$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa File: f47e22f4-6e3a-3537-a1be-97f2fa802042.roa (raw, json) Hash identifier: zaTdvjNpmJhJH//Aw5jWYIw++uf7J0sTQO0XN2Wt2AI= Subject key identifier: 8D:5A:7E:15:5A:A0:B5:E2:D5:3C:66:A2:35:24:F3:71:87:72:77:DC Certificate issuer: /CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Certificate serial: 010D0C9F4328584B2496CC6865264AF2F5C99740 Authority key identifier: 92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa Signing time: Wed 10 Sep 2025 01:00:33 +0000 ROA not before: Wed 10 Sep 2025 01:00:33 +0000 ROA not after: Tue 09 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 172.86.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:24:96:cc:68:65:26:4a:f2:f5:c9:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4c32cde-7693-4d10-ae1e-8b8e9d363074 Validity Not Before: Sep 10 01:00:33 2025 GMT Not After : Dec 9 02:00:33 2025 GMT Subject: CN=0413628e-d05a-4bec-95c0-c664932ec06a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:ac:73:e3:7e:1b:9c:47:ff:e6:d9:64:b4: aa:b8:df:d2:e1:4a:f7:b2:57:25:82:03:23:b1:5d: 92:29:82:87:c0:06:26:97:33:c2:d5:ad:79:db:1d: 5d:cb:59:62:eb:0f:be:7a:4d:27:68:15:15:23:78: 74:23:45:dd:5c:a6:2d:91:3d:ab:0f:f8:14:19:8e: 66:1d:05:f8:8b:79:a5:aa:79:41:93:33:b3:5d:6f: 09:4a:07:3f:0a:11:0a:ff:6f:52:5a:c3:96:34:a8: 5b:87:b0:d6:f8:ad:92:20:51:6d:79:0f:57:43:02: 13:27:be:c8:e8:61:40:27:61:b2:ef:e3:d2:5f:ff: 02:86:e9:d8:e1:7c:94:9f:b3:4b:49:f9:66:96:f4: b8:ed:dd:30:e5:46:5b:7f:0a:4e:84:02:32:78:c1: ba:5e:bb:5e:87:a6:7b:5a:0b:be:c8:54:7a:ea:09: 00:e4:68:af:38:ec:14:65:0a:4e:65:ca:02:41:60: 25:f4:e5:ad:68:ac:5e:f5:d5:11:63:f0:ed:d8:c3: 8a:56:c9:5b:63:dd:57:a6:55:d5:35:cc:c9:64:52: d2:18:4b:b9:15:b0:0a:da:d5:e8:9d:27:32:3b:b3: d5:e9:dd:5c:e9:0c:14:8c:df:b1:23:c4:82:13:1c: 0a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:5A:7E:15:5A:A0:B5:E2:D5:3C:66:A2:35:24:F3:71:87:72:77:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/f47e22f4-6e3a-3537-a1be-97f2fa802042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074/e4c32cde-7693-4d10-ae1e-8b8e9d363074.crl X509v3 Authority Key Identifier: keyid:92:31:4C:58:BF:CF:79:3E:57:04:26:01:33:A0:29:6B:2B:85:7E:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e4c32cde-7693-4d10-ae1e-8b8e9d363074.cer sbgp-ipAddrBlock: critical IPv4: 172.86.