$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa File: 3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa (raw, json) Hash identifier: hcgvuxQhiV0BqbIa7XSdEgN61cn1k/1NSIVqtKY0w1s= Subject key identifier: 19:AC:80:6C:35:C1:A2:29:AE:53:6D:ED:EA:B6:22:5A:BD:67:24:46 Certificate issuer: /CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Certificate serial: 010D0C9F4328584BA93251AE272F98AFDF3CC540 Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 14618 IP address blocks: 192.184.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:51:ae:27:2f:98:af:df:3c:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=efde7783-7682-4d01-afbd-c852c9c4038f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1a:cf:f5:3c:4f:87:86:80:29:57:eb:2d:84: ae:62:34:9c:37:e6:2e:b2:a9:bf:a0:27:b2:29:c9: 3a:87:dc:7a:3e:bf:ed:3a:3c:80:9e:e0:06:79:1f: c1:0a:9c:36:7a:ea:08:e3:01:13:d2:26:65:af:67: 51:ea:cf:f7:44:a2:bc:e1:32:40:70:df:e8:3e:27: 2a:d3:19:89:c8:e2:d7:06:7d:04:eb:d2:d7:e7:be: 24:20:e9:df:68:73:b0:8b:36:7b:bd:4d:f2:9a:50: 77:bb:0c:9c:9f:47:16:98:ff:8d:02:dd:a4:bb:c6: a5:e1:d3:38:10:d2:4f:7c:b6:91:66:00:72:5b:53: 75:53:79:6d:f3:0c:fc:7b:55:d6:73:c9:1a:07:be: 8c:a3:01:4e:37:00:3e:02:e0:28:ed:8e:1e:e8:20: 07:7d:15:16:17:d5:ec:a9:b0:a9:dc:1b:23:ba:b5: 10:bc:4d:d9:74:03:50:79:ad:28:31:4a:a9:65:ea: 9a:be:21:78:96:e4:52:1c:22:b0:f0:ee:79:4c:67: 4d:fe:78:c3:0a:49:cb:ba:56:af:85:d1:5f:85:e3: f7:13:76:dc:a7:cf:49:17:07:f9:f2:5e:0b:8a:b2: 1b:6b:24:9c:88:01:d8:7c:e9:76:de:e6:bb:ff:42: 7b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:AC:80:6C:35:C1:A2:29:AE:53:6D:ED:EA:B6:22:5A:BD:67:24:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/3ab4ebaf-be80-313b-afba-2d1fcf3d4e54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl X509v3 Authority Key Identifier: keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer sbgp-ipAddrBlock: critical IPv4: 192.184.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:bb:0b:5a:79:78:3a:4d:7e:aa:ba:ed:3b:ec:b1:fc:05:8d: b6:83:d0:28:72:de:fc:f6:13:2c:e9:46:5f:90:7d:51:71:5e: 67:24:ea:55:bc:26:93:fa:a0:5d:96:d2:79:e5:fe:5a:52:e5: 48:ef:c6:4a:4a:d4:e3:04:47:0d:58:8f:cf:d6:d0:6a:b9:15: 81:6f:b8:4e:d4:c9:8f:2b:cc:62:c3:ca:5e:60:63:ff:bd:50: f1:87:aa:0d:dc:6d:52:83:28:40:e6:f0:66:c6:d8:56:a8:24: ba:46:57:e8:8c:6d:95:8e:1d:a9:01:ca:cd:9b:41:e0:d2:fc: 7f:f7:57:8a:e0:37:6f:39:fa:2a:c2:e0:1f:ae:a5:c8:4a:cf: 5b:8c:a4:ee:38:de:59:67:9f:08:96:40:ca:06:74:c3:7f:4c: 9c:3b:b5:64:c3:92:fb:23:c3:f8:92:cf:1d:c1:b5:ea:02:51: e1:8d:5b:07:e4:a5:df:b6:ae:52:e6:32:ed:47:fc:79:70:cf: 06:10:eb:b9:ca:ea:68:4d:69:de:c6:c8:66:25:b8:b6:4c:f5: ca:55:d9:06:cb:b0:df:64:e5:33:55:fa:59:c1:92:f8:d1:88: 5f:c4:cf:d8:f5:7b:99:dd:33:d2:ef:45:f2:82:b1:0e:98:49: 19:e9:2d:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMlGuJy+Yr988xUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFkMjJjM2QtM2MxNC00MmI3LWEzMjQtYjFiYjIxNjQ5 Mzc4MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk ZWZkZTc3ODMtNzY4Mi00ZDAxLWFmYmQtYzg1MmM5YzQwMzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxrP9TxPh4aAKVfrLYSuYjScN+Yusqm/oCey Kck6h9x6Pr/tOjyAnuAGeR/BCpw2euoI4wET0iZlr2dR6s/3RKK84TJAcN/oPicq 0xmJyOLXBn0E69LX574kIOnfaHOwizZ7vU3ymlB3uwycn0cWmP+NAt2ku8al4dM4 ENJPfLaRZgByW1N1U3lt8wz8e1XWc8kaB76MowFONwA+AuAo7Y4e6CAHfRUWF9Xs qbCp3BsjurUQvE3ZdANQea0oMUqpZeqaviF4luRSHCKw8O55TGdN/njDCknLulav hdFfheP3E3bcp89JFwf58l4LirIbaySciAHYfOl23ua7/0J7fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmsgGw1waIprlNt7eq2Ilq9ZyRGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQy MmMzZC0zYzE0LTQyYjctYTMyNC1iMWJiMjE2NDkzNzgvM2FiNGViYWYtYmU4MC0z MTNiLWFmYmEtMmQxZmNmM2Q0ZTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWFkMjJjM2QtM2MxNC00MmI3LWEz MjQtYjFiYjIxNjQ5Mzc4L2FhZDIyYzNkLTNjMTQtNDJiNy1hMzI0LWIxYmIyMTY0 OTM3OC5jcmwwHwYDVR0jBBgwFoAUZ66XP5KwZsQ2EdR60iR6b6xVsUMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYWQyMmMzZC0zYzE0LTQyYjctYTMyNC1iMWJi MjE2NDkzNzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLhGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJe7C1p5eDpNfqq67TvssfwFjbaD0Chy3vz2EyzpRl+QfVFxXmck6lW8 JpP6oF2W0nnl/lpS5UjvxkpK1OMERw1Yj8/W0Gq5FYFvuE7UyY8rzGLDyl5gY/+9 UPGHqg3cbVKDKEDm8GbG2FaoJLpGV+iMbZWOHakBys2bQeDS/H/3V4rgN285+irC 4B+upchKz1uMpO443llnnwiWQMoGdMN/TJw7tWTDkvsjw/iSzx3BteoCUeGNWwfk pd+2rlLmMu1H/HlwzwYQ67nK6mhNad7GyGYluLZM9cpV2QbLsN9k5TNV+lnBkvjR iF/Ez9j1e5ndM9LvRfKCsQ6YSRnpLcE= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:46 2025 by rpki-client