$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/862a50dd-9612-3236-8178-c95e38db1f49.roa File: 862a50dd-9612-3236-8178-c95e38db1f49.roa (raw, json) Hash identifier: WErzT+L5+XAFhsFFm+KpU8SX3aYysafmIJD68Hx2KWQ= Subject key identifier: 3C:12:96:03:B9:A5:6B:FB:F9:0D:38:7E:65:C3:2C:B9:53:50:D7:8E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B4081BFEB7EB81F1E734EB580 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/862a50dd-9612-3236-8178-c95e38db1f49.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 36183 IP address blocks: 172.224.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:bf:eb:7e:b8:1f:1e:73:4e:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=35282114-25e3-4b46-a36f-89cfbb7d9c4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:8d:ff:a8:dc:2b:cf:d1:3c:4d:45:d0:7e:95: f4:fd:ec:bd:95:4c:d9:e0:01:f0:a5:da:ef:b9:67: 05:d2:26:59:3d:00:9f:d3:b6:ed:45:4f:7b:4f:6a: 73:d6:34:3a:75:a2:df:c9:d8:c6:b0:e5:49:c8:5f: 74:0d:eb:c6:45:95:43:54:88:b6:8d:a1:10:25:00: 2b:da:87:d5:af:0f:be:c0:f6:d2:4a:9f:e1:c6:dc: 3f:8f:d0:6b:2a:bd:a4:04:d1:00:88:55:f6:7d:9b: 61:20:33:7d:8e:01:ea:7c:39:df:94:37:58:97:08: 8a:98:01:b1:e3:f3:fd:52:03:00:20:28:ca:30:7e: f0:47:dc:a7:46:f9:8b:bc:a5:78:fc:ff:8a:ac:b0: 7f:93:7e:8c:8c:75:46:73:28:68:da:42:12:84:e4: ab:a0:e9:7c:29:e1:33:a4:54:d1:6b:e2:e5:4a:be: 5c:41:08:c4:09:18:bd:88:a7:80:9c:f0:16:cb:7f: 01:67:2d:25:c2:2d:c3:ba:5f:35:b6:f2:46:c7:f8: e7:9e:60:59:8e:86:20:4b:5e:67:52:99:42:4c:c2: 46:06:72:9c:c8:81:fc:3c:0d:dc:7a:ab:36:49:ae: 5e:14:73:53:e0:97:e7:79:6b:cd:38:ef:04:82:8d: d9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:12:96:03:B9:A5:6B:FB:F9:0D:38:7E:65:C3:2C:B9:53:50:D7:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/862a50dd-9612-3236-8178-c95e38db1f49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:94:a3:c7:dc:7f:ff:3d:5f:36:03:f4:3a:20:4d:74:67:78: 15:23:02:dc:72:19:17:12:3c:b2:2a:40:40:e1:36:df:7d:17: 6a:ed:99:65:c0:91:9f:ff:e2:b6:41:c1:46:e4:78:05:aa:6c: 5d:25:82:35:c1:4d:34:ec:6f:76:31:ec:28:c3:97:bb:1c:c4: 1b:e8:95:d7:00:e9:80:2b:44:b7:b1:29:e1:dc:49:57:6c:de: 99:06:34:5f:00:1c:18:b0:2b:58:d3:09:c8:15:8c:4f:4f:18: 3f:5d:dd:67:9a:35:7d:5a:3e:1f:39:ce:af:39:bc:bc:bc:5d: 74:64:fd:7f:b4:3a:5b:12:5c:cd:c2:95:d2:4d:30:7c:2d:a6: da:fa:18:08:7d:1c:46:9b:05:a0:22:05:d7:e0:45:2f:8c:57: 3f:61:7a:ef:cc:fd:dd:0e:37:bc:e4:3a:a7:b7:5d:52:c8:4b: b0:58:7e:3f:61:16:1f:b1:fc:77:c5:05:89:16:33:3a:a5:51: d8:ef:b5:d3:96:cf:f3:17:f5:ca:e1:04:39:7e:51:ef:dc:3f: 50:e2:63:fa:42:33:7c:1b:f7:c7:07:2f:01:67:b8:6d:92:5c: 8d:44:b8:ed:a5:6a:e5:c9:a6:5a:cd:9d:25:61:4f:f5:ca:a4: 20:d8:c1:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgb/rfrgfHnNOtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MzUyODIxMTQtMjVlMy00YjQ2LWEzNmYtODljZmJiN2Q5YzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8I3/qNwrz9E8TUXQfpX0/ey9lUzZ4AHwpdrv uWcF0iZZPQCf07btRU97T2pz1jQ6daLfydjGsOVJyF90DevGRZVDVIi2jaEQJQAr 2ofVrw++wPbSSp/hxtw/j9BrKr2kBNEAiFX2fZthIDN9jgHqfDnflDdYlwiKmAGx 4/P9UgMAICjKMH7wR9ynRvmLvKV4/P+KrLB/k36MjHVGcyho2kIShOSroOl8KeEz pFTRa+LlSr5cQQjECRi9iKeAnPAWy38BZy0lwi3Dul81tvJGx/jnnmBZjoYgS15n UplCTMJGBnKcyIH8PA3ceqs2Sa5eFHNT4JfneWvNOO8Ego3ZTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwSlgO5pWv7+Q04fmXDLLlTUNeOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODYyYTUwZGQtOTYxMi0z MjM2LTgxNzgtYzk1ZTM4ZGIxZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArODgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqUo8fcf/89XzYD9DogTXRneBUjAtxyGRcSPLIqQEDhNt99F2rtmWXA kZ//4rZBwUbkeAWqbF0lgjXBTTTsb3Yx7CjDl7scxBvoldcA6YArRLexKeHcSVds 3pkGNF8AHBiwK1jTCcgVjE9PGD9d3WeaNX1aPh85zq85vLy8XXRk/X+0OlsSXM3C ldJNMHwtptr6GAh9HEabBaAiBdfgRS+MVz9heu/M/d0ON7zkOqe3XVLIS7BYfj9h Fh+x/HfFBYkWMzqlUdjvtdOWz/MX9crhBDl+Ue/cP1DiY/pCM3wb98cHLwFnuG2S XI1EuO2lauXJplrNnSVhT/XKpCDYwX0= -----END CERTIFICATE-----Generated at Wed Nov 5 08:56:09 2025 by rpki-client