$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e931304e-ccfd-310c-993c-404836373b3c.roa File: e931304e-ccfd-310c-993c-404836373b3c.roa (raw, json) Hash identifier: t8wap/2vsZjOaju/x1WVAD5FQToWO0x8DZmXbncIh3Q= Subject key identifier: 14:AD:8B:6F:FB:2A:38:B7:55:8E:55:4A:E0:F1:76:06:DB:94:2A:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7DECBA89EEDD8432D0570180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e931304e-ccfd-310c-993c-404836373b3c.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:ba:89:ee:dd:84:32:d0:57:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=c0cff9c8-be6f-4023-bc41-dffdf7cf2af2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:90:c8:d5:a0:97:85:07:36:6e:f0:c9:d6:68: 19:c6:14:83:c7:7d:a2:b8:c1:88:9b:50:56:e1:db: 61:20:fe:1b:ac:b9:e5:be:e6:20:b1:a2:f5:7b:1e: fa:77:22:2a:30:b9:af:f0:49:9d:b9:2b:12:f5:df: b0:98:24:c7:97:51:2a:03:15:a2:8b:c7:a3:e2:39: d7:46:fe:a3:e1:fe:7c:ec:54:12:5f:89:e9:f7:ae: 92:9b:9f:fc:3c:5d:65:dd:63:5e:b1:3e:52:4d:a7: c7:5c:c1:ea:77:94:e1:14:66:bd:89:ec:c8:8c:65: aa:b0:c3:2c:5d:2d:ac:41:64:58:e8:cc:10:70:9a: 0d:d2:c5:7e:56:6f:98:64:da:d8:59:4b:2f:2c:2e: 66:7d:e3:97:85:62:aa:c9:e5:55:e0:83:df:33:25: 67:7c:da:fe:05:92:29:c1:b0:dc:c0:29:71:0b:ec: d3:41:76:85:19:f4:99:c8:db:16:2a:1f:c8:a9:69: 3a:6e:57:d6:92:6b:29:f9:1a:8c:a5:87:35:58:6f: c8:e6:b5:90:60:d8:fa:f1:7a:01:7c:34:7f:ec:5f: be:0c:68:f9:3b:d5:c5:cb:fc:f4:ba:fa:9c:8e:6c: 20:6a:f9:3e:09:aa:d3:be:c3:63:70:98:a9:e7:eb: 6c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AD:8B:6F:FB:2A:38:B7:55:8E:55:4A:E0:F1:76:06:DB:94:2A:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e931304e-ccfd-310c-993c-404836373b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:39:92:c0:2f:da:cf:52:ae:37:ff:e3:c1:ed:73:60:60:a2: 53:91:da:c3:51:56:e7:32:b0:3c:5c:9e:e3:55:54:2e:e6:45: b6:ad:89:e8:49:3d:5f:a4:7f:b7:e1:e2:1b:64:ac:45:1b:2a: a5:7a:6d:77:f5:cc:49:9e:68:41:20:c2:9b:ab:ea:89:ca:2b: 00:46:2a:91:cb:c1:4c:e7:00:97:ce:9e:43:52:da:fb:c7:ba: 37:4e:e7:cb:af:d5:67:19:cb:8a:08:a7:06:f9:ef:b9:87:b1: 0a:a3:30:90:c6:17:31:25:fa:da:90:e6:d8:1d:04:d6:1e:e1: 79:2e:64:7a:ed:8b:4a:ed:66:29:b9:ae:c4:6c:f4:cf:5e:09: 81:5b:43:ea:84:86:5a:2e:66:25:0f:ec:49:30:e5:09:02:44: d1:0c:ca:9c:7a:87:4b:37:b2:92:59:f9:2b:14:08:1d:da:bd: b4:46:2e:26:37:db:6d:a2:58:96:43:8e:8b:c8:ec:26:8d:18: e6:b2:85:02:77:35:4f:9a:8c:7a:3f:bd:a5:af:7e:06:28:5d: 8b:c9:7e:e5:49:36:7e:4b:6e:4c:2e:59:97:ba:46:9a:ee:0e: 4f:ae:03:d0:1e:68:0d:40:27:f0:12:36:71:56:7f:75:90:93: 6b:49:39:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LqJ7t2EMtBXAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YzBjZmY5YzgtYmU2Zi00MDIzLWJjNDEtZGZmZGY3Y2YyYWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35DI1aCXhQc2bvDJ1mgZxhSDx32iuMGIm1BW 4dthIP4brLnlvuYgsaL1ex76dyIqMLmv8EmduSsS9d+wmCTHl1EqAxWii8ej4jnX Rv6j4f587FQSX4np966Sm5/8PF1l3WNesT5STafHXMHqd5ThFGa9iezIjGWqsMMs XS2sQWRY6MwQcJoN0sV+Vm+YZNrYWUsvLC5mfeOXhWKqyeVV4IPfMyVnfNr+BZIp wbDcwClxC+zTQXaFGfSZyNsWKh/IqWk6blfWkmsp+RqMpYc1WG/I5rWQYNj68XoB fDR/7F++DGj5O9XFy/z0uvqcjmwgavk+CarTvsNjcJip5+tsYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSti2/7Kji3VY5VSuDxdgbblCouMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZTkzMTMwNGUtY2NmZC0z MTBjLTk5M2MtNDA0ODM2MzczYjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOHHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA5ksAv2s9Srjf/48Htc2BgolOR2sNRVucysDxcnuNVVC7mRbatiehJ PV+kf7fh4htkrEUbKqV6bXf1zEmeaEEgwpur6onKKwBGKpHLwUznAJfOnkNS2vvH ujdO58uv1WcZy4oIpwb577mHsQqjMJDGFzEl+tqQ5tgdBNYe4XkuZHrti0rtZim5 rsRs9M9eCYFbQ+qEhlouZiUP7Ekw5QkCRNEMypx6h0s3spJZ+SsUCB3avbRGLiY3 222iWJZDjovI7CaNGOayhQJ3NU+ajHo/vaWvfgYoXYvJfuVJNn5LbkwuWZe6Rpru Dk+uA9AeaA1AJ/ASNnFWf3WQk2tJOVQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:40:06 2025 by rpki-client