$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ae3ee976-a37f-325f-8f70-c0c088af3969.roa File: ae3ee976-a37f-325f-8f70-c0c088af3969.roa (raw, json) Hash identifier: yg1UpPWYnCe5dd7uUZ9zbDKWSfV49QicmzWTElMpzp0= Subject key identifier: 62:22:58:5E:6B:5D:9C:CD:6C:86:29:2D:A3:98:D4:63:23:BD:0F:50 Certificate issuer: /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Certificate serial: 010D0C9F4328584B821CC427205F3584C2E72400 Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ae3ee976-a37f-325f-8f70-c0c088af3969.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 14436 IP address blocks: 173.240.160.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:c4:27:20:5f:35:84:c2:e7:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=f3306e5a-96a2-4741-b1ad-c95763eba053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5a:19:22:00:fe:5a:36:de:30:59:01:87:f5: d7:54:82:2a:e4:2d:9c:3c:00:15:ee:4a:86:c2:4a: 8a:d1:e9:93:69:98:25:91:1f:b2:86:b7:9f:2f:56: d5:b2:21:21:c3:f2:55:1a:2e:e3:8b:f8:34:37:9e: 5e:9f:07:ba:a4:0e:3d:71:6f:01:dc:55:b8:99:76: f3:a7:d9:51:37:ee:3d:98:09:c3:01:4b:38:00:53: 44:1a:c6:a0:bb:39:bd:c9:bf:cb:96:69:ed:90:92: ea:d5:27:e8:3a:44:08:ad:7e:aa:ad:7e:cf:31:4b: ac:a6:b1:86:94:2f:ce:c7:d3:d6:47:72:ff:c0:e0: 7e:bf:97:b6:07:f5:25:04:d8:ba:71:42:b0:23:d4: c0:8e:7b:34:fe:40:05:ac:27:db:e2:60:62:be:fa: cb:d5:a8:81:82:d1:5f:32:4a:10:af:d7:37:34:5b: 9f:0c:7c:c6:e8:75:2d:6c:f8:a6:45:71:33:2d:0b: c6:be:78:f6:ce:7c:3d:cb:1f:f1:26:eb:9e:0a:6b: 6c:58:f7:69:d1:bf:a4:83:48:ab:83:e7:5e:b4:51: 70:f7:86:91:f0:a1:3f:66:d4:c3:60:c8:88:83:6b: 35:18:61:09:be:c2:22:b8:e3:44:86:d7:43:e8:be: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:22:58:5E:6B:5D:9C:CD:6C:86:29:2D:A3:98:D4:63:23:BD:0F:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ae3ee976-a37f-325f-8f70-c0c088af3969.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl X509v3 Authority Key Identifier: keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer sbgp-ipAddrBlock: critical IPv4: 173.240.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:a7:0e:0f:9e:7e:73:db:69:08:5b:4c:56:f2:02:7b:4f:92: a3:b0:23:d0:d6:c6:46:25:36:d9:14:a7:98:50:15:57:c7:c6: 43:ef:f7:ce:5b:ed:b3:81:18:30:9b:37:0f:6f:3b:c6:67:c8: 9d:c4:4e:1f:b4:bf:da:48:c9:33:39:48:8b:b7:ba:ae:80:e6: ef:5f:a0:81:e2:eb:f9:d1:7f:97:eb:13:3c:54:43:19:07:bb: a0:52:36:49:3f:45:99:2c:39:48:fb:4e:16:fd:63:b0:c6:d8: e6:14:09:9c:1f:fe:56:22:43:47:ea:9e:ce:d0:3e:e1:f1:9f: 54:03:9d:56:50:a5:87:da:ed:b9:f5:04:34:51:85:dd:f9:77: 24:19:67:bb:3c:41:53:9e:c8:cb:3d:86:5e:f0:d3:19:c3:35: b4:31:eb:84:a7:c2:3d:3d:c0:3f:81:03:53:4d:96:1c:5b:88: ab:cc:95:af:4e:0e:a2:1b:b5:da:db:c6:8b:17:8b:da:59:30: a2:ce:2d:a6:47:64:d0:c5:ea:8b:48:ab:c1:1d:9c:f8:53:48: 54:a9:50:5f:43:4a:40:89:85:b9:25:de:47:27:b8:eb:32:51: 63:36:cc:26:25:cb:55:7f:c8:12:ca:00:a2:c0:90:83:e1:28: 67:8e:97:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHMQnIF81hMLnJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0 MGRmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZjMzMDZlNWEtOTZhMi00NzQxLWIxYWQtYzk1NzYzZWJhMDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1oZIgD+WjbeMFkBh/XXVIIq5C2cPAAV7kqG wkqK0emTaZglkR+yhrefL1bVsiEhw/JVGi7ji/g0N55enwe6pA49cW8B3FW4mXbz p9lRN+49mAnDAUs4AFNEGsaguzm9yb/LlmntkJLq1SfoOkQIrX6qrX7PMUusprGG lC/Ox9PWR3L/wOB+v5e2B/UlBNi6cUKwI9TAjns0/kAFrCfb4mBivvrL1aiBgtFf MkoQr9c3NFufDHzG6HUtbPimRXEzLQvGvnj2znw9yx/xJuueCmtsWPdp0b+kg0ir g+detFFw94aR8KE/ZtTDYMiIg2s1GGEJvsIiuONEhtdD6L7H2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIiWF5rXZzNbIYpLaOY1GMjvQ9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThh OGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvYWUzZWU5NzYtYTM3Zi0z MjVmLThmNzAtYzBjMDg4YWYzOTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE4YThhZTQtYmU2Mi00ZWYwLTlk YzctNGM0ZDgyNmE0MGRmLzYxOGE4YWU0LWJlNjItNGVmMC05ZGM3LTRjNGQ4MjZh NDBkZi5jcmwwHwYDVR0jBBgwFoAUlz5X9TGBsVJSZ9MGK6XxSki+o3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRk ODI2YTQwZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErfCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqnDg+efnPbaQhbTFbyAntPkqOwI9DWxkYlNtkUp5hQFVfHxkPv985b 7bOBGDCbNw9vO8ZnyJ3ETh+0v9pIyTM5SIu3uq6A5u9foIHi6/nRf5frEzxUQxkH u6BSNkk/RZksOUj7Thb9Y7DG2OYUCZwf/lYiQ0fqns7QPuHxn1QDnVZQpYfa7bn1 BDRRhd35dyQZZ7s8QVOeyMs9hl7w0xnDNbQx64Snwj09wD+BA1NNlhxbiKvMla9O DqIbtdrbxosXi9pZMKLOLaZHZNDF6otIq8EdnPhTSFSpUF9DSkCJhbkl3kcnuOsy UWM2zCYly1V/yBLKAKLAkIPhKGeOl74= -----END CERTIFICATE-----Generated at Mon Oct 20 07:53:03 2025 by rpki-client