$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/5a81a879-7a98-330f-b70f-4e80d2348605.roa File: 5a81a879-7a98-330f-b70f-4e80d2348605.roa (raw, json) Hash identifier: L6YlDlE05kicSGEejx03EM5WFC9TUBRaB6u/OdLgjmU= Subject key identifier: 4A:A2:58:89:96:7D:07:9A:70:57:5A:48:33:C0:31:00:41:93:C5:65 Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584BB1B7173F44CA7720CFFD2EF0 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/5a81a879-7a98-330f-b70f-4e80d2348605.roa Signing time: Thu 30 Oct 2025 14:14:41 +0000 ROA not before: Thu 30 Oct 2025 14:14:41 +0000 ROA not after: Wed 28 Jan 2026 15:14:41 +0000 asID: 812 IP address blocks: 67.231.208.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b1:b7:17:3f:44:ca:77:20:cf:fd:2e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Oct 30 14:14:41 2025 GMT Not After : Jan 28 15:14:41 2026 GMT Subject: CN=7b6d4f46-34a6-4a33-b136-20a867608407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5c:a7:43:5c:8a:53:82:d9:1b:e0:3e:23:62: 65:f6:16:82:ba:13:38:0f:53:13:dc:a3:f6:c6:f7: 4c:f9:75:ad:07:01:b8:ad:93:a5:9c:cf:d7:fb:e3: 19:35:dd:b4:56:dc:79:25:c7:9f:ff:bf:22:c3:2f: 33:d5:13:ac:70:c7:c5:28:7b:ea:1a:64:98:6a:ed: 63:91:35:2e:86:03:d6:1c:78:79:92:dd:0f:ee:12: d0:a0:97:23:1d:66:b5:91:8d:ce:d8:cc:91:e3:e4: 22:b9:71:65:63:e7:33:16:e7:55:5a:38:3d:58:57: 0e:e6:0d:03:55:18:83:95:d4:f4:94:b5:d1:73:cd: aa:0f:7c:1c:9f:43:07:96:56:10:c3:05:3e:0b:94: 2d:38:93:c0:35:29:ae:19:5d:75:f1:5e:12:af:84: 7e:93:fe:1c:8e:d9:a6:b8:6f:92:70:6c:60:db:26: 4c:5e:b5:c5:f4:aa:b6:6b:10:83:79:2c:a1:89:69: fb:ac:87:98:69:a8:7d:da:b4:bc:5b:81:1f:89:f2: 44:34:16:43:1b:10:cb:98:94:6f:ce:6d:58:3c:ad: 85:58:5e:1f:fd:0b:a1:25:3e:04:f5:b7:f2:1f:3c: a2:f4:cd:c9:33:4e:6e:5d:0c:e0:31:d2:60:ae:0c: a9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A2:58:89:96:7D:07:9A:70:57:5A:48:33:C0:31:00:41:93:C5:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/5a81a879-7a98-330f-b70f-4e80d2348605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 67.231.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b8:8b:c4:fc:f0:53:bd:9d:dd:2f:ef:26:a0:d3:ac:79:be: 4d:bd:3f:ac:06:3a:20:08:80:5f:fb:60:b1:15:70:87:f3:39: f1:ab:5c:e2:19:99:1d:79:48:d0:5b:53:52:33:b1:1f:6a:39: ba:4e:7a:51:43:bc:f0:c0:83:52:a5:89:05:40:21:a9:aa:3c: e9:7b:8e:1f:75:04:0c:57:e4:ac:7a:c7:2a:35:37:a4:b5:dc: fa:77:87:73:26:c8:7b:72:9c:e5:87:56:fb:15:d8:52:52:7f: d2:17:f2:f7:f8:79:a8:4e:c6:f0:bb:51:a7:7e:85:89:72:f2: d4:c3:f9:ae:f9:7f:14:cf:1e:b5:00:cc:c7:47:f7:de:b0:dd: 6b:53:25:8c:87:3d:36:90:d1:2a:cf:56:20:b5:87:2f:1b:06: 54:49:7d:43:bf:be:a9:59:f0:ae:0c:2c:8d:0d:79:05:2d:53: db:ff:85:80:99:2a:60:27:26:5c:45:7c:fd:ab:fe:f8:77:8b: 6e:92:f2:7c:95:33:22:cb:45:10:eb:10:fe:79:ff:fd:dc:64: 20:a5:68:24:3f:f3:fa:67:c1:34:ae:1e:53:03:68:24:4a:dc: fa:d4:72:ed:a1:04:d0:95:9d:d8:b9:21:8c:3e:b1:d4:bc:46: 79:d9:06:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuxtxc/RMp3IM/9LvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI1MTAzMDE0MTQ0MVoXDTI2MDEyODE1MTQ0MVowLzEtMCsGA1UEAxMk N2I2ZDRmNDYtMzRhNi00YTMzLWIxMzYtMjBhODY3NjA4NDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1ynQ1yKU4LZG+A+I2Jl9haCuhM4D1MT3KP2 xvdM+XWtBwG4rZOlnM/X++MZNd20Vtx5Jcef/78iwy8z1ROscMfFKHvqGmSYau1j kTUuhgPWHHh5kt0P7hLQoJcjHWa1kY3O2MyR4+QiuXFlY+czFudVWjg9WFcO5g0D VRiDldT0lLXRc82qD3wcn0MHllYQwwU+C5QtOJPANSmuGV118V4Sr4R+k/4cjtmm uG+ScGxg2yZMXrXF9Kq2axCDeSyhiWn7rIeYaah92rS8W4EfifJENBZDGxDLmJRv zm1YPK2FWF4f/QuhJT4E9bfyHzyi9M3JM05uXQzgMdJgrgyp5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqiWImWfQeacFdaSDPAMQBBk8VlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvNWE4MWE4NzktN2E5OC0z MzBmLWI3MGYtNGU4MGQyMzQ4NjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ+fQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW4i8T88FO9nd0v7yag06x5vk29P6wGOiAIgF/7YLEVcIfzOfGrXOIZ mR15SNBbU1IzsR9qObpOelFDvPDAg1KliQVAIamqPOl7jh91BAxX5Kx6xyo1N6S1 3Pp3h3MmyHtynOWHVvsV2FJSf9IX8vf4eahOxvC7Uad+hYly8tTD+a75fxTPHrUA zMdH996w3WtTJYyHPTaQ0SrPViC1hy8bBlRJfUO/vqlZ8K4MLI0NeQUtU9v/hYCZ KmAnJlxFfP2r/vh3i26S8nyVMyLLRRDrEP55//3cZCClaCQ/8/pnwTSuHlMDaCRK 3PrUcu2hBNCVndi5IYw+sdS8RnnZBpk= -----END CERTIFICATE-----Generated at Wed Nov 5 15:28:57 2025 by rpki-client