$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa File: aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa (raw, json) Hash identifier: l/g8wGrhiLg+OdM4Hd8W+yYQQhKTVKuLk79sU9nImA8= Subject key identifier: 75:4E:1E:80:77:A7:60:D2:7B:AC:53:37:DD:DD:64:BB:F8:D0:98:8F Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584B5C6C75109EDC4AB6FDE52880 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 32043 IP address blocks: 173.232.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:75:10:9e:dc:4a:b6:fd:e5:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=9f76bf0f-8865-4f54-84f9-e312f2a9cf01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:55:5d:7f:02:98:93:40:b6:f5:af:a5:11:8c: 67:37:21:94:8e:96:f5:f8:4a:b6:38:5b:8b:51:66: d0:e9:39:d6:0b:8c:68:b2:4c:39:b6:ff:1d:bf:91: d4:28:ae:6e:21:a1:ed:6d:ca:79:3f:d7:26:df:23: d2:d5:10:7c:45:07:20:2c:fc:c9:57:16:79:98:df: 9a:4a:a6:38:72:90:4f:05:63:40:74:70:17:60:ef: 5d:79:47:02:5b:c8:7c:bc:d9:e4:15:ea:62:a4:71: 05:ec:49:30:63:8b:16:cf:03:05:4c:f6:5d:0a:0a: 90:b2:c4:d3:74:9a:89:38:0d:cd:86:11:c0:80:50: d3:07:a7:61:8d:65:6a:fb:48:29:dc:10:28:a8:69: 88:a2:52:3f:1d:8d:2c:f6:32:1d:7f:4c:f0:11:65: 70:a5:61:62:cf:01:5a:3e:28:01:83:c5:b5:21:46: 43:30:d5:c7:5d:b2:dc:5c:28:02:e9:80:24:32:26: d0:fb:90:a0:8d:5f:cf:fc:1d:b4:a8:24:c7:be:09: 75:ea:70:ed:f2:13:cf:43:79:6e:de:63:6a:64:1c: 23:21:53:60:8a:2f:d2:85:b0:0f:20:9b:b6:4e:7c: 94:2b:2b:2d:c5:23:b2:bd:4c:f6:36:98:c4:49:87: 7f:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:4E:1E:80:77:A7:60:D2:7B:AC:53:37:DD:DD:64:BB:F8:D0:98:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:d9:ee:09:41:b3:4d:5a:b8:be:af:02:9f:18:37:f0:cb:79: c7:b2:20:1f:06:61:e7:85:e8:14:e6:f0:15:0d:12:12:6d:97: a3:58:e7:ed:35:41:7f:15:fc:88:f6:62:ed:3b:ca:b7:be:91: c0:43:02:1c:62:88:2e:39:9b:60:83:6e:8a:0d:c2:82:af:49: d1:d5:19:f4:70:33:de:a7:16:81:5a:b8:bf:b2:f8:1e:2a:d6: 2c:6c:52:71:ae:3b:9d:f6:80:5a:5a:6e:5b:d5:63:87:91:00: 40:5f:92:bf:b3:20:1a:4a:94:e9:3f:da:7e:62:c0:22:88:81: 8e:bb:6b:49:3b:d5:bc:ee:e0:2c:76:77:40:5f:24:2a:d3:ac: 0d:23:a0:28:55:32:55:70:41:77:06:d7:bc:24:cc:1a:fb:26: 16:29:02:67:c1:1f:a4:e1:23:20:c9:8b:0a:c3:db:55:ec:f2: 0e:b9:2d:bb:bc:45:7a:78:98:e6:e7:c2:5d:ad:12:46:5c:f3: 7f:68:3f:33:06:7c:09:31:d5:c3:ee:0e:d1:cc:c2:e6:57:95: 2f:94:ec:61:2b:d3:50:01:72:ef:98:b4:c7:b9:2f:3b:aa:9c: 20:5a:89:b7:0d:db:64:57:01:45:6f:f2:47:c2:20:22:d4:ae: e0:b9:0a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHUQntxKtv3lKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk OWY3NmJmMGYtODg2NS00ZjU0LTg0ZjktZTMxMmYyYTljZjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVVdfwKYk0C29a+lEYxnNyGUjpb1+Eq2OFuL UWbQ6TnWC4xoskw5tv8dv5HUKK5uIaHtbcp5P9cm3yPS1RB8RQcgLPzJVxZ5mN+a SqY4cpBPBWNAdHAXYO9deUcCW8h8vNnkFepipHEF7EkwY4sWzwMFTPZdCgqQssTT dJqJOA3NhhHAgFDTB6dhjWVq+0gp3BAoqGmIolI/HY0s9jIdf0zwEWVwpWFizwFa PigBg8W1IUZDMNXHXbLcXCgC6YAkMibQ+5CgjV/P/B20qCTHvgl16nDt8hPPQ3lu 3mNqZBwjIVNgii/ShbAPIJu2TnyUKystxSOyvUz2NpjESYd/3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVOHoB3p2DSe6xTN93dZLv40JiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWFmOWE1ZjEtYmZkOC0z MzIzLWFkYWYtN2Q5OTFkYmFjY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/Z7glBs01auL6vAp8YN/DLeceyIB8GYeeF6BTm8BUNEhJtl6NY5+01 QX8V/Ij2Yu07yre+kcBDAhxiiC45m2CDbooNwoKvSdHVGfRwM96nFoFauL+y+B4q 1ixsUnGuO532gFpablvVY4eRAEBfkr+zIBpKlOk/2n5iwCKIgY67a0k71bzu4Cx2 d0BfJCrTrA0joChVMlVwQXcG17wkzBr7JhYpAmfBH6ThIyDJiwrD21Xs8g65Lbu8 RXp4mObnwl2tEkZc839oPzMGfAkx1cPuDtHMwuZXlS+U7GEr01ABcu+YtMe5Lzuq nCBaibcN22RXAUVv8kfCICLUruC5CvE= -----END CERTIFICATE-----Generated at Wed Oct 8 15:39:37 2025 by rpki-client