$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1932ce95-7be2-30bf-8470-b98e5bd9ef5e.roa File: 1932ce95-7be2-30bf-8470-b98e5bd9ef5e.roa (raw, json) Hash identifier: Fi+YnZoXggqDMvUhkv8xVy8wp9WvoSCOLwTVI/FEUpk= Subject key identifier: 48:62:5B:48:64:6C:70:D1:D4:0C:A6:F5:4B:19:D2:69:F5:20:E6:94 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BB88D4631FC9185626F72CA00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1932ce95-7be2-30bf-8470-b98e5bd9ef5e.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 63949 IP address blocks: 172.235.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:46:31:fc:91:85:62:6f:72:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=a29f1454-f7aa-499c-a686-8bea9a993b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a4:b6:3f:5f:a4:84:21:5d:3e:59:eb:27:ea: 10:70:bd:4e:cd:3e:04:7c:99:66:f0:eb:fc:0f:e1: 46:ea:20:c2:b0:5f:3b:58:d5:1b:94:b1:a6:ab:f3: 2c:cc:fc:d0:85:fe:b4:4c:3e:a7:02:47:3a:d6:c4: bd:8e:7a:1e:dd:71:18:5c:80:c6:8e:f1:e7:35:40: 38:93:2e:ed:02:da:29:0c:cf:37:ca:8d:66:ca:2c: 4b:e9:fc:f6:6b:2c:4e:ed:92:29:ba:bb:55:4e:fb: 01:b0:a6:5d:12:c3:45:04:70:51:b1:70:6f:d4:d7: 59:55:76:8d:a3:9c:ad:a7:46:d0:b8:bd:8b:b2:fd: 9f:98:5f:b6:45:99:59:53:ac:9a:92:6a:ea:d4:27: 39:57:13:ea:b2:64:1c:fa:9f:79:9e:23:ae:a4:31: e1:1b:86:7a:5e:c5:e8:cd:f1:be:58:01:c4:8f:d8: 81:f5:a9:b8:ec:4e:75:c1:8d:e6:7b:7b:63:c0:99: a6:be:2a:58:af:c9:85:c7:df:94:ed:2b:f2:da:ca: 73:a8:37:ce:eb:33:d0:8d:a0:27:55:47:f7:e6:47: 41:61:4f:73:d8:23:13:d6:ae:a9:39:3e:7b:f0:c7: 54:64:6e:47:3f:75:40:c3:c9:71:d0:40:30:4e:e4: 5f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:62:5B:48:64:6C:70:D1:D4:0C:A6:F5:4B:19:D2:69:F5:20:E6:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1932ce95-7be2-30bf-8470-b98e5bd9ef5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:29:f7:a0:00:94:34:59:aa:41:bf:b0:7b:47:93:df:3c:6d: 49:76:bc:49:55:6f:bd:cb:a9:78:70:28:d6:74:41:63:77:0d: 33:91:5a:83:b9:0b:ca:5a:4b:44:16:47:49:e7:64:a0:c7:72: 00:9e:b9:cf:d5:c1:5a:a2:11:bd:b0:b5:2c:4e:30:88:91:a8: 9a:1d:83:05:04:1b:e9:c4:87:92:11:8e:76:fb:cc:19:2e:17: ee:bf:82:43:60:91:8f:54:c4:88:65:85:04:8a:5e:ad:93:60: 44:00:64:1c:00:fd:8f:72:b0:ff:c3:9a:2e:63:ed:c7:1f:a1: f0:9b:d5:3e:1c:5c:4b:cf:48:6f:31:dd:bf:43:f9:f3:db:cd: 38:1a:31:03:02:83:d3:c8:9a:af:8f:e0:82:ea:a5:68:5c:b9: f8:d0:5b:69:1c:8c:33:34:ca:27:e8:d5:3a:65:0b:7e:65:26: a5:c9:67:f2:04:55:34:2e:89:13:0c:3c:ef:c2:24:bd:44:f7: 0d:83:db:89:cd:1b:7d:24:2c:c6:76:4e:ed:b6:da:8a:ed:9c: 6f:dc:ea:85:85:f4:aa:ad:bf:69:df:3f:5a:d0:91:08:b5:5f: 35:65:9b:55:cc:d1:06:40:e3:ee:d4:90:e7:b8:4a:0b:22:f3: fc:0b:a4:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jUYx/JGFYm9yygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTI5ZjE0NTQtZjdhYS00OTljLWE2ODYtOGJlYTlhOTkzYjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKS2P1+khCFdPlnrJ+oQcL1OzT4EfJlm8Ov8 D+FG6iDCsF87WNUblLGmq/MszPzQhf60TD6nAkc61sS9jnoe3XEYXIDGjvHnNUA4 ky7tAtopDM83yo1myixL6fz2ayxO7ZIpurtVTvsBsKZdEsNFBHBRsXBv1NdZVXaN o5ytp0bQuL2Lsv2fmF+2RZlZU6yakmrq1Cc5VxPqsmQc+p95niOupDHhG4Z6XsXo zfG+WAHEj9iB9am47E51wY3me3tjwJmmvipYr8mFx9+U7Svy2spzqDfO6zPQjaAn VUf35kdBYU9z2CMT1q6pOT578MdUZG5HP3VAw8lx0EAwTuRfVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhiW0hkbHDR1Aym9UsZ0mn1IOaUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTkzMmNlOTUtN2JlMi0z MGJmLTg0NzAtYjk4ZTViZDllZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrOtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUp96AAlDRZqkG/sHtHk988bUl2vElVb73LqXhwKNZ0QWN3DTORWoO5 C8paS0QWR0nnZKDHcgCeuc/VwVqiEb2wtSxOMIiRqJodgwUEG+nEh5IRjnb7zBku F+6/gkNgkY9UxIhlhQSKXq2TYEQAZBwA/Y9ysP/Dmi5j7ccfofCb1T4cXEvPSG8x 3b9D+fPbzTgaMQMCg9PImq+P4ILqpWhcufjQW2kcjDM0yifo1TplC35lJqXJZ/IE VTQuiRMMPO/CJL1E9w2D24nNG30kLMZ2Tu222ortnG/c6oWF9Kqtv2nfP1rQkQi1 XzVlm1XM0QZA4+7UkOe4Sgsi8/wLpAk= -----END CERTIFICATE-----Generated at Tue Nov 4 23:57:30 2025 by rpki-client