$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa File: aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa (raw, json) Hash identifier: vxMF393M9yXfcm2vFhQ8lq8FnfEH+xjDviEkMOm3xsM= Subject key identifier: EC:06:85:8D:0B:02:DD:65:96:E3:83:79:DF:EC:2C:66:CC:89:01:64 Certificate issuer: /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Certificate serial: 010D0C9F4328584B3DB6F6792D8C2A7530EB3000 Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 399103 IP address blocks: 192.240.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:b6:f6:79:2d:8c:2a:75:30:eb:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=f5da0366-79fa-461b-b657-d76d30de4646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:05:b8:9d:28:58:38:62:1c:4f:ac:ad:d6:7d: 28:cb:a3:67:8b:e8:3c:be:79:92:76:5a:e5:54:65: 93:dc:16:db:a9:7d:05:bd:09:0c:fc:c8:af:54:e4: fc:42:c3:4b:29:39:99:f6:7e:0d:85:cb:27:9e:80: 20:ae:53:e7:40:e1:4e:0c:80:67:91:19:15:d8:38: 26:ab:3a:1f:4c:21:1f:09:71:18:79:73:61:9f:03: b9:dc:98:0e:9c:ed:87:fd:3c:b8:54:5e:73:e0:cb: e3:71:01:79:57:20:30:d4:a2:46:6c:08:12:b6:ee: 0b:2f:b0:cc:35:a5:97:d5:54:13:28:df:bf:19:ed: 81:ae:07:c5:70:cb:af:bf:0c:da:6a:dd:f2:93:42: 63:62:ff:01:d1:c0:23:96:6d:09:f7:21:af:c7:af: f8:68:b1:ef:24:7d:a6:d6:ff:c0:20:b7:12:ad:a8: 54:b5:7f:b9:f5:91:21:d0:6a:2b:15:34:6c:92:08: 98:f0:a1:50:e9:0b:a3:82:f7:9e:a5:bf:1f:12:a7: a2:f6:c1:24:aa:33:c7:93:f5:3f:16:6a:2d:b1:9b: a4:c4:a2:14:10:1f:6b:65:6b:b3:7a:fe:d4:fd:ac: 32:90:4d:cd:e1:c3:fa:8e:86:f1:d5:83:d9:c6:9e: 13:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:06:85:8D:0B:02:DD:65:96:E3:83:79:DF:EC:2C:66:CC:89:01:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl X509v3 Authority Key Identifier: keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer sbgp-ipAddrBlock: critical IPv4: 192.240.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:18:11:b0:a0:1c:3c:b9:1c:c0:a2:04:d7:96:1e:3a:36:50: c0:29:5d:21:fa:6f:08:e4:6b:f5:8c:67:77:83:9f:95:e0:68: 82:5d:e8:6f:68:44:1a:ef:d6:c8:2a:f2:c0:5e:c9:fa:fa:54: ab:53:a6:bf:95:64:22:b4:e6:22:e7:96:12:ff:d4:68:e4:92: c0:c4:82:55:3b:20:d6:9c:7b:15:1f:d4:5a:6e:f9:22:27:30: f3:f5:6e:2d:6f:48:cb:73:39:e2:a1:25:b1:4f:bd:8f:b7:61: 9e:20:01:5c:79:a2:0e:23:24:ad:ce:14:65:b0:5e:2b:03:89: c1:fe:50:49:78:af:fe:59:1d:1a:5c:e1:b4:ee:6f:b9:cc:8a: 1e:cd:87:7a:9a:91:2e:89:1b:15:27:0b:c2:19:ba:61:08:65: ab:25:91:e4:21:d1:a3:cf:b6:6d:f9:57:3d:9a:08:0d:e4:e9: cb:65:56:f9:e6:92:d7:d7:86:ba:0d:8c:fb:6e:62:3f:17:b4: 1e:2f:11:7f:0d:9b:59:2a:15:93:25:91:71:56:a8:25:dd:73: 84:97:c1:cd:30:e7:b2:2c:4e:5a:e6:f8:8a:dc:b2:f8:6a:9e: fa:77:95:a0:51:27:4f:96:03:3d:9c:0d:39:02:a3:4e:a3:8b: 2c:cd:a5:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9tvZ5LYwqdTDrMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEwNmQxZjktMGQwNC00ODJmLWE2NjUtOGMyNzAyNjBl MmMxMB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZjVkYTAzNjYtNzlmYS00NjFiLWI2NTctZDc2ZDMwZGU0NjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAW4nShYOGIcT6yt1n0oy6Nni+g8vnmSdlrl VGWT3BbbqX0FvQkM/MivVOT8QsNLKTmZ9n4NhcsnnoAgrlPnQOFODIBnkRkV2Dgm qzofTCEfCXEYeXNhnwO53JgOnO2H/Ty4VF5z4MvjcQF5VyAw1KJGbAgStu4LL7DM NaWX1VQTKN+/Ge2BrgfFcMuvvwzaat3yk0JjYv8B0cAjlm0J9yGvx6/4aLHvJH2m 1v/AILcSrahUtX+59ZEh0GorFTRskgiY8KFQ6Qujgveepb8fEqei9sEkqjPHk/U/ FmotsZukxKIUEB9rZWuzev7U/awykE3N4cP6jobx1YPZxp4TGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwGhY0LAt1lluODed/sLGbMiQFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80YTA2 ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3MDI2MGUyYzEvYWE1ZGJhZjctOWYzNC0z YTVhLWFiZmItMzQ0NzExYzY2ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGEwNmQxZjktMGQwNC00ODJmLWE2 NjUtOGMyNzAyNjBlMmMxLzRhMDZkMWY5LTBkMDQtNDgyZi1hNjY1LThjMjcwMjYw ZTJjMS5jcmwwHwYDVR0jBBgwFoAUe0QsNGqg9PARtSeTwzdFa2qmQ+swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80YTA2ZDFmOS0wZDA0LTQ4MmYtYTY2NS04YzI3 MDI2MGUyYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPAvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcYEbCgHDy5HMCiBNeWHjo2UMApXSH6bwjka/WMZ3eDn5XgaIJd6G9o RBrv1sgq8sBeyfr6VKtTpr+VZCK05iLnlhL/1GjkksDEglU7INacexUf1Fpu+SIn MPP1bi1vSMtzOeKhJbFPvY+3YZ4gAVx5og4jJK3OFGWwXisDicH+UEl4r/5ZHRpc 4bTub7nMih7Nh3qakS6JGxUnC8IZumEIZaslkeQh0aPPtm35Vz2aCA3k6ctlVvnm ktfXhroNjPtuYj8XtB4vEX8Nm1kqFZMlkXFWqCXdc4SXwc0w57IsTlrm+Ircsvhq nvp3laBRJ0+WAz2cDTkCo06jiyzNpUI= -----END CERTIFICATE-----Generated at Wed Oct 22 05:10:11 2025 by rpki-client