$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa File: 3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa (raw, json) Hash identifier: /u9YdjWBGlQHce780un0Z2qjmH66KjqE4APq46BtCqc= Subject key identifier: 06:1D:EC:75:31:38:B3:CF:72:28:EA:02:D7:34:56:AD:84:6F:67:5D Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B72C1EE2BDA8D96FA013CBE20 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa Signing time: Wed 08 Oct 2025 01:00:29 +0000 ROA not before: Wed 08 Oct 2025 01:00:29 +0000 ROA not after: Tue 06 Jan 2026 02:00:29 +0000 asID: 9009 IP address blocks: 24.235.20.0/24 maxlen: 24 24.235.21.0/24 maxlen: 24 158.115.240.0/24 maxlen: 24 158.115.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:72:c1:ee:2b:da:8d:96:fa:01:3c:be:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 8 01:00:29 2025 GMT Not After : Jan 6 02:00:29 2026 GMT Subject: CN=6e554953-01c4-4c4f-aa72-b626ce74ba7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:67:40:ad:0a:4f:80:9e:80:c4:c3:66:e1:2c: 2c:5b:aa:0e:02:31:ae:f2:e1:58:bc:81:00:4d:4c: 8d:03:b7:b6:fb:77:15:8f:07:05:04:e3:59:e1:09: 0e:cf:25:46:46:bd:9b:4a:63:d2:00:ad:cf:d0:e7: 25:af:2d:c3:27:26:cc:1b:65:ba:62:0e:f8:b3:72: 82:ff:0f:0a:68:de:2a:82:d1:06:a2:ad:48:70:33: d3:8d:f9:64:07:60:14:be:9a:5c:3b:b1:22:81:6d: 82:ab:54:a2:20:31:4f:bb:05:9e:15:59:44:e8:8e: 07:4a:19:9c:46:a9:a3:56:41:a3:df:6c:65:c2:c1: 55:91:e0:20:c5:89:ff:6a:f2:91:5d:f7:02:98:80: ce:e5:8e:b3:39:26:d0:8e:46:39:db:21:28:02:4c: ae:1d:d5:c7:ad:c6:89:67:09:f5:09:db:b6:dd:03: 7e:e7:99:59:c9:cf:f6:a2:af:09:9c:f5:fa:36:fd: 23:8c:cb:40:69:0f:76:55:41:8c:7e:22:68:ac:18: 7f:32:66:c7:c8:b0:78:27:31:0e:d3:9f:84:98:87: 57:34:8f:40:29:2f:eb:73:af:ac:4b:e5:00:bb:59: 23:7d:1a:c2:32:d1:f5:08:ba:10:15:5d:8a:62:2a: 4f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1D:EC:75:31:38:B3:CF:72:28:EA:02:D7:34:56:AD:84:6F:67:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3ae5afd1-4b28-3855-ae6b-9ba719158fad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 24.235.20.0/23 158.115.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:49:74:9e:68:a2:73:98:f6:3b:85:42:8d:b8:ed:fc:cb:74: 08:c3:11:8d:e2:b1:68:4b:ca:db:24:d9:dd:0d:23:cc:5b:b2: 5b:24:10:59:58:01:99:03:4e:8b:ea:02:58:1d:96:18:a4:a3: 5f:3f:03:3a:2d:76:bc:53:a5:95:e2:52:5f:dc:7e:4b:14:f4: a2:b0:f9:0e:c8:e2:40:fb:56:3c:9f:59:77:89:8f:91:ad:5f: 84:af:ac:09:b7:58:82:50:89:29:78:aa:ee:8d:d5:d6:a3:2a: 29:cc:af:31:70:6d:d4:1e:13:63:3c:6e:f7:ab:a8:40:6a:b9: e6:3c:3c:f1:79:f9:e3:9d:65:d3:06:86:bd:72:21:10:7c:29: 92:f9:9b:4d:dc:b0:ec:d7:4f:7a:cc:46:58:af:fd:ef:e3:3c: 58:9b:ea:c0:20:79:fb:dc:b8:11:c8:fc:c6:2a:f6:d8:82:62: be:f1:04:16:9d:56:b7:e2:72:77:01:d0:4f:b9:14:de:78:d7: ca:9f:e2:28:d0:1f:c6:be:65:cb:8a:a2:b6:29:50:fa:4c:bf: 5a:00:e7:b1:1a:3c:ed:97:63:24:94:94:69:54:8a:d2:35:4d: 1f:be:5f:43:b6:62:1c:4b:4c:05:1b:9b:6f:06:bd:70:14:40: f2:5b:50:39 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEtywe4r2o2W+gE8viAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MTAwODAxMDAyOVoXDTI2MDEwNjAyMDAyOVowLzEtMCsGA1UEAxMk NmU1NTQ5NTMtMDFjNC00YzRmLWFhNzItYjYyNmNlNzRiYTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2dArQpPgJ6AxMNm4SwsW6oOAjGu8uFYvIEA TUyNA7e2+3cVjwcFBONZ4QkOzyVGRr2bSmPSAK3P0Oclry3DJybMG2W6Yg74s3KC /w8KaN4qgtEGoq1IcDPTjflkB2AUvppcO7EigW2Cq1SiIDFPuwWeFVlE6I4HShmc RqmjVkGj32xlwsFVkeAgxYn/avKRXfcCmIDO5Y6zOSbQjkY52yEoAkyuHdXHrcaJ Zwn1Cdu23QN+55lZyc/2oq8JnPX6Nv0jjMtAaQ92VUGMfiJorBh/MmbHyLB4JzEO 05+EmIdXNI9AKS/rc6+sS+UAu1kjfRrCMtH1CLoQFV2KYipP+QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAYd7HUxOLPPcijqAtc0Vq2Eb2ddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2FlNWFmZDEtNGIyOC0z ODU1LWFlNmItOWJhNzE5MTU4ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBGOsUAwQB nnPwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACVJdJ5oonOY9juFQo247fzLdAjDEY3isWhLytsk2d0NI8xb slskEFlYAZkDTovqAlgdlhiko18/AzotdrxTpZXiUl/cfksU9KKw+Q7I4kD7Vjyf WXeJj5GtX4SvrAm3WIJQiSl4qu6N1dajKinMrzFwbdQeE2M8bverqEBqueY8PPF5 +eOdZdMGhr1yIRB8KZL5m03csOzXT3rMRliv/e/jPFib6sAgefvcuBHI/MYq9tiC Yr7xBBadVrficncB0E+5FN5418qf4ijQH8a+ZcuKorYpUPpMv1oA57EaPO2XYySU lGlUitI1TR++X0O2YhxLTAUbm28GvXAUQPJbUDk= -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:50 2025 by rpki-client