$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c87d6073-d113-3d6c-a8ca-b75af538c39d.roa File: c87d6073-d113-3d6c-a8ca-b75af538c39d.roa (raw, json) Hash identifier: vcIdFye/zwDk4QHRvYYcyv4cFleUUUnFl4ICe4ZnuQI= Subject key identifier: 66:95:AF:23:3F:F7:C6:3B:47:66:F3:4A:38:72:85:E2:1B:54:14:E4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584C5A9697D22CE4FEC7E6352980 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c87d6073-d113-3d6c-a8ca-b75af538c39d.roa Signing time: Tue 30 Dec 2025 02:00:30 +0000 ROA not before: Tue 30 Dec 2025 02:00:30 +0000 ROA not after: Mon 30 Mar 2026 01:00:30 +0000 asID: 36183 IP address blocks: 172.225.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:5a:96:97:d2:2c:e4:fe:c7:e6:35:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Dec 30 02:00:30 2025 GMT Not After : Mar 30 01:00:30 2026 GMT Subject: CN=e43b28b9-ede5-4dd4-9db3-a08931e7ed89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f0:cd:ef:45:83:87:56:68:56:ae:bd:4a:92: 30:6b:55:dc:44:b4:11:e8:97:08:4d:b4:b0:da:e8: 94:b0:0a:b9:ae:04:a4:b5:37:08:61:dd:5e:36:ab: 01:29:db:52:8f:df:5e:9f:53:da:8d:f8:62:6f:68: 67:ee:49:49:e0:c1:0b:f4:5e:1c:a3:4f:3f:68:dc: e7:53:bb:91:ac:c6:13:76:5a:0d:f9:08:5e:49:c6: 66:51:07:20:c3:46:29:bc:e2:ac:a0:1f:03:fd:6f: f9:42:ba:00:99:e3:67:dd:d8:91:bc:4d:3f:91:1c: cd:50:54:57:0e:47:94:3b:35:ee:68:d0:97:7a:6c: b0:d2:f9:0b:f7:93:86:78:0b:20:10:c7:eb:f8:00: 41:49:75:2c:54:9e:88:fb:6e:f4:60:07:f2:b5:08: 2d:f3:ab:e6:df:7d:fd:33:e9:b3:25:96:4a:69:20: fe:2e:0e:95:71:ee:1b:25:a2:c7:59:5e:51:1f:ca: 59:f7:a9:fb:49:a3:30:b5:82:5c:c5:f7:9e:c9:ec: 22:20:f7:71:6d:e5:0d:eb:f9:0f:98:bd:2f:85:0a: 50:67:a4:0b:8a:4c:09:6a:ee:56:bb:63:d2:43:4c: 84:60:38:05:45:a5:27:e5:4f:10:0d:6d:39:c3:ba: 0b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:95:AF:23:3F:F7:C6:3B:47:66:F3:4A:38:72:85:E2:1B:54:14:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c87d6073-d113-3d6c-a8ca-b75af538c39d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:78:35:4e:06:2f:be:17:99:aa:3e:bd:a0:05:d4:28:1a:0e: fb:dd:c5:44:f8:d7:05:16:57:93:98:7d:bb:25:33:6a:a5:0e: 9d:35:9a:17:8d:01:a2:0d:40:c1:97:e0:66:01:6f:27:19:db: b3:6e:13:70:71:d5:a4:cf:36:2d:ca:34:0b:45:b7:1a:62:3b: 64:a5:34:b5:64:d2:37:c9:79:61:09:f7:64:8d:9b:3c:a1:be: 3a:2e:f0:90:fe:d5:a2:44:65:f3:e3:f1:31:b4:fe:63:63:90: ce:62:fa:a0:9c:d0:97:4e:57:b6:38:27:5b:ee:d9:f9:b6:63: 64:42:6d:f1:f7:e5:ed:2b:4a:38:34:54:50:43:d5:94:8a:8e: 9f:38:5e:a7:d0:d9:69:c1:2a:cc:61:11:bb:05:e0:50:b1:a6: 13:06:fa:2c:fa:48:6d:87:fb:c8:7a:bf:ba:37:68:d2:97:09: 97:a4:ea:5b:8e:cd:aa:eb:5a:a4:ba:6a:29:10:0a:07:fd:ad: d7:a7:61:44:fa:15:cc:e7:cb:a1:98:01:c9:d0:30:fe:19:e0: e6:e7:6f:a3:44:88:d5:a5:5c:59:f5:02:68:cd:5d:f8:20:5b: 42:e5:63:ce:ea:65:9a:38:fa:00:32:a2:bb:6d:74:3e:73:3c: 8e:25:d6:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExalpfSLOT+x+Y1KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTIzMDAyMDAzMFoXDTI2MDMzMDAxMDAzMFowLzEtMCsGA1UEAxMk ZTQzYjI4YjktZWRlNS00ZGQ0LTlkYjMtYTA4OTMxZTdlZDg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fDN70WDh1ZoVq69SpIwa1XcRLQR6JcITbSw 2uiUsAq5rgSktTcIYd1eNqsBKdtSj99en1Pajfhib2hn7klJ4MEL9F4co08/aNzn U7uRrMYTdloN+QheScZmUQcgw0YpvOKsoB8D/W/5QroAmeNn3diRvE0/kRzNUFRX DkeUOzXuaNCXemyw0vkL95OGeAsgEMfr+ABBSXUsVJ6I+270YAfytQgt86vm3339 M+mzJZZKaSD+Lg6Vce4bJaLHWV5RH8pZ96n7SaMwtYJcxfeeyewiIPdxbeUN6/kP mL0vhQpQZ6QLikwJau5Wu2PSQ0yEYDgFRaUn5U8QDW05w7oLZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGaVryM/98Y7R2bzSjhyheIbVBTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzg3ZDYwNzMtZDExMy0z ZDZjLWE4Y2EtYjc1YWY1MzhjMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOFuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN4NU4GL74Xmao+vaAF1CgaDvvdxUT41wUWV5OYfbslM2qlDp01mheN AaINQMGX4GYBbycZ27NuE3Bx1aTPNi3KNAtFtxpiO2SlNLVk0jfJeWEJ92SNmzyh vjou8JD+1aJEZfPj8TG0/mNjkM5i+qCc0JdOV7Y4J1vu2fm2Y2RCbfH35e0rSjg0 VFBD1ZSKjp84XqfQ2WnBKsxhEbsF4FCxphMG+iz6SG2H+8h6v7o3aNKXCZek6luO zarrWqS6aikQCgf9rdenYUT6Fczny6GYAcnQMP4Z4Obnb6NEiNWlXFn1AmjNXfgg W0LlY87qZZo4+gAyorttdD5zPI4l1jY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:38:33 2026 by rpki-client