$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f7da70d1-1992-3547-a890-9973a230ea48.roa File: f7da70d1-1992-3547-a890-9973a230ea48.roa (raw, json) Hash identifier: 4zvoV5KNXUnafxPgPLbHnti52S2DKF69RvhD5OwMCYo= Subject key identifier: 10:61:48:C1:00:55:25:56:46:7E:46:BD:D2:3E:A5:8D:20:49:FB:0A Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584BBFA5A9D3E4B4FFF746B48532 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f7da70d1-1992-3547-a890-9973a230ea48.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 9009 IP address blocks: 158.115.248.0/24 maxlen: 24 158.115.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a9:d3:e4:b4:ff:f7:46:b4:85:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=4e675468-1cfe-4432-969a-89ef34dcd4c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:38:fd:28:fc:29:16:cf:bb:a3:42:bd:e3:3c: 00:52:56:42:34:28:77:ea:54:09:fb:9b:49:ca:7d: f8:17:0b:31:7f:d7:15:66:fd:c1:3a:79:70:29:e3: 82:33:51:4d:69:91:22:6d:ca:fd:1c:c8:b1:55:3f: d1:bb:f1:b8:05:74:e6:b7:9d:85:1b:b5:9b:b1:02: 9a:db:1d:3b:06:3d:57:53:71:4a:61:2a:b9:8f:60: 61:72:4b:e7:36:6c:70:df:b6:5e:6f:8a:e6:c0:ab: cb:f6:73:03:ea:c8:a1:b0:2f:9c:46:fd:a4:10:9c: 67:62:b7:db:70:63:28:97:8e:ed:bf:ac:f3:41:56: b3:90:65:f5:04:54:be:3d:1a:41:72:42:1c:43:e4: 01:78:fb:f0:27:0c:5b:9f:79:cc:a3:b3:d4:3d:53: 97:88:40:97:93:b8:15:1e:52:f3:96:55:d7:5f:6a: 5c:d9:ac:14:dc:46:81:c4:69:5b:d5:af:f3:42:22: a9:8d:c6:4c:61:e7:b7:6f:ee:40:51:6a:d3:c2:d2: f9:23:01:7f:ea:7c:ff:33:a4:f4:e2:82:b4:94:cc: e4:76:1d:96:aa:64:49:5b:e2:c6:f8:0c:78:7f:04: 7b:38:0b:f7:08:14:fc:5a:18:f2:28:06:c5:1d:1b: 10:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:61:48:C1:00:55:25:56:46:7E:46:BD:D2:3E:A5:8D:20:49:FB:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f7da70d1-1992-3547-a890-9973a230ea48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 158.115.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:3b:de:dc:71:22:f9:b3:53:7e:5d:95:64:6a:03:d9:2e:d4: db:8b:f4:0e:66:32:fc:70:af:a4:ac:4e:97:b2:69:8c:5f:b3: 5d:5d:49:81:f2:e7:42:41:96:6c:46:bc:97:e2:8e:40:41:f7: d6:1c:a3:4c:a2:ee:71:c7:b6:75:5d:68:2c:46:58:98:e2:4d: 90:ce:55:56:68:a6:e0:c0:46:bf:d5:3b:aa:a1:13:ea:1d:78: d5:11:84:a6:04:e0:50:cd:3d:cc:78:20:d7:c4:e0:16:39:33: de:7d:99:aa:d5:94:ec:fe:ca:13:a7:47:80:97:e7:a3:0d:f8: 53:58:dd:68:81:56:ff:8d:94:5b:95:f4:45:80:dd:b1:90:05: ee:4f:ce:32:1c:1f:81:65:1d:bd:bf:c4:f3:35:34:4d:58:93: 02:37:f5:65:e8:a2:d4:02:a7:f1:f3:81:f4:f0:9d:39:33:98: d4:21:80:c7:36:97:99:47:8d:3d:b2:9a:06:28:0b:c7:f2:a5: 70:a5:6e:d2:b8:04:50:5f:3e:cd:9c:50:af:49:8f:22:0a:77: b5:8e:3c:e3:a8:39:a2:96:ad:be:bd:51:8a:6a:06:ad:9b:89: 83:ae:f0:26:09:35:3e:92:42:30:2d:81:dc:a9:31:7f:43:7b: 98:24:cd:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/panT5LT/90a0hTIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk NGU2NzU0NjgtMWNmZS00NDMyLTk2OWEtODllZjM0ZGNkNGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDj9KPwpFs+7o0K94zwAUlZCNCh36lQJ+5tJ yn34Fwsxf9cVZv3BOnlwKeOCM1FNaZEibcr9HMixVT/Ru/G4BXTmt52FG7WbsQKa 2x07Bj1XU3FKYSq5j2BhckvnNmxw37Zeb4rmwKvL9nMD6sihsC+cRv2kEJxnYrfb cGMol47tv6zzQVazkGX1BFS+PRpBckIcQ+QBePvwJwxbn3nMo7PUPVOXiECXk7gV HlLzllXXX2pc2awU3EaBxGlb1a/zQiKpjcZMYee3b+5AUWrTwtL5IwF/6nz/M6T0 4oK0lMzkdh2WqmRJW+LG+Ax4fwR7OAv3CBT8WhjyKAbFHRsQPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBhSMEAVSVWRn5GvdI+pY0gSfsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZjdkYTcwZDEtMTk5Mi0z NTQ3LWE4OTAtOTk3M2EyMzBlYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnP4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAk73txxIvmzU35dlWRqA9ku1NuL9A5mMvxwr6SsTpeyaYxfs11dSYHy 50JBlmxGvJfijkBB99Yco0yi7nHHtnVdaCxGWJjiTZDOVVZopuDARr/VO6qhE+od eNURhKYE4FDNPcx4INfE4BY5M959marVlOz+yhOnR4CX56MN+FNY3WiBVv+NlFuV 9EWA3bGQBe5PzjIcH4FlHb2/xPM1NE1YkwI39WXootQCp/HzgfTwnTkzmNQhgMc2 l5lHjT2ymgYoC8fypXClbtK4BFBfPs2cUK9JjyIKd7WOPOOoOaKWrb69UYpqBq2b iYOu8CYJNT6SQjAtgdypMX9De5gkzZM= -----END CERTIFICATE-----Generated at Wed Nov 5 07:44:22 2025 by rpki-client