$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/299cd8cf-7364-30af-bb84-cbde3460e9cd.roa File: 299cd8cf-7364-30af-bb84-cbde3460e9cd.roa (raw, json) Hash identifier: dKwp4M9KQHJbVix3P40kDoI/jMGDg9q5Os0yw1JCkJs= Subject key identifier: 99:92:3C:F2:E2:B9:60:C0:84:9F:5A:7D:86:F4:16:BD:92:8E:8E:57 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8EACF6CD4E5BCF8AE5EF2580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/299cd8cf-7364-30af-bb84-cbde3460e9cd.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.226.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:f6:cd:4e:5b:cf:8a:e5:ef:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=5dfba9ca-9a91-47f9-8491-d553c0b5d1f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:43:f5:44:b7:bf:db:00:82:5e:8a:85:9c:a0: 2d:6b:9f:9f:44:d9:95:75:03:1a:bd:ae:85:94:66: c5:e6:ed:f7:93:d2:9e:40:14:e7:78:17:15:af:a2: cb:4d:0e:1f:82:20:4d:db:f0:35:2b:88:d3:c1:42: f4:12:9c:1c:cb:8e:a6:8d:e3:df:60:fd:ae:54:36: 6e:74:10:58:f9:c6:2d:93:f0:e5:8d:c3:90:36:1d: 00:e4:aa:44:ba:02:d8:dd:7f:30:d1:b8:82:96:2c: 01:8e:10:b2:68:e2:23:59:5d:1f:7b:35:73:aa:ef: 9c:ae:50:e7:18:8a:69:dd:e5:b9:67:2a:0f:3c:3b: a8:eb:20:9f:ff:d6:a1:61:1a:d7:ec:12:be:35:23: f8:2f:65:4a:bf:09:72:b6:a8:15:c3:a7:56:8f:24: 10:7c:06:8b:b0:f4:d9:8e:fd:5f:29:b8:fc:24:b0: 85:8c:06:81:cb:cc:79:11:98:6b:71:eb:00:2b:f3: 79:d9:9c:86:a7:7c:8d:54:35:de:c5:54:55:8b:1c: 57:b0:7f:23:36:2d:61:6d:cd:6e:07:c4:fd:62:0d: 1b:a4:47:80:7b:af:6a:df:69:4c:62:73:a0:9c:53: ab:04:93:25:1a:f6:68:e4:82:4d:69:42:cf:ce:b0: c2:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:92:3C:F2:E2:B9:60:C0:84:9F:5A:7D:86:F4:16:BD:92:8E:8E:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/299cd8cf-7364-30af-bb84-cbde3460e9cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.226.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:68:61:8e:3b:87:81:ed:34:68:10:91:32:39:b3:6f:1c:4f: e2:1c:18:e8:67:f4:62:58:06:f5:eb:86:3f:33:5d:e1:5d:a2: b4:1e:c6:5a:df:ac:cb:90:c1:32:23:f7:37:f1:24:ea:bf:1b: 19:9a:60:3f:c2:2e:50:39:84:3c:27:56:3f:75:37:8f:ef:e8: 9f:a0:22:61:02:ac:f5:b1:7c:7b:e9:2d:fa:f2:08:ba:5e:6d: 51:fe:bb:ed:5f:df:6f:bc:8b:44:3f:ff:5e:9c:45:fc:18:14: 78:38:52:45:c7:6a:c7:8c:68:db:55:58:b3:94:74:30:13:50: ed:62:26:71:81:87:fb:46:d2:e3:84:93:2f:1a:c8:bd:03:19: 07:5a:11:44:d3:99:06:91:9f:b9:c0:44:44:2c:e9:ea:39:d0: 65:36:a5:ae:8e:54:9b:ea:eb:95:30:20:09:b3:36:b0:52:78: 0d:3c:af:3d:1e:40:3e:b9:f0:73:9f:c7:e3:d4:ed:89:97:0f: 4b:b1:e2:5f:a4:de:8e:f5:eb:fc:06:ab:cb:b8:6b:cd:12:2b: 75:7e:e7:e6:f7:d4:38:b6:06:fe:78:33:ea:93:30:9e:13:7a: 01:ba:dc:71:b1:46:f0:6a:17:fa:b4:bb:25:b6:ff:a7:25:a6: 7b:79:6f:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrPbNTlvPiuXvJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk NWRmYmE5Y2EtOWE5MS00N2Y5LTg0OTEtZDU1M2MwYjVkMWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUP1RLe/2wCCXoqFnKAta5+fRNmVdQMava6F lGbF5u33k9KeQBTneBcVr6LLTQ4fgiBN2/A1K4jTwUL0Epwcy46mjePfYP2uVDZu dBBY+cYtk/DljcOQNh0A5KpEugLY3X8w0biCliwBjhCyaOIjWV0fezVzqu+crlDn GIpp3eW5ZyoPPDuo6yCf/9ahYRrX7BK+NSP4L2VKvwlytqgVw6dWjyQQfAaLsPTZ jv1fKbj8JLCFjAaBy8x5EZhrcesAK/N52ZyGp3yNVDXexVRVixxXsH8jNi1hbc1u B8T9Yg0bpEeAe69q32lMYnOgnFOrBJMlGvZo5IJNaULPzrDCsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmSPPLiuWDAhJ9afYb0Fr2Sjo5XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjk5Y2Q4Y2YtNzM2NC0z MGFmLWJiODQtY2JkZTM0NjBlOWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOKOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRoYY47h4HtNGgQkTI5s28cT+IcGOhn9GJYBvXrhj8zXeFdorQexlrf rMuQwTIj9zfxJOq/GxmaYD/CLlA5hDwnVj91N4/v6J+gImECrPWxfHvpLfryCLpe bVH+u+1f32+8i0Q//16cRfwYFHg4UkXHaseMaNtVWLOUdDATUO1iJnGBh/tG0uOE ky8ayL0DGQdaEUTTmQaRn7nAREQs6eo50GU2pa6OVJvq65UwIAmzNrBSeA08rz0e QD658HOfx+PU7YmXD0ux4l+k3o716/wGq8u4a80SK3V+5+b31Di2Bv54M+qTMJ4T egG63HGxRvBqF/q0uyW2/6clpnt5b1I= -----END CERTIFICATE-----Generated at Tue Nov 4 23:57:08 2025 by rpki-client