$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa File: aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa (raw, json) Hash identifier: WHA0TKaVqV+VJhM/a87BQHnhvKKxjbpHtK25B9iKVFk= Subject key identifier: A0:E5:B5:36:7F:B5:8F:27:05:6C:18:05:5A:25:F1:BB:36:01:A0:86 Certificate issuer: /CN=31671c23-3278-409b-837d-7dfe69606940 Certificate serial: 010D0C9F4328584BB02CFB32C39957580FD6E9C0 Authority key identifier: 67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 170.62.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2c:fb:32:c3:99:57:58:0f:d6:e9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31671c23-3278-409b-837d-7dfe69606940 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=0bea766d-3a08-4647-9dfb-1fc61079f5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:4a:b6:c1:56:55:32:53:c3:3f:55:27:4b: b7:8b:a5:2c:69:d2:67:67:a0:4d:59:7d:10:7f:e4: dc:65:8e:7a:be:d2:be:75:e1:36:44:5b:16:54:ae: fd:fd:7a:0c:b0:17:76:51:5a:83:88:7b:57:a4:02: 71:59:67:ba:e8:48:59:3a:b9:5c:07:ce:9f:96:c1: d5:02:00:24:a8:ab:02:ec:ee:80:f2:22:ec:a1:aa: 1a:42:69:3e:00:8e:94:73:d5:be:8c:c3:22:d6:00: cc:d5:d4:96:ab:49:79:2d:d6:30:03:c8:f8:76:76: ed:2a:e2:c7:f4:ea:f0:ed:98:a9:b2:89:c6:8c:5a: ae:61:38:a2:5e:c6:50:4f:07:ca:16:31:ad:89:e7: d6:fe:a3:3c:2f:8c:4a:b0:1d:0a:58:87:fa:17:28: 3b:e0:17:41:62:6b:27:a3:80:e1:55:bb:9a:86:be: e0:b2:e1:9a:62:d9:ff:f3:4b:97:a3:7c:2d:01:71: 66:3c:56:82:fd:47:53:51:93:bf:0c:7d:0f:ce:e6: 7a:d7:b5:c5:78:5b:98:d2:f9:76:39:e8:dc:e4:83: d4:10:9d:85:2c:6a:e0:40:8a:71:e0:9f:8f:9a:c5: 8b:70:21:1a:b9:c5:5e:c8:ec:45:df:0d:f8:b2:99: f3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E5:B5:36:7F:B5:8F:27:05:6C:18:05:5A:25:F1:BB:36:01:A0:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/aacf835e-a90b-3e4a-9b34-fdafdd8827a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940/31671c23-3278-409b-837d-7dfe69606940.crl X509v3 Authority Key Identifier: keyid:67:16:23:E0:67:5A:30:1F:51:52:AF:3F:47:2F:FC:27:CE:8D:3F:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31671c23-3278-409b-837d-7dfe69606940.cer sbgp-ipAddrBlock: critical IPv4: 170.62.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:06:35:4e:bc:e3:cb:2a:b7:74:63:85:de:8b:96:0a:42:6b: 88:a6:19:40:ca:84:4c:4b:67:4f:59:d7:c4:e0:ce:bf:66:0a: 16:8c:3d:27:db:44:5f:94:c3:85:a4:48:ce:db:ae:dc:7a:d4: af:62:c0:98:ea:cb:b7:a2:dc:f4:f7:98:08:3a:61:13:5d:05: 8d:dd:e1:07:88:8f:68:9c:39:d0:3d:f6:e0:ce:c2:91:fb:47: d5:5f:e0:64:66:98:17:38:b5:0d:97:45:e7:06:b7:34:2e:bd: a4:c4:81:68:2e:8f:da:15:b7:ae:33:75:db:0c:1a:a5:72:fb: 0f:fb:46:93:f6:2d:9c:44:8b:f0:a2:c8:68:81:95:59:80:55: 0e:7a:54:b3:74:7d:ad:e9:4c:3e:c2:64:da:f4:7c:6d:f8:17: c6:c9:ae:9b:60:61:b7:41:2e:d1:ae:c5:1f:f0:57:ef:3e:8c: 2e:e7:d2:a8:78:de:a8:8b:61:12:ae:bd:46:3b:d8:40:97:09: 7f:49:9e:5b:ce:19:39:ce:77:99:25:b0:a6:05:04:2c:d3:ef: b5:4b:ac:8b:bb:cd:77:dd:a6:08:19:c8:5b:bf:cf:ab:f8:36: d1:3a:6d:87:9e:c3:ec:6a:c5:a1:68:5d:63:62:92:88:81:aa: 17:fd:62:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuwLPsyw5lXWA/W6cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzE2NzFjMjMtMzI3OC00MDliLTgzN2QtN2RmZTY5NjA2 OTQwMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk MGJlYTc2NmQtM2EwOC00NjQ3LTlkZmItMWZjNjEwNzlmNWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/lKtsFWVTJTwz9VJ0u3i6UsadJnZ6BNWX0Q f+TcZY56vtK+deE2RFsWVK79/XoMsBd2UVqDiHtXpAJxWWe66EhZOrlcB86flsHV AgAkqKsC7O6A8iLsoaoaQmk+AI6Uc9W+jMMi1gDM1dSWq0l5LdYwA8j4dnbtKuLH 9Orw7ZipsonGjFquYTiiXsZQTwfKFjGtiefW/qM8L4xKsB0KWIf6Fyg74BdBYmsn o4DhVbuahr7gsuGaYtn/80uXo3wtAXFmPFaC/UdTUZO/DH0PzuZ617XFeFuY0vl2 Oejc5IPUEJ2FLGrgQIpx4J+PmsWLcCEaucVeyOxF3w34spnzUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDltTZ/tY8nBWwYBVol8bs2AaCGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMTY3 MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZlNjk2MDY5NDAvYWFjZjgzNWUtYTkwYi0z ZTRhLTliMzQtZmRhZmRkODgyN2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzE2NzFjMjMtMzI3OC00MDliLTgz N2QtN2RmZTY5NjA2OTQwLzMxNjcxYzIzLTMyNzgtNDA5Yi04MzdkLTdkZmU2OTYw Njk0MC5jcmwwHwYDVR0jBBgwFoAUZxYj4GdaMB9RUq8/Ry/8J86NPxowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMTY3MWMyMy0zMjc4LTQwOWItODM3ZC03ZGZl Njk2MDY5NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqj4rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcGNU6848sqt3Rjhd6LlgpCa4imGUDKhExLZ09Z18Tgzr9mChaMPSfb RF+Uw4WkSM7brtx61K9iwJjqy7ei3PT3mAg6YRNdBY3d4QeIj2icOdA99uDOwpH7 R9Vf4GRmmBc4tQ2XRecGtzQuvaTEgWguj9oVt64zddsMGqVy+w/7RpP2LZxEi/Ci yGiBlVmAVQ56VLN0fa3pTD7CZNr0fG34F8bJrptgYbdBLtGuxR/wV+8+jC7n0qh4 3qiLYRKuvUY72ECXCX9JnlvOGTnOd5klsKYFBCzT77VLrIu7zXfdpggZyFu/z6v4 NtE6bYeew+xqxaFoXWNikoiBqhf9Yps= -----END CERTIFICATE-----Generated at Mon Nov 3 08:34:32 2025 by rpki-client