$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa File: ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa (raw, json) Hash identifier: lSkPbPG+YUpsUerQE8rzVeNWz46zXuh9yWvhUKS7b0A= Subject key identifier: 5B:BB:A0:B8:99:E6:F8:1E:E7:3D:B8:B8:CB:E2:D5:B5:D1:2B:8C:56 Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Certificate serial: 010D0C9F4328584B7F52436609806E71B703B040 Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa Signing time: Sun 12 Oct 2025 13:00:37 +0000 ROA not before: Sun 12 Oct 2025 13:00:37 +0000 ROA not after: Sat 10 Jan 2026 14:00:37 +0000 asID: 20115 IP address blocks: 172.222.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7f:52:43:66:09:80:6e:71:b7:03:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603 Validity Not Before: Oct 12 13:00:37 2025 GMT Not After : Jan 10 14:00:37 2026 GMT Subject: CN=2bffda40-4b1a-467d-9ade-e6a05a9b2c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:e4:c0:19:c5:38:13:71:31:3c:93:ae:38:a1: 1a:28:75:54:5d:f7:58:72:34:a3:5c:a8:5c:06:05: f6:cd:29:a1:b7:6b:34:22:c3:14:b8:21:08:d9:e4: a5:9a:ee:98:7e:bc:1a:d4:e5:fb:fe:a0:c4:7d:e1: f7:bf:9e:d8:3b:f9:ea:0b:fc:49:e3:c0:95:15:e6: 47:e5:1a:ef:cb:b5:cb:2e:69:8c:9b:64:1f:0e:4c: ec:ae:38:8e:ff:31:d9:0b:09:83:07:14:90:6f:fc: 67:b3:a2:20:45:97:b1:9b:08:da:09:9d:e3:e3:f0: a7:ff:1c:7f:23:c9:18:08:51:fe:69:14:31:71:cd: 33:36:8f:b1:b0:75:30:18:1e:8d:44:ea:37:03:b3: 11:23:17:78:93:90:d8:84:10:a1:2e:65:ac:3d:19: cc:fb:97:80:1c:73:4a:b4:b5:d2:7c:28:e8:b7:d2: 3c:28:30:cf:31:dd:58:66:a7:34:8b:be:13:68:13: 34:bf:84:df:3b:9b:27:40:9f:d8:6b:d9:3c:9b:33: 21:bf:3e:2e:80:54:7e:8b:c1:07:e6:ee:38:f0:83: c7:00:8f:26:c9:06:7c:b2:e2:50:50:25:10:c3:22: 50:2a:ee:50:22:07:31:8b:7e:ea:e6:92:f2:f3:fb: b1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BB:A0:B8:99:E6:F8:1E:E7:3D:B8:B8:CB:E2:D5:B5:D1:2B:8C:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ddf6f3e3-62b5-3748-84ef-5742d62f7ec7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl X509v3 Authority Key Identifier: keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer sbgp-ipAddrBlock: critical IPv4: 172.222.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:53:1c:67:52:5f:69:67:d3:52:83:22:5a:b9:e9:15:b5:c0: 13:8e:ff:38:79:b4:8b:0c:93:f0:e3:42:9e:e2:7f:e2:15:b6: 58:fd:48:87:f9:c1:03:44:c6:3b:50:02:25:c8:fd:25:9d:b4: 6f:d0:55:34:e2:bd:16:73:35:e6:d9:d2:5b:0a:e1:ba:b5:a2: e5:d3:33:8e:3a:35:23:8a:2d:41:01:a6:2b:1e:11:74:b0:e3: 93:b3:5d:ab:3b:ca:13:6b:e3:b5:1e:99:3b:75:18:37:e1:05: 4a:ab:24:55:d2:9c:fb:18:36:de:a7:76:d7:7d:f0:97:4a:af: 4e:c5:51:af:50:b1:52:18:51:76:9d:24:38:84:f5:c8:08:e2: e3:68:6c:9f:db:33:17:80:e3:de:13:58:b9:b0:81:e9:10:3a: 90:e7:7a:c4:65:60:f9:3c:c3:48:37:77:43:a2:67:09:d8:c4: 9f:7d:81:cd:f6:51:90:6f:1e:42:7b:46:68:7a:ce:36:72:07: aa:c3:15:df:ec:ba:6c:65:f8:c4:d3:01:57:03:df:34:38:d1: da:93:f2:fe:ae:b2:d2:32:ab:e7:08:1a:df:41:d5:ed:a3:6e: 4a:26:a3:da:5d:ca:d3:1f:f8:e8:e3:93:08:42:4f:4f:07:0b: 76:55:c3:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt/UkNmCYBucbcDsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli NjAzMB4XDTI1MTAxMjEzMDAzN1oXDTI2MDExMDE0MDAzN1owLzEtMCsGA1UEAxMk MmJmZmRhNDAtNGIxYS00NjdkLTlhZGUtZTZhMDVhOWIyYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgeTAGcU4E3ExPJOuOKEaKHVUXfdYcjSjXKhc BgX2zSmht2s0IsMUuCEI2eSlmu6Yfrwa1OX7/qDEfeH3v57YO/nqC/xJ48CVFeZH 5Rrvy7XLLmmMm2QfDkzsrjiO/zHZCwmDBxSQb/xns6IgRZexmwjaCZ3j4/Cn/xx/ I8kYCFH+aRQxcc0zNo+xsHUwGB6NROo3A7MRIxd4k5DYhBChLmWsPRnM+5eAHHNK tLXSfCjot9I8KDDPMd1YZqc0i74TaBM0v4TfO5snQJ/Ya9k8mzMhvz4ugFR+i8EH 5u448IPHAI8myQZ8suJQUCUQwyJQKu5QIgcxi37q5pLy8/uxlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFu7oLiZ5vge5z24uMvi1bXRK4xWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1 ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZGRmNmYzZTMtNjJiNS0z NzQ4LTg0ZWYtNTc0MmQ2MmY3ZWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3 NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5 YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0 MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGrN4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABTHGdSX2ln01KDIlq56RW1wBOO/zh5tIsMk/DjQp7if+IVtlj9SIf5 wQNExjtQAiXI/SWdtG/QVTTivRZzNebZ0lsK4bq1ouXTM446NSOKLUEBpiseEXSw 45OzXas7yhNr47UemTt1GDfhBUqrJFXSnPsYNt6ndtd98JdKr07FUa9QsVIYUXad JDiE9cgI4uNobJ/bMxeA494TWLmwgekQOpDnesRlYPk8w0g3d0OiZwnYxJ99gc32 UZBvHkJ7Rmh6zjZyB6rDFd/sumxl+MTTAVcD3zQ40dqT8v6ustIyq+cIGt9B1e2j bkomo9pdytMf+OjjkwhCT08HC3ZVwwQ= -----END CERTIFICATE-----Generated at Wed Nov 5 00:39:43 2025 by rpki-client