$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eb8b41b-e5d0-3769-8f11-0d84e80c7640.roa File: 5eb8b41b-e5d0-3769-8f11-0d84e80c7640.roa (raw, json) Hash identifier: FpahtT9zxLVhZrDoD4cqc+PV/Yr30qH4pQM0CfA/AMM= Subject key identifier: FD:A7:F5:25:AD:ED:8F:26:55:6B:5A:C1:52:F6:67:18:A2:B6:0C:7B Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD069AFAD057B9DFAC15E0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eb8b41b-e5d0-3769-8f11-0d84e80c7640.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 36183 IP address blocks: 172.225.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:06:9a:fa:d0:57:b9:df:ac:15:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=3ec76401-bd61-4544-b882-14199c52abea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:7d:c6:7f:84:d2:55:84:4e:3b:e3:18:7c: 01:87:43:44:61:cf:84:4c:0c:bf:f0:6c:35:13:04: 38:ce:17:43:a7:ef:b4:5c:32:2c:a1:92:5d:f9:df: 4c:02:4f:cc:9d:dd:8f:eb:07:1d:5c:89:3c:be:ed: a6:4a:53:7d:66:47:19:b5:65:01:fe:3b:66:4d:24: a6:d2:84:97:16:fc:7a:34:f8:0e:77:ea:d3:e0:46: 04:92:3b:a6:ef:93:45:4e:05:7f:69:da:9d:ec:b0: 8a:24:9f:d2:8c:9f:de:0b:2a:e1:ce:3a:23:e7:a3: f6:5d:88:5a:19:bf:c6:7b:e0:e0:7c:24:ad:94:aa: 03:c8:3b:7d:34:47:2f:4b:d2:23:87:62:02:05:02: df:7b:ae:b0:ab:b5:ce:96:97:87:8a:ac:2f:34:aa: a4:8d:0b:a3:9e:01:ac:93:30:67:6e:82:7b:30:82: df:f5:7a:fe:53:ce:95:4e:b6:90:8e:4a:d6:29:35: 51:48:d5:0c:5f:dc:ad:9e:37:49:2b:21:28:b7:e4: 70:9a:1a:34:91:61:13:7b:da:e3:7d:ed:e8:74:04: d8:5d:85:01:30:02:f9:36:06:20:ae:61:85:9e:97: 6d:33:e1:f3:90:55:b7:4b:b7:dc:50:fc:17:a0:85: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A7:F5:25:AD:ED:8F:26:55:6B:5A:C1:52:F6:67:18:A2:B6:0C:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5eb8b41b-e5d0-3769-8f11-0d84e80c7640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:48:7c:5a:5a:6e:34:67:7a:d9:45:17:14:96:16:5b:bf:7e: cb:3a:22:7b:7d:c0:d4:40:02:f6:71:11:4c:6b:0b:62:d8:15: aa:49:5d:f2:19:d3:41:ba:a3:a3:57:e5:c7:ed:f4:77:bc:7d: 7b:76:a7:e5:d1:bc:7f:89:10:9b:95:92:1c:a7:35:dc:af:4f: d2:5e:b2:56:26:c8:2d:fc:ff:db:df:e3:9c:c3:46:84:30:31: 2e:9b:85:68:a8:96:83:6f:46:30:69:40:74:fe:32:95:ff:6f: 23:ae:34:28:93:be:fc:ce:c9:a0:6f:10:e5:54:52:f4:bb:2b: 30:86:41:c5:10:a0:5d:e9:cd:0f:05:61:1d:11:09:f6:a8:26: 4e:a4:ec:52:c7:93:20:d4:be:81:d1:26:27:89:d5:71:1c:ac: 68:8b:f5:99:47:89:02:d3:7d:ff:34:30:6c:f9:f7:2c:28:84: d3:05:0d:46:8e:ae:3b:d3:ff:c9:65:2c:84:9b:79:da:6a:f3: 9c:19:4b:c8:4c:87:06:dd:1f:b9:59:dc:bb:87:7b:79:7e:d8: 86:33:8b:45:2b:56:76:04:da:9e:78:a6:cc:4a:1e:fa:7e:77: da:bf:e7:33:27:07:cc:2b:24:cf:ff:08:da:22:99:d2:dd:99: 02:84:3b:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/Qaa+tBXud+sFeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk M2VjNzY0MDEtYmQ2MS00NTQ0LWI4ODItMTQxOTljNTJhYmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L59xn+E0lWETjvjGHwBh0NEYc+ETAy/8Gw1 EwQ4zhdDp++0XDIsoZJd+d9MAk/Mnd2P6wcdXIk8vu2mSlN9ZkcZtWUB/jtmTSSm 0oSXFvx6NPgOd+rT4EYEkjum75NFTgV/adqd7LCKJJ/SjJ/eCyrhzjoj56P2XYha Gb/Ge+DgfCStlKoDyDt9NEcvS9Ijh2ICBQLfe66wq7XOlpeHiqwvNKqkjQujngGs kzBnboJ7MILf9Xr+U86VTraQjkrWKTVRSNUMX9ytnjdJKyEot+Rwmho0kWETe9rj fe3odATYXYUBMAL5NgYgrmGFnpdtM+HzkFW3S7fcUPwXoIXVKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP2n9SWt7Y8mVWtawVL2Zxiitgx7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWViOGI0MWItZTVkMC0z NzY5LThmMTEtMGQ4NGU4MGM3NjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARIfFpabjRnetlFFxSWFlu/fss6Int9wNRAAvZxEUxrC2LYFapJXfIZ 00G6o6NX5cft9He8fXt2p+XRvH+JEJuVkhynNdyvT9JeslYmyC38/9vf45zDRoQw MS6bhWioloNvRjBpQHT+MpX/byOuNCiTvvzOyaBvEOVUUvS7KzCGQcUQoF3pzQ8F YR0RCfaoJk6k7FLHkyDUvoHRJieJ1XEcrGiL9ZlHiQLTff80MGz59ywohNMFDUaO rjvT/8llLISbedpq85wZS8hMhwbdH7lZ3LuHe3l+2IYzi0UrVnYE2p54psxKHvp+ d9q/5zMnB8wrJM//CNoimdLdmQKEOy4= -----END CERTIFICATE-----Generated at Wed Nov 5 01:30:07 2025 by rpki-client