$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2ba0c8-c3c4-329d-b670-cce3211e543b.roa File: aa2ba0c8-c3c4-329d-b670-cce3211e543b.roa (raw, json) Hash identifier: gMqaTyinIG9UBBM+IrrOTLd5TKQScYYE9erGNCc3p4w= Subject key identifier: 0C:81:59:7F:CE:B2:BE:4F:A8:14:51:5C:A6:E7:93:23:2E:B0:15:28 Certificate issuer: /CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Certificate serial: 010D0C9F4328584B9E07912701D628C024C525C0 Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2ba0c8-c3c4-329d-b670-cce3211e543b.roa Signing time: Thu 23 Oct 2025 13:00:38 +0000 ROA not before: Thu 23 Oct 2025 13:00:38 +0000 ROA not after: Wed 21 Jan 2026 14:00:38 +0000 asID: 30036 IP address blocks: 63.142.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9e:07:91:27:01:d6:28:c0:24:c5:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15 Validity Not Before: Oct 23 13:00:38 2025 GMT Not After : Jan 21 14:00:38 2026 GMT Subject: CN=b6ffb0a3-7142-4afd-aac6-51abf64bc820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ed:3d:cd:cd:dd:a7:41:93:81:a4:c9:89:24: dd:14:cf:3b:b9:bb:e0:8a:e4:0a:38:37:3e:a4:62: af:66:54:2f:3a:33:8d:e5:45:e7:2f:82:d6:43:c5: e0:a0:4d:08:b3:3d:a5:32:91:c3:61:6e:0c:75:9c: 11:84:33:dc:60:1e:5b:17:b9:f5:df:e8:8f:f2:34: bb:8e:31:12:2c:69:10:96:2d:4a:44:7b:e2:f4:ca: 3c:e0:43:00:7c:23:1b:36:ff:3f:e0:31:73:fd:e1: 9c:63:c5:9e:af:57:7a:77:e2:c5:1f:53:4a:78:f8: 27:96:fc:fa:27:a4:2d:c9:7d:8d:fd:f6:cb:e0:09: ce:3a:16:0d:23:87:a4:3d:76:bf:a1:87:28:77:53: 4f:a5:28:f0:ce:27:7d:9f:d5:f7:7a:e9:ca:59:6f: 91:a0:61:5f:83:9f:39:c9:e2:78:e2:62:66:bf:92: 62:a4:87:1e:ac:a0:4a:68:b5:a6:28:57:1d:31:6c: 1b:f2:b8:a4:c1:52:c1:d6:a7:9c:19:f2:b1:d0:fd: b4:3c:5e:e8:6c:ae:5e:a6:20:ca:32:24:7b:83:35: d4:ab:72:3e:e5:ad:06:0d:4a:7e:e1:cf:2c:92:0d: d2:75:b6:db:98:7a:ce:2d:ee:e0:87:30:18:92:b7: a7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:81:59:7F:CE:B2:BE:4F:A8:14:51:5C:A6:E7:93:23:2E:B0:15:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/aa2ba0c8-c3c4-329d-b670-cce3211e543b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl X509v3 Authority Key Identifier: keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer sbgp-ipAddrBlock: critical IPv4: 63.142.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:99:21:94:9d:64:a5:79:21:50:71:94:61:a2:d6:25:a6:0d: 49:77:47:61:58:cd:83:b0:f0:fc:62:e3:cb:6f:aa:c4:b8:bc: d5:03:67:5a:3d:a9:80:76:d3:b4:98:9a:fc:68:40:e2:cd:63: c4:c0:d1:43:55:a6:fe:9b:71:79:0b:17:71:79:67:77:b7:1a: 90:57:a8:e6:83:fe:59:d3:b8:58:5a:6f:4c:ff:03:bf:9f:46: e6:2b:e2:4e:bc:ad:5c:a9:40:f6:b6:8a:a1:9e:82:7d:36:b1: b4:a4:93:32:5f:1c:40:3d:93:d4:a2:00:28:38:cf:f3:4c:45: 37:17:22:89:09:26:2b:ec:b2:b9:32:d6:57:40:75:eb:03:11: b3:be:91:6d:11:23:46:f7:82:01:49:af:27:bf:d9:c5:ab:74: c2:a6:65:15:c0:4f:2f:ea:4b:5f:f7:a2:a5:bc:d1:74:ac:f6: 2d:61:29:ba:e6:97:ac:2f:fe:5c:06:57:9e:e8:1e:ad:e7:66: 5d:48:f4:4a:2f:65:34:81:49:da:02:30:c4:3b:af:c9:47:e4: c3:b3:22:6f:aa:03:ef:38:d6:56:46:25:33:56:42:e2:c1:a6: cf:71:2c:e9:91:12:0c:fe:71:da:92:15:76:ba:46:7f:d1:98: 12:b9:7f:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEueB5EnAdYowCTFJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5 YTE1MB4XDTI1MTAyMzEzMDAzOFoXDTI2MDEyMTE0MDAzOFowLzEtMCsGA1UEAxMk YjZmZmIwYTMtNzE0Mi00YWZkLWFhYzYtNTFhYmY2NGJjODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO09zc3dp0GTgaTJiSTdFM87ubvgiuQKODc+ pGKvZlQvOjON5UXnL4LWQ8XgoE0Isz2lMpHDYW4MdZwRhDPcYB5bF7n13+iP8jS7 jjESLGkQli1KRHvi9Mo84EMAfCMbNv8/4DFz/eGcY8Wer1d6d+LFH1NKePgnlvz6 J6QtyX2N/fbL4AnOOhYNI4ekPXa/oYcod1NPpSjwzid9n9X3eunKWW+RoGFfg585 yeJ44mJmv5JipIcerKBKaLWmKFcdMWwb8rikwVLB1qecGfKx0P20PF7obK5epiDK MiR7gzXUq3I+5a0GDUp+4c8skg3SdbbbmHrOLe7ghzAYkrenWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyBWX/Osr5PqBRRXKbnkyMusBUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvYWEyYmEwYzgtYzNjNC0z MjlkLWI2NzAtY2NlMzIxMWU1NDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4 OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3 NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP44nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeZIZSdZKV5IVBxlGGi1iWmDUl3R2FYzYOw8Pxi48tvqsS4vNUDZ1o9 qYB207SYmvxoQOLNY8TA0UNVpv6bcXkLF3F5Z3e3GpBXqOaD/lnTuFhab0z/A7+f RuYr4k68rVypQPa2iqGegn02sbSkkzJfHEA9k9SiACg4z/NMRTcXIokJJivssrky 1ldAdesDEbO+kW0RI0b3ggFJrye/2cWrdMKmZRXATy/qS1/3oqW80XSs9i1hKbrm l6wv/lwGV57oHq3nZl1I9EovZTSBSdoCMMQ7r8lH5MOzIm+qA+841lZGJTNWQuLB ps9xLOmREgz+cdqSFXa6Rn/RmBK5f0U= -----END CERTIFICATE-----Generated at Tue Nov 4 21:23:26 2025 by rpki-client