$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c07ce136-9d3e-337b-8fe9-c2327d1d1da2.roa File: c07ce136-9d3e-337b-8fe9-c2327d1d1da2.roa (raw, json) Hash identifier: N6zMdDfqOUIgLBimtCtYcVjKJsjOZDU4Tv6JGSswdgc= Subject key identifier: 7F:C4:66:24:1E:0A:68:AA:35:5A:20:3A:49:E9:F1:BA:D3:5F:2E:D4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BABFCFB944A49687F82AB1A80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c07ce136-9d3e-337b-8fe9-c2327d1d1da2.roa Signing time: Tue 28 Oct 2025 13:00:38 +0000 ROA not before: Tue 28 Oct 2025 13:00:38 +0000 ROA not after: Mon 26 Jan 2026 14:00:38 +0000 asID: 36183 IP address blocks: 172.225.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ab:fc:fb:94:4a:49:68:7f:82:ab:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 28 13:00:38 2025 GMT Not After : Jan 26 14:00:38 2026 GMT Subject: CN=a3e39340-40fa-4172-a5ef-231dfdbececc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:90:0e:11:fd:e8:37:05:bb:ff:a3:7d:23:78: 7d:76:e9:59:20:45:d7:74:cd:3b:b3:4e:88:33:7a: c2:a1:b6:41:45:a9:86:03:81:10:10:6e:dd:9a:90: 64:ab:1e:76:4f:7a:d7:18:fd:f6:0d:68:92:11:4d: cf:bf:24:8b:f9:c6:ba:ea:d0:8a:a2:d5:88:81:c4: f0:87:81:bc:ed:31:f7:d9:19:10:03:ee:6f:31:24: c4:9b:92:89:fa:1f:ba:96:74:1a:89:92:b5:7d:e8: 96:d5:a1:55:69:6c:e8:06:9c:3e:59:81:fb:78:5f: 4a:36:dd:94:18:44:b1:c9:0c:73:61:c5:5d:4f:0c: a4:82:69:92:92:e4:32:c7:12:a9:22:4a:d4:f2:87: 32:07:40:8d:d6:09:45:6a:c1:af:68:fc:f9:03:66: 2a:57:1f:9d:5f:29:7e:53:d4:6f:a7:56:c7:bd:db: 32:24:3e:cb:b5:42:bc:a2:71:29:5d:9a:47:1b:0c: ce:c3:9a:bf:82:19:dc:50:b4:ac:d1:f3:32:7f:97: cb:4c:ca:fb:89:d4:2f:ce:15:a3:05:25:6b:c7:00: 66:22:ed:e7:0f:7e:97:49:e0:ca:a8:37:26:88:c1: 6f:36:9b:7f:53:2b:bb:56:90:3a:4c:c9:b1:42:68: c3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:C4:66:24:1E:0A:68:AA:35:5A:20:3A:49:E9:F1:BA:D3:5F:2E:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c07ce136-9d3e-337b-8fe9-c2327d1d1da2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:5a:e1:c2:ca:fa:34:98:b9:5e:62:ef:5b:af:1e:8e:59:ed: a5:55:4d:c7:68:ab:6d:0d:bc:b8:23:8d:1b:53:ee:98:3e:35: e1:16:b0:06:e8:ac:09:d5:79:c1:ce:94:ef:4e:9b:1c:75:d5: de:40:e5:c3:63:b6:34:b9:e1:a2:3d:24:62:f7:2c:72:7f:60: 30:3a:b4:79:17:c1:c9:89:61:a0:6e:f1:3c:5a:74:23:02:9d: 83:33:97:16:3a:8c:6d:3d:94:af:47:a5:2b:01:0c:1e:c6:84: 1b:f5:83:cf:97:c0:ae:e6:d9:89:6b:02:66:0b:82:ac:88:02: a0:bb:7c:f4:65:bb:50:8d:4f:98:eb:5b:6e:ab:09:37:b7:ca: 3b:fd:5f:65:24:83:7e:2e:ab:40:8b:c2:61:85:c0:d9:0f:7e: a8:b9:40:bd:ba:e6:2f:65:21:84:e3:dc:b3:36:20:bc:b9:18: 36:db:84:16:3a:77:3e:39:c0:0f:1f:06:97:08:78:4c:58:22: 79:3c:3a:c1:c7:79:16:15:a3:10:2f:c1:b2:24:30:66:80:64: db:8f:0c:48:e0:5f:8a:18:28:91:e9:4c:98:73:af:fe:ce:9c: a6:62:47:85:54:79:2f:d3:67:74:f0:04:3c:95:75:18:3c:f9: af:fd:21:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEur/PuUSklof4KrGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyODEzMDAzOFoXDTI2MDEyNjE0MDAzOFowLzEtMCsGA1UEAxMk YTNlMzkzNDAtNDBmYS00MTcyLWE1ZWYtMjMxZGZkYmVjZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZAOEf3oNwW7/6N9I3h9dulZIEXXdM07s06I M3rCobZBRamGA4EQEG7dmpBkqx52T3rXGP32DWiSEU3PvySL+ca66tCKotWIgcTw h4G87TH32RkQA+5vMSTEm5KJ+h+6lnQaiZK1feiW1aFVaWzoBpw+WYH7eF9KNt2U GESxyQxzYcVdTwykgmmSkuQyxxKpIkrU8ocyB0CN1glFasGvaPz5A2YqVx+dXyl+ U9Rvp1bHvdsyJD7LtUK8onEpXZpHGwzOw5q/ghncULSs0fMyf5fLTMr7idQvzhWj BSVrxwBmIu3nD36XSeDKqDcmiMFvNpt/Uyu7VpA6TMmxQmjDYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/EZiQeCmiqNVogOknp8brTXy7UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzA3Y2UxMzYtOWQzZS0z MzdiLThmZTktYzIzMjdkMWQxZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBa4cLK+jSYuV5i71uvHo5Z7aVVTcdoq20NvLgjjRtT7pg+NeEWsAbo rAnVecHOlO9Omxx11d5A5cNjtjS54aI9JGL3LHJ/YDA6tHkXwcmJYaBu8TxadCMC nYMzlxY6jG09lK9HpSsBDB7GhBv1g8+XwK7m2YlrAmYLgqyIAqC7fPRlu1CNT5jr W26rCTe3yjv9X2Ukg34uq0CLwmGFwNkPfqi5QL265i9lIYTj3LM2ILy5GDbbhBY6 dz45wA8fBpcIeExYInk8OsHHeRYVoxAvwbIkMGaAZNuPDEjgX4oYKJHpTJhzr/7O nKZiR4VUeS/TZ3TwBDyVdRg8+a/9IVc= -----END CERTIFICATE-----Generated at Tue Nov 4 22:18:01 2025 by rpki-client