$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfddccbb-feb3-3346-85d4-3a7cb49d1cd2.roa File: cfddccbb-feb3-3346-85d4-3a7cb49d1cd2.roa (raw, json) Hash identifier: 9p7eTwA3Z3NCPIWk2HGSrQywUS8hMFXWe3zVlSuFUUU= Subject key identifier: 48:C9:6D:56:68:07:AC:63:4C:01:A0:47:EF:50:3A:C0:98:80:3F:2F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B80B773915361FEC9BFAEF140 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfddccbb-feb3-3346-85d4-3a7cb49d1cd2.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 36183 IP address blocks: 172.225.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:73:91:53:61:fe:c9:bf:ae:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=4fe00d68-df18-4b82-997c-9e70c3c67720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:c8:0e:49:74:c3:23:88:e4:f7:56:a8:7a: d0:ae:93:9a:91:af:b3:22:99:25:95:ec:a4:2d:b8: fd:e2:23:da:a6:77:bd:31:86:11:fa:b1:32:0c:2c: 57:11:3d:47:69:6d:cc:37:e7:7a:e9:d2:c8:e5:fe: bf:55:c5:87:6f:4d:a4:a1:14:90:5c:40:5c:3f:69: 5c:2f:2c:85:a5:16:2d:71:8c:92:f0:bf:1e:fc:dc: b9:68:79:47:3a:ab:45:cf:c0:3d:82:0a:8a:e8:90: 9f:4d:96:51:38:1f:53:63:fb:e2:03:e3:a4:9e:80: 9d:da:a3:e6:df:8e:02:9b:85:0f:33:e0:37:e0:ea: c0:d5:40:5c:35:75:0c:9d:f5:1a:59:09:72:a1:0b: c0:f4:3d:04:07:33:88:86:ff:7f:ef:fd:af:df:8d: ef:a8:dc:84:72:6e:a3:f6:c6:71:b9:52:70:e5:e8: 7a:c3:bc:41:11:64:9c:5a:07:8c:7a:ca:17:53:24: 85:91:b9:88:1a:1a:cf:14:10:a0:7c:78:74:72:fc: f4:55:8d:bd:4a:3a:17:a0:98:1a:ad:00:76:38:ad: b0:e5:34:af:de:d7:27:f7:fc:d3:a1:91:fb:82:fc: 55:d5:4c:e1:c9:af:e5:a7:ed:5b:43:d0:60:53:6d: 3c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C9:6D:56:68:07:AC:63:4C:01:A0:47:EF:50:3A:C0:98:80:3F:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfddccbb-feb3-3346-85d4-3a7cb49d1cd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:35:78:b2:32:b8:51:05:12:65:33:d1:e1:15:15:a1:89:d0: 43:cd:81:ea:0e:21:5c:96:47:22:a5:ba:73:f6:ad:ee:19:04: 38:4b:e1:7b:4c:a4:00:50:fd:f1:7d:9a:aa:55:aa:c8:65:ab: 38:66:e5:2c:00:07:18:13:48:b7:87:3b:83:11:1d:cd:c4:16: 52:5b:15:97:73:d6:10:76:12:2f:eb:96:94:cb:16:d1:72:a9: 7c:1e:e9:bb:62:ca:cd:a7:c9:47:0b:5f:d4:93:2b:cf:25:8e: e5:67:2d:ff:b1:e6:9c:23:95:b6:d8:22:10:f8:1c:90:5b:7b: 4f:7c:a3:7e:08:62:e3:03:a4:a2:bb:73:eb:36:6f:9d:be:81: 0e:ac:bf:87:56:79:41:2b:7e:07:66:75:21:d8:6c:41:eb:83: 5b:b9:d6:9a:ee:34:a0:d7:2e:f1:56:05:b0:e0:82:ee:f0:be: f9:79:1c:b7:3a:57:d6:a1:5c:c0:dd:e2:46:61:b1:dc:e3:d4: 66:6b:ec:0f:f7:98:1f:79:57:79:f3:a9:81:0e:87:40:e7:9b: 3f:0b:8d:8c:5e:da:34:53:7b:45:23:f4:a0:e3:ff:db:b2:ab: a9:32:91:6e:31:72:a4:f3:2b:80:5a:e5:4a:c9:d1:ea:9b:39: f6:14:e1:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt3ORU2H+yb+u8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk NGZlMDBkNjgtZGYxOC00YjgyLTk5N2MtOWU3MGMzYzY3NzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCXIDkl0wyOI5PdWqHrQrpOaka+zIpklleyk Lbj94iPapne9MYYR+rEyDCxXET1HaW3MN+d66dLI5f6/VcWHb02koRSQXEBcP2lc LyyFpRYtcYyS8L8e/Ny5aHlHOqtFz8A9ggqK6JCfTZZROB9TY/viA+OknoCd2qPm 344Cm4UPM+A34OrA1UBcNXUMnfUaWQlyoQvA9D0EBzOIhv9/7/2v343vqNyEcm6j 9sZxuVJw5eh6w7xBEWScWgeMesoXUySFkbmIGhrPFBCgfHh0cvz0VY29SjoXoJga rQB2OK2w5TSv3tcn9/zToZH7gvxV1Uzhya/lp+1bQ9BgU208EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjJbVZoB6xjTAGgR+9QOsCYgD8vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2ZkZGNjYmItZmViMy0z MzQ2LTg1ZDQtM2E3Y2I0OWQxY2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs1eLIyuFEFEmUz0eEVFaGJ0EPNgeoOIVyWRyKlunP2re4ZBDhL4XtM pABQ/fF9mqpVqshlqzhm5SwABxgTSLeHO4MRHc3EFlJbFZdz1hB2Ei/rlpTLFtFy qXwe6btiys2nyUcLX9STK88ljuVnLf+x5pwjlbbYIhD4HJBbe098o34IYuMDpKK7 c+s2b52+gQ6sv4dWeUErfgdmdSHYbEHrg1u51pruNKDXLvFWBbDggu7wvvl5HLc6 V9ahXMDd4kZhsdzj1GZr7A/3mB95V3nzqYEOh0Dnmz8LjYxe2jRTe0Uj9KDj/9uy q6kykW4xcqTzK4Ba5UrJ0eqbOfYU4TM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:54 2025 by rpki-client