$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/0cd78578-12cc-3407-963c-6ed1de118dbb.roa File: 0cd78578-12cc-3407-963c-6ed1de118dbb.roa (raw, json) Hash identifier: IIqEnnNmX3QkTgVYO00b4aeNpbGKonUx/FY1NavsMnE= Subject key identifier: FB:D5:2C:BD:98:CF:F6:48:FB:29:7E:88:5A:FF:33:CD:2B:79:09:A1 Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584BB196ABE6574EC00747E248C0 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/0cd78578-12cc-3407-963c-6ed1de118dbb.roa Signing time: Thu 30 Oct 2025 13:09:22 +0000 ROA not before: Thu 30 Oct 2025 13:09:22 +0000 ROA not after: Wed 28 Jan 2026 14:09:22 +0000 asID: 812 IP address blocks: 24.153.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:96:ab:e6:57:4e:c0:07:47:e2:48:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Oct 30 13:09:22 2025 GMT Not After : Jan 28 14:09:22 2026 GMT Subject: CN=b61e5fc0-5187-4f0f-9025-fbf0c370ab43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:4c:07:32:cc:7e:92:a5:b0:de:f1:ea:9e: 7f:f0:56:cb:bc:43:16:e1:cc:0a:ae:a6:f3:40:fa: d6:af:95:a3:ec:9b:45:bc:2d:81:2b:f6:00:57:fd: ee:17:59:62:e0:92:2a:e3:56:a9:f7:ed:c3:eb:92: aa:b5:d6:7e:5a:10:1b:1d:07:42:cf:fe:17:a8:d3: 9d:23:c6:65:ad:7d:9c:8e:8e:09:68:46:bc:56:a1: d1:18:5c:b9:09:7c:7c:ff:6f:6c:3f:3c:76:fe:3c: 89:e9:ef:36:18:e4:a7:ae:6c:43:c1:35:fe:35:0b: d8:c2:a7:d0:c6:ad:30:8a:ae:25:0f:eb:98:ef:b2: 3c:01:23:82:a9:73:d6:b4:06:11:0f:2a:e4:1d:a2: d5:55:53:68:89:25:06:8c:2d:37:59:c8:83:dd:19: d8:fb:bc:fe:14:72:8c:3c:93:39:7a:85:80:ea:63: d9:bd:eb:17:fa:a2:cc:6a:a5:fc:f7:11:bb:6e:f5: 46:34:00:fd:8b:ad:5b:32:90:e3:a9:bb:ef:2a:9d: 6b:68:df:4d:d3:8a:2c:e1:06:11:3a:0d:31:d9:47: 00:86:60:22:7d:dd:21:33:d4:f9:66:85:48:cc:a9: 38:61:8c:e5:c2:29:bf:03:2b:97:d9:f8:29:29:94: 9d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D5:2C:BD:98:CF:F6:48:FB:29:7E:88:5A:FF:33:CD:2B:79:09:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/0cd78578-12cc-3407-963c-6ed1de118dbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 24.153.0.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:af:f9:40:5a:20:b1:07:ba:4a:89:98:d1:c0:df:35:f7:0e: 49:38:53:20:9a:1a:17:04:a2:4e:92:e6:85:18:23:ae:52:2f: f3:cd:62:d5:6a:75:5a:4f:a1:14:1a:13:ac:e9:0a:e2:a2:33: 44:97:91:0b:eb:3a:06:51:af:2b:e8:2c:65:12:7d:e9:2a:28: 55:d5:36:ba:e9:1a:8d:96:0f:8c:0b:be:22:da:c1:65:d1:3b: e5:0f:cb:72:0e:f7:64:8a:c0:c1:a1:9b:08:d9:d7:57:0a:df: 03:22:38:67:70:4f:af:ec:4a:68:7f:20:8d:9d:46:a1:1f:15: bb:f8:b5:c3:52:56:6b:be:b1:58:a8:2e:21:a4:da:cc:17:25: 5e:5d:35:f4:5a:27:77:13:72:f6:c2:57:3a:01:95:3e:d3:79: 9d:12:24:ec:f5:41:54:7f:bc:9d:16:ad:1c:29:a6:38:a9:6c: 9b:3c:d9:d8:ce:4d:54:7e:83:a5:10:9a:7f:41:19:a5:fb:ed: 2f:93:cf:3f:3b:78:c2:ae:01:49:ab:3b:3f:04:d0:e5:59:ee: fc:27:e8:10:87:f8:0b:67:bd:2f:91:8d:9d:cf:0f:e8:df:92: 90:77:99:fd:a3:7a:b2:a2:c4:c2:09:9f:4b:80:ef:c1:a9:c7: 4d:50:4b:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxlqvmV07AB0fiSMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI1MTAzMDEzMDkyMloXDTI2MDEyODE0MDkyMlowLzEtMCsGA1UEAxMk YjYxZTVmYzAtNTE4Ny00ZjBmLTkwMjUtZmJmMGMzNzBhYjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPtMBzLMfpKlsN7x6p5/8FbLvEMW4cwKrqbz QPrWr5Wj7JtFvC2BK/YAV/3uF1li4JIq41ap9+3D65KqtdZ+WhAbHQdCz/4XqNOd I8ZlrX2cjo4JaEa8VqHRGFy5CXx8/29sPzx2/jyJ6e82GOSnrmxDwTX+NQvYwqfQ xq0wiq4lD+uY77I8ASOCqXPWtAYRDyrkHaLVVVNoiSUGjC03WciD3RnY+7z+FHKM PJM5eoWA6mPZvesX+qLMaqX89xG7bvVGNAD9i61bMpDjqbvvKp1raN9N04os4QYR Og0x2UcAhmAifd0hM9T5ZoVIzKk4YYzlwim/AyuX2fgpKZSdQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvVLL2Yz/ZI+yl+iFr/M80reQmhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvMGNkNzg1NzgtMTJjYy0z NDA3LTk2M2MtNmVkMWRlMTE4ZGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFGJkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmv+UBaILEHukqJmNHA3zX3Dkk4UyCaGhcEok6S5oUYI65SL/PNYtVq dVpPoRQaE6zpCuKiM0SXkQvrOgZRryvoLGUSfekqKFXVNrrpGo2WD4wLviLawWXR O+UPy3IO92SKwMGhmwjZ11cK3wMiOGdwT6/sSmh/II2dRqEfFbv4tcNSVmu+sVio LiGk2swXJV5dNfRaJ3cTcvbCVzoBlT7TeZ0SJOz1QVR/vJ0WrRwppjipbJs82djO TVR+g6UQmn9BGaX77S+Tzz87eMKuAUmrOz8E0OVZ7vwn6BCH+AtnvS+RjZ3PD+jf kpB3mf2jerKixMIJn0uA78Gpx01QS34= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:27 2025 by rpki-client