$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa File: ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa (raw, json) Hash identifier: hzVtyFdusEM8bgBSvtg7zA6IPOStBiS1P/PGvwEo+HE= Subject key identifier: 64:F4:C4:ED:62:4D:DF:7F:2E:B7:B0:84:A9:E4:3B:30:8F:0F:AB:D2 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AF0F13581D4D7373EFA5FC180 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 46261 IP address blocks: 158.115.224.0/23 maxlen: 23 158.115.226.0/23 maxlen: 23 158.115.230.0/23 maxlen: 23 158.115.236.0/22 maxlen: 22 158.115.242.0/23 maxlen: 23 158.115.244.0/23 maxlen: 23 158.115.246.0/23 maxlen: 23 158.115.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:35:81:d4:d7:37:3e:fa:5f:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=9d5fe042-f7d8-4124-9e92-caac28744acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3e:51:66:a8:96:6a:e4:1f:37:f4:b7:20:d4: 10:21:d3:bb:81:e7:2a:8b:9e:91:e8:83:4c:ed:c6: 69:27:94:bd:58:7e:e6:b5:8e:4d:ca:f2:e2:12:fc: f4:66:0c:c9:8f:24:02:d0:59:f4:7b:54:a0:29:81: 37:5c:32:62:13:fe:b0:95:1f:9c:ae:81:7d:2b:bb: 97:92:33:18:9a:18:d6:55:58:0d:a1:c1:69:e5:9e: f3:b3:ed:48:bb:60:24:fc:48:ec:cb:98:94:04:ec: c2:0b:ab:f5:94:cf:99:e8:0b:ea:f3:49:61:2e:3e: bd:a9:8e:46:cb:24:c7:ab:cf:42:7b:48:ab:17:c8: 38:9e:c3:06:17:86:7f:6e:96:4c:63:0b:7f:2c:47: 4d:dc:76:47:67:e0:ab:7d:32:ae:6e:f7:3e:b9:28: 31:92:97:fd:b0:6f:66:3d:dc:90:38:f4:e8:e0:49: 3d:22:3d:5e:fe:7d:d5:77:90:bf:8b:5c:fe:82:cf: d5:c7:0c:bc:6e:7e:43:f6:c6:c4:94:09:82:6c:63: e6:35:b2:48:a0:f8:18:64:89:8b:ca:c7:f7:83:d9: e5:d8:c1:d7:16:bb:3a:ca:6f:fa:85:ee:b1:4d:00: e6:e6:59:c9:b7:8c:66:3b:cc:78:c5:77:fd:24:1a: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F4:C4:ED:62:4D:DF:7F:2E:B7:B0:84:A9:E4:3B:30:8F:0F:AB:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/ca7502c4-7f6d-3df2-86ef-b4eaab0d7073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.224.0/22 158.115.230.0/23 158.115.236.0/22 158.115.242.0-158.115.247.255 158.115.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:87:6a:06:19:48:94:b1:42:43:99:1f:bf:91:07:4a:de:d6: 80:32:43:8c:20:a7:2b:8b:c5:79:1d:34:6f:6e:3c:dd:c0:f6: 11:15:a5:b4:c3:e7:c6:35:7e:e5:50:38:64:80:37:fd:55:4b: 5e:60:97:e6:08:aa:63:d5:bb:a9:93:9a:d4:19:e2:da:46:99: 4d:ae:d1:53:65:f2:16:c7:7b:aa:e2:e7:1d:c7:3d:86:f5:1f: 9a:6c:ba:0e:af:ec:e4:c8:30:2b:fb:b8:47:34:54:f8:72:db: 95:96:f9:ef:18:c3:12:06:12:4b:6d:61:fa:bc:d7:15:29:24: 93:27:49:6e:6f:9f:d8:e7:10:0b:6d:9a:d8:ce:e2:bf:3f:9c: 63:6d:ac:51:ca:d7:f6:ff:e1:22:c1:19:4b:fa:cf:0a:64:21: f7:dc:69:37:36:86:03:3c:f8:7c:af:22:1e:31:67:e3:cc:06: 1c:e4:99:54:3d:8a:3c:87:6b:1f:40:7f:dc:bf:b7:e0:c0:fa: 80:b3:97:0d:26:30:c7:94:03:86:ad:e0:50:79:2e:dc:c2:a8: 2b:d7:94:94:bc:38:c7:29:ca:21:63:c9:15:01:fc:8b:56:82: 0b:7f:6c:a7:8e:9c:39:d7:df:48:9f:fe:ba:f2:f7:58:62:8c: a7:65:21:d6 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWErw8TWB1Nc3PvpfwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk OWQ1ZmUwNDItZjdkOC00MTI0LTllOTItY2FhYzI4NzQ0YWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj5RZqiWauQfN/S3INQQIdO7gecqi56R6INM 7cZpJ5S9WH7mtY5NyvLiEvz0ZgzJjyQC0Fn0e1SgKYE3XDJiE/6wlR+croF9K7uX kjMYmhjWVVgNocFp5Z7zs+1Iu2Ak/Ejsy5iUBOzCC6v1lM+Z6Avq80lhLj69qY5G yyTHq89Ce0irF8g4nsMGF4Z/bpZMYwt/LEdN3HZHZ+CrfTKubvc+uSgxkpf9sG9m PdyQOPTo4Ek9Ij1e/n3Vd5C/i1z+gs/Vxwy8bn5D9sbElAmCbGPmNbJIoPgYZImL ysf3g9nl2MHXFrs6ym/6he6xTQDm5lnJt4xmO8x4xXf9JBodmQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFGT0xO1iTd9/LrewhKnkOzCPD6vSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvY2E3NTAyYzQtN2Y2ZC0z ZGYyLTg2ZWYtYjRlYWFiMGQ3MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQCnnPgAwQB nnPmAwQCnnPsMAwDBAGec/IDBAOec/ADBAGec/owVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdYdqBhlIlLFC Q5kfv5EHSt7WgDJDjCCnK4vFeR00b2483cD2ERWltMPnxjV+5VA4ZIA3/VVLXmCX 5giqY9W7qZOa1Bni2kaZTa7RU2XyFsd7quLnHcc9hvUfmmy6Dq/s5MgwK/u4RzRU +HLblZb57xjDEgYSS21h+rzXFSkkkydJbm+f2OcQC22a2M7ivz+cY22sUcrX9v/h IsEZS/rPCmQh99xpNzaGAzz4fK8iHjFn48wGHOSZVD2KPIdrH0B/3L+34MD6gLOX DSYwx5QDhq3gUHku3MKoK9eUlLw4xynKIWPJFQH8i1aCC39sp46cOdffSJ/+uvL3 WGKMp2Uh1g== -----END CERTIFICATE-----Generated at Tue Nov 4 20:57:44 2025 by rpki-client