$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/148bae10-4b3a-3470-87c3-6c21a344d540.roa File: 148bae10-4b3a-3470-87c3-6c21a344d540.roa (raw, json) Hash identifier: Q99ZyVslJjogk5CnkSo2VpyFaLqD4Hda+f/idsvPC9E= Subject key identifier: FD:D9:0E:F0:BD:26:23:84:B8:75:08:55:48:74:6A:60:61:73:E7:B0 Certificate issuer: /CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Certificate serial: 010D0C9F4328584B48E1C7099CE9FFB4B88CE4EC Authority key identifier: 43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/148bae10-4b3a-3470-87c3-6c21a344d540.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 395567 IP address blocks: 207.65.42.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:c7:09:9c:e9:ff:b4:b8:8c:e4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae77b5af-a1b5-4858-b61d-f09fd67f7cb3 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=2ac86482-1190-4771-b6f0-0fd9a2bf5eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:08:f1:a3:22:22:16:fe:6a:45:8a:70:9f: e7:d4:0b:cc:ce:ef:d8:eb:42:3a:c8:19:5a:c7:41: 04:06:f2:a3:37:52:0a:54:f0:d0:a3:4d:68:7a:6d: ea:c5:a0:a1:e3:86:6f:fd:ae:e6:b9:b4:eb:72:cd: 36:e7:a1:bb:fd:cb:46:e4:9e:9f:48:18:61:cb:82: 08:43:ae:8e:37:ec:4c:b7:e1:6f:ba:38:f1:87:a3: 43:90:47:19:2a:9b:07:a9:7a:43:f2:9d:29:ca:c8: ed:90:4c:d9:1d:74:e4:3d:74:03:fd:a8:9c:69:6d: 49:3d:80:cc:b3:2a:bc:22:58:2f:1b:f0:98:7b:3f: a5:cc:05:e8:98:4a:cf:e3:b7:f6:a9:f2:04:3e:11: 6b:9b:0e:96:0a:1a:12:a4:ad:35:51:4c:99:52:23: d0:93:3f:97:85:64:94:b0:92:05:46:5d:db:51:e2: 50:28:79:95:92:f9:3c:22:4d:42:b8:2f:b3:50:69: 65:20:a4:08:7a:63:d2:ad:ac:b8:14:eb:66:48:fd: 33:e8:db:b8:c5:3b:d5:e1:08:69:6c:49:c5:42:1a: 99:fc:f9:bf:9f:ac:01:49:05:df:45:08:c2:b2:cb: 60:f5:e4:d3:eb:e4:b9:30:72:51:17:20:2d:07:5e: 39:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D9:0E:F0:BD:26:23:84:B8:75:08:55:48:74:6A:60:61:73:E7:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/148bae10-4b3a-3470-87c3-6c21a344d540.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.crl X509v3 Authority Key Identifier: keyid:43:C6:D9:65:56:30:87:92:82:4A:05:C1:D7:CE:61:A3:CD:5D:3E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ae77b5af-a1b5-4858-b61d-f09fd67f7cb3.cer sbgp-ipAddrBlock: critical IPv4: 207.65.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:7c:bc:57:bb:ab:07:d3:d2:2b:95:ea:c9:eb:5b:f7:ce:ca: a3:f9:e9:20:a2:1d:b6:ec:0a:bb:f1:bd:95:97:65:9b:fd:21: a9:a4:79:22:94:3a:4b:5f:87:85:e1:27:5d:59:4c:51:b5:f9: cd:bf:d2:55:14:08:37:40:81:1b:59:cb:6e:a2:80:19:a3:d5: 30:d7:3d:74:f5:28:61:a2:26:d7:d1:99:2a:13:b8:91:de:86: c5:55:98:17:ff:a6:62:6e:1b:34:54:99:0d:68:65:66:70:c6: b7:08:69:6c:4b:42:b3:59:2b:9d:38:59:51:eb:95:9e:a2:54: 76:4a:65:f7:26:4e:0b:3f:80:a6:6f:43:eb:90:22:74:87:c8: 7e:26:de:b8:83:0a:b2:32:48:e9:2b:75:48:42:c1:51:ab:1f: 8d:01:c2:b0:45:d0:6b:cc:db:5e:3d:10:32:fd:8f:28:f6:b5: 91:42:91:9a:37:87:9b:0d:fa:9e:87:96:2e:08:2e:25:6d:37: 9c:50:67:ac:58:a4:eb:be:06:fb:92:56:d6:2e:95:4c:7c:d5: e2:9b:dc:e8:4b:5a:d5:6f:dc:b5:84:1e:a3:0a:a7:ef:6b:eb: 09:8c:2b:cf:c5:57:e1:a4:0d:3f:27:5a:21:d5:c1:06:cb:95: 41:a7:d0:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4ccJnOn/tLiM5OwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU3N2I1YWYtYTFiNS00ODU4LWI2MWQtZjA5ZmQ2N2Y3 Y2IzMB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MmFjODY0ODItMTE5MC00NzcxLWI2ZjAtMGZkOWEyYmY1ZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpwI8aMiIhb+akWKcJ/n1AvMzu/Y60I6yBla x0EEBvKjN1IKVPDQo01oem3qxaCh44Zv/a7mubTrcs0256G7/ctG5J6fSBhhy4II Q66ON+xMt+Fvujjxh6NDkEcZKpsHqXpD8p0pysjtkEzZHXTkPXQD/aicaW1JPYDM syq8IlgvG/CYez+lzAXomErP47f2qfIEPhFrmw6WChoSpK01UUyZUiPQkz+XhWSU sJIFRl3bUeJQKHmVkvk8Ik1CuC+zUGllIKQIemPSray4FOtmSP0z6Nu4xTvV4Qhp bEnFQhqZ/Pm/n6wBSQXfRQjCsstg9eTT6+S5MHJRFyAtB145GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3ZDvC9JiOEuHUIVUh0amBhc+ewMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3 YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlmZDY3ZjdjYjMvMTQ4YmFlMTAtNGIzYS0z NDcwLTg3YzMtNmMyMWEzNDRkNTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWU3N2I1YWYtYTFiNS00ODU4LWI2 MWQtZjA5ZmQ2N2Y3Y2IzL2FlNzdiNWFmLWExYjUtNDg1OC1iNjFkLWYwOWZkNjdm N2NiMy5jcmwwHwYDVR0jBBgwFoAUQ8bZZVYwh5KCSgXB185ho81dPhkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZTc3YjVhZi1hMWI1LTQ4NTgtYjYxZC1mMDlm ZDY3ZjdjYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz0EqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd8vFe7qwfT0iuV6snrW/fOyqP56SCiHbbsCrvxvZWXZZv9IamkeSKU Oktfh4XhJ11ZTFG1+c2/0lUUCDdAgRtZy26igBmj1TDXPXT1KGGiJtfRmSoTuJHe hsVVmBf/pmJuGzRUmQ1oZWZwxrcIaWxLQrNZK504WVHrlZ6iVHZKZfcmTgs/gKZv Q+uQInSHyH4m3riDCrIySOkrdUhCwVGrH40BwrBF0GvM2149EDL9jyj2tZFCkZo3 h5sN+p6Hli4ILiVtN5xQZ6xYpOu+BvuSVtYulUx81eKb3OhLWtVv3LWEHqMKp+9r 6wmMK8/FV+GkDT8nWiHVwQbLlUGn0A4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:19:58 2025 by rpki-client