$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0bb262-6abc-3b2b-b7d7-ff0162b97211.roa File: aa0bb262-6abc-3b2b-b7d7-ff0162b97211.roa (raw, json) Hash identifier: 08nnNtgZzsOu7xG5BrLLleNcgT85a012fmnjla3VdaA= Subject key identifier: 4D:AB:B2:95:A1:C8:51:06:14:B4:83:FE:D5:23:99:35:AE:AA:47:8D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B821D813330A12667B0EA1900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0bb262-6abc-3b2b-b7d7-ff0162b97211.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 36183 IP address blocks: 172.225.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:81:33:30:a1:26:67:b0:ea:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=f93abb4d-9bad-4ad3-8ec9-e2b4d34507ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:88:91:f3:3e:70:6d:c6:c3:89:ff:03:92:13: 2b:35:2c:36:b4:4f:e5:d8:7a:c6:92:39:cc:6d:64: ea:ac:cb:58:78:43:0d:29:be:0a:cd:ea:7b:4b:ba: ca:28:b3:89:ad:c7:12:66:07:b2:cb:43:74:8f:ca: 66:48:34:9c:53:3c:af:8c:1f:70:33:ab:9a:d7:f1: dd:c4:bc:8e:3b:a7:44:cf:7a:f6:c0:22:db:f8:d1: 1b:17:39:0d:87:e9:aa:7b:1f:bc:c5:31:60:85:49: 67:7b:e8:c5:44:5f:34:8c:e5:7a:0c:91:f5:5c:63: 5c:ed:57:f3:e8:c3:fa:4a:d7:99:b0:b2:01:7a:69: a0:5d:bc:1e:df:bc:8d:24:86:25:f6:ad:dd:88:a7: 20:ac:98:04:e2:bd:1a:50:f5:5d:2c:35:cd:ed:fc: 54:94:ea:9f:ea:db:8d:db:78:f1:65:12:a4:7c:7d: 33:a4:87:a3:c8:de:90:27:7e:8e:d6:77:e5:aa:da: 2c:07:ca:cb:01:ed:22:1f:fd:89:58:c2:02:17:8a: 72:b6:43:e2:f2:44:d6:bb:81:30:c4:cb:ce:d1:04: 7b:00:94:bd:07:0b:71:f5:ba:6b:4d:58:83:0e:14: 20:80:3d:45:79:0d:8a:6b:94:74:fd:1f:3d:27:aa: d6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:AB:B2:95:A1:C8:51:06:14:B4:83:FE:D5:23:99:35:AE:AA:47:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa0bb262-6abc-3b2b-b7d7-ff0162b97211.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:52:80:ba:a2:9f:61:6e:8a:5f:8d:ca:cd:9d:6c:0e:99:cb: 47:ab:d4:a5:05:e9:d7:82:2d:dc:06:ce:6b:c1:35:c2:c7:5e: f0:df:e1:35:59:17:cf:fb:57:15:e2:db:44:dc:a3:6b:d0:d7: ce:d5:ac:34:cd:57:99:0a:2c:a2:f1:50:25:62:83:5c:0c:22: cc:9f:c4:af:6e:bd:04:00:96:3b:02:4c:85:28:16:b2:eb:40: 6f:1e:16:91:88:f1:e1:b8:96:c2:e4:13:79:90:e0:82:fe:72: c9:03:00:a4:4e:03:99:06:46:d8:4f:d6:63:04:56:b3:98:87: 36:af:1a:d9:e2:e4:e2:80:c8:39:60:a7:71:8b:b3:3b:2f:51: af:5f:80:fb:e9:84:42:ca:58:7e:4f:4a:e0:5e:47:42:2f:51: 11:60:0b:2e:bc:3e:0e:e8:f0:5c:08:bc:d9:fd:bf:03:2d:27: e0:e5:87:9c:2c:b6:1c:5f:aa:78:a5:c6:1e:42:dd:b2:c6:26: 2e:04:60:d6:3f:fd:67:b6:34:11:62:43:47:c0:12:a9:ee:ee: df:75:f4:37:6a:4d:57:f3:e1:51:32:69:0b:9f:d1:d4:bc:36: e6:c4:8c:31:b2:a3:bd:4b:99:9f:a6:48:68:11:cf:cd:3d:7d: 0f:5a:8e:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHYEzMKEmZ7DqGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZjkzYWJiNGQtOWJhZC00YWQzLThlYzktZTJiNGQzNDUwN2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoiR8z5wbcbDif8DkhMrNSw2tE/l2HrGkjnM bWTqrMtYeEMNKb4Kzep7S7rKKLOJrccSZgeyy0N0j8pmSDScUzyvjB9wM6ua1/Hd xLyOO6dEz3r2wCLb+NEbFzkNh+mqex+8xTFghUlne+jFRF80jOV6DJH1XGNc7Vfz 6MP6SteZsLIBemmgXbwe37yNJIYl9q3diKcgrJgE4r0aUPVdLDXN7fxUlOqf6tuN 23jxZRKkfH0zpIejyN6QJ36O1nflqtosB8rLAe0iH/2JWMICF4pytkPi8kTWu4Ew xMvO0QR7AJS9Bwtx9bprTViDDhQggD1FeQ2Ka5R0/R89J6rWrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2rspWhyFEGFLSD/tUjmTWuqkeNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYWEwYmIyNjItNmFiYy0z YjJiLWI3ZDctZmYwMTYyYjk3MjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApSgLqin2Fuil+Nys2dbA6Zy0er1KUF6deCLdwGzmvBNcLHXvDf4TVZ F8/7VxXi20Tco2vQ187VrDTNV5kKLKLxUCVig1wMIsyfxK9uvQQAljsCTIUoFrLr QG8eFpGI8eG4lsLkE3mQ4IL+cskDAKROA5kGRthP1mMEVrOYhzavGtni5OKAyDlg p3GLszsvUa9fgPvphELKWH5PSuBeR0IvURFgCy68Pg7o8FwIvNn9vwMtJ+Dlh5ws thxfqnilxh5C3bLGJi4EYNY//We2NBFiQ0fAEqnu7t919DdqTVfz4VEyaQuf0dS8 NubEjDGyo71LmZ+mSGgRz809fQ9ajvM= -----END CERTIFICATE-----Generated at Wed Nov 5 01:31:39 2025 by rpki-client