$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91ffc2e2-0e0e-3198-82c3-b471a8ec3f62.roa File: 91ffc2e2-0e0e-3198-82c3-b471a8ec3f62.roa (raw, json) Hash identifier: dl+2xII3Q3+EUSc3mos9UT7R/G/j47s6mQELjRuNTR8= Subject key identifier: CD:16:B0:3A:D0:B9:22:8E:9A:AA:5B:02:AE:22:45:6C:00:8F:FB:2E Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B8EAD0628121D0D900EB6780E Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91ffc2e2-0e0e-3198-82c3-b471a8ec3f62.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.224.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ad:06:28:12:1d:0d:90:0e:b6:78:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=ef79ea97-d188-4dce-98f4-73c36750a5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:27:7e:47:da:7e:12:35:8c:29:d7:e7:d7: a7:d2:aa:39:b1:45:20:94:06:45:c5:e6:16:11:78: 70:12:c9:75:4e:7f:c5:b6:7f:1a:d9:86:f1:1c:41: 81:55:c9:42:cb:6e:08:33:e9:52:ed:f7:88:9e:85: 66:d4:04:2f:e7:db:72:2a:91:4d:f1:e3:73:e4:c0: de:3d:8f:5f:e2:8c:07:7b:2d:6a:3d:61:c6:96:0b: ca:f4:9a:f8:6c:8c:8f:b5:10:88:95:7a:87:bf:79: 6a:ef:d4:58:1b:ac:10:b8:25:b5:56:00:75:a5:5c: e1:96:42:16:14:c0:31:2e:3f:a7:42:9a:ef:3f:0d: be:b7:e7:fb:7c:a0:9f:e3:35:1b:16:eb:a8:0d:c6: 1c:42:c9:f6:ec:a6:d5:06:95:d9:3f:39:bf:e6:41: 84:3e:be:c1:8c:e0:87:fa:f6:84:74:84:e7:12:81: 42:41:88:12:86:df:1f:b6:e8:c7:64:50:1b:ab:e3: c3:70:2b:f3:27:11:f3:b7:2b:7b:46:0c:fe:21:18: d3:ba:82:7c:af:c6:8c:4d:ea:c4:c0:20:de:4a:a0: 6c:6c:ea:93:5e:56:d8:c6:ee:6e:76:fb:69:63:a1: 49:2f:68:92:84:b2:1f:5c:90:c8:55:bf:9f:2a:97: 3a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:16:B0:3A:D0:B9:22:8E:9A:AA:5B:02:AE:22:45:6C:00:8F:FB:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/91ffc2e2-0e0e-3198-82c3-b471a8ec3f62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:c5:c8:57:39:0e:4e:cc:2e:69:fb:5f:02:45:87:1a:06:df: 3f:95:e5:e6:44:6b:b8:0c:27:8f:53:38:19:1f:8c:32:9d:24: c0:b0:8e:ce:c0:ad:7c:08:fb:57:fe:b5:14:fa:6f:d5:1d:94: e2:aa:3e:75:ae:f9:ee:c6:65:67:72:25:07:ca:05:45:8b:12: a2:5f:44:b4:0a:2c:3d:36:75:01:d3:db:25:a9:d5:2f:a9:d6: 61:d9:8c:36:8d:35:19:b6:4e:bd:50:b6:88:df:cd:0c:a8:ec: cd:04:1a:c5:0d:8c:7a:64:37:45:58:6f:22:eb:5c:32:94:08: 68:33:83:ca:bd:50:bf:5f:aa:9b:d0:ea:0f:3c:34:fe:35:62: 01:f9:0a:48:fc:93:c5:e9:38:3f:ec:15:8f:ba:2a:c4:12:aa: d3:1f:1b:88:9c:f4:04:b6:7d:3f:74:f1:01:bb:e1:7f:96:0e: 17:3e:c3:b8:11:e9:5f:39:3c:53:0a:72:ee:4b:1b:0a:4d:82: e7:f8:6d:c0:81:3b:2d:3c:4c:4b:8d:2d:39:ff:4d:6f:65:9a: e1:c3:4d:c3:36:46:31:2c:f0:5a:c3:a1:68:42:00:e4:28:95: 31:6c:e9:d9:30:a9:ef:5a:c4:89:db:23:cf:14:4b:c3:6d:c8: 54:55:c6:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrQYoEh0NkA62eA4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZWY3OWVhOTctZDE4OC00ZGNlLTk4ZjQtNzNjMzY3NTBhNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXsnfkfafhI1jCnX59en0qo5sUUglAZFxeYW EXhwEsl1Tn/Ftn8a2YbxHEGBVclCy24IM+lS7feInoVm1AQv59tyKpFN8eNz5MDe PY9f4owHey1qPWHGlgvK9Jr4bIyPtRCIlXqHv3lq79RYG6wQuCW1VgB1pVzhlkIW FMAxLj+nQprvPw2+t+f7fKCf4zUbFuuoDcYcQsn27KbVBpXZPzm/5kGEPr7BjOCH +vaEdITnEoFCQYgSht8ftujHZFAbq+PDcCvzJxHztyt7Rgz+IRjTuoJ8r8aMTerE wCDeSqBsbOqTXlbYxu5udvtpY6FJL2iShLIfXJDIVb+fKpc6cwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0WsDrQuSKOmqpbAq4iRWwAj/suMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvOTFmZmMyZTItMGUwZS0z MTk4LTgyYzMtYjQ3MWE4ZWMzZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDFyFc5Dk7MLmn7XwJFhxoG3z+V5eZEa7gMJ49TOBkfjDKdJMCwjs7A rXwI+1f+tRT6b9UdlOKqPnWu+e7GZWdyJQfKBUWLEqJfRLQKLD02dQHT2yWp1S+p 1mHZjDaNNRm2Tr1QtojfzQyo7M0EGsUNjHpkN0VYbyLrXDKUCGgzg8q9UL9fqpvQ 6g88NP41YgH5Ckj8k8XpOD/sFY+6KsQSqtMfG4ic9AS2fT908QG74X+WDhc+w7gR 6V85PFMKcu5LGwpNguf4bcCBOy08TEuNLTn/TW9lmuHDTcM2RjEs8FrDoWhCAOQo lTFs6dkwqe9axInbI88US8NtyFRVxkk= -----END CERTIFICATE-----Generated at Wed Nov 5 03:30:56 2025 by rpki-client