$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/39ddc6b9-a433-360e-8672-ec63693e7e71.roa File: 39ddc6b9-a433-360e-8672-ec63693e7e71.roa (raw, json) Hash identifier: f7HqesY8VVrMeu3GR9BtqnRJXiFnMzgvAxCh1euCXKQ= Subject key identifier: 65:25:45:CD:35:EB:91:D1:D8:81:A9:D1:B0:E2:D9:73:2E:1D:9C:D5 Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584BB1B7DE3469088ABAAD486200 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/39ddc6b9-a433-360e-8672-ec63693e7e71.roa Signing time: Thu 30 Oct 2025 14:16:15 +0000 ROA not before: Thu 30 Oct 2025 14:16:15 +0000 ROA not after: Wed 28 Jan 2026 15:16:15 +0000 asID: 812 IP address blocks: 69.63.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:b7:de:34:69:08:8a:ba:ad:48:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Oct 30 14:16:15 2025 GMT Not After : Jan 28 15:16:15 2026 GMT Subject: CN=f60da710-19d0-4eb9-86b0-290f547c8d70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:73:86:0d:e0:7f:c1:c0:4a:7f:f5:07:22: e0:6d:50:b9:60:55:58:9f:8a:df:66:e9:c2:b4:53: 85:fe:58:9b:89:bb:0d:a6:34:4e:2e:7f:a6:cb:3b: 9c:1a:35:fd:40:07:59:42:54:19:31:ae:e1:e1:c5: aa:36:34:2f:33:a1:eb:ba:2d:bc:51:50:bc:54:63: 82:f5:34:38:9e:c8:fd:f6:26:fb:ea:09:83:f2:c7: 31:42:29:bb:d8:1f:f2:d0:4b:22:cf:2a:22:e0:2a: 3f:4c:79:89:6e:38:c9:ec:78:c4:df:39:2a:b1:d2: 6a:92:c2:0c:76:ce:6f:6d:44:f6:06:62:cb:b7:6e: 7a:69:97:81:87:29:05:9c:42:da:78:17:36:89:13: 96:84:bc:fd:d4:ed:8e:81:b0:03:02:08:c1:3d:32: c7:37:4f:46:c0:26:3c:a5:21:1b:45:b7:f4:d6:14: ec:28:fc:d3:1f:64:7d:bb:e7:41:43:17:57:02:cf: 82:32:f4:6a:3e:4b:d8:92:45:43:7d:ab:02:06:8b: 9e:c5:90:5a:b1:23:f9:fb:08:f1:68:7f:52:89:98: c9:be:50:1c:b6:6b:20:a0:c4:e9:c7:a2:4d:60:7b: bc:06:67:55:02:f1:16:be:6d:c7:6a:96:bf:1d:5c: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:25:45:CD:35:EB:91:D1:D8:81:A9:D1:B0:E2:D9:73:2E:1D:9C:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/39ddc6b9-a433-360e-8672-ec63693e7e71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 69.63.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:85:37:eb:18:00:66:3b:1f:a1:0b:7e:8a:aa:f2:97:fc:3b: 07:92:6d:55:75:49:7f:09:d6:14:d4:16:b7:54:30:a5:bc:91: 0c:69:04:71:8b:50:ea:a0:9a:72:86:c9:10:98:fb:66:6a:30: fa:2d:10:9b:96:f7:92:86:ad:4e:8c:f1:dd:53:7a:07:c4:a2: ca:0e:d1:e7:b9:19:e5:2e:8a:10:3a:0f:a2:76:4d:0d:71:23: 8b:9d:80:86:bd:06:05:40:08:88:67:3a:03:26:fc:ed:12:cc: 33:37:65:e7:d2:b9:0d:ed:af:d2:d2:eb:7a:fc:c2:5e:26:2e: c8:1c:96:b0:5f:a4:6f:7b:4e:d5:30:46:3a:3f:32:d7:4a:e1: ca:42:0c:96:fd:f3:18:6f:c0:be:a7:c9:a4:9c:16:94:b7:63: 1b:03:2b:a3:ae:bb:29:52:b3:26:3f:5b:d5:de:ba:73:29:88: d3:5f:57:a2:68:0f:d0:c7:02:5e:ed:46:ba:42:06:17:68:49: 7a:d6:6a:a6:86:9a:57:4d:ca:f8:ba:d5:00:f6:df:d9:c7:26: f3:f4:b8:de:86:d8:5f:a8:7a:dc:6c:a7:95:c6:49:1f:a2:1a: b0:ae:06:06:e5:5b:10:74:c2:74:65:9d:1a:a4:cf:68:a1:5d: 62:d5:95:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxt940aQiKuq1IYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI1MTAzMDE0MTYxNVoXDTI2MDEyODE1MTYxNVowLzEtMCsGA1UEAxMk ZjYwZGE3MTAtMTlkMC00ZWI5LTg2YjAtMjkwZjU0N2M4ZDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWVzhg3gf8HASn/1ByLgbVC5YFVYn4rfZunC tFOF/libibsNpjROLn+myzucGjX9QAdZQlQZMa7h4cWqNjQvM6Hrui28UVC8VGOC 9TQ4nsj99ib76gmD8scxQim72B/y0Esizyoi4Co/THmJbjjJ7HjE3zkqsdJqksIM ds5vbUT2BmLLt256aZeBhykFnELaeBc2iROWhLz91O2OgbADAgjBPTLHN09GwCY8 pSEbRbf01hTsKPzTH2R9u+dBQxdXAs+CMvRqPkvYkkVDfasCBouexZBasSP5+wjx aH9SiZjJvlActmsgoMTpx6JNYHu8BmdVAvEWvm3Hapa/HVw1owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGUlRc0165HR2IGp0bDi2XMuHZzVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvMzlkZGM2YjktYTQzMy0z NjBlLTg2NzItZWM2MzY5M2U3ZTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERT/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGFN+sYAGY7H6ELfoqq8pf8OweSbVV1SX8J1hTUFrdUMKW8kQxpBHGL UOqgmnKGyRCY+2ZqMPotEJuW95KGrU6M8d1TegfEosoO0ee5GeUuihA6D6J2TQ1x I4udgIa9BgVACIhnOgMm/O0SzDM3ZefSuQ3tr9LS63r8wl4mLsgclrBfpG97TtUw Rjo/MtdK4cpCDJb98xhvwL6nyaScFpS3YxsDK6OuuylSsyY/W9XeunMpiNNfV6Jo D9DHAl7tRrpCBhdoSXrWaqaGmldNyvi61QD239nHJvP0uN6G2F+oetxsp5XGSR+i GrCuBgblWxB0wnRlnRqkz2ihXWLVlQE= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:28 2025 by rpki-client