$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa File: a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa (raw, json) Hash identifier: g2wUs98oS+hfg/NzOwzXkheqzorI+OKlgLi9jxDYka4= Subject key identifier: 41:AE:DA:38:11:D9:DD:F3:1C:FD:80:DD:75:29:E8:44:0A:42:34:05 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AF0F13AD8FB48A332833447C0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 9009 IP address blocks: 158.115.232.0/24 maxlen: 24 158.115.233.0/24 maxlen: 24 158.115.234.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3a:d8:fb:48:a3:32:83:34:47:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=95907bdf-4056-46f4-99cf-e7d844ffd92d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cb:38:03:00:86:ca:7b:24:d7:56:f4:ac:cb: c1:33:c2:3c:a0:44:5e:8f:7f:91:6c:8a:ca:86:e6: 17:23:19:1e:fd:cc:dd:bf:35:31:d0:9e:d1:34:27: 1c:bb:7d:11:93:fa:8c:34:a4:f1:1a:83:ab:cb:49: 76:76:1c:2d:eb:9b:ed:b6:a0:95:03:a0:67:a1:8d: 54:57:46:8d:00:8a:39:94:4e:0c:1f:69:9d:41:21: 8b:ae:9a:4b:0b:eb:6b:31:87:45:c6:12:ea:c9:33: 0b:d9:75:dc:b3:84:26:c3:93:e0:02:f6:56:5a:42: 54:24:9c:71:b2:c7:1a:5a:c5:fa:83:eb:f7:df:52: 9e:fa:0e:2f:be:0e:12:33:9d:e7:c6:96:eb:89:1b: 50:21:1a:18:e3:73:b6:84:e2:d1:00:6d:d7:0f:26: cc:8f:0c:26:ba:6e:e1:3f:ca:f1:2e:46:35:94:02: 33:69:a5:94:e3:f8:3f:f6:6c:e9:28:0e:40:07:94: 59:3f:70:61:a3:ea:19:a3:26:94:76:9d:19:52:12: 73:fd:03:9c:d3:f3:9e:2f:f8:bc:2b:f8:f7:65:b4: b5:65:4a:9e:b8:5d:43:9b:4c:bc:71:c3:88:4c:8d: d7:70:ba:7e:94:74:95:6e:86:22:e5:7e:8d:3a:df: 8e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:AE:DA:38:11:D9:DD:F3:1C:FD:80:DD:75:29:E8:44:0A:42:34:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4f4dfbb-438b-39fb-98db-aed5cbd0c9c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.232.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d3:a9:f7:60:b4:7f:96:36:63:bc:d9:0a:e3:37:19:cc:94: d9:77:8e:73:ff:5d:7b:a2:35:5f:50:16:74:1b:7e:19:6c:67: 41:e0:81:7e:e1:03:6b:26:ca:91:a2:02:95:33:b2:fe:50:fc: 06:c0:5b:6a:50:6d:0f:7f:8e:8e:bf:db:f3:e5:19:52:28:43: 5f:fa:ad:bb:45:25:0f:48:bc:94:68:1b:0f:db:f5:cc:30:55: 71:04:17:1a:9e:6b:28:53:a7:64:04:d3:6f:7f:0a:9b:d3:8f: d7:39:59:f0:9d:76:f6:3d:77:4d:06:ca:e7:cb:b5:5a:c4:4d: 5e:7e:3a:20:38:97:dc:ef:f4:ba:d9:f3:d0:1e:dd:aa:b8:df: 27:19:50:4e:a1:c7:48:38:51:b3:85:46:92:dc:a5:83:e9:ca: 9d:e1:c3:17:a7:b9:dd:88:6c:a2:27:47:51:bf:36:1e:73:fb: ba:7b:bc:eb:04:1b:03:8b:b0:57:b0:96:24:8b:82:59:a4:f9: 9c:8d:59:4f:aa:0e:9e:34:50:f5:dc:27:02:45:13:6f:0b:fd: 69:ec:45:05:da:46:f6:17:1c:24:d7:56:c6:86:b8:62:aa:e7: ed:20:59:f8:44:e8:a9:12:a2:e3:e0:d3:e8:47:fd:ba:7c:f2: 59:9b:6a:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TrY+0ijMoM0R8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OTU5MDdiZGYtNDA1Ni00NmY0LTk5Y2YtZTdkODQ0ZmZkOTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8s4AwCGynsk11b0rMvBM8I8oERej3+RbIrK huYXIxke/czdvzUx0J7RNCccu30Rk/qMNKTxGoOry0l2dhwt65vttqCVA6BnoY1U V0aNAIo5lE4MH2mdQSGLrppLC+trMYdFxhLqyTML2XXcs4Qmw5PgAvZWWkJUJJxx sscaWsX6g+v331Ke+g4vvg4SM53nxpbriRtQIRoY43O2hOLRAG3XDybMjwwmum7h P8rxLkY1lAIzaaWU4/g/9mzpKA5AB5RZP3Bho+oZoyaUdp0ZUhJz/QOc0/OeL/i8 K/j3ZbS1ZUqeuF1Dm0y8ccOITI3XcLp+lHSVboYi5X6NOt+OlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGu2jgR2d3zHP2A3XUp6EQKQjQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYTRmNGRmYmItNDM4Yi0z OWZiLTk4ZGItYWVkNWNiZDBjOWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnnPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvTqfdgtH+WNmO82QrjNxnMlNl3jnP/XXuiNV9QFnQbfhlsZ0HggX7h A2smypGiApUzsv5Q/AbAW2pQbQ9/jo6/2/PlGVIoQ1/6rbtFJQ9IvJRoGw/b9cww VXEEFxqeayhTp2QE029/CpvTj9c5WfCddvY9d00GyufLtVrETV5+OiA4l9zv9LrZ 89Ae3aq43ycZUE6hx0g4UbOFRpLcpYPpyp3hwxenud2IbKInR1G/Nh5z+7p7vOsE GwOLsFewliSLglmk+ZyNWU+qDp40UPXcJwJFE28L/WnsRQXaRvYXHCTXVsaGuGKq 5+0gWfhE6KkSouPg0+hH/bp88lmbasw= -----END CERTIFICATE-----Generated at Sat Aug 23 10:10:24 2025 by rpki-client