$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/c892bed9-5e2c-35ed-8afb-b0ccc5856d80.roa File: c892bed9-5e2c-35ed-8afb-b0ccc5856d80.roa (raw, json) Hash identifier: CDaGI1fhJgbWFMLrk7VAm23LPWWdTg6UBQ7JZxcyeWo= Subject key identifier: 2E:E8:93:87:35:36:77:DB:3B:51:EA:0E:4E:99:2E:BC:65:F3:CD:B3 Certificate issuer: /CN=aa90ea59-501e-46c9-884b-8efb5caec147 Certificate serial: 010D0C9F4328584B4081CC0FE2A28A7C22F3DD40 Authority key identifier: 81:85:0D:C3:8E:84:DB:B5:B0:53:76:F1:B8:63:32:DD:1E:34:7B:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/c892bed9-5e2c-35ed-8afb-b0ccc5856d80.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 12070 IP address blocks: 185.224.168.0/24 maxlen: 24 185.224.169.0/24 maxlen: 24 185.224.170.0/24 maxlen: 24 185.224.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/aa90ea59-501e-46c9-884b-8efb5caec147.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/aa90ea59-501e-46c9-884b-8efb5caec147.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:cc:0f:e2:a2:8a:7c:22:f3:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa90ea59-501e-46c9-884b-8efb5caec147 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=5a60a085-b174-4623-8fdc-b1925598b03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:96:ab:af:f5:b9:ca:96:2a:c5:c9:5c:aa:bf: 47:1b:98:0f:12:ae:e5:e4:62:03:6a:46:17:25:5b: 4a:2e:54:fa:df:e4:2a:d8:e8:8b:e1:ee:64:9b:74: fb:ad:b4:23:e6:bf:4a:91:9c:1e:18:84:1f:a0:22: 48:38:4e:9a:27:b3:61:93:be:c3:4c:55:a9:8e:f0: 04:cc:38:53:52:fe:84:f0:23:ea:a3:9a:99:93:eb: 08:35:8f:0b:21:15:a5:4e:05:36:58:e9:54:bd:32: 82:f8:5b:4d:64:8f:7e:48:d4:21:e9:1a:31:94:cc: 12:ab:f7:93:4d:b9:2b:68:0f:c7:c3:ed:af:80:e6: d1:81:a3:23:66:cc:f9:ab:16:c7:2c:15:1c:5e:59: 10:21:43:fc:3e:d4:af:88:e1:e5:b4:ef:5a:1a:22: 2d:cc:aa:66:9e:80:79:54:b7:67:df:b5:dd:cc:18: 6a:d2:70:5e:0c:7c:d8:bd:06:9d:92:a1:9d:4f:0e: 9d:27:ea:1b:ef:4e:54:22:7b:cc:de:f0:6c:37:4b: 20:82:0a:bf:8d:40:48:6f:bc:c9:fb:eb:2e:20:bf: 4d:52:cb:b3:53:02:c4:f0:02:cb:f6:e9:ca:9c:61: da:94:47:20:5c:f9:4e:c5:65:27:d7:c2:ba:e7:2f: ac:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:E8:93:87:35:36:77:DB:3B:51:EA:0E:4E:99:2E:BC:65:F3:CD:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/c892bed9-5e2c-35ed-8afb-b0ccc5856d80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147/aa90ea59-501e-46c9-884b-8efb5caec147.crl X509v3 Authority Key Identifier: keyid:81:85:0D:C3:8E:84:DB:B5:B0:53:76:F1:B8:63:32:DD:1E:34:7B:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa90ea59-501e-46c9-884b-8efb5caec147.cer sbgp-ipAddrBlock: critical IPv4: 185.224.