$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/fe90d0e4-03c3-38d1-8c44-56a301595b47.roa File: fe90d0e4-03c3-38d1-8c44-56a301595b47.roa (raw, json) Hash identifier: 5HAqFGWNOi0hq3K6arHCCVt4t8GMUuw2seUlhVx/lSM= Subject key identifier: 31:A0:C7:7B:CD:2A:D4:3B:F3:3A:A2:A6:8D:34:00:9A:CF:D5:0B:A8 Certificate issuer: /CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Certificate serial: 010D0C9F4328584BBD9D2597AC2736D06195F540 Authority key identifier: 33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/fe90d0e4-03c3-38d1-8c44-56a301595b47.roa Signing time: Mon 03 Nov 2025 20:32:07 +0000 ROA not before: Mon 03 Nov 2025 20:32:07 +0000 ROA not after: Sun 01 Feb 2026 20:32:07 +0000 asID: 812 IP address blocks: 66.185.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bd:9d:25:97:ac:27:36:d0:61:95:f5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aafd6acf-1b90-42db-93ca-6a5c04007025 Validity Not Before: Nov 3 20:32:07 2025 GMT Not After : Feb 1 20:32:07 2026 GMT Subject: CN=167f0dea-14b0-4d67-9470-b3c26e7b8905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:50:ca:94:dc:01:d5:1f:77:d8:03:8a:25:73: 43:1a:15:ea:0e:fe:c5:ab:d7:8e:9b:bc:85:e8:66: 84:6b:ef:ba:39:c9:d0:45:1c:0d:5d:84:e0:f0:14: a5:67:f2:76:1e:e6:bf:bd:3f:2e:3e:43:88:3f:f2: b7:96:25:90:e9:80:60:47:7c:c1:4b:db:a1:16:88: d6:18:81:db:b7:07:80:96:35:1b:99:4d:2b:ba:6e: f8:6e:6b:c2:12:33:6f:f8:78:61:12:3f:dc:92:18: 87:7e:70:6f:41:28:72:41:87:55:4f:e2:bc:3a:ef: 05:41:ca:dd:40:73:b0:77:0a:df:f8:df:d8:7f:06: 94:17:fa:80:c6:39:bc:95:9f:f8:82:4a:a8:12:47: 2a:74:d2:66:1e:90:61:f5:62:62:22:c8:c2:6e:b8: e1:04:85:a7:75:ae:02:3f:19:48:85:2e:d5:a4:44: 65:89:32:9d:69:2f:b4:7f:83:ee:dd:56:3b:d9:a3: fa:7c:ac:94:37:f6:9d:7e:46:53:ce:68:38:ba:a7: 13:57:f0:7f:26:59:23:b3:e4:d7:3b:2a:e0:89:59: 4f:bd:9f:d3:03:92:df:4d:ba:9a:f7:60:2b:55:00: 80:14:d7:f2:14:9d:f6:9a:23:9e:40:0d:b1:7e:30: 76:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A0:C7:7B:CD:2A:D4:3B:F3:3A:A2:A6:8D:34:00:9A:CF:D5:0B:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/fe90d0e4-03c3-38d1-8c44-56a301595b47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025/aafd6acf-1b90-42db-93ca-6a5c04007025.crl X509v3 Authority Key Identifier: keyid:33:52:98:80:D6:83:C5:3F:14:72:92:EA:A0:84:99:4F:1A:2D:BB:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/aafd6acf-1b90-42db-93ca-6a5c04007025.cer sbgp-ipAddrBlock: critical IPv4: 66.185.