$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c432cccf-4bc1-321e-bff7-838cbc61cee9.roa File: c432cccf-4bc1-321e-bff7-838cbc61cee9.roa (raw, json) Hash identifier: tXbLQ+0Y9/ebNAMHzI2RIXbFM+uTFpOjYz5Y2gD24ZY= Subject key identifier: FE:01:BC:85:2C:AC:B7:5C:83:9C:8D:53:C6:6C:95:7B:C4:E4:52:5A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B99D7B45C79CE70D840D63800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c432cccf-4bc1-321e-bff7-838cbc61cee9.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 36183 IP address blocks: 172.224.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:b4:5c:79:ce:70:d8:40:d6:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9157c55d-1ea0-4037-bdec-ba5b4d7581d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:b1:e3:ee:01:cd:bf:72:52:46:de:74:9f: be:56:1c:95:95:c0:7c:97:93:ca:7e:58:07:1b:ea: d5:51:07:e8:9b:e4:5b:27:58:40:34:f2:16:aa:95: 6b:84:2e:e9:63:97:ea:18:9a:3c:77:e5:49:98:7c: 0a:be:41:46:e4:80:6c:cb:99:02:2d:8f:51:c9:92: 05:5f:1b:a4:a8:ab:b5:ab:74:c9:14:67:00:bf:cc: 48:a2:0c:f8:b0:df:17:fe:b0:60:73:14:19:08:76: b9:67:e6:fa:d4:50:17:30:51:c7:45:b9:e5:49:93: c0:51:0e:dc:45:09:ab:fa:49:34:d1:97:8c:99:23: a5:ac:bb:09:7b:e7:61:63:08:a1:49:bf:29:e8:f8: e8:06:64:8b:75:c7:17:b0:a7:0d:d4:89:96:e0:a6: 41:93:88:0e:8a:f4:52:e8:de:f0:b3:d9:d5:61:84: 35:82:72:01:7a:38:c6:6b:c8:a5:b3:d6:2f:cd:73: 06:a1:43:ba:70:fc:7e:22:39:72:22:aa:ec:6d:fe: 96:8d:6e:bf:79:2d:6b:bb:63:f5:f5:5e:b0:58:bf: 9c:dc:89:c9:88:1e:cc:7f:f2:7c:8c:1b:f4:7c:e2: 06:7d:09:31:64:a4:28:30:48:90:a1:b7:b6:53:fd: 76:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:01:BC:85:2C:AC:B7:5C:83:9C:8D:53:C6:6C:95:7B:C4:E4:52:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c432cccf-4bc1-321e-bff7-838cbc61cee9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c3:46:3b:81:7b:ce:6a:d6:d5:1f:06:d2:81:1f:9d:f7:6c: a5:95:6d:9a:79:b4:51:75:ef:f5:39:e2:c5:43:76:50:ea:21: 1c:10:6f:a9:82:09:f8:d8:1b:11:0b:0c:13:1d:a1:11:fe:3c: 5b:b0:3c:26:d1:47:3d:7d:0f:08:a9:2b:05:e8:e0:82:8f:75: 41:29:2b:27:7c:00:41:f4:8e:33:5f:4f:47:69:ce:91:5c:ee: 0e:9e:78:3d:63:bb:41:ca:db:e1:9c:b2:5d:b9:7f:59:e0:4e: c4:4c:0b:74:8c:3c:62:15:6b:2a:b0:56:33:f9:52:96:fb:d1: 2e:6f:14:3a:ea:b8:9a:b4:2e:74:70:ec:cb:be:f4:59:73:b6: f2:64:88:f8:da:b1:a5:8a:2c:a7:f8:2d:76:8e:9c:73:c8:d4: d1:cd:4a:2a:33:1d:de:ae:01:4a:f6:04:0f:47:8f:2f:a5:4d: dd:40:15:8d:3a:b1:14:21:30:79:74:95:b8:fc:71:98:c3:9b: f4:0f:f8:74:7f:a0:43:5f:39:86:c7:26:d1:0d:2b:9c:d6:59: 3e:c9:3f:3d:71:c1:66:93:58:30:5d:0b:e2:e3:e0:0e:06:97: 22:91:60:be:98:b4:58:d0:66:85:55:bc:50:68:b8:bf:c3:88: b6:6f:31:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ17Rcec5w2EDWOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OTE1N2M1NWQtMWVhMC00MDM3LWJkZWMtYmE1YjRkNzU4MWQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOGx4+4Bzb9yUkbedJ++VhyVlcB8l5PKflgH G+rVUQfom+RbJ1hANPIWqpVrhC7pY5fqGJo8d+VJmHwKvkFG5IBsy5kCLY9RyZIF XxukqKu1q3TJFGcAv8xIogz4sN8X/rBgcxQZCHa5Z+b61FAXMFHHRbnlSZPAUQ7c RQmr+kk00ZeMmSOlrLsJe+dhYwihSb8p6PjoBmSLdccXsKcN1ImW4KZBk4gOivRS 6N7ws9nVYYQ1gnIBejjGa8ils9YvzXMGoUO6cPx+IjlyIqrsbf6WjW6/eS1ru2P1 9V6wWL+c3InJiB7Mf/J8jBv0fOIGfQkxZKQoMEiQobe2U/12bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP4BvIUsrLdcg5yNU8ZslXvE5FJaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzQzMmNjY2YtNGJjMS0z MjFlLWJmZjctODM4Y2JjNjFjZWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOBUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjDRjuBe85q1tUfBtKBH533bKWVbZp5tFF17/U54sVDdlDqIRwQb6mC CfjYGxELDBMdoRH+PFuwPCbRRz19DwipKwXo4IKPdUEpKyd8AEH0jjNfT0dpzpFc 7g6eeD1ju0HK2+Gcsl25f1ngTsRMC3SMPGIVayqwVjP5Upb70S5vFDrquJq0LnRw 7Mu+9FlztvJkiPjasaWKLKf4LXaOnHPI1NHNSiozHd6uAUr2BA9Hjy+lTd1AFY06 sRQhMHl0lbj8cZjDm/QP+HR/oENfOYbHJtENK5zWWT7JPz1xwWaTWDBdC+Lj4A4G lyKRYL6YtFjQZoVVvFBouL/DiLZvMSA= -----END CERTIFICATE-----Generated at Tue Nov 4 23:55:12 2025 by rpki-client