$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffa07a68-7791-34c0-a3cf-e2fe4ab7b6df.roa File: ffa07a68-7791-34c0-a3cf-e2fe4ab7b6df.roa (raw, json) Hash identifier: ZMeakx0AnbZj8rXfbtYzYKi5iGBHBCWnMzwvrlkE7iY= Subject key identifier: 6E:2A:F5:6B:13:F8:D4:FD:8F:8B:4E:3F:26:DC:DF:EB:49:80:9A:80 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AFC1C0C6A709184F7600AD800 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffa07a68-7791-34c0-a3cf-e2fe4ab7b6df.roa Signing time: Tue 26 Aug 2025 13:00:41 +0000 ROA not before: Tue 26 Aug 2025 13:00:41 +0000 ROA not after: Mon 24 Nov 2025 14:00:41 +0000 asID: 20940 IP address blocks: 172.235.114.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:1c:0c:6a:70:91:84:f7:60:0a:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 26 13:00:41 2025 GMT Not After : Nov 24 14:00:41 2025 GMT Subject: CN=fb52d57a-601a-4240-a408-a6efdfda41b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:2f:3f:94:46:09:1b:76:d2:f0:8b:bc:ab: 41:62:75:47:38:f2:69:1d:0c:e9:10:b9:a5:a7:ea: ca:ed:56:3c:0e:1d:a2:70:cc:ba:a4:27:e3:f6:a7: 2b:dc:7e:90:8c:fa:3f:34:ef:38:c6:65:d4:25:f0: 36:8c:97:71:5c:a5:e3:fa:5e:b1:42:4f:5d:9c:00: 17:7e:3a:4f:c8:ee:21:7d:43:a9:e0:fa:91:d7:9d: 95:c8:62:b1:e6:88:f0:a2:84:b8:21:f8:43:29:ea: 12:f4:a9:74:d3:09:91:f8:4a:8f:ca:b8:ff:5d:a4: 05:f7:86:0b:2e:92:9f:0d:84:79:b6:2e:68:9d:73: 64:98:e6:72:e2:ee:ef:ec:34:0b:07:f4:3f:5f:3c: f1:9e:de:e2:59:0e:c2:b5:e4:24:87:81:3a:15:d8: e9:7e:44:c3:39:20:26:2b:75:de:37:c7:bc:0c:e0: 09:e5:9f:69:86:69:10:37:33:a7:22:c3:7f:23:14: 9d:17:bd:7c:b2:c5:2a:5c:52:f9:69:9b:61:96:5d: a0:71:18:6d:c2:45:46:7f:f0:b5:42:4c:79:14:ce: 8e:62:b0:74:ff:70:7c:7a:98:c8:95:d4:8b:4b:26: 1c:09:aa:c9:da:a8:f2:c3:50:6f:6c:92:4e:e4:18: 51:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2A:F5:6B:13:F8:D4:FD:8F:8B:4E:3F:26:DC:DF:EB:49:80:9A:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ffa07a68-7791-34c0-a3cf-e2fe4ab7b6df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.235.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:3f:02:5c:bb:4f:3c:83:c6:c3:35:fa:9d:6f:eb:2b:e3:13: c7:43:79:d6:8f:a5:91:37:d7:62:38:72:3e:fc:76:b6:bb:28: b2:f6:b0:69:15:ec:95:ae:a9:1d:15:2d:fb:ca:91:ac:0c:4c: d7:70:03:f9:0b:fa:69:54:8c:02:cd:e2:31:04:10:f2:8c:63: ce:fa:66:24:3f:fc:eb:91:c5:e9:79:2e:ce:00:e3:b9:7a:38: b0:97:46:87:46:e8:7e:25:1d:83:66:cc:8b:eb:c7:7a:c9:50: ed:e1:70:38:b0:65:a4:f8:2a:dd:6e:79:0b:40:ae:aa:fe:00: f8:cf:f4:21:b6:df:08:54:9e:ba:15:12:4c:55:d9:ef:f9:87: 5d:6e:98:0d:be:9f:59:2b:ec:36:f0:74:a6:5a:0b:9e:49:50: 0e:41:56:1c:8d:ab:9b:7c:22:9f:09:d4:c3:1e:9a:84:b0:83: e9:ba:fa:b5:8f:d3:b0:f4:9b:03:b9:ef:5b:18:84:72:a4:63: 1d:81:f6:23:58:4e:5d:24:f0:2a:5f:5f:ec:3d:3f:8b:03:ba: bf:b6:b8:c5:29:92:d9:fb:68:90:ad:a2:40:9d:7f:57:50:19: 83:67:f7:93:ca:54:0d:67:6f:8c:c2:42:19:0b:c1:0c:b6:e9: 3e:24:f5:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8HAxqcJGE92AK2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgyNjEzMDA0MVoXDTI1MTEyNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmI1MmQ1N2EtNjAxYS00MjQwLWE0MDgtYTZlZmRmZGE0MWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlasvP5RGCRt20vCLvKtBYnVHOPJpHQzpELml p+rK7VY8Dh2icMy6pCfj9qcr3H6QjPo/NO84xmXUJfA2jJdxXKXj+l6xQk9dnAAX fjpPyO4hfUOp4PqR152VyGKx5ojwooS4IfhDKeoS9Kl00wmR+EqPyrj/XaQF94YL LpKfDYR5ti5onXNkmOZy4u7v7DQLB/Q/Xzzxnt7iWQ7CteQkh4E6FdjpfkTDOSAm K3XeN8e8DOAJ5Z9phmkQNzOnIsN/IxSdF718ssUqXFL5aZthll2gcRhtwkVGf/C1 Qkx5FM6OYrB0/3B8epjIldSLSyYcCarJ2qjyw1BvbJJO5BhR9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG4q9WsT+NT9j4tOPybc3+tJgJqAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmZhMDdhNjgtNzc5MS0z NGMwLWEzY2YtZTJmZTRhYjdiNmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrOtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHY/Aly7TzyDxsM1+p1v6yvjE8dDedaPpZE312I4cj78dra7KLL2sGkV 7JWuqR0VLfvKkawMTNdwA/kL+mlUjALN4jEEEPKMY876ZiQ//OuRxel5Ls4A47l6 OLCXRodG6H4lHYNmzIvrx3rJUO3hcDiwZaT4Kt1ueQtArqr+APjP9CG23whUnroV EkxV2e/5h11umA2+n1kr7DbwdKZaC55JUA5BVhyNq5t8Ip8J1MMemoSwg+m6+rWP 07D0mwO571sYhHKkYx2B9iNYTl0k8CpfX+w9P4sDur+2uMUpktn7aJCtokCdf1dQ GYNn95PKVA1nb4zCQhkLwQy26T4k9Z8= -----END CERTIFICATE-----Generated at Wed Nov 5 00:05:06 2025 by rpki-client