$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/aeb59863-a3d1-30da-b760-843a670437ad.roa File: aeb59863-a3d1-30da-b760-843a670437ad.roa (raw, json) Hash identifier: medxnEnkO4b8Yh6DPBQW4ilIsPzdchnRNuY8SjL+/LY= Subject key identifier: 8A:98:82:C1:D2:1C:95:09:46:51:D7:FF:EB:9B:92:BA:F7:D5:25:87 Certificate issuer: /CN=96239d53-1062-4a21-8f97-639809abe5de Certificate serial: 010D0C9F4328584B8EACC2F9EE05608B3D792C00 Authority key identifier: D9:E0:3F:17:45:D4:86:F6:38:67:DE:31:60:C9:DD:61:C6:85:16:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/aeb59863-a3d1-30da-b760-843a670437ad.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 22933 IP address blocks: 65.255.48.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:c2:f9:ee:05:60:8b:3d:79:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96239d53-1062-4a21-8f97-639809abe5de Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=d7502442-b87a-4880-8162-4bab25802912 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1f:ff:26:18:de:6a:1e:de:08:8f:20:8e:12: e9:23:85:c1:85:38:14:ff:16:c4:f7:92:f1:33:52: 48:5f:c6:97:91:6c:07:5a:bb:c0:5b:0f:85:d5:d4: 21:ea:c0:f1:ec:bd:cb:e2:22:81:2d:e5:ff:15:4f: 45:a3:ac:b4:1d:75:12:27:40:e8:bf:8b:97:88:38: c2:cb:25:5f:93:dd:d2:74:8e:0e:30:5f:68:5b:6d: 45:dc:cb:24:c7:b0:ef:55:34:c4:77:69:5e:b4:95: 8d:0c:71:5a:2e:e4:eb:e5:0e:74:9b:e7:82:b0:4b: 55:df:02:3e:dc:ba:99:4f:17:5a:82:80:c8:da:a0: 01:d8:4c:5d:d5:dc:b9:e9:c8:49:01:a1:f1:8e:50: de:94:1a:36:41:1e:ad:0d:4b:1b:1e:44:d1:da:69: 3b:53:a1:b5:b0:ec:94:a4:c0:a2:cc:e0:89:76:12: 9f:fe:a5:e2:03:46:d8:d5:35:76:73:ee:91:17:d3: ed:21:7b:d9:40:14:01:fb:71:84:b5:e5:6f:f4:c3: 49:63:1f:30:01:d4:d7:45:17:4b:ba:54:73:f1:4f: 45:a7:71:8a:10:4d:29:c6:0b:89:28:34:59:1f:d9: 0f:89:de:9a:b3:5a:20:a0:6b:3e:1a:f5:e2:42:78: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:98:82:C1:D2:1C:95:09:46:51:D7:FF:EB:9B:92:BA:F7:D5:25:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/aeb59863-a3d1-30da-b760-843a670437ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de/96239d53-1062-4a21-8f97-639809abe5de.crl X509v3 Authority Key Identifier: keyid:D9:E0:3F:17:45:D4:86:F6:38:67:DE:31:60:C9:DD:61:C6:85:16:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/96239d53-1062-4a21-8f97-639809abe5de.cer sbgp-ipAddrBlock: critical IPv4: 65.255.