$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/492dbbc1-b713-3180-b7c9-a8f748e6453d.roa File: 492dbbc1-b713-3180-b7c9-a8f748e6453d.roa (raw, json) Hash identifier: l3JqtFWsJ9vwB9fJ6/tmq36SjfaQCTkkWlZ82620lGE= Subject key identifier: 71:EA:2C:4F:54:71:BB:B9:A6:36:46:05:0F:4A:57:FA:09:9E:3D:D3 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7B21FE61CA5A40EA13791440 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/492dbbc1-b713-3180-b7c9-a8f748e6453d.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:fe:61:ca:5a:40:ea:13:79:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=70479bc4-6a57-48d1-8ff7-b5ad54995a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7f:7e:4f:06:db:f4:e1:dd:91:59:0c:f4:1f: c3:0f:0e:ce:bd:22:97:4e:2f:36:c9:5b:14:35:98: 78:fb:f2:c4:b3:c3:20:f5:ba:e8:d1:86:a7:63:59: 16:5d:f1:1d:76:46:29:64:14:4b:32:3d:63:1e:70: d4:07:b9:1c:9e:6b:d7:6b:6e:03:1a:11:a3:09:e6: 6e:a0:74:fc:a8:91:5b:2c:aa:ac:c6:b8:41:2f:74: cd:0e:5e:cc:c2:ff:17:45:de:2c:52:7f:b4:00:f8: f9:1b:5c:c4:d9:e2:bd:6a:d5:7d:8c:09:33:21:09: 9f:68:fc:1f:26:50:77:9f:d6:6d:f0:2a:d6:98:8d: 23:2a:de:26:42:46:32:15:3e:4d:87:f2:d8:29:de: 93:18:9a:c0:f1:cd:ae:73:0a:a8:4b:78:3a:ed:c1: fd:fe:22:1c:a6:91:f2:2f:c3:9f:ee:9d:8c:8c:be: f4:eb:29:14:f2:97:07:46:55:1b:f8:03:c5:07:51: 76:2e:b4:cc:88:7e:84:a8:f2:b1:45:33:bf:9b:3d: 33:b6:c0:35:6a:f2:90:ae:57:70:03:08:04:d5:be: da:d7:0e:5d:c8:cd:de:4d:26:b6:84:ed:ca:1f:ce: e1:73:f2:f4:ee:ed:5d:87:79:bd:6d:ce:b2:ae:1a: b6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EA:2C:4F:54:71:BB:B9:A6:36:46:05:0F:4A:57:FA:09:9E:3D:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/492dbbc1-b713-3180-b7c9-a8f748e6453d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:d0:88:e5:af:6f:35:8a:cf:29:f5:da:e8:4a:9f:29:f7:85: 3a:b3:c5:fa:d3:d5:84:18:e5:b0:c0:df:58:0e:37:53:e7:51: 4b:5c:0a:83:42:db:c4:8b:8e:56:b8:6b:c8:a8:45:10:b8:40: c2:0a:31:ee:c9:8f:cd:85:b0:02:fd:b7:71:41:ce:d5:48:4f: 99:1f:40:f7:42:cb:34:ec:b8:d6:ac:b0:f8:f5:12:c5:52:d1: bf:9e:69:43:13:23:03:0a:99:6c:66:b3:c0:23:7b:53:a8:fd: 9a:d5:2c:18:55:44:fb:6e:fd:81:20:ef:01:cb:ad:81:96:a2: da:b3:f5:5b:8b:eb:68:29:4b:8d:c6:7b:be:98:3b:75:f1:93: 43:1a:0e:3d:af:32:49:6c:bc:ee:29:fb:53:c4:67:7f:96:7e: d2:f2:ca:e4:94:7f:23:93:1d:44:e4:e1:e9:dc:50:79:10:f7: 30:03:01:1f:8f:6e:d4:cf:16:17:17:99:3c:9e:77:78:db:2c: df:5a:5d:d7:52:40:a2:77:4c:2e:b6:73:11:86:3c:ed:1f:ad: 79:ea:30:1a:b2:60:ec:68:2d:9c:e6:2d:b5:8e:4d:ab:ea:d5: c3:9c:36:ed:ad:af:3e:e9:00:ff:ed:e8:93:b8:82:79:c3:83: 20:16:ae:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7If5hylpA6hN5FEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk NzA0NzliYzQtNmE1Ny00OGQxLThmZjctYjVhZDU0OTk1YTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln9+Twbb9OHdkVkM9B/DDw7OvSKXTi82yVsU NZh4+/LEs8Mg9bro0YanY1kWXfEddkYpZBRLMj1jHnDUB7kcnmvXa24DGhGjCeZu oHT8qJFbLKqsxrhBL3TNDl7Mwv8XRd4sUn+0APj5G1zE2eK9atV9jAkzIQmfaPwf JlB3n9Zt8CrWmI0jKt4mQkYyFT5Nh/LYKd6TGJrA8c2ucwqoS3g67cH9/iIcppHy L8Of7p2MjL706ykU8pcHRlUb+APFB1F2LrTMiH6EqPKxRTO/mz0ztsA1avKQrldw AwgE1b7a1w5dyM3eTSa2hO3KH87hc/L07u1dh3m9bc6yrhq2dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHqLE9Ucbu5pjZGBQ9KV/oJnj3TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDkyZGJiYzEtYjcxMy0z MTgwLWI3YzktYThmNzQ4ZTY0NTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnQiOWvbzWKzyn12uhKnyn3hTqzxfrT1YQY5bDA31gON1PnUUtcCoNC 28SLjla4a8ioRRC4QMIKMe7Jj82FsAL9t3FBztVIT5kfQPdCyzTsuNassPj1EsVS 0b+eaUMTIwMKmWxms8Aje1Oo/ZrVLBhVRPtu/YEg7wHLrYGWotqz9VuL62gpS43G e76YO3Xxk0MaDj2vMklsvO4p+1PEZ3+WftLyyuSUfyOTHUTk4encUHkQ9zADAR+P btTPFhcXmTyed3jbLN9aXddSQKJ3TC62cxGGPO0frXnqMBqyYOxoLZzmLbWOTavq 1cOcNu2trz7pAP/t6JO4gnnDgyAWrrA= -----END CERTIFICATE-----Generated at Wed Nov 5 08:41:40 2025 by rpki-client