$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f53f3b6e-e8e1-3a71-92e7-96437d391457.roa File: f53f3b6e-e8e1-3a71-92e7-96437d391457.roa (raw, json) Hash identifier: xlnm/5zM+SNarYWx/+C8RP/byE7CJqII8WM+80mAJjc= Subject key identifier: 34:CC:1E:DA:DB:62:11:87:E7:6E:35:81:7B:91:40:F0:73:74:5F:2C Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7B21FF10E828F8A621DC5800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f53f3b6e-e8e1-3a71-92e7-96437d391457.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:ff:10:e8:28:f8:a6:21:dc:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=65b45a2f-253c-4757-a4d6-585f737d0be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:8e:f9:b3:86:1d:ec:fd:1b:36:64:f3:74:93: 95:5a:36:41:1f:00:22:3c:af:86:33:9b:f7:67:da: 9e:b0:17:fa:5d:fa:2b:a0:ba:59:1c:86:d5:d0:05: 2f:de:f0:c0:13:89:d0:5d:d5:2f:41:a0:8e:e9:f8: 37:9b:b3:bc:5e:72:3f:a0:7f:74:83:5d:4a:77:26: 73:7a:c4:c9:f7:15:0f:56:57:94:0b:c5:55:17:d0: 14:3d:54:3d:6d:46:d6:b4:80:b1:79:d3:d5:e2:93: 69:14:15:cc:ff:c7:9e:26:bc:e1:94:1b:64:e8:e8: 93:74:3a:0c:d4:f8:58:c1:1b:6d:a1:86:3c:3d:0c: cc:d3:6c:b2:fb:7f:a3:3d:b3:70:14:14:d2:77:6b: b0:4a:8c:50:3f:8b:63:ec:81:6a:65:5c:61:54:4d: ba:f6:e1:8f:03:c7:5d:46:8e:ac:ef:95:8e:60:34: dd:6b:50:23:aa:f7:42:d5:96:34:d0:05:12:43:71: 2f:60:77:37:25:7e:7f:8c:b0:2e:3e:2b:61:94:9c: 59:da:6e:60:80:54:ff:4d:8d:89:28:8f:12:a2:bf: 45:0e:15:44:cc:7d:13:b6:a4:e0:dc:67:d7:97:21: 66:e8:1d:a1:17:c3:cb:21:06:1c:da:4e:c8:d4:e2: 9a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CC:1E:DA:DB:62:11:87:E7:6E:35:81:7B:91:40:F0:73:74:5F:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f53f3b6e-e8e1-3a71-92e7-96437d391457.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:7a:d2:6f:07:35:7f:c6:b9:3b:a0:ea:97:03:5f:6f:ab:c1: 6e:55:e7:3f:0b:89:9d:2d:51:4e:a7:06:e5:92:73:66:64:0d: 3e:1a:42:6c:d9:8c:74:59:41:40:af:76:ff:fb:c7:b4:21:31: 4d:97:d3:43:d3:fd:1e:1c:0e:97:08:e8:e2:12:a9:e9:76:88: 19:fa:ba:65:f0:c5:c3:12:20:f4:d3:e8:db:40:38:f1:c7:d0: e8:bd:cd:13:42:0a:13:69:de:3f:ba:9c:9e:ff:d1:32:e3:38: 2f:27:fb:f4:29:73:d9:93:5e:6a:ea:ae:31:75:58:88:d0:08: b8:ee:83:45:0e:7f:15:b9:cf:01:d5:a0:d6:74:3b:41:c4:81: 20:34:1d:09:b8:1d:98:44:a4:95:6a:42:ab:35:76:d5:71:c7: ca:0b:52:2a:a9:ed:4a:08:bf:ba:d2:e5:71:ff:eb:94:f2:69: 71:31:cf:cb:fa:49:18:70:c4:69:b2:ae:09:3b:3b:c5:fa:a7: 41:05:82:2c:de:b4:9d:15:33:a2:88:b7:df:68:23:91:66:a6: 59:b1:29:c0:47:09:58:98:c0:a1:31:39:c6:80:2f:97:55:08: 7f:b2:cf:32:a1:e7:18:ea:81:f3:78:01:ab:0f:91:3a:06:c5: 6b:23:b2:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7If8Q6Cj4piHcWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk NjViNDVhMmYtMjUzYy00NzU3LWE0ZDYtNTg1ZjczN2QwYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY75s4Yd7P0bNmTzdJOVWjZBHwAiPK+GM5v3 Z9qesBf6XforoLpZHIbV0AUv3vDAE4nQXdUvQaCO6fg3m7O8XnI/oH90g11KdyZz esTJ9xUPVleUC8VVF9AUPVQ9bUbWtICxedPV4pNpFBXM/8eeJrzhlBtk6OiTdDoM 1PhYwRttoYY8PQzM02yy+3+jPbNwFBTSd2uwSoxQP4tj7IFqZVxhVE269uGPA8dd Ro6s75WOYDTda1AjqvdC1ZY00AUSQ3EvYHc3JX5/jLAuPithlJxZ2m5ggFT/TY2J KI8Sor9FDhVEzH0TtqTg3GfXlyFm6B2hF8PLIQYc2k7I1OKasQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTMHtrbYhGH5241gXuRQPBzdF8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZjUzZjNiNmUtZThlMS0z YTcxLTkyZTctOTY0MzdkMzkxNDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZ60m8HNX/GuTug6pcDX2+rwW5V5z8LiZ0tUU6nBuWSc2ZkDT4aQmzZ jHRZQUCvdv/7x7QhMU2X00PT/R4cDpcI6OISqel2iBn6umXwxcMSIPTT6NtAOPHH 0Oi9zRNCChNp3j+6nJ7/0TLjOC8n+/Qpc9mTXmrqrjF1WIjQCLjug0UOfxW5zwHV oNZ0O0HEgSA0HQm4HZhEpJVqQqs1dtVxx8oLUiqp7UoIv7rS5XH/65TyaXExz8v6 SRhwxGmyrgk7O8X6p0EFgizetJ0VM6KIt99oI5FmplmxKcBHCViYwKExOcaAL5dV CH+yzzKh5xjqgfN4AasPkToGxWsjsrg= -----END CERTIFICATE-----Generated at Mon Oct 20 20:18:16 2025 by rpki-client