$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa File: aa578848-2b75-3b39-9243-d445c17b3680.roa (raw, json) Hash identifier: fphN5VsHwE9lW2rVDeuMg6Vh4Vwz6AgmBQCXNqjerZA= Subject key identifier: 53:48:CB:80:40:6E:39:24:3A:94:C8:A3:8B:31:DD:30:B7:27:FE:07 Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1 Certificate serial: 010D0C9F4328584BAA97A5D4D8258DE9BDD6F9C0 Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa Signing time: Tue 28 Oct 2025 01:00:31 +0000 ROA not before: Tue 28 Oct 2025 01:00:31 +0000 ROA not after: Mon 26 Jan 2026 02:00:31 +0000 asID: 395400 IP address blocks: 168.123.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:aa:97:a5:d4:d8:25:8d:e9:bd:d6:f9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1 Validity Not Before: Oct 28 01:00:31 2025 GMT Not After : Jan 26 02:00:31 2026 GMT Subject: CN=ce2a49d0-d5ef-4df3-beae-517960f5bb76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:82:dd:8e:ab:59:16:3b:df:1e:0d:d1:90:76: bd:9e:6f:a2:7d:c2:7d:9f:72:b4:08:c4:b8:b7:54: c3:fe:b0:f0:7f:81:c7:0d:eb:e0:4f:13:8a:38:0a: ab:34:2c:eb:8b:b6:44:aa:f5:b1:cc:12:83:f9:ef: 79:3c:75:5a:8e:2b:85:01:b6:80:9f:5d:41:fe:81: 9f:66:5a:f0:e2:1e:23:6b:9d:75:d7:19:8a:47:b0: de:ac:a2:2b:fc:98:f7:9b:b1:47:d9:05:c6:73:0c: b5:81:45:c9:32:39:fd:5d:7c:59:db:ef:db:30:c2: ac:cd:49:53:1a:2b:68:2c:51:07:bf:21:20:9f:ad: 9b:0e:01:3c:ac:18:ef:59:fd:01:a1:c0:9f:21:29: 54:8a:ff:cc:2b:17:c2:c7:ea:9d:d4:08:c4:0d:d7: 84:b5:bc:7e:d0:46:93:87:7b:31:f3:10:f2:f9:7c: 69:bf:e4:f9:da:0f:be:39:32:e9:ed:30:b2:55:2e: fb:d3:5c:a4:4f:ad:ba:15:7b:f0:a7:9d:05:a2:82: c1:22:dc:39:52:27:2c:6d:99:43:e6:33:f2:c4:d1: 56:22:87:d1:1a:e4:1f:e4:06:7b:99:c8:2b:ce:0c: 5a:7d:89:98:bd:76:d0:46:79:63:10:3b:0e:96:36: 91:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:48:CB:80:40:6E:39:24:3A:94:C8:A3:8B:31:DD:30:B7:27:FE:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl X509v3 Authority Key Identifier: keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer sbgp-ipAddrBlock: critical IPv4: 168.123.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:94:01:c5:f2:2c:24:7b:a3:82:07:75:a5:f6:3c:b4:78:0d: 78:ee:28:ce:41:f2:da:39:60:da:e1:e1:19:84:a2:2d:2b:49: 9e:f5:2c:8d:2c:be:26:84:29:65:d2:5e:3d:dd:ee:4f:24:b8: 29:80:a1:8c:a4:70:8f:a1:ef:44:82:7e:13:ce:95:c3:64:8d: c5:9d:00:ae:48:45:64:d0:a6:05:02:69:32:9b:fa:ab:75:90: 92:9d:c3:6a:e0:93:81:61:31:c1:46:cf:e8:e0:34:c3:2a:cd: 93:f3:2a:75:14:60:c8:57:38:aa:13:ef:6b:f0:b5:dd:b6:fb: a5:d6:03:bb:dc:64:c3:f2:54:68:6f:7b:e2:dd:d9:2f:0d:17: 9c:42:b0:b3:86:ce:91:cf:61:3e:1d:41:d5:2e:51:1d:3b:35: 60:c1:cc:be:72:b4:c2:29:5f:c5:53:5b:51:54:96:65:f5:26: 82:d6:25:f9:9c:d6:99:c4:f6:5b:50:55:44:35:b9:2e:ba:fb: 21:61:95:96:b2:3a:dc:ea:28:07:78:dd:fe:9b:43:1a:6f:b2: 05:dd:15:eb:23:03:a9:17:ad:16:7c:e0:9c:81:9c:b9:9d:42: ef:db:25:80:a1:70:3c:20:65:b5:3d:64:57:c4:85:71:bc:c0: 4f:5f:8e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuql6XU2CWN6b3W+cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm NGYxMB4XDTI1MTAyODAxMDAzMVoXDTI2MDEyNjAyMDAzMVowLzEtMCsGA1UEAxMk Y2UyYTQ5ZDAtZDVlZi00ZGYzLWJlYWUtNTE3OTYwZjViYjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYLdjqtZFjvfHg3RkHa9nm+ifcJ9n3K0CMS4 t1TD/rDwf4HHDevgTxOKOAqrNCzri7ZEqvWxzBKD+e95PHVajiuFAbaAn11B/oGf Zlrw4h4ja5111xmKR7DerKIr/Jj3m7FH2QXGcwy1gUXJMjn9XXxZ2+/bMMKszUlT GitoLFEHvyEgn62bDgE8rBjvWf0BocCfISlUiv/MKxfCx+qd1AjEDdeEtbx+0EaT h3sx8xDy+Xxpv+T52g++OTLp7TCyVS7701ykT626FXvwp50FooLBItw5UicsbZlD 5jPyxNFWIofRGuQf5AZ7mcgrzgxafYmYvXbQRnljEDsOljaRMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFNIy4BAbjkkOpTIo4sx3TC3J/4HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2 ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvYWE1Nzg4NDgtMmI3NS0z YjM5LTkyNDMtZDQ0NWMxN2IzNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx NjhiZWY0ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqHuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOUAcXyLCR7o4IHdaX2PLR4DXjuKM5B8to5YNrh4RmEoi0rSZ71LI0s viaEKWXSXj3d7k8kuCmAoYykcI+h70SCfhPOlcNkjcWdAK5IRWTQpgUCaTKb+qt1 kJKdw2rgk4FhMcFGz+jgNMMqzZPzKnUUYMhXOKoT72vwtd22+6XWA7vcZMPyVGhv e+Ld2S8NF5xCsLOGzpHPYT4dQdUuUR07NWDBzL5ytMIpX8VTW1FUlmX1JoLWJfmc 1pnE9ltQVUQ1uS66+yFhlZayOtzqKAd43f6bQxpvsgXdFesjA6kXrRZ84JyBnLmd Qu/bJYChcDwgZbU9ZFfEhXG8wE9fjqg= -----END CERTIFICATE-----Generated at Wed Nov 5 07:18:54 2025 by rpki-client