$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df7cb88f-1b65-3f74-bc07-f5b5f7185b94.roa File: df7cb88f-1b65-3f74-bc07-f5b5f7185b94.roa (raw, json) Hash identifier: tXoDwf3KcK0ZozNqPlkQdbopbYWntvUq5LwSeD2+uDU= Subject key identifier: 51:01:C6:B3:E3:02:6B:10:A5:44:B4:0C:99:74:11:17:17:88:EE:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8EACF6FD90FF24DDE6DE2E40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df7cb88f-1b65-3f74-bc07-f5b5f7185b94.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.226.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f6:fd:90:ff:24:dd:e6:de:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=74efd588-d643-467a-b3d9-f47711a09a85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:47:af:b5:40:b2:fd:24:e7:c3:5d:fa:28: 1d:cd:bf:50:cd:b9:94:09:11:f1:5b:f2:46:df:54: 77:a8:ec:d6:28:86:14:3f:0c:53:0f:ff:e6:ee:0e: be:04:c6:b1:15:2e:42:51:6d:5f:02:31:36:e6:8b: 41:72:2d:be:68:95:6c:e1:b0:da:46:20:ff:e7:ef: 4a:c6:2a:5c:80:93:f9:28:2f:39:c6:e8:a7:62:3c: 38:aa:44:9b:13:de:b2:92:fa:72:ae:e3:c1:d3:25: 31:f2:18:40:1a:83:81:8a:19:4d:00:eb:ae:35:2f: 46:3e:a1:92:f4:dc:47:4b:6f:a8:89:0c:7a:df:a7: 34:7a:16:43:84:66:2d:e8:49:6b:c1:50:c9:83:b3: d9:2d:71:fb:e7:66:99:75:48:5d:92:6f:08:ed:63: 1a:5a:9d:64:b8:ab:7b:cf:bf:d6:21:28:f3:96:6a: 9b:65:72:cc:6b:6a:37:28:69:49:23:fa:f4:f8:a5: 35:70:82:d5:9e:7a:60:87:a1:92:1d:ed:17:ef:8c: 01:f7:ba:9d:39:c3:df:25:d3:3f:3e:ab:4f:00:f3: f9:f5:77:18:3c:17:9c:84:fe:ba:d9:46:19:f1:bd: df:73:0d:27:5d:ec:80:7c:65:97:1b:35:ef:a5:42: 18:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:01:C6:B3:E3:02:6B:10:A5:44:B4:0C:99:74:11:17:17:88:EE:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df7cb88f-1b65-3f74-bc07-f5b5f7185b94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:b4:99:33:19:30:fa:e5:d2:a1:38:2b:20:54:c8:98:05:2c: 0b:97:7e:44:6b:eb:7d:0f:bb:00:70:87:62:31:a3:fe:dd:19: c5:b8:b7:64:50:7a:a7:44:e9:0b:a6:bc:b0:02:8a:b2:ce:c0: f0:b2:c1:40:4d:d6:df:0e:18:a1:97:8a:16:ae:47:06:f7:5d: 14:20:61:7a:4a:67:dd:dd:49:fb:d0:d0:9a:bd:c3:1a:99:a1: 10:43:ae:63:06:b7:27:b0:20:70:bf:d7:97:5f:a9:94:80:5e: 55:de:26:2c:7f:df:d1:62:c6:88:f8:54:9c:0f:4b:f5:85:f7: 17:39:39:18:bf:8f:64:94:91:f2:93:6e:c2:28:42:36:be:cb: 05:6e:6f:3d:73:7d:4e:d5:ad:a8:06:d1:d0:71:28:f3:3c:e9: 9c:a4:e4:88:5c:f0:40:67:40:b9:98:8d:fc:a7:97:4e:a6:35: 31:7d:54:4b:85:bd:fe:95:a0:5c:b9:ba:50:bb:70:7d:e5:51: ed:7b:74:26:c0:46:c1:5a:cd:33:9a:b4:05:c0:1f:c0:4b:8b: 16:e8:ff:9f:6e:cf:b3:3f:9a:7e:12:c1:5a:bc:80:8e:f3:24: b0:1f:51:cf:dd:bd:c3:cb:0c:c3:47:b5:46:40:f5:43:d4:ea: 9a:71:65:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPb9kP8k3ebeLkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NzRlZmQ1ODgtZDY0My00NjdhLWIzZDktZjQ3NzExYTA5YTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbZHr7VAsv0k58Nd+igdzb9QzbmUCRHxW/JG 31R3qOzWKIYUPwxTD//m7g6+BMaxFS5CUW1fAjE25otBci2+aJVs4bDaRiD/5+9K xipcgJP5KC85xuinYjw4qkSbE96ykvpyruPB0yUx8hhAGoOBihlNAOuuNS9GPqGS 9NxHS2+oiQx636c0ehZDhGYt6ElrwVDJg7PZLXH752aZdUhdkm8I7WMaWp1kuKt7 z7/WISjzlmqbZXLMa2o3KGlJI/r0+KU1cILVnnpgh6GSHe0X74wB97qdOcPfJdM/ PqtPAPP59XcYPBechP662UYZ8b3fcw0nXeyAfGWXGzXvpUIY2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFEBxrPjAmsQpUS0DJl0ERcXiO7EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGY3Y2I4OGYtMWI2NS0z Zjc0LWJjMDctZjViNWY3MTg1Yjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFG0mTMZMPrl0qE4KyBUyJgFLAuXfkRr630PuwBwh2Ixo/7dGcW4t2RQ eqdE6QumvLACirLOwPCywUBN1t8OGKGXihauRwb3XRQgYXpKZ93dSfvQ0Jq9wxqZ oRBDrmMGtyewIHC/15dfqZSAXlXeJix/39Fixoj4VJwPS/WF9xc5ORi/j2SUkfKT bsIoQja+ywVubz1zfU7VragG0dBxKPM86Zyk5Ihc8EBnQLmYjfynl06mNTF9VEuF vf6VoFy5ulC7cH3lUe17dCbARsFazTOatAXAH8BLixbo/59uz7M/mn4SwVq8gI7z JLAfUc/dvcPLDMNHtUZA9UPU6ppxZaM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:28:18 2025 by rpki-client