$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c95cd5e2-054b-386a-b063-5229a92c38f4.roa File: c95cd5e2-054b-386a-b063-5229a92c38f4.roa (raw, json) Hash identifier: 54K6uuGOQcdwPy/hnK9ZTjkBd1ebawhTswsnp+bZDjw= Subject key identifier: 32:6E:FF:E7:1B:21:3C:AA:F0:A2:06:91:65:8E:E0:BE:07:D6:DE:92 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B80B773FC1DF7D1FDEE8F1BA0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c95cd5e2-054b-386a-b063-5229a92c38f4.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 36183 IP address blocks: 172.225.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:73:fc:1d:f7:d1:fd:ee:8f:1b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=4f99b69c-17cc-4510-ad6d-a1f9ca98e5b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ab:69:b4:73:97:6d:b9:0d:9b:9e:ff:eb:77: e6:fd:2f:82:8a:17:3a:7c:01:e9:44:e0:8f:f9:25: 2c:90:c5:e9:7a:7c:96:5f:bd:8d:d9:b7:4d:1a:32: 7f:57:fe:f7:61:8a:12:99:e0:2d:ba:4d:9c:5e:b3: c0:19:68:e7:e0:8b:2e:b4:3b:e4:b1:5d:a1:82:0b: 3e:d0:a4:22:92:41:c3:6a:c5:2b:bb:cf:bd:e8:d9: 22:d2:ac:92:9a:37:12:20:e3:8b:22:33:f2:0c:37: e7:86:48:c0:4e:40:d6:27:14:88:cb:23:30:e7:c6: d4:c2:52:1e:24:25:da:a9:b6:6d:46:84:2e:65:9a: 2d:b8:7d:6f:ff:32:3b:35:6c:8d:f0:d3:e1:ab:e7: 1a:6b:61:11:70:56:40:3e:c3:e1:66:94:fc:1f:5c: e0:e5:80:94:a3:b9:3f:50:32:84:2a:2c:10:13:b2: c4:3d:43:07:cd:85:97:4c:70:b7:12:bc:5c:a3:25: df:fe:22:48:de:7f:fd:47:5e:c1:52:c3:70:ed:9b: 62:3a:50:c5:e8:c0:cb:a4:42:2b:ed:3a:8a:97:08: 65:6b:70:07:c0:ba:a2:48:cf:8b:a9:50:0e:4c:f3: b2:c6:3f:2a:fc:5a:14:f1:41:45:0d:ea:36:55:da: 21:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6E:FF:E7:1B:21:3C:AA:F0:A2:06:91:65:8E:E0:BE:07:D6:DE:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c95cd5e2-054b-386a-b063-5229a92c38f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f0:9c:64:c9:37:ac:78:f6:9a:e4:47:df:69:5f:99:f0:f1: 32:e6:b8:30:5c:2e:b3:2c:13:c9:30:c9:4a:7f:ef:e6:0a:3f: 0b:ee:d6:7c:f7:50:75:55:ad:af:6e:98:60:4e:ee:96:20:e7: c6:4b:76:45:cb:d9:16:2f:f2:64:26:ab:76:72:63:69:3e:fa: 68:6c:ae:70:e0:68:f8:4c:da:d2:f2:24:f5:59:11:ad:5c:ef: b2:f8:b5:0e:9a:ba:6b:32:8b:16:d6:bc:3f:9f:1c:d4:af:ba: 59:89:77:89:a4:59:70:49:87:f3:72:c0:89:42:1b:df:ae:20: 5b:ba:b3:22:5d:cc:63:ad:12:77:d4:4c:5d:a0:ca:46:d1:97: e7:56:9c:81:ca:95:1a:7c:c3:8f:34:a9:a7:1a:61:70:1b:c2: 56:28:b4:c5:4c:13:5d:d8:fc:30:c3:48:20:3a:5c:06:32:9c: 52:6e:43:7c:56:5a:9b:dd:ad:59:69:aa:f9:1b:9a:d0:6e:fe: f5:c9:79:75:fb:b3:43:4f:15:5e:94:cf:d7:17:4e:35:73:c5: 2a:34:26:a0:8d:9b:44:32:ed:4c:c2:72:a5:48:9f:94:12:4e: d4:68:e1:f3:85:f0:c4:89:d1:30:46:65:88:1e:26:d3:71:4a: cf:ab:88:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt3P8HffR/e6PG6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NGY5OWI2OWMtMTdjYy00NTEwLWFkNmQtYTFmOWNhOThlNWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKtptHOXbbkNm57/63fm/S+Cihc6fAHpROCP +SUskMXpenyWX72N2bdNGjJ/V/73YYoSmeAtuk2cXrPAGWjn4IsutDvksV2hggs+ 0KQikkHDasUru8+96Nki0qySmjcSIOOLIjPyDDfnhkjATkDWJxSIyyMw58bUwlIe JCXaqbZtRoQuZZotuH1v/zI7NWyN8NPhq+caa2ERcFZAPsPhZpT8H1zg5YCUo7k/ UDKEKiwQE7LEPUMHzYWXTHC3ErxcoyXf/iJI3n/9R17BUsNw7ZtiOlDF6MDLpEIr 7TqKlwhla3AHwLqiSM+LqVAOTPOyxj8q/FoU8UFFDeo2VdohEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJu/+cbITyq8KIGkWWO4L4H1t6SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzk1Y2Q1ZTItMDU0Yi0z ODZhLWIwNjMtNTIyOWE5MmMzOGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDwnGTJN6x49prkR99pX5nw8TLmuDBcLrMsE8kwyUp/7+YKPwvu1nz3 UHVVra9umGBO7pYg58ZLdkXL2RYv8mQmq3ZyY2k++mhsrnDgaPhM2tLyJPVZEa1c 77L4tQ6aumsyixbWvD+fHNSvulmJd4mkWXBJh/NywIlCG9+uIFu6syJdzGOtEnfU TF2gykbRl+dWnIHKlRp8w480qacaYXAbwlYotMVME13Y/DDDSCA6XAYynFJuQ3xW WpvdrVlpqvkbmtBu/vXJeXX7s0NPFV6Uz9cXTjVzxSo0JqCNm0Qy7UzCcqVIn5QS TtRo4fOF8MSJ0TBGZYgeJtNxSs+riHc= -----END CERTIFICATE-----Generated at Mon Oct 20 12:30:26 2025 by rpki-client