$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfc70af9-4005-3ca6-bdf4-1aea8d7ba15e.roa File: dfc70af9-4005-3ca6-bdf4-1aea8d7ba15e.roa (raw, json) Hash identifier: XcZPES2FzHCCD6wdImQCUyBACFAeIE2fRk7amGsfx0s= Subject key identifier: C8:9A:76:F9:C4:58:3B:85:E5:DE:3A:B7:1E:11:B3:DC:42:4E:5F:8A Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B970CFCCD3FD24856DBE87F80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfc70af9-4005-3ca6-bdf4-1aea8d7ba15e.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 36183 IP address blocks: 172.224.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:fc:cd:3f:d2:48:56:db:e8:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=95100c3a-4655-437f-b5dd-5f87efec7c49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:75:89:cd:3b:13:68:d2:84:11:8a:ad:08: 6e:63:7b:f5:09:2b:a7:be:a8:2f:79:a7:d0:bd:b1: 59:f9:d5:98:b0:07:b5:db:33:a3:31:1e:c2:1a:c2: c7:50:ee:b2:b1:f2:1c:ab:20:70:e7:24:ce:b4:cd: 33:da:7c:f6:c7:3d:db:ea:33:ea:f3:1b:f8:dc:6b: bc:6e:97:bc:9b:3f:93:3a:c9:10:44:1d:dc:94:2e: f0:09:8d:d1:ac:7a:bb:e4:12:23:d3:3a:05:07:3b: 81:b9:7f:4c:66:29:7b:0b:56:99:da:55:7c:a0:79: a8:b2:37:e4:1e:f8:6e:d7:dc:70:68:8f:90:2f:fa: 4e:c4:3a:df:3e:44:21:3c:b2:e3:b7:3f:83:88:ec: b2:09:9d:c3:34:07:08:7f:10:f8:36:8a:81:ab:4c: 43:d9:a9:94:63:57:2e:61:2a:e1:b7:49:b5:9a:03: 0d:40:4d:91:dd:b2:95:4c:33:71:13:2e:3d:1d:ce: ea:c5:8c:b1:52:49:56:85:1b:bb:2f:1f:e3:bb:51: 52:1b:a6:09:b7:b8:2d:7b:be:93:54:97:95:cd:3b: d1:ca:3e:b2:05:2e:ca:2e:25:99:dd:98:3c:00:f7: 11:3a:c2:98:f5:73:72:e6:fb:4b:a0:08:1f:e6:d4: 70:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:9A:76:F9:C4:58:3B:85:E5:DE:3A:B7:1E:11:B3:DC:42:4E:5F:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dfc70af9-4005-3ca6-bdf4-1aea8d7ba15e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.224.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:99:2e:b0:21:4b:22:70:91:49:3c:60:62:65:a6:72:41:51: ef:94:3e:00:8a:5f:02:bd:76:a4:2b:5f:db:e6:e8:2e:66:a5: 31:7a:09:02:21:8f:1e:a7:48:9e:ab:7b:4f:cd:f3:b4:ba:ff: f7:fd:01:56:b0:8d:00:3e:ef:4a:ac:c4:81:91:a6:77:58:3c: cd:34:45:5d:88:1e:eb:23:76:c7:46:ce:95:e4:ed:8d:17:6a: 4f:0a:4f:de:3e:26:a0:c0:18:f6:28:12:c0:44:3a:12:6a:b3: 74:4c:92:9f:db:83:b2:77:fa:db:0a:0d:95:04:ff:84:ff:ef: 65:9a:3e:b7:db:38:78:ca:5f:cb:5a:cb:2f:2b:b0:0d:bb:9f: a9:f4:21:67:36:9a:95:9b:90:91:6c:7b:71:da:91:0b:a7:b3: 14:90:0c:67:9b:8c:3e:c0:eb:59:c2:a1:9c:d0:30:f2:4e:e4: 6f:04:51:37:a4:9c:29:1c:a4:e9:0e:c2:c1:ce:0b:9d:2f:9a: 50:3d:45:5e:b0:ba:de:ee:13:7b:93:82:7f:9f:ae:e1:bc:97: 08:29:94:52:9d:24:a5:93:5e:00:11:82:a7:5c:aa:3a:16:ba: 63:c9:67:53:7a:cb:89:86:21:70:b8:78:50:2b:e7:dd:f5:f9: 5e:db:17:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPzNP9JIVtvof4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk OTUxMDBjM2EtNDY1NS00MzdmLWI1ZGQtNWY4N2VmZWM3YzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV11ic07E2jShBGKrQhuY3v1CSunvqgveafQ vbFZ+dWYsAe12zOjMR7CGsLHUO6ysfIcqyBw5yTOtM0z2nz2xz3b6jPq8xv43Gu8 bpe8mz+TOskQRB3clC7wCY3RrHq75BIj0zoFBzuBuX9MZil7C1aZ2lV8oHmosjfk Hvhu19xwaI+QL/pOxDrfPkQhPLLjtz+DiOyyCZ3DNAcIfxD4NoqBq0xD2amUY1cu YSrht0m1mgMNQE2R3bKVTDNxEy49Hc7qxYyxUklWhRu7Lx/ju1FSG6YJt7gte76T VJeVzTvRyj6yBS7KLiWZ3Zg8APcROsKY9XNy5vtLoAgf5tRwTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiadvnEWDuF5d46tx4Rs9xCTl+KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGZjNzBhZjktNDAwNS0z Y2E2LWJkZjQtMWFlYThkN2JhMTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOCjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSZLrAhSyJwkUk8YGJlpnJBUe+UPgCKXwK9dqQrX9vm6C5mpTF6CQIh jx6nSJ6re0/N87S6//f9AVawjQA+70qsxIGRpndYPM00RV2IHusjdsdGzpXk7Y0X ak8KT94+JqDAGPYoEsBEOhJqs3RMkp/bg7J3+tsKDZUE/4T/72WaPrfbOHjKX8ta yy8rsA27n6n0IWc2mpWbkJFse3HakQunsxSQDGebjD7A61nCoZzQMPJO5G8EUTek nCkcpOkOwsHOC50vmlA9RV6wut7uE3uTgn+fruG8lwgplFKdJKWTXgARgqdcqjoW umPJZ1N6y4mGIXC4eFAr5931+V7bF0o= -----END CERTIFICATE-----Generated at Wed Nov 5 03:04:57 2025 by rpki-client