e:15:e1:47:1c:31:43:b9:af:d1:7a: 8d:2c:2b:8c:8e:90:6c:84:f6:c3:08:4c:61:c0:3f: 8a:e7:9c:ab:23:0b:16:3c:2b:8f:3a:ce:a5:4a:5e: 2e:91:1b:0f:61:d5:63:6c:31:e6:79:90:1e:65:22: db:ad:42:f7:b7:96:03:97:9e:e7:17:cc:33:63:5d: 20:e1:de:c5:f1:8b:30:ed:bd:cc:51:51:fd:06:55: 44:2b:34:e1:cf:7e:d5:9e:be:5b:d7:92:9f:7b:f3: d7:34:e3:dc:64:69:f8:6c:1c:0e:9c:3d:8f:34:8b: b6:08:2e:f3:d6:eb:22:0a:62:97:12:cf:56:f9:9b: d0:00:a7:6f:28:2d:12:bc:c6:0b:0e:7b:0f:26:3c: e0:83:fe:10:f0:be:c6:39:80:28:b3:6c:b4:54:45: f6:fb:cc:9b:1f:02:6b:98:4e:27:8b:ad:d3:f3:fd: 8e:5f:6f:13:1b:a3:ad:75:c3:62:13:89:48:23:e5: 43:eb:88:91:17:74:d0:27:b8:63:cd:34:12:e3:97: 28:ae:bc:de:8b:b7:f1:1a:7c:b5:84:a4:3c:1f:96: 7c:81:29:b3:34:53:c9:c7:79:db:a1:ce:4b:09:09: 56:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BA:A5:F7:C0:9B:6C:80:97:CF:3D:A3:2D:A3:29:88:B2:BC:EE:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c2b302a7-7472-36be-b827-81ff12827b21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:63:04:53:88:f7:a4:5f:92:b0:7f:3c:9c:46:c1:f2:fc:52: bf:b1:5d:58:80:2b:17:e1:07:cf:0c:e8:43:d9:3e:d3:d7:d0: b0:07:75:8a:e4:1f:49:da:59:7d:c4:99:99:ae:af:8c:ea:45: ab:04:f4:59:a1:f9:47:96:a3:51:bd:12:20:e9:a2:93:ed:96: f2:37:3f:6f:fd:f8:5e:52:70:0c:22:17:06:9a:92:fd:95:65: 92:73:6b:fb:cc:99:6d:df:c4:4a:cb:6a:14:fa:3c:84:b9:d0: 61:b9:e0:00:f3:03:85:69:50:16:6a:32:8f:5d:6b:4a:2c:35: 23:75:b1:ee:ff:ea:f9:1a:e8:1e:45:59:a8:11:ea:b3:b4:8a: 0a:ec:96:e7:31:7f:d5:d3:46:e4:48:79:82:98:4e:81:14:b4: ca:07:d0:00:59:5d:6e:97:85:2a:19:03:cd:e5:13:b2:00:30: 70:46:29:94:e9:a5:72:04:01:ba:8e:8b:21:e2:79:7a:f3:46: e6:77:8d:df:a9:ef:5e:80:18:71:27:a1:8c:09:ab:48:5c:99: 07:f5:a1:1e:e4:6b:c7:80:29:dc:47:5c:fe:31:f7:78:0b:27: 69:10:61:6a:c6:fe:74:25:b4:ec:80:a7:09:8c:b9:f8:f4:dc: 34:aa:a8:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt3K/jjI8bsr2OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk ZWM2YzNkMGMtMTk5ZC00NzA1LTgxNTEtMjA2NTdjYmNiYjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAko42HkoorTIMg+6gG7yHeTx1fhXhRxwxQ7mv 0XqNLCuMjpBshPbDCExhwD+K55yrIwsWPCuPOs6lSl4ukRsPYdVjbDHmeZAeZSLb rUL3t5YDl57nF8wzY10g4d7F8Ysw7b3MUVH9BlVEKzThz37Vnr5b15Kfe/PXNOPc ZGn4bBwOnD2PNIu2CC7z1usiCmKXEs9W+ZvQAKdvKC0SvMYLDnsPJjzgg/4Q8L7G OYAos2y0VEX2+8ybHwJrmE4ni63T8/2OX28TG6OtdcNiE4lII+VD64iRF3TQJ7hj zTQS45corrzei7fxGny1hKQ8H5Z8gSmzNFPJx3nboc5LCQlWAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCu6pffAm2yAl889oy2jKYiyvO5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzJiMzAyYTctNzQ3Mi0z NmJlLWI4MjctODFmZjEyODI3YjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFjBFOI96RfkrB/PJxGwfL8Ur+xXViAKxfhB88M6EPZPtPX0LAHdYrk H0naWX3EmZmur4zqRasE9Fmh+UeWo1G9EiDpopPtlvI3P2/9+F5ScAwiFwaakv2V ZZJza/vMmW3fxErLahT6PIS50GG54ADzA4VpUBZqMo9da0osNSN1se7/6vka6B5F WagR6rO0igrslucxf9XTRuRIeYKYToEUtMoH0ABZXW6XhSoZA83lE7IAMHBGKZTp pXIEAbqOiyHieXrzRuZ3jd+p716AGHEnoYwJq0hcmQf1oR7ka8eAKdxHXP4x93gL J2kQYWrG/nQltOyApwmMufj03DSqqE4= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:03 2025 by rpki-client