$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0fbb5a-951e-372c-89bc-dc308489326b.roa File: fa0fbb5a-951e-372c-89bc-dc308489326b.roa (raw, json) Hash identifier: wJmY61kbo+hL0bWmYeNthnaDr4AHqSU8INWJqirGMs0= Subject key identifier: E3:F7:27:A5:44:0F:97:A0:DA:FE:79:0D:EA:92:7B:75:91:24:87:79 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7B21FE3F1F5E0B82605D3500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0fbb5a-951e-372c-89bc-dc308489326b.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:fe:3f:1f:5e:0b:82:60:5d:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=bc6d8ec4-5964-4563-9156-b006b78b21ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:f9:77:84:7f:57:93:6e:8f:91:a5:9d:d8: 28:7b:cd:63:0c:a5:ee:20:c7:4a:0f:23:6d:51:62: 9d:a6:e9:44:8d:2f:5e:35:3c:aa:80:c5:86:fe:08: 57:db:08:8b:3f:3a:7e:23:06:21:bf:2e:bc:bf:99: 2b:81:38:c5:66:3d:0c:c9:b1:db:52:c6:8a:7b:b3: 95:a4:24:8a:3c:92:e0:bb:12:95:46:8c:cb:fa:db: 7a:31:38:17:99:eb:bb:19:f3:ab:1c:a9:a5:b3:32: 2c:2a:b0:ef:68:51:4b:fe:1d:24:97:21:2e:93:60: 32:06:05:b4:29:e8:0e:3f:08:3d:60:8b:f2:07:8d: 32:55:7e:bd:08:2c:ae:fc:d5:53:a9:f5:10:f3:f3: ad:e2:39:89:b9:4a:7c:ae:0c:2f:bf:76:5f:ae:9b: f4:b3:e0:4c:b5:b6:6b:79:40:19:fb:b7:e6:b8:5a: c4:3c:44:d6:c4:76:f0:ef:8c:6d:a9:cd:42:75:ed: b2:38:1f:e5:5b:67:96:91:cd:9e:4a:b2:7d:94:82: 72:1c:64:e7:44:92:53:8a:b8:84:f5:89:41:a4:a6: e2:76:42:30:3c:d5:6e:8c:de:ef:a8:82:ca:81:1f: 00:30:03:21:22:d5:b4:ba:69:92:ec:38:d8:22:48: f6:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F7:27:A5:44:0F:97:A0:DA:FE:79:0D:EA:92:7B:75:91:24:87:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fa0fbb5a-951e-372c-89bc-dc308489326b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:bd:d9:5e:17:76:14:2b:9c:1e:01:70:03:93:ec:39:5f:ca: b2:8e:c5:5b:f8:b5:3b:1f:91:ee:11:3f:99:d7:b0:05:16:b8: 12:e9:6c:f4:c5:58:b3:03:d2:2b:57:52:7b:22:e8:08:68:c9: 9d:70:a5:61:c5:88:35:6c:5f:23:98:16:f7:99:27:64:1d:0e: b4:cc:8e:af:fd:16:ee:96:0f:06:76:bb:82:f8:b8:8b:f8:8f: 2e:9c:1d:f5:27:a5:bc:f2:9b:d7:35:f7:32:cf:c6:3d:f5:6e: 95:1f:83:b0:fa:72:b4:6f:db:df:ee:c0:b9:56:c3:00:e6:15: 99:16:a2:0a:f2:b2:8a:3c:c0:6e:ed:d4:fc:f4:fb:3a:2e:95: b3:df:84:07:19:49:6f:44:48:9e:58:57:34:8d:90:0f:bc:00: 02:30:81:f8:60:36:7e:2d:32:7e:fc:c1:55:a8:cf:66:10:bb: b8:f7:4a:1a:a6:35:0a:5c:40:b9:2b:73:fb:4b:c9:e6:00:9d: e6:29:8c:a6:da:c2:83:fb:68:89:c8:f0:03:48:a3:30:dc:e8: 52:ae:0f:0d:fc:0a:a5:f6:10:ba:c3:59:5b:94:c4:6d:7b:85: 89:08:fe:bb:c3:13:77:d6:28:91:f2:ad:aa:6d:31:5d:c2:31: 70:81:6b:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7If4/H14LgmBdNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk YmM2ZDhlYzQtNTk2NC00NTYzLTkxNTYtYjAwNmI3OGIyMWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qX5d4R/V5Nuj5Glndgoe81jDKXuIMdKDyNt UWKdpulEjS9eNTyqgMWG/ghX2wiLPzp+IwYhvy68v5krgTjFZj0MybHbUsaKe7OV pCSKPJLguxKVRozL+tt6MTgXmeu7GfOrHKmlszIsKrDvaFFL/h0klyEuk2AyBgW0 KegOPwg9YIvyB40yVX69CCyu/NVTqfUQ8/Ot4jmJuUp8rgwvv3Zfrpv0s+BMtbZr eUAZ+7fmuFrEPETWxHbw74xtqc1Cde2yOB/lW2eWkc2eSrJ9lIJyHGTnRJJTiriE 9YlBpKbidkIwPNVujN7vqILKgR8AMAMhItW0ummS7DjYIkj29wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP3J6VED5eg2v55DeqSe3WRJId5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmEwZmJiNWEtOTUxZS0z NzJjLTg5YmMtZGMzMDg0ODkzMjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGu92V4XdhQrnB4BcAOT7DlfyrKOxVv4tTsfke4RP5nXsAUWuBLpbPTF WLMD0itXUnsi6AhoyZ1wpWHFiDVsXyOYFveZJ2QdDrTMjq/9Fu6WDwZ2u4L4uIv4 jy6cHfUnpbzym9c19zLPxj31bpUfg7D6crRv29/uwLlWwwDmFZkWogrysoo8wG7t 1Pz0+zoulbPfhAcZSW9ESJ5YVzSNkA+8AAIwgfhgNn4tMn78wVWoz2YQu7j3Shqm NQpcQLkrc/tLyeYAneYpjKbawoP7aInI8ANIozDc6FKuDw38CqX2ELrDWVuUxG17 hYkI/rvDE3fWKJHyraptMV3CMXCBawY= -----END CERTIFICATE-----Generated at Mon Oct 20 12:39:41 2025 by rpki-client