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:85:b1:3d:e9:10:b8:70:77:8c:7d:72:ab:3c:cb:b9:f7:ab: 92:62:8c:c8:7b:40:29:97:61:ce:73:61:b7:3e:da:60:45:b9: 41:c0:ee:7e:7f:53:58:9d:8c:3d:cd:e0:74:83:59:7f:61:32: b9:c5:88:7e:8d:ec:3d:52:d5:fa:d1:6e:5d:7c:bb:53:14:f9: b4:75:0a:9d:98:84:5c:8e:8c:9b:5f:f0:98:38:9c:cb:cc:f0: 71:ed:61:25:88:55:9d:b9:8f:6f:64:69:dd:2f:4d:ac:29:40: 83:ad:77:94:65:7d:b7:6f:f7:d1:20:c9:8f:dc:88:fb:dd:46: f8:69:86:6d:4f:87:ae:fa:63:95:7a:c5:7b:00:17:58:37:70: b2:ea:54:ab:83:bc:c3:82:83:c0:74:2b:f3:39:96:64:b7:56: d5:c8:a4:41:b0:4c:9d:5a:03:a7:25:ee:b0:b9:79:b4:7d:47: 26:0f:c6:4e:ad:0f:ad:dc:a2:2a:cc:7d:19:5e:f5:a4:61:51: 8f:fc:fe:07:1d:03:f4:1a:3c:6c:55:9c:5e:93:8d:ba:e6:f8: ea:bd:37:c5:c4:07:93:a8:6d:c5:cf:51:c6:d0:10:b4:b3:96: db:e4:32:46:4b:db:fe:6c:06:e0:be:68:c5:c3:6d:ea:30:0b: c9:be:d4:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgcwP4qKKfCLz3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWE5MGVhNTktNTAxZS00NmM5LTg4NGItOGVmYjVjYWVj MTQ3MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NWE2MGEwODUtYjE3NC00NjIzLThmZGMtYjE5MjU1OThiMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJarr/W5ypYqxclcqr9HG5gPEq7l5GIDakYX JVtKLlT63+Qq2OiL4e5km3T7rbQj5r9KkZweGIQfoCJIOE6aJ7Nhk77DTFWpjvAE zDhTUv6E8CPqo5qZk+sINY8LIRWlTgU2WOlUvTKC+FtNZI9+SNQh6RoxlMwSq/eT TbkraA/Hw+2vgObRgaMjZsz5qxbHLBUcXlkQIUP8PtSviOHltO9aGiItzKpmnoB5 VLdn37XdzBhq0nBeDHzYvQadkqGdTw6dJ+ob705UInvM3vBsN0sgggq/jUBIb7zJ ++suIL9NUsuzUwLE8ALL9unKnGHalEcgXPlOxWUn18K65y+s/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7ok4c1NnfbO1HqDk6ZLrxl882zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTkw ZWE1OS01MDFlLTQ2YzktODg0Yi04ZWZiNWNhZWMxNDcvYzg5MmJlZDktNWUyYy0z NWVkLThhZmItYjBjY2M1ODU2ZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWE5MGVhNTktNTAxZS00NmM5LTg4 NGItOGVmYjVjYWVjMTQ3L2FhOTBlYTU5LTUwMWUtNDZjOS04ODRiLThlZmI1Y2Fl YzE0Ny5jcmwwHwYDVR0jBBgwFoAUgYUNw46E27WwU3bxuGMy3R40e0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTkwZWE1OS01MDFlLTQ2YzktODg0Yi04ZWZi NWNhZWMxNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCueCoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2FsT3pELhwd4x9cqs8y7n3q5JijMh7QCmXYc5zYbc+2mBFuUHA7n5/ U1idjD3N4HSDWX9hMrnFiH6N7D1S1frRbl18u1MU+bR1Cp2YhFyOjJtf8Jg4nMvM 8HHtYSWIVZ25j29kad0vTawpQIOtd5Rlfbdv99EgyY/ciPvdRvhphm1Ph676Y5V6 xXsAF1g3cLLqVKuDvMOCg8B0K/M5lmS3VtXIpEGwTJ1aA6cl7rC5ebR9RyYPxk6t D63coirMfRle9aRhUY/8/gcdA/QaPGxVnF6Tjbrm+Oq9N8XEB5OobcXPUcbQELSz ltvkMkZL2/5sBuC+aMXDbeowC8m+1MY= -----END CERTIFICATE-----Generated at Fri Oct 10 17:32:10 2025 by rpki-client