$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c0271d02-e45f-3dda-8c9a-2468641ab27b.roa File: c0271d02-e45f-3dda-8c9a-2468641ab27b.roa (raw, json) Hash identifier: 1SIfLbCRtFGYCLxTjQbP4ZG86t8RFC/gf2CsINj7PDo= Subject key identifier: 76:98:CC:A4:1B:7A:6F:54:89:5A:2B:1B:98:0F:54:2C:10:33:FE:E6 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B99D79F82EABAF0BD3F40C900 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c0271d02-e45f-3dda-8c9a-2468641ab27b.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 11426 IP address blocks: 158.115.236.0/23 maxlen: 23 158.115.238.0/23 maxlen: 23 207.230.100.0/23 maxlen: 23 207.230.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:9f:82:ea:ba:f0:bd:3f:40:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=5fe72180-e995-4b2a-9ba7-c3e7614b0e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1f:59:e7:ed:1f:20:12:dc:93:c2:ad:eb:87: 57:80:a6:ba:50:3a:be:86:18:12:2c:9c:a4:91:a7: c9:3f:33:af:b2:e4:ed:db:a5:09:ce:81:e4:63:a6: 53:ab:62:f3:6f:aa:e8:da:d6:05:8e:28:14:b1:e8: c9:bc:78:a5:16:10:af:f1:67:d7:d5:f7:38:ca:8e: 59:0d:12:1a:a9:41:d6:7d:7b:9d:a4:40:11:10:ec: dc:f6:f8:36:66:f5:8a:d6:13:b0:9b:f5:a4:5b:f9: 72:4e:3a:6c:e4:a4:d9:17:c8:60:94:a5:66:e7:68: 25:1d:26:7f:27:11:b3:b8:96:cd:09:3f:64:a3:84: 3e:7f:5a:c8:0d:bb:c9:35:36:52:fa:27:70:9c:d2: bb:bd:b4:e2:6d:68:8a:75:8e:c0:c7:a9:47:32:dc: 22:7c:fc:a1:fa:2f:74:2d:d3:27:ef:bc:ea:e5:81: 85:18:a5:b5:ae:bf:e7:85:e1:9c:a0:2c:a2:2a:1f: 6a:d3:93:ce:86:46:64:f9:e3:8a:ac:13:63:e9:80: 81:0b:4b:58:c8:4a:d2:f7:9c:8f:85:32:5f:16:54: 39:57:41:84:bc:4c:d5:f9:24:a3:36:a5:92:bb:23: a9:55:a5:88:60:5d:c9:10:9f:f9:6c:cf:05:19:50: 2d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:98:CC:A4:1B:7A:6F:54:89:5A:2B:1B:98:0F:54:2C:10:33:FE:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/c0271d02-e45f-3dda-8c9a-2468641ab27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.236.0/22 207.230.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:36:cf:a8:c0:f3:e2:3e:53:0e:88:a3:9d:cd:96:56:29:fd: e8:10:af:fa:bd:86:d5:e2:a3:d2:a2:56:a0:e6:8c:2e:80:f7: af:6f:19:4c:dd:aa:c7:e4:75:80:6b:1b:8a:00:8e:91:ee:4b: 50:6f:8f:d3:f3:73:04:77:f0:bc:de:89:ac:e4:98:0b:5a:f1: 3c:8d:53:72:09:36:e0:16:f8:2e:fb:08:0e:80:6a:0c:3a:6c: 41:ac:86:5a:a0:99:e5:dc:29:9f:c9:76:87:86:10:2c:d1:ff: 4f:aa:88:7e:74:fc:80:b8:33:60:19:0c:0c:4b:78:74:03:32: dc:1b:e2:cc:e4:0b:8b:14:1c:05:9c:5c:e7:89:60:86:c0:fe: 97:d3:0d:4d:d1:b5:9b:07:7f:85:b1:b2:4e:4e:7e:c2:28:0f: 44:8b:bb:81:6e:7b:4e:c3:b3:ba:e9:1c:70:38:5d:5d:1c:1d: cc:5a:ec:7c:8d:2c:26:3a:0a:31:df:ca:e0:e6:76:2d:4c:7c: 2c:2c:37:ef:cd:64:6c:49:8b:9a:be:41:55:73:e0:63:17:e2: ef:b4:8d:df:5b:21:d6:b2:ef:fe:c5:02:93:b0:0c:bb:1c:42: eb:44:8f:85:b6:ef:e4:f2:77:f6:b2:b6:c4:39:e5:b9:6a:ac: dc:8b:c9:ef -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEuZ15+C6rrwvT9AyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk NWZlNzIxODAtZTk5NS00YjJhLTliYTctYzNlNzYxNGIwZTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB9Z5+0fIBLck8Kt64dXgKa6UDq+hhgSLJyk kafJPzOvsuTt26UJzoHkY6ZTq2Lzb6ro2tYFjigUsejJvHilFhCv8WfX1fc4yo5Z DRIaqUHWfXudpEAREOzc9vg2ZvWK1hOwm/WkW/lyTjps5KTZF8hglKVm52glHSZ/ JxGzuJbNCT9ko4Q+f1rIDbvJNTZS+idwnNK7vbTibWiKdY7Ax6lHMtwifPyh+i90 LdMn77zq5YGFGKW1rr/nheGcoCyiKh9q05POhkZk+eOKrBNj6YCBC0tYyErS95yP hTJfFlQ5V0GEvEzV+SSjNqWSuyOpVaWIYF3JEJ/5bM8FGVAt8QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFHaYzKQbem9UiVorG5gPVCwQM/7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYzAyNzFkMDItZTQ1Zi0z ZGRhLThjOWEtMjQ2ODY0MWFiMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCnnPsAwQC z+ZkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAFA2z6jA8+I+Uw6Io53NllYp/egQr/q9htXio9KiVqDmjC6A 969vGUzdqsfkdYBrG4oAjpHuS1Bvj9PzcwR38LzeiazkmAta8TyNU3IJNuAW+C77 CA6Aagw6bEGshlqgmeXcKZ/JdoeGECzR/0+qiH50/IC4M2AZDAxLeHQDMtwb4szk C4sUHAWcXOeJYIbA/pfTDU3RtZsHf4Wxsk5OfsIoD0SLu4Fue07Ds7rpHHA4XV0c Hcxa7HyNLCY6CjHfyuDmdi1MfCwsN+/NZGxJi5q+QVVz4GMX4u+0jd9bIday7/7F ApOwDLscQutEj4W27+Tyd/aytsQ55blqrNyLye8= -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:28 2025 by rpki-client