$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa File: 91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa (raw, json) Hash identifier: p/cIe6IegJNGrSEo/mWUHXOJkjZRtO1SE615gYwbb2U= Subject key identifier: D8:42:FB:1D:80:53:8B:A8:4A:DC:15:B6:73:4B:E8:3A:25:0D:E3:49 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C5A9695CC777AA25B95127400 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa Signing time: Tue 30 Dec 2025 02:00:30 +0000 ROA not before: Tue 30 Dec 2025 02:00:30 +0000 ROA not after: Mon 30 Mar 2026 01:00:30 +0000 asID: 36183 IP address blocks: 172.225.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5a:96:95:cc:77:7a:a2:5b:95:12:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 30 02:00:30 2025 GMT Not After : Mar 30 01:00:30 2026 GMT Subject: CN=79c8572f-4fc9-4d3c-945c-2a7ae0a3bcd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a9:f5:f1:b7:1c:6c:58:eb:44:06:72:f6:8c: 98:bc:a7:d8:4a:da:22:92:56:d4:4d:64:16:3b:6b: 28:3b:cf:8a:7e:c0:b3:cf:20:0b:15:80:01:8d:79: ea:d7:c9:dd:14:15:66:e7:0a:6b:41:00:23:ef:5e: 31:c3:e0:3a:1b:19:cc:fe:2a:ba:40:53:38:21:21: c7:56:0a:8a:a0:40:f0:00:42:50:79:c6:ba:54:8e: b7:f4:1a:9a:2c:9e:94:dd:ec:ae:2c:90:7b:a1:d8: f9:da:8e:67:f3:b4:61:75:f1:1e:b0:4c:66:91:98: 97:15:4a:2d:91:5d:1d:88:1a:15:26:97:3c:56:1f: 8f:2a:e9:90:e4:7a:e6:88:12:5e:78:b1:1b:f2:99: a8:77:3b:1e:95:a8:c7:63:eb:5e:76:4d:de:52:47: 4f:20:f6:27:64:3f:8d:f9:2e:25:4f:d2:48:f3:3a: 6b:f3:67:be:ee:eb:63:2d:36:b4:c1:3a:7e:08:a6: fa:ec:2f:3b:c9:8b:7f:2d:8f:f9:9e:28:9e:d9:21: ab:4c:60:f4:ed:18:6e:c4:8e:dd:dd:52:be:6c:cd: c0:dd:65:ea:8a:20:c7:da:a4:c6:f1:e0:05:8d:04: 73:13:29:1d:bf:68:16:c3:b8:c4:8a:46:55:50:44: f9:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:42:FB:1D:80:53:8B:A8:4A:DC:15:B6:73:4B:E8:3A:25:0D:E3:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91a09d4d-e4e8-350e-b0da-77a58a37d4d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:db:49:98:66:03:49:b0:81:8f:04:91:3d:d8:7b:b7:38:b6: 85:4b:15:79:36:0c:50:e9:c9:02:a7:4a:0e:ac:b1:f8:f8:b1: 36:3a:ab:09:f2:e6:43:0e:fa:3d:4f:5a:0b:aa:2b:c7:07:fc: 6c:ff:54:a6:fc:23:39:f2:99:48:15:66:83:36:c9:bf:8f:45: 2f:57:ba:70:ac:b3:73:e3:97:1c:dd:24:45:bb:04:fa:da:d3: b6:95:36:10:77:a3:f8:b6:32:dc:3c:aa:fb:c7:8f:71:2d:07: 79:8f:16:b6:b3:2f:ee:ec:51:87:e3:79:31:97:cf:d8:a7:43: dc:5c:61:a6:19:68:34:6f:2d:7b:7f:ee:18:90:62:37:fa:ce: f1:73:5d:43:cf:26:b6:6d:71:08:50:0a:ce:91:e1:45:58:d2: 99:79:57:8f:40:f5:bc:e0:b7:e5:43:a8:c9:14:2e:4d:97:02: f7:8e:2f:84:13:cd:d9:d7:a1:24:a9:f6:ec:a7:5d:d4:ed:04: c2:de:31:1d:85:a7:be:b1:d2:72:22:f6:33:f0:cf:a8:b6:81: 10:d6:98:25:7c:03:67:ac:5a:38:1f:05:8a:34:33:98:c0:89: e2:83:90:70:45:b7:a5:4b:56:36:0d:07:18:85:31:2b:54:27: cf:23:c5:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExalpXMd3qiW5USdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIzMDAyMDAzMFoXDTI2MDMzMDAxMDAzMFowLzEtMCsGA1UEAxMk NzljODU3MmYtNGZjOS00ZDNjLTk0NWMtMmE3YWUwYTNiY2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1an18bccbFjrRAZy9oyYvKfYStoiklbUTWQW O2soO8+KfsCzzyALFYABjXnq18ndFBVm5wprQQAj714xw+A6GxnM/iq6QFM4ISHH VgqKoEDwAEJQeca6VI639BqaLJ6U3eyuLJB7odj52o5n87RhdfEesExmkZiXFUot kV0diBoVJpc8Vh+PKumQ5HrmiBJeeLEb8pmodzselajHY+tedk3eUkdPIPYnZD+N +S4lT9JI8zpr82e+7utjLTa0wTp+CKb67C87yYt/LY/5niie2SGrTGD07RhuxI7d 3VK+bM3A3WXqiiDH2qTG8eAFjQRzEykdv2gWw7jEikZVUET5WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhC+x2AU4uoStwVtnNL6DolDeNJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFhMDlkNGQtZTRlOC0z NTBlLWIwZGEtNzdhNThhMzdkNGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbbSZhmA0mwgY8EkT3Ye7c4toVLFXk2DFDpyQKnSg6ssfj4sTY6qwny 5kMO+j1PWguqK8cH/Gz/VKb8IznymUgVZoM2yb+PRS9XunCss3PjlxzdJEW7BPra 07aVNhB3o/i2Mtw8qvvHj3EtB3mPFrazL+7sUYfjeTGXz9inQ9xcYaYZaDRvLXt/ 7hiQYjf6zvFzXUPPJrZtcQhQCs6R4UVY0pl5V49A9bzgt+VDqMkULk2XAveOL4QT zdnXoSSp9uynXdTtBMLeMR2Fp76x0nIi9jPwz6i2gRDWmCV8A2esWjgfBYo0M5jA ieKDkHBFt6VLVjYNBxiFMStUJ88jxQQ= -----END CERTIFICATE-----Generated at Sun Mar 1 22:29:10 2026 by rpki-client