$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c1c46925-3194-311a-bf74-90ade789f982.roa File: c1c46925-3194-311a-bf74-90ade789f982.roa (raw, json) Hash identifier: 74uzXsP53TFDdClb4UNNjl1iXUlMsZ7scwA6UhFJHXI= Subject key identifier: 80:B8:4C:8C:74:8E:64:65:99:43:84:7B:C8:40:63:9F:8A:55:D0:B7 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B758C99B1CA8D3A1DBDFB6980 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c1c46925-3194-311a-bf74-90ade789f982.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 209854 IP address blocks: 207.230.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:99:b1:ca:8d:3a:1d:bd:fb:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=a4333354-89b1-4b0a-ab25-85994ca3b9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1c:40:ed:eb:63:f9:48:c2:23:5a:3f:42:1a: a7:91:4a:4d:30:b1:0e:2c:3a:ce:74:2d:43:3c:d7: 6a:83:4d:d9:47:76:b6:45:13:e7:84:bd:47:ab:7f: 4d:ae:40:95:c3:03:23:ff:ac:48:86:c4:3e:b7:77: ec:bf:25:a2:2d:e3:08:b2:96:7d:f0:65:09:09:fb: c9:8e:14:47:76:d9:5f:7d:5a:5b:5b:e5:7c:83:9b: 13:c7:1e:4b:fc:6c:0a:28:71:28:99:13:c2:ee:bb: 71:2d:93:e6:ac:f1:66:17:8b:e4:e8:7b:4d:70:34: 20:71:27:03:34:fc:0f:8d:ef:3b:70:34:ab:0d:bb: 3d:d6:9f:8a:f4:fc:04:71:f0:4a:e2:4a:1d:e4:bc: c6:f9:24:c8:6a:46:1f:4e:b4:21:40:38:a7:1d:1b: a3:68:4e:ce:82:d8:9e:3b:51:97:b9:45:eb:71:24: 1b:c5:d6:d2:66:29:16:9d:07:a7:ea:71:73:fa:0a: ed:04:6c:98:c0:3a:77:31:1e:a2:d2:73:8e:88:18: 93:6a:8e:2c:9e:6e:9f:0a:6f:d9:cb:b8:26:55:42: b0:0f:a2:66:ae:dc:db:0f:28:4a:cd:65:78:b4:ec: 42:2c:f8:fd:ff:bc:9b:9a:01:81:6f:4f:f1:e4:f5: 2c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:B8:4C:8C:74:8E:64:65:99:43:84:7B:C8:40:63:9F:8A:55:D0:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c1c46925-3194-311a-bf74-90ade789f982.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 207.230.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:bc:75:02:e2:7c:44:aa:dc:86:87:58:1a:68:43:a3:9b:1d: aa:ba:2e:55:ec:be:a5:13:03:7e:bb:2b:27:e6:b9:25:86:32: a3:cf:10:d6:e2:85:cb:45:82:ed:bc:66:3b:ae:99:49:07:60: 49:8e:43:7a:38:f0:7a:dd:66:f3:ba:26:71:c3:a1:21:e6:cb: 7f:fd:aa:a7:32:a7:ac:db:f3:25:b2:8a:9b:66:e2:c9:ff:da: b1:66:01:ee:63:29:9e:54:34:db:3c:46:1c:d9:e1:38:2d:0e: d2:ad:47:e6:1f:57:5d:25:cc:c9:7e:7e:66:fc:40:08:b2:ef: 8e:ad:c4:0e:90:82:7e:d1:4c:d0:6e:f7:cc:ab:d6:74:bb:13: 2f:3f:4e:fc:8f:63:42:7e:75:73:b3:38:65:a9:b8:53:21:8b: 0e:31:9e:e9:12:ff:4a:7b:14:84:60:09:77:ba:49:5c:ee:37: 29:62:b1:77:b4:95:e6:ca:18:e5:8d:ab:25:02:a3:b9:4a:13: 5f:f1:f9:2b:76:7f:12:6e:cc:ca:ae:72:46:63:a4:6b:ff:6b: 50:bc:ac:0b:9f:0a:02:3a:cb:69:37:39:20:cd:2c:b1:af:0f: e2:58:73:21:bf:6f:45:aa:13:3a:6a:29:0e:f5:8e:23:65:5b: e9:89:be:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJmxyo06Hb37aYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk YTQzMzMzNTQtODliMS00YjBhLWFiMjUtODU5OTRjYTNiOWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhxA7etj+UjCI1o/QhqnkUpNMLEOLDrOdC1D PNdqg03ZR3a2RRPnhL1Hq39NrkCVwwMj/6xIhsQ+t3fsvyWiLeMIspZ98GUJCfvJ jhRHdtlffVpbW+V8g5sTxx5L/GwKKHEomRPC7rtxLZPmrPFmF4vk6HtNcDQgcScD NPwPje87cDSrDbs91p+K9PwEcfBK4kod5LzG+STIakYfTrQhQDinHRujaE7Ogtie O1GXuUXrcSQbxdbSZikWnQen6nFz+grtBGyYwDp3MR6i0nOOiBiTao4snm6fCm/Z y7gmVUKwD6JmrtzbDyhKzWV4tOxCLPj9/7ybmgGBb0/x5PUshQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIC4TIx0jmRlmUOEe8hAY5+KVdC3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYzFjNDY5MjUtMzE5NC0z MTFhLWJmNzQtOTBhZGU3ODlmOTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+Z9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy8dQLifESq3IaHWBpoQ6ObHaq6LlXsvqUTA367KyfmuSWGMqPPENbi hctFgu28ZjuumUkHYEmOQ3o48HrdZvO6JnHDoSHmy3/9qqcyp6zb8yWyiptm4sn/ 2rFmAe5jKZ5UNNs8RhzZ4TgtDtKtR+YfV10lzMl+fmb8QAiy746txA6Qgn7RTNBu 98yr1nS7Ey8/TvyPY0J+dXOzOGWpuFMhiw4xnukS/0p7FIRgCXe6SVzuNylisXe0 lebKGOWNqyUCo7lKE1/x+St2fxJuzMquckZjpGv/a1C8rAufCgI6y2k3OSDNLLGv D+JYcyG/b0WqEzpqKQ71jiNlW+mJvqQ= -----END CERTIFICATE-----Generated at Sun Oct 19 17:29:55 2025 by rpki-client