$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f82faa9-b5df-3dda-92dc-d45bef48e94a.roa File: 3f82faa9-b5df-3dda-92dc-d45bef48e94a.roa (raw, json) Hash identifier: ZpsTi1XXVtqbTO05rBx+gz26aBnyZfcLzPNg7TFjtkw= Subject key identifier: 89:99:55:AB:B3:8E:69:E2:3A:7E:11:C6:86:1A:B5:25:30:69:C3:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8EACFE4F982CF16E9E783400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f82faa9-b5df-3dda-92dc-d45bef48e94a.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 63949 IP address blocks: 172.235.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:fe:4f:98:2c:f1:6e:9e:78:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=a429065b-0cf8-41e2-ba73-6a0220e42c08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:dc:80:73:71:fe:d9:c4:3f:a0:e0:d1:71: 7e:f6:21:56:43:a8:a7:70:20:9c:00:6f:54:a1:d5: 57:a4:84:ab:c5:55:fc:ad:a2:19:c6:82:18:62:91: f9:d0:0b:93:de:f8:0c:13:88:48:52:cc:25:2d:fc: f0:e1:d4:d8:aa:b2:a2:7f:7a:dd:b8:c2:7d:d8:ed: c6:18:22:95:79:a3:78:10:2e:5d:59:61:bc:58:a9: 48:a9:fe:77:14:5d:14:6a:4c:33:7a:60:55:17:58: 1b:db:f5:ca:99:0a:72:02:40:aa:f6:81:b8:61:07: ea:49:29:78:11:bb:d8:32:ec:59:3d:60:76:6c:43: 67:72:74:47:3c:64:ca:34:98:b9:ef:8a:e2:3c:e7: 72:3d:91:7f:1d:29:3c:0b:fc:98:5d:f7:47:c6:98: 3b:14:7d:35:0d:aa:8f:58:47:e6:d0:02:d2:24:7b: 45:82:1c:da:61:5a:b4:95:c4:be:b1:91:49:48:f2: c9:7b:06:5a:77:13:24:26:7a:65:3d:b7:0b:26:f2: 47:3d:61:80:87:25:f0:7d:3b:24:ea:6d:7b:3a:ed: 91:84:f2:ee:e2:07:3b:3a:55:47:e1:fe:e7:2d:ae: 94:e6:b9:d9:d2:9d:36:c8:a8:98:b5:48:1d:e1:8d: 71:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:99:55:AB:B3:8E:69:E2:3A:7E:11:C6:86:1A:B5:25:30:69:C3:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f82faa9-b5df-3dda-92dc-d45bef48e94a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:09:f9:94:d0:0a:b9:4b:00:c1:5b:5c:16:ec:25:ca:75:74: 6e:ca:c8:7b:0b:fe:0e:0c:1a:25:cf:a4:40:9d:96:2f:9c:82: ef:3b:ae:45:1b:5d:c4:d0:16:d7:58:40:bc:d9:79:53:7a:4d: b6:63:6e:0e:e0:ba:2c:06:23:47:78:2d:c6:ee:1a:eb:10:0d: ed:03:db:76:46:42:60:7e:7b:cd:7e:87:c7:0b:f1:55:38:20: ab:5e:f8:6c:11:55:42:55:91:af:80:0b:3f:80:53:ed:ef:31: 00:d7:1e:bf:26:36:90:68:2d:37:0e:39:eb:3b:e0:64:14:af: b2:26:0a:da:ab:e9:03:42:39:20:19:2f:09:f8:94:1d:9e:8f: ca:62:7f:28:da:b7:2e:52:15:b2:20:51:0a:be:bb:09:da:28: bd:22:41:bc:4e:17:3a:49:74:aa:bc:e6:9d:74:ee:1f:5d:73: 28:b6:5e:f8:7b:f3:7f:cb:7b:60:85:80:fb:0e:2b:e9:db:72: 40:4f:9a:9b:b3:ae:97:a2:d4:24:dd:e9:26:d3:61:46:bb:07: 65:79:1e:a0:a7:b7:4b:09:90:2c:d8:a1:26:ec:3f:64:2f:6e: a2:df:31:a0:a3:75:3d:7a:a7:c2:24:a2:6e:97:ea:fe:07:b9: b9:f7:f4:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrP5PmCzxbp54NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk YTQyOTA2NWItMGNmOC00MWUyLWJhNzMtNmEwMjIwZTQyYzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVjcgHNx/tnEP6Dg0XF+9iFWQ6incCCcAG9U odVXpISrxVX8raIZxoIYYpH50AuT3vgME4hIUswlLfzw4dTYqrKif3rduMJ92O3G GCKVeaN4EC5dWWG8WKlIqf53FF0UakwzemBVF1gb2/XKmQpyAkCq9oG4YQfqSSl4 EbvYMuxZPWB2bENncnRHPGTKNJi574riPOdyPZF/HSk8C/yYXfdHxpg7FH01DaqP WEfm0ALSJHtFghzaYVq0lcS+sZFJSPLJewZadxMkJnplPbcLJvJHPWGAhyXwfTsk 6m17Ou2RhPLu4gc7OlVH4f7nLa6U5rnZ0p02yKiYtUgd4Y1xUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFImZVauzjmniOn4RxoYatSUwacOKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2Y4MmZhYTktYjVkZi0z ZGRhLTkyZGMtZDQ1YmVmNDhlOTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOtlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8J+ZTQCrlLAMFbXBbsJcp1dG7KyHsL/g4MGiXPpECdli+cgu87rkUb XcTQFtdYQLzZeVN6TbZjbg7guiwGI0d4LcbuGusQDe0D23ZGQmB+e81+h8cL8VU4 IKte+GwRVUJVka+ACz+AU+3vMQDXHr8mNpBoLTcOOes74GQUr7ImCtqr6QNCOSAZ Lwn4lB2ej8pifyjaty5SFbIgUQq+uwnaKL0iQbxOFzpJdKq85p107h9dcyi2Xvh7 83/Le2CFgPsOK+nbckBPmpuzrpei1CTd6SbTYUa7B2V5HqCnt0sJkCzYoSbsP2Qv bqLfMaCjdT16p8Ikom6X6v4Hubn39LI= -----END CERTIFICATE-----Generated at Tue Nov 4 22:16:37 2025 by rpki-client