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:e5:22:23:1f:cb:c0:2f:89:91:dc:62:bc:14:e5:ce:a8:4a: 9d:97:d3:1a:80:de:8d:d2:c4:fa:3c:f4:c0:c4:b2:fb:b8:a9: 0c:54:61:83:46:06:3b:47:f9:8c:eb:85:ca:ef:79:61:0b:fd: 9a:bb:ee:72:d7:94:18:39:5c:64:fc:a6:b5:12:89:c8:16:75: 9b:20:c1:f0:55:b1:a6:84:cc:a2:a8:87:86:a8:4d:82:1f:fc: b5:13:58:04:d2:8b:c3:e1:f1:a9:e1:83:59:87:24:2c:1a:c2: 82:3d:7f:2b:4d:4f:57:94:43:09:61:9c:cc:d1:ee:d7:ed:40: 56:95:00:35:75:15:50:61:5d:51:2d:bb:5f:d5:5c:b4:e0:fc: c1:5e:8d:45:a3:e6:b0:54:e7:dd:3d:6c:f7:30:37:7f:05:45: 8e:2a:f4:07:7f:16:26:40:43:94:03:f4:3c:cc:d3:29:20:92: 19:60:64:f5:6a:4f:25:3b:a6:cd:44:6b:6e:4b:78:e4:c1:ed: 17:ab:5b:b2:e8:a7:91:dc:3a:52:98:1e:4b:0d:33:8f:22:f3: 4a:11:7e:49:8e:42:63:d3:47:f7:58:55:27:65:34:d1:a7:b9: 6a:79:fb:b5:bd:94:7b:d5:9f:07:a4:32:67:1c:f4:07:f8:fc: f5:89:cc:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu9nSWXrCc20GGV9UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmZDZhY2YtMWI5MC00MmRiLTkzY2EtNmE1YzA0MDA3 MDI1MB4XDTI1MTEwMzIwMzIwN1oXDTI2MDIwMTIwMzIwN1owLzEtMCsGA1UEAxMk MTY3ZjBkZWEtMTRiMC00ZDY3LTk0NzAtYjNjMjZlN2I4OTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllDKlNwB1R932AOKJXNDGhXqDv7Fq9eOm7yF 6GaEa++6OcnQRRwNXYTg8BSlZ/J2Hua/vT8uPkOIP/K3liWQ6YBgR3zBS9uhFojW GIHbtweAljUbmU0rum74bmvCEjNv+HhhEj/ckhiHfnBvQShyQYdVT+K8Ou8FQcrd QHOwdwrf+N/YfwaUF/qAxjm8lZ/4gkqoEkcqdNJmHpBh9WJiIsjCbrjhBIWnda4C PxlIhS7VpERliTKdaS+0f4Pu3VY72aP6fKyUN/adfkZTzmg4uqcTV/B/Jlkjs+TX OyrgiVlPvZ/TA5LfTbqa92ArVQCAFNfyFJ32miOeQA2xfjB2ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGgx3vNKtQ78zqipo00AJrP1QuoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZk NmFjZi0xYjkwLTQyZGItOTNjYS02YTVjMDQwMDcwMjUvZmU5MGQwZTQtMDNjMy0z OGQxLThjNDQtNTZhMzAxNTk1YjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWFmZDZhY2YtMWI5MC00MmRiLTkz Y2EtNmE1YzA0MDA3MDI1L2FhZmQ2YWNmLTFiOTAtNDJkYi05M2NhLTZhNWMwNDAw NzAyNS5jcmwwHwYDVR0jBBgwFoAUM1KYgNaDxT8UcpLqoISZTxotu+QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hYWZkNmFjZi0xYjkwLTQyZGItOTNjYS02YTVj MDQwMDcwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQrlQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPlIiMfy8AviZHcYrwU5c6oSp2X0xqA3o3SxPo89MDEsvu4qQxUYYNG BjtH+YzrhcrveWEL/Zq77nLXlBg5XGT8prUSicgWdZsgwfBVsaaEzKKoh4aoTYIf /LUTWATSi8Ph8anhg1mHJCwawoI9fytNT1eUQwlhnMzR7tftQFaVADV1FVBhXVEt u1/VXLTg/MFejUWj5rBU5909bPcwN38FRY4q9Ad/FiZAQ5QD9DzM0ykgkhlgZPVq TyU7ps1Ea25LeOTB7RerW7Lop5HcOlKYHksNM48i80oRfkmOQmPTR/dYVSdlNNGn uWp5+7W9lHvVnwekMmcc9Af4/PWJzOg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:54:29 2025 by rpki-client