$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cda5329a-5221-3b2c-b2f3-ab7b002f8192.roa File: cda5329a-5221-3b2c-b2f3-ab7b002f8192.roa (raw, json) Hash identifier: 2Y+5BtfODkDMr0cuQEcPqazuT4lHZQATiSz2BR4iQ/E= Subject key identifier: 5B:0F:BA:A9:E3:BB:E2:29:E7:4C:B5:2C:DA:E3:2E:3B:6B:DC:C6:E5 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B21CC3214E7C76D9D592D61C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cda5329a-5221-3b2c-b2f3-ab7b002f8192.roa Signing time: Tue 09 Sep 2025 01:00:33 +0000 ROA not before: Tue 09 Sep 2025 01:00:33 +0000 ROA not after: Mon 08 Dec 2025 02:00:33 +0000 asID: 63949 IP address blocks: 172.234.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:21:cc:32:14:e7:c7:6d:9d:59:2d:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 9 01:00:33 2025 GMT Not After : Dec 8 02:00:33 2025 GMT Subject: CN=c6b3c666-79ae-4ce9-86a4-57d4bf163be3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:24:1f:2b:1e:4c:fc:c9:c5:fd:4b:c1:eb:f6: f6:37:60:fa:8f:28:3c:e5:f4:79:c5:d2:e2:f6:dd: 08:9c:f7:66:04:00:99:e7:4a:e8:f6:d8:3b:cd:e7: fe:af:38:0d:8c:6a:51:6c:e8:8a:44:0f:08:33:d3: df:4f:e7:d8:85:a1:cd:87:af:de:4b:f0:e4:30:f1: ae:d8:ad:3a:6d:8f:2d:fc:3d:7f:e6:b5:1b:5c:f9: a6:20:eb:fa:eb:af:a3:3d:4a:14:ff:fb:78:9a:e7: 10:f1:08:b4:77:37:96:a4:c3:21:4f:c3:3b:e4:a7: 03:f3:f8:92:4f:30:bd:0d:2d:b7:20:97:8d:b1:46: fd:f9:22:11:0e:aa:4c:af:76:c5:a2:73:8c:1b:05: 93:f4:a6:45:f6:91:b6:5b:c9:bd:96:4b:b3:07:0b: 07:c0:3a:11:6c:7e:14:94:9d:f6:6c:41:a0:83:ba: 46:c6:7e:e7:75:d8:cc:3d:a7:c4:83:30:e5:7b:1c: 0e:5e:0d:4c:76:2e:57:76:c7:c2:08:e7:f2:b8:7a: b0:90:46:21:8e:6f:94:60:8d:4c:77:c5:f9:0c:d4: 9e:5d:a5:28:c3:0a:69:bc:eb:be:4b:39:26:5e:b7: a7:e5:f6:9f:8b:34:3f:32:cc:d7:c9:7c:bb:50:9b: 9b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0F:BA:A9:E3:BB:E2:29:E7:4C:B5:2C:DA:E3:2E:3B:6B:DC:C6:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cda5329a-5221-3b2c-b2f3-ab7b002f8192.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.234.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:42:9e:0f:07:49:e4:60:a4:dc:89:20:b8:52:7b:08:9c:7f: 76:45:bd:71:6f:03:38:b5:c6:88:13:97:be:49:46:64:24:68: 26:21:f6:4b:00:96:dd:18:30:55:7f:3b:ab:7e:47:e8:82:de: 9b:27:db:e5:aa:c4:92:d2:2c:7e:63:50:66:1d:31:b0:8e:6c: 56:7d:6b:da:86:48:30:f9:a1:58:8a:2e:eb:51:8d:77:84:c0: 4f:a5:fa:e5:c6:1c:8c:8f:ca:bb:1c:9c:06:04:3a:6a:08:da: bc:63:83:2a:56:96:37:a5:09:54:f8:a0:64:19:d6:d6:e7:a0: f1:ec:58:67:f0:c4:6f:1d:aa:4e:ce:aa:73:de:1b:c4:30:27: 95:28:f7:8f:b0:44:16:a1:c3:dd:f0:ae:1e:f2:15:ed:fb:b3: c9:7b:f1:69:e0:be:d7:f9:ed:db:22:25:86:51:23:1e:9f:fb: 67:00:4b:1e:94:c1:af:db:71:3f:9a:00:26:92:8d:e5:b2:25: e3:62:03:ac:7a:31:9c:b1:bb:03:35:58:0f:37:0f:40:d0:a5: 64:12:32:a2:56:05:64:dc:f6:3f:4d:ad:31:d5:e5:e9:a1:7f: dc:ad:33:d0:cf:fb:dc:c0:27:d0:0c:0c:c6:1b:70:3f:8e:bc: 86:0b:5f:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEshzDIU58dtnVktYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwOTAxMDAzM1oXDTI1MTIwODAyMDAzM1owLzEtMCsGA1UEAxMk YzZiM2M2NjYtNzlhZS00Y2U5LTg2YTQtNTdkNGJmMTYzYmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSQfKx5M/MnF/UvB6/b2N2D6jyg85fR5xdLi 9t0InPdmBACZ50ro9tg7zef+rzgNjGpRbOiKRA8IM9PfT+fYhaHNh6/eS/DkMPGu 2K06bY8t/D1/5rUbXPmmIOv666+jPUoU//t4mucQ8Qi0dzeWpMMhT8M75KcD8/iS TzC9DS23IJeNsUb9+SIRDqpMr3bFonOMGwWT9KZF9pG2W8m9lkuzBwsHwDoRbH4U lJ32bEGgg7pGxn7nddjMPafEgzDlexwOXg1Mdi5XdsfCCOfyuHqwkEYhjm+UYI1M d8X5DNSeXaUowwppvOu+SzkmXren5fafizQ/MszXyXy7UJubEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsPuqnju+Ip50y1LNrjLjtr3MblMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2RhNTMyOWEtNTIyMS0z YjJjLWIyZjMtYWI3YjAwMmY4MTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrOpAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtCng8HSeRgpNyJILhSewicf3ZFvXFvAzi1xogTl75JRmQkaCYh9ksA lt0YMFV/O6t+R+iC3psn2+WqxJLSLH5jUGYdMbCObFZ9a9qGSDD5oViKLutRjXeE wE+l+uXGHIyPyrscnAYEOmoI2rxjgypWljelCVT4oGQZ1tbnoPHsWGfwxG8dqk7O qnPeG8QwJ5Uo94+wRBahw93wrh7yFe37s8l78Wngvtf57dsiJYZRIx6f+2cASx6U wa/bcT+aACaSjeWyJeNiA6x6MZyxuwM1WA83D0DQpWQSMqJWBWTc9j9NrTHV5emh f9ytM9DP+9zAJ9AMDMYbcD+OvIYLXxM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:55:12 2025 by rpki-client