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:b4:61:d4:4d:2b:19:ec:5b:68:f9:47:a0:b3:91:b0:d9:b9: ef:d3:22:eb:34:4c:23:0d:0d:17:0c:1f:e1:f4:a2:a9:3c:3f: 9b:ff:5d:4f:70:78:b5:70:69:47:1b:51:a7:1f:dd:49:c7:c9: a4:71:bb:b2:cf:e2:31:62:c0:87:65:de:04:6f:b5:93:8d:cd: ab:8b:f7:0e:c2:82:53:4c:fe:50:fb:eb:5c:bf:25:54:9b:fc: 44:c7:11:d3:a5:48:0b:0a:1d:0a:56:fe:90:f2:9e:94:ea:aa: ff:54:a5:e9:36:aa:f2:f2:cf:e8:83:5b:55:7f:2c:32:ec:41: 61:f0:3b:83:fc:c6:b3:41:dd:3b:0a:2a:b6:61:2f:7c:6a:58: 4a:a6:60:bc:6d:46:ec:9e:97:4d:6f:27:ea:a6:bc:d1:2c:f4: 2a:29:ea:14:7c:0e:31:45:37:4c:5c:90:98:9b:de:1c:37:ff: 09:fc:1a:3e:cb:d7:ce:de:c3:2a:b8:03:a6:b9:c1:ff:05:24: 6f:c2:3a:ff:8e:05:fb:30:48:84:9b:17:6c:68:c5:6f:a2:ed: 34:e8:1c:30:18:40:35:79:25:66:5f:fe:df:8f:89:a4:ab:8d: b8:85:43:fa:d3:4a:fd:3c:62:78:97:40:e0:d7:1b:d7:7c:d6: 34:9b:cc:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrML57gVgiz15LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTYyMzlkNTMtMTA2Mi00YTIxLThmOTctNjM5ODA5YWJl NWRlMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk ZDc1MDI0NDItYjg3YS00ODgwLTgxNjItNGJhYjI1ODAyOTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR//Jhjeah7eCI8gjhLpI4XBhTgU/xbE95Lx M1JIX8aXkWwHWrvAWw+F1dQh6sDx7L3L4iKBLeX/FU9Fo6y0HXUSJ0Dov4uXiDjC yyVfk93SdI4OMF9oW21F3Mskx7DvVTTEd2letJWNDHFaLuTr5Q50m+eCsEtV3wI+ 3LqZTxdagoDI2qAB2Exd1dy56chJAaHxjlDelBo2QR6tDUsbHkTR2mk7U6G1sOyU pMCizOCJdhKf/qXiA0bY1TV2c+6RF9PtIXvZQBQB+3GEteVv9MNJYx8wAdTXRRdL ulRz8U9Fp3GKEE0pxguJKDRZH9kPid6as1ogoGs+GvXiQnjoBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqYgsHSHJUJRlHX/+ubkrr31SWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85NjIz OWQ1My0xMDYyLTRhMjEtOGY5Ny02Mzk4MDlhYmU1ZGUvYWViNTk4NjMtYTNkMS0z MGRhLWI3NjAtODQzYTY3MDQzN2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTYyMzlkNTMtMTA2Mi00YTIxLThm OTctNjM5ODA5YWJlNWRlLzk2MjM5ZDUzLTEwNjItNGEyMS04Zjk3LTYzOTgwOWFi ZTVkZS5jcmwwHwYDVR0jBBgwFoAU2eA/F0XUhvY4Z94xYMndYcaFFhYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85NjIzOWQ1My0xMDYyLTRhMjEtOGY5Ny02Mzk4 MDlhYmU1ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQf8wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm0YdRNKxnsW2j5R6CzkbDZue/TIus0TCMNDRcMH+H0oqk8P5v/XU9w eLVwaUcbUacf3UnHyaRxu7LP4jFiwIdl3gRvtZONzauL9w7CglNM/lD761y/JVSb /ETHEdOlSAsKHQpW/pDynpTqqv9Upek2qvLyz+iDW1V/LDLsQWHwO4P8xrNB3TsK KrZhL3xqWEqmYLxtRuyel01vJ+qmvNEs9Cop6hR8DjFFN0xckJib3hw3/wn8Gj7L 187ewyq4A6a5wf8FJG/COv+OBfswSISbF2xoxW+i7TToHDAYQDV5JWZf/t+PiaSr jbiFQ/rTSv08YniXQODXG9d81jSbzD8= -----END CERTIFICATE-----Generated at Tue Oct 21 00:51:02 2025 by rpki-client