$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa File: ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa (raw, json) Hash identifier: WQP0333LWBo3JU6rYUj2jMeH/02lTEo7oVfm+zBLeVo= Subject key identifier: 4F:02:48:1C:B6:F7:7E:AE:5D:19:14:C1:F9:71:65:75:66:4D:05:08 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584B821CD802F1E68594A6F3EA40 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 46687 IP address blocks: 24.245.112.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:d8:02:f1:e6:85:94:a6:f3:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=ef3d6a79-6d8d-4874-8f39-ac8b036f5a2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b8:a6:d7:a5:f2:1b:d3:3d:8b:0d:5e:80:c8: 84:80:12:8e:68:a0:3f:18:f1:88:b2:83:9d:36:1e: a3:69:9e:7d:f5:39:17:25:d2:e1:b8:82:52:e5:85: b2:88:8b:7c:28:ae:72:9c:44:4b:b4:e2:b0:64:86: a8:17:ac:67:ef:c6:28:fa:1b:fe:9c:5a:61:90:87: 99:c7:4c:b4:41:31:37:3c:a1:f9:d4:33:07:bf:08: 35:22:0e:4c:7e:53:dd:3e:8b:a7:3e:40:f5:40:24: 09:63:19:39:36:28:36:e9:5c:95:16:d6:3e:28:be: e2:56:81:2c:76:9a:e2:da:8c:57:bf:f9:2a:dc:37: 5e:8b:82:f6:bd:2e:85:c4:04:0c:64:60:ff:50:3e: 7c:25:79:d9:b7:ae:f4:27:55:42:80:2e:cf:c1:d5: 6a:dd:5e:15:e3:7a:07:bb:92:0d:04:62:80:cf:f3: af:3f:ff:63:3c:fd:8d:db:c5:d8:61:09:f0:64:9a: 45:a4:c4:18:24:22:9c:6e:44:32:e4:a7:be:ab:0d: dd:64:89:5a:f5:57:89:f0:71:ce:85:c1:fc:5a:18: 4f:f8:05:00:c4:69:25:e1:78:fc:8a:a2:c4:b2:69: 8b:18:13:a8:3b:54:60:95:af:3e:0f:08:1e:02:5e: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:02:48:1C:B6:F7:7E:AE:5D:19:14:C1:F9:71:65:75:66:4D:05:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 24.245.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:71:1c:c0:c4:ff:91:89:83:9b:dc:77:e0:45:15:58:a1:91: 0f:ba:10:39:8b:cd:a9:6c:67:0d:46:bd:80:e1:77:1c:b3:a1: b8:de:18:4a:54:c9:c9:b0:26:b5:d0:06:c3:d1:d6:07:b4:55: 0c:ae:6c:ab:50:85:cc:25:93:c7:ea:71:6d:08:29:64:9a:9f: cc:9a:ab:90:4d:1f:12:16:2b:16:49:5c:39:b3:fe:51:84:ad: a7:3d:97:d5:a4:03:a0:46:d9:1e:de:28:19:10:9e:b1:1c:15: cb:bb:24:f1:31:fb:76:7e:ae:ba:18:76:b6:06:1f:e8:8f:c8: ab:41:45:0b:3a:ce:da:af:03:dc:d7:aa:58:35:ba:75:44:f4: 6e:29:14:28:22:0c:0f:a3:0b:f3:05:5f:5d:8e:64:3d:db:41: d5:81:e0:3d:e0:dd:e3:b8:51:5b:62:a8:a1:41:b7:c1:6e:c6: 96:23:2c:00:fc:b4:ee:10:79:9c:15:a5:8f:4d:90:b2:35:6d: a6:a7:05:f8:71:c3:2d:f2:fb:9c:f2:6e:36:7c:e4:31:00:1f: f1:4b:aa:c7:8d:8e:b7:97:ad:c2:46:37:bc:51:fc:48:e1:28: 7f:56:d2:15:36:fe:7b:fb:54:1c:a8:91:7c:c9:5e:1d:d4:2d: b2:37:7b:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHNgC8eaFlKbz6kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk ZWYzZDZhNzktNmQ4ZC00ODc0LThmMzktYWM4YjAzNmY1YTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLim16XyG9M9iw1egMiEgBKOaKA/GPGIsoOd Nh6jaZ599TkXJdLhuIJS5YWyiIt8KK5ynERLtOKwZIaoF6xn78Yo+hv+nFphkIeZ x0y0QTE3PKH51DMHvwg1Ig5MflPdPounPkD1QCQJYxk5Nig26VyVFtY+KL7iVoEs dpri2oxXv/kq3Ddei4L2vS6FxAQMZGD/UD58JXnZt670J1VCgC7PwdVq3V4V43oH u5INBGKAz/OvP/9jPP2N28XYYQnwZJpFpMQYJCKcbkQy5Ke+qw3dZIla9VeJ8HHO hcH8WhhP+AUAxGkl4Xj8iqLEsmmLGBOoO1Rgla8+DwgeAl4HyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8CSBy2936uXRkUwflxZXVmTQUIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvYWIxMDQ0YTgtOWIwMS0z YzFmLTgzN2ItMzljYmQyZDZiOTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPVwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5xHMDE/5GJg5vcd+BFFVihkQ+6EDmLzalsZw1GvYDhdxyzobjeGEpU ycmwJrXQBsPR1ge0VQyubKtQhcwlk8fqcW0IKWSan8yaq5BNHxIWKxZJXDmz/lGE rac9l9WkA6BG2R7eKBkQnrEcFcu7JPEx+3Z+rroYdrYGH+iPyKtBRQs6ztqvA9zX qlg1unVE9G4pFCgiDA+jC/MFX12OZD3bQdWB4D3g3eO4UVtiqKFBt8FuxpYjLAD8 tO4QeZwVpY9NkLI1baanBfhxwy3y+5zybjZ85DEAH/FLqseNjreXrcJGN7xR/Ejh KH9W0hU2/nv7VByokXzJXh3ULbI3e1A= -----END CERTIFICATE-----Generated at Mon Oct 20 11:05:16 2025 by rpki-client