$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/5962fb8d-96a5-3b26-bdfc-d9776b3fa518.roa File: 5962fb8d-96a5-3b26-bdfc-d9776b3fa518.roa (raw, json) Hash identifier: uN6A2tJzwqSi40Gln7jAn7klWc0S7SF5nvnx7xup3Lg= Subject key identifier: F2:67:92:B4:3C:77:D9:86:3B:4F:F1:C0:A8:56:1E:85:A5:A2:4B:C5 Certificate issuer: /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Certificate serial: 010D0C9F4328584B2496D3F9E06F51D723A4C000 Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/5962fb8d-96a5-3b26-bdfc-d9776b3fa518.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 172.86.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:d3:f9:e0:6f:51:d7:23:a4:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=89b76784-c041-4211-bf88-dfb942ff5637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d1:d1:07:62:0f:c9:16:9f:15:f8:d4:c1:d5: 38:fb:0f:18:91:e5:e9:fd:a9:96:04:61:d6:ad:55: e1:bf:45:0c:eb:e1:ec:93:1c:ef:15:6b:26:bc:dc: 5d:3d:be:13:50:ff:db:fb:56:95:db:d0:ab:1a:16: 23:e0:8e:00:d9:c2:c6:b5:bf:62:1b:7e:26:21:f1: 8a:b9:66:ec:fc:b1:53:b6:2f:a1:37:94:0b:b1:69: 51:c2:94:c0:68:e2:86:c1:c9:27:1f:c5:92:ba:f2: 58:da:01:5d:ef:22:b0:f2:c0:35:cd:6b:70:03:aa: cd:99:18:fe:34:4b:0e:4b:16:e5:62:84:c9:56:8c: 6a:56:fa:9f:ce:81:b1:94:b9:89:f9:ab:8e:32:61: 56:5f:7f:04:25:dc:06:88:2f:d5:35:4f:2c:44:76: d3:56:1a:d3:2c:ce:34:d7:bd:fa:d5:c3:b8:96:e4: 87:69:62:e8:b8:bd:88:54:35:71:24:8c:de:6e:3c: 94:79:d8:a6:72:c2:06:3d:ca:23:b1:49:c8:56:d2: 44:fa:bf:b9:ad:4a:f5:2c:d8:82:58:14:ce:96:cb: b8:0c:0e:4b:7f:9e:fc:fd:1c:aa:d9:00:15:17:60: 65:5b:84:74:5f:72:fc:73:08:7a:87:cb:c8:ef:e1: 9c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:67:92:B4:3C:77:D9:86:3B:4F:F1:C0:A8:56:1E:85:A5:A2:4B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/5962fb8d-96a5-3b26-bdfc-d9776b3fa518.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl X509v3 Authority Key Identifier: keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer sbgp-ipAddrBlock: critical IPv4: 172.86.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:e0:38:45:24:06:0c:0c:74:3e:78:98:e9:ba:eb:1a:0d:c1: cf:5b:9b:b4:0a:6e:17:5d:d8:d4:e1:d0:cd:99:d8:ec:cd:f5: 25:02:1d:a2:f5:7b:5d:31:18:75:cf:51:a1:89:6c:18:87:9f: 10:56:4b:88:72:03:36:fc:89:02:04:85:1f:bf:ce:a9:b5:e6: 75:9c:fa:f2:24:71:a8:41:e1:41:9d:5a:18:95:f1:4d:de:f6: a2:e5:e9:51:c0:87:cc:69:2f:ff:0a:17:7c:67:bb:34:bc:db: 60:62:bf:3c:a7:f0:2a:6e:dc:aa:7d:d1:37:e8:98:02:cb:38: 3f:5f:a0:83:6f:b4:43:e8:c6:b7:5a:e4:c7:6a:0c:d6:85:f0: d6:8e:75:b9:48:b4:74:99:87:12:7f:9e:7c:b4:85:58:25:d6: 6b:d3:e7:cb:e1:46:f5:96:52:41:10:70:e5:d8:f0:b0:a3:2a: a7:3f:39:09:88:17:6a:5c:21:71:0c:a3:06:98:c0:62:a6:50: 67:b5:92:74:32:66:e3:4d:4e:02:ed:d7:92:ad:17:cf:52:45: ab:59:1c:74:5f:15:92:34:74:de:fc:c3:b9:22:68:d3:32:bf: 49:bd:90:6e:a5:e5:bd:3f:73:3b:61:d2:78:a0:fe:18:a9:54: 98:3a:73:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEskltP54G9R1yOkwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRjMzJjZGUtNzY5My00ZDEwLWFlMWUtOGI4ZTlkMzYz MDc0MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk ODliNzY3ODQtYzA0MS00MjExLWJmODgtZGZiOTQyZmY1NjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9HRB2IPyRafFfjUwdU4+w8YkeXp/amWBGHW rVXhv0UM6+HskxzvFWsmvNxdPb4TUP/b+1aV29CrGhYj4I4A2cLGtb9iG34mIfGK uWbs/LFTti+hN5QLsWlRwpTAaOKGwcknH8WSuvJY2gFd7yKw8sA1zWtwA6rNmRj+ NEsOSxblYoTJVoxqVvqfzoGxlLmJ+auOMmFWX38EJdwGiC/VNU8sRHbTVhrTLM40 17361cO4luSHaWLouL2IVDVxJIzebjyUedimcsIGPcojsUnIVtJE+r+5rUr1LNiC WBTOlsu4DA5Lf578/Ryq2QAVF2BlW4R0X3L8cwh6h8vI7+Gc+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJnkrQ8d9mGO0/xwKhWHoWlokvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMz MmNkZS03NjkzLTRkMTAtYWUxZS04YjhlOWQzNjMwNzQvNTk2MmZiOGQtOTZhNS0z YjI2LWJkZmMtZDk3NzZiM2ZhNTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRjMzJjZGUtNzY5My00ZDEwLWFl MWUtOGI4ZTlkMzYzMDc0L2U0YzMyY2RlLTc2OTMtNGQxMC1hZTFlLThiOGU5ZDM2 MzA3NC5jcmwwHwYDVR0jBBgwFoAUkjFMWL/PeT5XBCYBM6ApayuFfnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMzMmNkZS03NjkzLTRkMTAtYWUxZS04Yjhl OWQzNjMwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFbhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKrgOEUkBgwMdD54mOm66xoNwc9bm7QKbhdd2NTh0M2Z2OzN9SUCHaL1 e10xGHXPUaGJbBiHnxBWS4hyAzb8iQIEhR+/zqm15nWc+vIkcahB4UGdWhiV8U3e 9qLl6VHAh8xpL/8KF3xnuzS822Bivzyn8Cpu3Kp90TfomALLOD9foINvtEPoxrda 5MdqDNaF8NaOdblItHSZhxJ/nny0hVgl1mvT58vhRvWWUkEQcOXY8LCjKqc/OQmI F2pcIXEMowaYwGKmUGe1knQyZuNNTgLt15KtF89SRatZHHRfFZI0dN78w7kiaNMy v0m9kG6l5b0/czth0nig/hipVJg6c5o= -----END CERTIFICATE-----Generated at Mon Oct 20 04:59:27 2025 by rpki-client