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:4d:28:ab:a0:bb:71:72:34:b2:61:db:7c:8d:4b:7f:23:3b: 31:7e:a6:31:f8:e0:a7:d3:97:0a:c7:f5:d7:8d:fc:96:09:4c: c1:ce:f1:fc:a2:09:97:8f:b4:78:2c:18:65:ae:64:da:35:71: 94:7f:68:0a:d8:00:04:b8:e1:a6:59:30:a9:70:55:b3:d4:69: 10:06:3b:21:ec:a9:5c:ac:46:9a:38:ce:2e:67:9f:fb:ec:4f: d7:62:84:0c:6b:50:ad:75:36:89:be:87:3b:b5:25:01:00:ac: 52:4b:34:cf:d0:c4:5d:ee:ee:93:a5:f7:0d:e5:34:a0:b0:46: 04:b9:d9:28:6c:1b:af:be:16:37:25:4d:20:0d:d1:f5:dc:69: 53:8f:ea:1b:4f:3b:e3:e6:c2:1b:28:f0:98:24:9e:3f:0d:37: 7e:ce:d4:82:4f:af:7d:ef:49:6c:75:9b:15:2e:47:88:bd:76: e1:09:de:63:ab:bd:e2:df:58:e1:1c:22:e8:4c:06:ec:2d:62: 73:7a:5c:44:e4:bf:73:4e:92:07:cf:c2:41:00:fd:6a:0b:2b: a2:1f:5a:31:03:55:ed:2e:30:28:2a:f4:0e:dc:01:f6:3c:cb: c4:b0:16:49:8e:e6:f8:64:7a:12:cf:eb:05:f4:52:d3:8a:a1: ce:fc:58:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsklsxoZSZK8vXJl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTRjMzJjZGUtNzY5My00ZDEwLWFlMWUtOGI4ZTlkMzYz MDc0MB4XDTI1MDkxMDAxMDAzM1oXDTI1MTIwOTAyMDAzM1owLzEtMCsGA1UEAxMk MDQxMzYyOGUtZDA1YS00YmVjLTk1YzAtYzY2NDkzMmVjMDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudKsc+N+G5xH/+bZZLSquN/S4Ur3slclggMj sV2SKYKHwAYmlzPC1a152x1dy1li6w++ek0naBUVI3h0I0XdXKYtkT2rD/gUGY5m HQX4i3mlqnlBkzOzXW8JSgc/ChEK/29SWsOWNKhbh7DW+K2SIFFteQ9XQwITJ77I 6GFAJ2Gy7+PSX/8ChunY4XyUn7NLSflmlvS47d0w5UZbfwpOhAIyeMG6Xrteh6Z7 Wgu+yFR66gkA5GivOOwUZQpOZcoCQWAl9OWtaKxe9dURY/Dt2MOKVslbY91XplXV NczJZFLSGEu5FbAK2tXonScyO7PV6d1c6QwUjN+xI8SCExwK7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1afhVaoLXi1TxmojUk83GHcnfcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMz MmNkZS03NjkzLTRkMTAtYWUxZS04YjhlOWQzNjMwNzQvZjQ3ZTIyZjQtNmUzYS0z NTM3LWExYmUtOTdmMmZhODAyMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTRjMzJjZGUtNzY5My00ZDEwLWFl MWUtOGI4ZTlkMzYzMDc0L2U0YzMyY2RlLTc2OTMtNGQxMC1hZTFlLThiOGU5ZDM2 MzA3NC5jcmwwHwYDVR0jBBgwFoAUkjFMWL/PeT5XBCYBM6ApayuFfnowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lNGMzMmNkZS03NjkzLTRkMTAtYWUxZS04Yjhl OWQzNjMwNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJNKKugu3FyNLJh23yNS38jOzF+pjH44KfTlwrH9deN/JYJTMHO8fyi CZePtHgsGGWuZNo1cZR/aArYAAS44aZZMKlwVbPUaRAGOyHsqVysRpo4zi5nn/vs T9dihAxrUK11Nom+hzu1JQEArFJLNM/QxF3u7pOl9w3lNKCwRgS52ShsG6++Fjcl TSAN0fXcaVOP6htPO+Pmwhso8Jgknj8NN37O1IJPr33vSWx1mxUuR4i9duEJ3mOr veLfWOEcIuhMBuwtYnN6XETkv3NOkgfPwkEA/WoLK6IfWjEDVe0uMCgq9A7cAfY8 y8SwFkmO5vhkehLP6wX0UtOKoc78WFU= -----END CERTIFICATE-----Generated at Mon Oct 20 22:41:44 2025 by rpki-client