$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cae3158c-10fe-399a-9fcd-4bf6939828a3.roa File: cae3158c-10fe-399a-9fcd-4bf6939828a3.roa (raw, json) Hash identifier: 7AZSJwTR0amfkYeT6dvYuFawma7kupQd6PP05pipeXo= Subject key identifier: EA:48:9E:9E:DA:AA:C8:D9:3C:26:A6:46:AC:69:89:CD:83:08:E9:11 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B95A956BB49CF07A918295D40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cae3158c-10fe-399a-9fcd-4bf6939828a3.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 36183 IP address blocks: 172.224.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:56:bb:49:cf:07:a9:18:29:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=67d89184-b6bb-46c1-9db9-6192521b9ba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:55:c8:fd:12:c4:ee:03:d2:01:f7:6a:98:3c: 45:b6:19:d9:02:e5:52:7e:09:8f:0a:d8:cb:6f:c8: 58:5c:19:62:5b:53:f9:9a:a4:f6:c8:c0:fd:37:8e: 33:93:73:ec:42:ff:50:c9:34:8b:90:ae:2e:a7:ae: 5f:43:38:23:34:db:38:e9:d3:fb:40:5b:db:96:22: 38:80:eb:6c:ad:69:63:f7:ad:f0:e3:4c:2a:7f:33: 20:b2:db:b7:5d:f1:a9:a2:bc:c3:d4:99:91:8b:3e: b4:68:ed:16:01:55:46:ae:41:b9:dc:28:07:ac:0c: ca:aa:7a:45:6e:9e:59:94:9f:d5:3c:ed:b3:9c:c6: 24:ca:70:8f:cc:82:63:4b:8c:b9:66:43:00:80:62: af:55:9a:3b:b6:b6:6c:b3:6a:bb:42:8a:59:69:7b: 3c:01:22:99:59:32:00:2a:33:c0:61:2d:ba:90:2b: 41:56:81:63:c7:4f:e9:83:6d:33:17:95:61:c4:42: 38:62:68:d3:5e:c5:31:af:d3:62:b2:ed:ba:49:ab: 50:a4:64:49:c7:dd:18:73:e4:33:d9:e6:35:3c:ca: 7d:fb:9e:56:c6:06:08:a9:bd:0d:2a:6a:1a:e5:99: 3c:a5:10:da:32:d1:27:18:cb:46:56:27:bc:fd:e1: 2f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:48:9E:9E:DA:AA:C8:D9:3C:26:A6:46:AC:69:89:CD:83:08:E9:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cae3158c-10fe-399a-9fcd-4bf6939828a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:82:a4:32:12:04:95:94:cd:55:b4:86:57:42:2c:10:17:d8: 19:cb:5f:42:aa:40:6b:01:88:39:41:10:ce:f9:51:f5:9e:45: 5a:7c:79:5c:09:c2:a2:41:e1:c7:18:e7:f9:4c:56:f2:8b:6f: 43:5a:e9:4a:1c:41:c1:3c:4c:f7:cc:31:bc:d0:92:9e:41:5c: 8a:cf:03:e3:33:fb:c1:bd:b2:62:f8:ac:73:c7:65:86:88:46: 97:34:36:0f:d4:21:c4:88:70:f8:4c:95:8c:c9:85:a2:72:8a: 9f:35:dc:4c:1f:55:13:1f:a8:17:f6:69:59:28:11:5f:a2:91: 8e:c2:98:11:7b:0e:0b:49:a9:d7:e0:4e:8e:01:1a:37:83:6c: 10:eb:e4:24:c9:8d:f9:6e:95:10:e5:40:3f:38:8e:61:30:7b: e0:e2:90:a6:dc:17:79:81:41:a6:6b:92:07:69:fa:33:52:c8: 8b:5f:24:85:f2:98:e7:6d:1d:30:c5:06:56:3e:01:7f:31:45: b2:2e:14:06:5a:0d:bc:11:75:05:88:0c:f8:ad:e6:39:1f:aa: 7d:8c:84:b3:37:30:f3:0a:a6:cc:c5:0c:2a:89:ce:0d:ea:c6: 2b:e9:66:c6:24:c2:a4:46:16:e3:f8:44:3b:23:5f:ef:56:49: cb:23:78:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqVa7Sc8HqRgpXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk NjdkODkxODQtYjZiYi00NmMxLTlkYjktNjE5MjUyMWI5YmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVXI/RLE7gPSAfdqmDxFthnZAuVSfgmPCtjL b8hYXBliW1P5mqT2yMD9N44zk3PsQv9QyTSLkK4up65fQzgjNNs46dP7QFvbliI4 gOtsrWlj963w40wqfzMgstu3XfGporzD1JmRiz60aO0WAVVGrkG53CgHrAzKqnpF bp5ZlJ/VPO2znMYkynCPzIJjS4y5ZkMAgGKvVZo7trZss2q7QopZaXs8ASKZWTIA KjPAYS26kCtBVoFjx0/pg20zF5VhxEI4YmjTXsUxr9Nisu26SatQpGRJx90Yc+Qz 2eY1PMp9+55WxgYIqb0NKmoa5Zk8pRDaMtEnGMtGVie8/eEvqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpInp7aqsjZPCamRqxpic2DCOkRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2FlMzE1OGMtMTBmZS0z OTlhLTlmY2QtNGJmNjkzOTgyOGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKCpDISBJWUzVW0hldCLBAX2BnLX0KqQGsBiDlBEM75UfWeRVp8eVwJ wqJB4ccY5/lMVvKLb0Na6UocQcE8TPfMMbzQkp5BXIrPA+Mz+8G9smL4rHPHZYaI Rpc0Ng/UIcSIcPhMlYzJhaJyip813EwfVRMfqBf2aVkoEV+ikY7CmBF7DgtJqdfg To4BGjeDbBDr5CTJjflulRDlQD84jmEwe+DikKbcF3mBQaZrkgdp+jNSyItfJIXy mOdtHTDFBlY+AX8xRbIuFAZaDbwRdQWIDPit5jkfqn2MhLM3MPMKpszFDCqJzg3q xivpZsYkwqRGFuP4RDsjX+9WScsjeLA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:19:12 2025 by rpki-client