$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ae09a21-8a72-3584-871f-45ec5e1d89c2.roa File: 6ae09a21-8a72-3584-871f-45ec5e1d89c2.roa (raw, json) Hash identifier: J+jnC5byx2/gqIrgFLF/OXceCB7TmVFfraxAy64eQTE= Subject key identifier: 9F:D6:E0:1D:1F:E3:08:3C:7E:15:CF:3F:4E:BB:85:3C:30:0E:33:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7B21FCB729480F3292BCB680 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ae09a21-8a72-3584-871f-45ec5e1d89c2.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:fc:b7:29:48:0f:32:92:bc:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=1977fd24-df9f-4a9d-894e-d5976bab8d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:22:fc:71:95:f4:26:e8:c5:06:10:7c:74:70: 62:a8:a6:ee:ce:a2:ef:aa:75:b1:04:82:86:07:58: 3e:b6:2a:4b:8b:b7:d5:0c:1c:dc:f9:0a:81:ed:9a: 76:cd:ca:4f:93:4b:2c:57:d3:4a:a7:71:0c:d6:6c: 8c:95:bc:40:12:fb:ff:44:03:7c:e6:ca:11:62:f9: b1:a1:71:44:4d:7d:8a:c8:f9:18:96:e5:e9:1d:e9: 73:99:b4:44:97:df:dc:9e:f6:1d:31:83:da:e2:06: 0d:ed:1d:1d:69:4c:f9:8f:67:62:27:ab:bf:99:a5: d4:61:66:03:c3:bf:68:65:40:f3:a5:dd:be:3f:37: 5c:a4:42:4b:0f:34:9a:3f:63:b8:12:39:dc:63:38: f7:9a:45:64:f3:87:5b:2b:4d:5d:d9:25:68:1d:d4: 8a:18:cf:fa:cf:4f:1a:10:dd:b5:e2:2f:78:8b:97: 21:23:29:db:b2:18:de:f1:0b:0e:2f:d5:a2:64:80: ab:05:b0:83:be:df:e5:bd:ea:d6:57:87:a2:43:4d: bc:c8:0b:9a:23:54:75:47:3e:80:ec:da:a6:2c:8f: 8c:7f:41:95:de:ee:ed:ab:3d:4e:f7:96:48:95:8c: e4:d0:eb:55:7b:cd:a6:5d:68:89:7a:ff:14:a7:c4: e1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:D6:E0:1D:1F:E3:08:3C:7E:15:CF:3F:4E:BB:85:3C:30:0E:33:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6ae09a21-8a72-3584-871f-45ec5e1d89c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:04:f6:94:85:3b:9d:ef:f8:eb:c7:85:62:16:00:60:77:44: cf:08:75:e7:a4:5f:b1:51:9b:77:5f:a1:8a:b7:46:bf:51:b9: cd:db:ba:99:9c:e0:be:38:7f:47:ac:0d:61:fd:11:15:6a:58: ff:e9:2b:2c:59:41:7c:ca:d5:c3:7b:8e:c3:29:12:df:14:6a: 6a:bc:9c:a9:ff:11:44:83:66:47:df:61:f6:f6:eb:cc:83:fa: c5:09:e3:53:17:53:b9:b0:e0:b4:21:3c:37:e3:38:ea:86:03: 95:b4:f1:6b:69:6d:21:d8:86:40:20:30:4c:04:8a:fd:9b:5c: 37:3d:89:0a:22:ea:ce:f2:a8:cd:16:b8:6d:17:f7:6f:4b:82: dd:71:e6:dc:b1:6f:82:89:b0:86:1c:d5:89:97:3b:7d:0c:eb: 35:84:3b:cb:fb:77:6b:58:d5:0e:a8:2d:dd:66:17:4c:36:c6: bc:98:11:32:69:e9:f8:99:5e:aa:22:23:e0:d8:90:3f:73:6e: 31:b0:52:fc:27:84:b5:e0:13:7e:4b:4c:bd:64:1a:06:9b:75: 47:87:42:35:f4:eb:20:4e:9e:2e:1f:9f:90:69:25:cd:fe:fa: 73:c5:4c:93:f1:a2:8c:9c:9a:dd:56:df:a5:83:11:e1:12:7e: c8:b9:c5:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7Ify3KUgPMpK8toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk MTk3N2ZkMjQtZGY5Zi00YTlkLTg5NGUtZDU5NzZiYWI4ZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSL8cZX0JujFBhB8dHBiqKbuzqLvqnWxBIKG B1g+tipLi7fVDBzc+QqB7Zp2zcpPk0ssV9NKp3EM1myMlbxAEvv/RAN85soRYvmx oXFETX2KyPkYluXpHelzmbREl9/cnvYdMYPa4gYN7R0daUz5j2diJ6u/maXUYWYD w79oZUDzpd2+PzdcpEJLDzSaP2O4EjncYzj3mkVk84dbK01d2SVoHdSKGM/6z08a EN214i94i5chIynbshje8QsOL9WiZICrBbCDvt/lverWV4eiQ028yAuaI1R1Rz6A 7NqmLI+Mf0GV3u7tqz1O95ZIlYzk0OtVe82mXWiJev8Up8ThqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/W4B0f4wg8fhXPP067hTwwDjMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNmFlMDlhMjEtOGE3Mi0z NTg0LTg3MWYtNDVlYzVlMWQ4OWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0E9pSFO53v+OvHhWIWAGB3RM8IdeekX7FRm3dfoYq3Rr9Ruc3bupmc 4L44f0esDWH9ERVqWP/pKyxZQXzK1cN7jsMpEt8Uamq8nKn/EUSDZkffYfb268yD +sUJ41MXU7mw4LQhPDfjOOqGA5W08WtpbSHYhkAgMEwEiv2bXDc9iQoi6s7yqM0W uG0X929Lgt1x5tyxb4KJsIYc1YmXO30M6zWEO8v7d2tY1Q6oLd1mF0w2xryYETJp 6fiZXqoiI+DYkD9zbjGwUvwnhLXgE35LTL1kGgabdUeHQjX06yBOni4fn5BpJc3+ +nPFTJPxooycmt1W36WDEeESfsi5xYA= -----END CERTIFICATE-----Generated at Wed Nov 5 01:32:54 2025 by rpki-client