$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/488cb736-5be9-3105-8480-ef5042fee893.roa File: 488cb736-5be9-3105-8480-ef5042fee893.roa (raw, json) Hash identifier: XKkbi1zTpo/7Ow5PWdjRKfDVuzfAjA4D/yhMD2kaBn0= Subject key identifier: 4F:6D:1F:02:50:53:DB:FD:EB:B0:B7:92:89:2A:BB:86:F5:02:A6:0F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B95A957165757E112CF2E38F0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/488cb736-5be9-3105-8480-ef5042fee893.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 36183 IP address blocks: 172.224.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a9:57:16:57:57:e1:12:cf:2e:38:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=e5351f35-dba9-4d2e-adda-c22d3fce9fb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ae:bc:f8:20:d9:d2:e2:ee:c2:34:81:64:03: 24:64:9b:58:82:7e:77:22:35:e6:00:40:41:22:54: ad:9e:01:3f:99:c0:e8:47:4d:25:11:7c:97:02:d4: ad:25:36:26:31:47:ed:75:ae:0f:d0:ce:2d:61:b7: a8:c6:e8:61:9e:9c:84:ec:9b:a9:1e:02:48:c0:70: f8:03:19:0e:41:e6:99:ed:1e:59:60:24:56:c1:9b: c2:a1:6d:46:30:a4:d3:95:02:0e:59:d8:54:60:11: 86:da:ec:00:89:d8:1f:78:65:57:7e:db:3e:20:f6: 4d:cf:36:89:8f:a6:b9:e2:4d:88:42:7a:32:11:39: 71:21:54:8a:27:bc:44:c7:76:64:49:4e:40:f3:21: a3:29:c3:2a:1f:0d:45:03:9f:28:8c:04:ec:fb:64: 24:19:8b:85:9a:b5:46:90:a9:81:60:06:d1:5b:d8: 8b:4f:71:6f:8f:e6:53:c3:67:92:d3:79:42:d0:70: 0f:ee:65:e9:6d:7f:69:d6:e9:74:2f:dd:cf:e4:cf: 83:9f:b4:a8:e3:5b:b0:c3:aa:f8:ce:10:4b:7b:37: 8e:a0:8a:7c:55:04:c4:21:c7:ba:0c:3a:a9:c9:0d: 5e:e2:1f:27:8c:8f:25:16:12:e9:1c:b1:ef:cf:03: 3d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:6D:1F:02:50:53:DB:FD:EB:B0:B7:92:89:2A:BB:86:F5:02:A6:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/488cb736-5be9-3105-8480-ef5042fee893.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:8f:eb:c0:90:70:99:08:15:ef:0c:16:3e:bd:73:4b:f5:9f: a1:38:6a:75:6b:72:af:cc:13:18:e6:b0:8b:6b:1b:18:57:45: ec:3a:30:8f:c1:35:58:91:ea:ee:c8:f3:b8:82:e8:6f:04:02: a2:37:8c:fb:b9:9a:5a:52:4d:0b:90:3a:e5:52:1b:2c:a5:5a: fa:8d:26:36:95:8b:99:3f:b8:63:33:8a:45:07:e4:26:50:59: 85:bc:64:f3:af:9f:1c:10:ae:cf:f7:ff:4f:ed:d9:9c:6e:0e: 2c:ee:97:6d:4c:06:0a:e9:59:be:eb:b3:d1:78:00:21:16:85: 66:02:90:54:0d:fa:93:f3:b4:65:de:c0:6d:80:c2:72:e5:ce: 53:ee:47:f2:c6:75:3d:e0:62:04:18:b0:b1:07:dc:7d:4b:53: c7:6f:77:5c:99:34:a9:6d:74:fb:32:4d:ae:91:7a:16:d0:84: 6e:5e:0c:3c:c0:b0:7c:f4:e5:9f:01:d5:70:c7:94:be:f8:da: 3d:81:e2:7a:19:20:c8:b1:17:a0:10:ce:71:e4:b5:79:00:33: 1d:78:21:c3:01:1d:44:51:6c:eb:a8:e5:9d:ee:1a:a7:c7:54: 80:bd:2a:74:32:59:16:2d:45:43:61:c7:c2:d2:de:76:0e:91: f2:f5:c1:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqVcWV1fhEs8uOPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk ZTUzNTFmMzUtZGJhOS00ZDJlLWFkZGEtYzIyZDNmY2U5ZmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlK68+CDZ0uLuwjSBZAMkZJtYgn53IjXmAEBB IlStngE/mcDoR00lEXyXAtStJTYmMUftda4P0M4tYbeoxuhhnpyE7JupHgJIwHD4 AxkOQeaZ7R5ZYCRWwZvCoW1GMKTTlQIOWdhUYBGG2uwAidgfeGVXfts+IPZNzzaJ j6a54k2IQnoyETlxIVSKJ7xEx3ZkSU5A8yGjKcMqHw1FA58ojATs+2QkGYuFmrVG kKmBYAbRW9iLT3Fvj+ZTw2eS03lC0HAP7mXpbX9p1ul0L93P5M+Dn7So41uww6r4 zhBLezeOoIp8VQTEIce6DDqpyQ1e4h8njI8lFhLpHLHvzwM9yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9tHwJQU9v967C3kokqu4b1AqYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDg4Y2I3MzYtNWJlOS0z MTA1LTg0ODAtZWY1MDQyZmVlODkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOB7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyP68CQcJkIFe8MFj69c0v1n6E4anVrcq/MExjmsItrGxhXRew6MI/B NViR6u7I87iC6G8EAqI3jPu5mlpSTQuQOuVSGyylWvqNJjaVi5k/uGMzikUH5CZQ WYW8ZPOvnxwQrs/3/0/t2ZxuDizul21MBgrpWb7rs9F4ACEWhWYCkFQN+pPztGXe wG2AwnLlzlPuR/LGdT3gYgQYsLEH3H1LU8dvd1yZNKltdPsyTa6RehbQhG5eDDzA sHz05Z8B1XDHlL742j2B4noZIMixF6AQznHktXkAMx14IcMBHURRbOuo5Z3uGqfH VIC9KnQyWRYtRUNhx8LS3nYOkfL1weQ= -----END CERTIFICATE-----Generated at Tue Nov 4 22:21:48 2025 by rpki-client