$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa File: 857207aa-33ba-3517-ba92-dbeae756a93f.roa (raw, json) Hash identifier: MPFUPvHwM7fa0yYToiBe6J5GHCysUCy1PBtzC28XCGo= Subject key identifier: 2D:83:36:FF:C9:A6:53:77:E2:2B:4A:A1:B4:ED:8D:91:9D:B6:87:58 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584BA0D25C225BF3A85B4BACCEE0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 212238 IP address blocks: 158.115.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:5c:22:5b:f3:a8:5b:4b:ac:ce:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=bbde58ac-f133-44a1-878b-63baec6cc854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:91:ff:7e:e1:d4:ac:91:9f:7c:92:41:24:3a: 37:88:85:40:b9:0e:62:bf:88:c4:e2:65:3a:a5:10: 19:0d:a2:93:87:48:62:24:23:d4:40:c7:1d:55:c2: c2:60:83:88:6f:d3:33:81:66:ac:fe:b5:12:8d:df: 26:26:31:50:3e:00:b5:f4:5d:5a:dc:3a:d5:04:4e: ec:c0:ad:01:43:21:f9:b7:c3:8c:55:0d:84:b0:88: 17:67:ec:f3:c4:d7:d9:3c:cf:2f:d2:8a:df:cb:f9: 9b:57:67:da:97:54:d2:72:5f:20:be:ae:06:e6:da: 8c:7d:7d:d6:c1:60:43:83:e4:5a:29:e4:27:e9:b5: e9:24:8f:ed:43:9e:0f:53:76:57:fb:b5:c0:c0:dc: 59:07:f3:8b:70:5a:f0:fd:1a:12:5c:c7:05:3e:12: 7e:f3:ff:bc:75:3c:e2:e3:e5:e7:39:1c:ce:53:21: 43:99:81:0d:c3:3f:8f:e7:2b:88:11:8e:4f:a9:e3: b7:f6:44:0b:56:49:41:82:17:92:02:13:a5:89:f9: 6b:c3:61:d6:7e:3d:86:2b:4f:54:e8:a3:87:57:af: 0d:a1:f9:98:3a:ea:bf:b2:73:b4:7e:d9:95:74:bc: d9:b4:9e:42:82:f7:06:56:35:62:80:25:73:9b:30: 71:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:83:36:FF:C9:A6:53:77:E2:2B:4A:A1:B4:ED:8D:91:9D:B6:87:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/857207aa-33ba-3517-ba92-dbeae756a93f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a0:72:80:6d:ce:ad:f0:14:6f:d7:91:7e:ae:5e:51:ea:f4: 3c:7f:24:4d:19:fd:bc:ff:0e:99:aa:b8:e7:d9:74:07:71:b8: 54:c1:3d:a7:59:59:74:3f:3a:04:61:ee:8c:86:d0:bb:2d:ba: b1:73:07:82:b9:de:e1:ef:31:64:5a:ca:79:cd:ff:8c:a9:22: ef:1a:3a:65:0c:8d:24:6f:9e:48:98:3a:b9:c6:85:fe:03:03: 8d:10:3c:89:a3:51:17:61:43:12:5a:7f:30:98:46:8a:77:ce: d6:86:48:9a:ae:9d:8e:a2:8a:bc:c4:96:ea:84:e3:aa:b9:62: 37:31:be:9f:0b:2c:36:7e:d9:bb:2b:02:a2:ca:eb:02:ae:31: 49:65:73:7a:a2:e0:65:8f:e4:e9:82:4b:23:a8:9f:3f:65:57: 93:f4:15:ec:fa:73:9b:b3:f9:0e:f2:9c:8e:8b:e0:cc:8f:b4: 20:44:c2:58:ec:13:0a:f5:0e:97:f8:82:69:19:2d:d1:dc:17: a2:f5:3f:de:6c:a8:4c:00:8f:3b:69:87:b3:05:7c:bb:33:77: ca:24:d7:15:d6:d2:96:25:4d:eb:f6:47:62:8a:ac:d9:9c:d3: d5:43:bd:43:cd:bd:a3:8b:d5:94:a6:77:0b:17:16:d7:9b:a7: 43:3c:9c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0lwiW/OoW0uszuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk YmJkZTU4YWMtZjEzMy00NGExLTg3OGItNjNiYWVjNmNjODU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJH/fuHUrJGffJJBJDo3iIVAuQ5iv4jE4mU6 pRAZDaKTh0hiJCPUQMcdVcLCYIOIb9MzgWas/rUSjd8mJjFQPgC19F1a3DrVBE7s wK0BQyH5t8OMVQ2EsIgXZ+zzxNfZPM8v0orfy/mbV2fal1TScl8gvq4G5tqMfX3W wWBDg+RaKeQn6bXpJI/tQ54PU3ZX+7XAwNxZB/OLcFrw/RoSXMcFPhJ+8/+8dTzi 4+XnORzOUyFDmYENwz+P5yuIEY5PqeO39kQLVklBgheSAhOliflrw2HWfj2GK09U 6KOHV68NofmYOuq/snO0ftmVdLzZtJ5CgvcGVjVigCVzmzBx1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2DNv/JplN34itKobTtjZGdtodYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvODU3MjA3YWEtMzNiYS0z NTE3LWJhOTItZGJlYWU3NTZhOTNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnnP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIugcoBtzq3wFG/XkX6uXlHq9Dx/JE0Z/bz/DpmquOfZdAdxuFTBPadZ WXQ/OgRh7oyG0LsturFzB4K53uHvMWRaynnN/4ypIu8aOmUMjSRvnkiYOrnGhf4D A40QPImjURdhQxJafzCYRop3ztaGSJqunY6iirzEluqE46q5Yjcxvp8LLDZ+2bsr AqLK6wKuMUllc3qi4GWP5OmCSyOonz9lV5P0Fez6c5uz+Q7ynI6L4MyPtCBEwljs Ewr1Dpf4gmkZLdHcF6L1P95sqEwAjztph7MFfLszd8ok1xXW0pYlTev2R2KKrNmc 09VDvUPNvaOL1ZSmdwsXFtebp0M8nPI= -----END CERTIFICATE-----Generated at Wed Nov 5 20:47:51 2025 by rpki-client