$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c4cecaa-101d-3e31-90c7-bceeee5416f5.roa File: 5c4cecaa-101d-3e31-90c7-bceeee5416f5.roa (raw, json) Hash identifier: wngcLA36bmHf3FLDEuqJDii7PUUBOr5tPExuakU2OUc= Subject key identifier: A0:5A:16:5D:73:B8:0C:85:06:E6:A3:5A:76:5B:B6:20:57:59:C8:25 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7B21FF387434A44760777E00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c4cecaa-101d-3e31-90c7-bceeee5416f5.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:ff:38:74:34:a4:47:60:77:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=989720d6-e68f-46f5-988f-9c9963af7c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ed:5a:74:ac:6a:49:9c:93:b9:4f:ef:f7:bc: 2d:d1:4c:9d:bb:75:c7:a3:d4:c1:22:56:dd:3e:69: 08:46:6a:8a:77:eb:c0:b3:82:54:4c:d0:9a:f7:d9: c1:9b:f4:b7:0e:8e:d3:13:0c:ef:ae:f4:4e:94:24: c0:0b:cb:20:c8:e9:5f:49:4e:f9:fc:7c:d7:20:d7: 91:a8:1b:fe:85:c1:3b:0b:16:3b:2b:92:36:3f:b7: 6c:70:89:83:a0:ff:73:b8:32:76:ae:f0:18:91:7e: ee:72:6e:98:28:af:34:0a:3e:0c:66:63:e6:2f:76: a4:ea:0f:6a:a8:30:5d:81:63:43:a3:cd:9c:ed:1c: 80:f5:94:0b:67:5f:4c:84:21:99:42:db:6f:2a:a9: 9b:bb:99:09:be:06:d2:ee:1b:16:59:01:3d:ea:a2: 1b:f0:07:9d:91:3b:b8:da:01:54:4e:62:1d:11:61: ed:ef:96:c1:e8:d1:f4:88:44:92:30:52:20:8a:ae: 51:61:27:68:21:e6:bf:49:21:b1:57:17:5a:19:c8: 40:94:93:83:a9:4c:8e:a2:bd:ed:95:60:8f:4a:4b: fc:36:3f:03:c4:85:fc:b2:9c:4f:80:ef:a1:37:d1: 68:22:32:f8:9f:23:a8:93:83:bb:8e:89:5c:a8:c0: 96:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5A:16:5D:73:B8:0C:85:06:E6:A3:5A:76:5B:B6:20:57:59:C8:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c4cecaa-101d-3e31-90c7-bceeee5416f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5f:08:96:6f:e6:81:98:fe:8b:f5:18:46:e5:ac:b9:c2:f5: cc:3c:73:04:e8:e7:f7:89:31:41:fe:45:7a:3d:a0:f4:31:71: ae:26:91:a8:e8:a1:c2:fc:c1:67:9e:16:1b:97:50:0e:74:16: b9:c1:94:96:64:52:0d:80:b1:c3:95:22:44:cc:ff:23:14:e3: 08:99:e1:84:ff:5b:3f:90:eb:a7:eb:73:e4:8d:3f:29:36:ab: 4d:a1:22:d5:91:ac:ec:50:76:f9:84:7b:8a:be:18:8b:9d:5b: 84:f6:d0:59:c5:8d:21:85:8b:7c:58:6d:4e:3d:c4:16:15:b9: 89:b5:4f:a2:f0:74:a5:47:57:ac:36:d6:f8:63:f2:59:b9:84: 55:35:fe:3d:18:08:50:13:6c:12:f6:70:5b:6d:a4:32:26:17: ad:01:6d:ff:47:74:31:30:a0:48:6f:af:a1:01:63:b2:5c:d4: d6:99:13:7a:72:b6:40:6c:8e:22:88:0a:55:ae:28:01:61:79: 64:ad:b8:9c:17:67:95:31:82:1d:79:e7:41:24:89:af:02:4d: 40:64:c3:6d:39:cf:6f:22:a2:6e:6c:14:a5:71:a1:97:61:04: fb:2e:57:79:b7:e6:85:38:35:1a:26:f4:fd:fb:20:78:2c:ba: fb:b2:f6:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7If84dDSkR2B3fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk OTg5NzIwZDYtZTY4Zi00NmY1LTk4OGYtOWM5OTYzYWY3YzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+1adKxqSZyTuU/v97wt0Uydu3XHo9TBIlbd PmkIRmqKd+vAs4JUTNCa99nBm/S3Do7TEwzvrvROlCTAC8sgyOlfSU75/HzXINeR qBv+hcE7CxY7K5I2P7dscImDoP9zuDJ2rvAYkX7ucm6YKK80Cj4MZmPmL3ak6g9q qDBdgWNDo82c7RyA9ZQLZ19MhCGZQttvKqmbu5kJvgbS7hsWWQE96qIb8AedkTu4 2gFUTmIdEWHt75bB6NH0iESSMFIgiq5RYSdoIea/SSGxVxdaGchAlJODqUyOor3t lWCPSkv8Nj8DxIX8spxPgO+hN9FoIjL4nyOok4O7jolcqMCWJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBaFl1zuAyFBuajWnZbtiBXWcglMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWM0Y2VjYWEtMTAxZC0z ZTMxLTkwYzctYmNlZWVlNTQxNmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdfCJZv5oGY/ov1GEblrLnC9cw8cwTo5/eJMUH+RXo9oPQxca4mkajo ocL8wWeeFhuXUA50FrnBlJZkUg2AscOVIkTM/yMU4wiZ4YT/Wz+Q66frc+SNPyk2 q02hItWRrOxQdvmEe4q+GIudW4T20FnFjSGFi3xYbU49xBYVuYm1T6LwdKVHV6w2 1vhj8lm5hFU1/j0YCFATbBL2cFttpDImF60Bbf9HdDEwoEhvr6EBY7Jc1NaZE3py tkBsjiKIClWuKAFheWStuJwXZ5Uxgh1550Ekia8CTUBkw205z28iom5sFKVxoZdh BPsuV3m35oU4NRom9P37IHgsuvuy9iI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:55:23 2025 by rpki-client