$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a01e854e-0714-3adf-a2e1-80c6fa00f1a5.roa File: a01e854e-0714-3adf-a2e1-80c6fa00f1a5.roa (raw, json) Hash identifier: ZcAMpQLgox2F9WGQY+wSTBn7MVFkJNRqnQL1hynFl14= Subject key identifier: 6E:16:60:45:CC:2C:3A:9B:52:99:72:1C:9B:3F:48:AE:03:40:F6:DC Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFD3887937A4721772F0180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a01e854e-0714-3adf-a2e1-80c6fa00f1a5.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 36183 IP address blocks: 172.225.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fd:38:87:93:7a:47:21:77:2f:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=9631942b-dcc5-4461-8ecf-07259469e771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3b:ee:5a:0a:a6:1d:25:20:bd:68:9d:bd:50: 76:cc:8c:b0:28:6a:f9:c6:74:6a:4c:02:42:03:c0: cd:37:9b:71:7c:59:6e:64:5d:5b:75:d2:0b:d5:4e: 83:fc:0c:11:59:a0:20:ca:65:b8:a0:0e:24:57:91: b2:08:ed:69:d6:ab:c8:18:f1:a6:0b:6e:bb:44:9e: 90:8b:87:bc:19:45:02:3d:f7:58:1a:25:f2:f8:aa: 1b:4f:41:02:41:e2:02:9e:65:74:ea:e7:a7:9f:21: 41:ce:c2:b3:78:5e:3c:b7:35:c9:5f:68:00:13:bf: d9:bd:d2:86:bb:2d:93:8c:93:c0:63:d7:91:b8:1d: c0:f5:e9:2c:a2:30:f6:67:19:78:3a:16:d7:35:f1: b6:a9:8c:56:98:3d:d9:f6:00:81:cb:17:60:12:a8: e3:f0:3a:08:e5:bf:76:17:90:aa:6c:0e:8b:61:a7: 45:95:60:49:a9:c2:89:ee:e8:df:94:29:40:f9:b2: 31:d5:91:fc:e6:f7:9f:9c:2c:5f:9b:83:af:46:19: a2:89:ad:75:32:1a:ed:c6:f4:74:6f:a1:6d:ba:cf: eb:3a:8e:11:35:1c:72:0d:18:d4:44:e6:28:12:9c: 3b:5c:df:1e:22:18:a7:cf:c4:5a:69:13:d4:0c:8f: 4c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:16:60:45:CC:2C:3A:9B:52:99:72:1C:9B:3F:48:AE:03:40:F6:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a01e854e-0714-3adf-a2e1-80c6fa00f1a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:54:97:d3:a2:09:48:ab:b2:cd:9a:a5:b6:2d:4d:01:da:a9: da:87:73:cc:1e:bd:c8:b0:77:e8:67:f5:18:74:db:bc:82:90: b3:f8:97:c3:a8:2a:5a:d6:ed:9d:09:cd:32:0f:02:bb:35:c2: b7:aa:40:ef:55:68:a5:9d:0b:a6:eb:78:bd:e2:ec:e9:78:66: 32:fd:fd:a0:3f:c5:9e:2d:e2:03:cf:48:b6:25:d0:4f:06:b3: 51:c4:eb:df:de:3e:22:4c:84:c2:7b:1c:38:9b:05:fa:02:c6: 9d:39:f8:24:09:56:ec:a3:71:a9:38:12:40:d8:a8:31:e7:54: 31:11:90:64:15:4f:02:fa:9f:7c:de:fc:c2:e6:e7:50:06:7c: b0:be:16:59:47:fa:99:10:50:66:d5:cd:54:34:3c:1a:3c:43: d8:e0:9c:bc:52:13:88:9e:01:08:53:c4:82:56:78:79:31:d8: b7:9d:1d:6a:ed:7a:1a:c8:f9:f4:a3:d2:25:00:27:3e:6b:61: 2e:a9:aa:52:10:79:dd:76:a0:82:9c:f2:48:f0:ee:d0:5d:d6: fd:86:b9:52:b3:d1:a1:d5:cd:ad:9b:91:96:d3:14:c6:e1:1c: 6d:a6:26:77:05:57:af:9b:df:62:d4:2b:c1:bd:67:0f:c2:ab: e1:22:93:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/TiHk3pHIXcvAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk OTYzMTk0MmItZGNjNS00NDYxLThlY2YtMDcyNTk0NjllNzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujvuWgqmHSUgvWidvVB2zIywKGr5xnRqTAJC A8DNN5txfFluZF1bddIL1U6D/AwRWaAgymW4oA4kV5GyCO1p1qvIGPGmC267RJ6Q i4e8GUUCPfdYGiXy+KobT0ECQeICnmV06uennyFBzsKzeF48tzXJX2gAE7/ZvdKG uy2TjJPAY9eRuB3A9eksojD2Zxl4OhbXNfG2qYxWmD3Z9gCByxdgEqjj8DoI5b92 F5CqbA6LYadFlWBJqcKJ7ujflClA+bIx1ZH85vefnCxfm4OvRhmiia11MhrtxvR0 b6Ftus/rOo4RNRxyDRjUROYoEpw7XN8eIhinz8RaaRPUDI9MtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4WYEXMLDqbUplyHJs/SK4DQPbcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYTAxZTg1NGUtMDcxNC0z YWRmLWEyZTEtODBjNmZhMDBmMWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtUl9OiCUirss2apbYtTQHaqdqHc8wevciwd+hn9Rh027yCkLP4l8Oo KlrW7Z0JzTIPArs1wreqQO9VaKWdC6breL3i7Ol4ZjL9/aA/xZ4t4gPPSLYl0E8G s1HE69/ePiJMhMJ7HDibBfoCxp05+CQJVuyjcak4EkDYqDHnVDERkGQVTwL6n3ze /MLm51AGfLC+FllH+pkQUGbVzVQ0PBo8Q9jgnLxSE4ieAQhTxIJWeHkx2LedHWrt ehrI+fSj0iUAJz5rYS6pqlIQed12oIKc8kjw7tBd1v2GuVKz0aHVza2bkZbTFMbh HG2mJncFV6+b32LUK8G9Zw/Cq+Eik0Q= -----END CERTIFICATE-----Generated at Tue Nov 4 22:15:23 2025 by rpki-client