$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/03b32a0e-8e9a-390d-a60e-04c0225aabf1.roa File: 03b32a0e-8e9a-390d-a60e-04c0225aabf1.roa (raw, json) Hash identifier: I+YaJLecqRaCIznzoZbvTO8NLXAybteg17D4A1+7/+A= Subject key identifier: EC:51:39:5A:71:7E:B1:2C:76:7D:BD:6C:2F:7A:16:3F:0B:56:22:4E Certificate issuer: /CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Certificate serial: 010D0C9F4328584B25FC3B1342C909827C2C56D0 Authority key identifier: A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/03b32a0e-8e9a-390d-a60e-04c0225aabf1.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 59 IP address blocks: 198.133.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:3b:13:42:c9:09:82:7c:2c:56:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa899632-aef6-4a3b-b807-edc1ca4303b6 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=665414ac-6636-427c-abfd-9b910a6eaa3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a9:5f:26:9b:b5:4d:25:85:7c:f3:1d:81:de: 61:74:cc:a3:3f:d2:6d:ef:b6:4c:36:3b:2b:ec:96: 1b:03:a9:0a:09:91:64:97:06:a7:37:58:65:29:8b: 22:7c:14:07:09:45:72:18:7f:dc:2c:05:25:e7:2f: 1d:53:8d:54:cf:ed:fd:29:32:70:77:38:f4:91:20: ce:66:42:0f:00:0d:51:16:db:31:e9:28:80:7d:46: d5:b7:9f:b2:d5:2d:1e:18:3a:0f:db:3a:f2:59:ac: f3:de:76:9a:52:08:38:70:33:6c:31:ae:d4:8f:6b: bd:84:33:06:9d:9e:02:7c:ff:32:72:ea:1d:b7:20: 47:f9:f8:5a:78:b6:6e:ad:24:43:f4:78:a1:9d:9c: 9b:af:0b:e2:64:dc:f0:db:6d:e9:b4:d9:c2:a5:0f: 03:fe:98:40:93:f8:aa:cd:b6:f1:b5:89:eb:47:8d: 73:c6:e1:92:95:46:36:e9:bf:67:7b:d4:28:f0:5c: 6f:82:d4:5c:8a:1c:61:60:a7:1f:c8:ad:1e:53:7b: 67:7f:a1:16:31:26:14:d7:c0:b1:e9:66:51:bd:ce: 75:af:1b:2a:8e:7d:55:d3:08:43:f2:2e:f4:59:a1: 55:c8:60:90:bf:8b:4c:00:68:20:bf:32:b0:62:f9: 2c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:51:39:5A:71:7E:B1:2C:76:7D:BD:6C:2F:7A:16:3F:0B:56:22:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/03b32a0e-8e9a-390d-a60e-04c0225aabf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6/aa899632-aef6-4a3b-b807-edc1ca4303b6.crl X509v3 Authority Key Identifier: keyid:A3:C0:2A:63:A2:78:54:B6:D0:E4:50:4D:89:68:EE:BA:7B:0D:57:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aa899632-aef6-4a3b-b807-edc1ca4303b6.cer sbgp-ipAddrBlock: critical IPv4: 198.133.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:cc:ba:b2:c7:c6:06:4f:d1:2d:4c:bc:46:5b:c3:da:81:27: 95:5c:26:19:6a:87:8f:02:5b:5b:6c:6c:75:51:c6:06:b2:18: 02:62:b7:d6:d2:88:a3:c5:19:32:d7:c9:fa:46:2e:29:3b:a1: 77:aa:0e:67:7e:22:c0:7b:4f:3a:76:ae:04:7f:9d:3d:4a:d3: c6:f1:e8:e7:0f:69:b2:61:42:f1:f4:90:d6:ae:64:a3:2d:4e: 0d:55:89:79:12:0c:9c:df:31:06:47:02:7c:25:84:57:28:d0: f0:72:1c:76:fb:c1:ea:a3:72:8a:72:00:c7:52:7c:10:0f:18: 39:dd:6c:70:76:9a:29:db:78:96:95:b5:27:ab:44:5b:b5:9f: f0:39:1b:c0:94:05:35:5d:f9:e6:5c:7a:0d:2a:41:c4:31:41: d9:50:de:96:29:02:c5:0d:b1:ab:52:8d:54:5e:ca:e6:68:34: ae:60:3a:98:d5:8b:4d:14:ac:f6:8d:5a:88:b9:82:db:c2:75: 04:00:a4:34:36:f4:d2:77:02:a3:47:d6:ce:a2:a4:a6:d2:8b: 83:21:a0:1d:6d:00:f5:d7:92:16:85:9c:36:cb:3f:f7:47:df: ab:a4:d2:1e:d9:36:12:f1:b9:27:f0:91:a3:70:07:3d:fc:d0: c1:f5:9a:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/DsTQskJgnwsVtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE4OTk2MzItYWVmNi00YTNiLWI4MDctZWRjMWNhNDMw M2I2MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NjY1NDE0YWMtNjYzNi00MjdjLWFiZmQtOWI5MTBhNmVhYTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06lfJpu1TSWFfPMdgd5hdMyjP9Jt77ZMNjsr 7JYbA6kKCZFklwanN1hlKYsifBQHCUVyGH/cLAUl5y8dU41Uz+39KTJwdzj0kSDO ZkIPAA1RFtsx6SiAfUbVt5+y1S0eGDoP2zryWazz3naaUgg4cDNsMa7Uj2u9hDMG nZ4CfP8ycuodtyBH+fhaeLZurSRD9HihnZybrwviZNzw223ptNnCpQ8D/phAk/iq zbbxtYnrR41zxuGSlUY26b9ne9Qo8FxvgtRcihxhYKcfyK0eU3tnf6EWMSYU18Cx 6WZRvc51rxsqjn1V0whD8i70WaFVyGCQv4tMAGggvzKwYvksdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxROVpxfrEsdn29bC96Fj8LViJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5 OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMxY2E0MzAzYjYvMDNiMzJhMGUtOGU5YS0z OTBkLWE2MGUtMDRjMDIyNWFhYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWE4OTk2MzItYWVmNi00YTNiLWI4 MDctZWRjMWNhNDMwM2I2L2FhODk5NjMyLWFlZjYtNGEzYi1iODA3LWVkYzFjYTQz MDNiNi5jcmwwHwYDVR0jBBgwFoAUo8AqY6J4VLbQ5FBNiWjuunsNV40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYTg5OTYzMi1hZWY2LTRhM2ItYjgwNy1lZGMx Y2E0MzAzYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxoXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzMurLHxgZP0S1MvEZbw9qBJ5VcJhlqh48CW1tsbHVRxgayGAJit9bS iKPFGTLXyfpGLik7oXeqDmd+IsB7Tzp2rgR/nT1K08bx6OcPabJhQvH0kNauZKMt Tg1ViXkSDJzfMQZHAnwlhFco0PByHHb7weqjcopyAMdSfBAPGDndbHB2minbeJaV tSerRFu1n/A5G8CUBTVd+eZceg0qQcQxQdlQ3pYpAsUNsatSjVReyuZoNK5gOpjV i00UrPaNWoi5gtvCdQQApDQ29NJ3AqNH1s6ipKbSi4MhoB1tAPXXkhaFnDbLP/dH 36uk0h7ZNhLxuSfwkaNwBz380MH1mp8= -----END CERTIFICATE-----Generated at Wed Nov 5 13:50:33 2025 by rpki-client