$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa File: aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa (raw, json) Hash identifier: WPKaksIPzVC6bRfQkY1PgZdiEO1s+XcxQDbOovYG0CA= Subject key identifier: B4:3B:12:BF:F3:41:E8:25:5B:46:61:98:CB:EA:32:8D:8D:E9:60:19 Certificate issuer: /CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Certificate serial: 010D0C9F4328584B6631F8A3C802A52B9A8D07C0 Authority key identifier: C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 8070 IP address blocks: 152.228.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f8:a3:c8:02:a5:2b:9a:8d:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e1491d6-2ab7-4c14-bee6-122ee4531127 Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=a7fac1b1-eecb-405e-99ae-6f896de13aa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:89:8b:3c:7c:1e:ec:5c:3f:96:50:a3:31: ab:33:3b:89:22:12:06:41:eb:11:59:c1:e1:29:ef: 5b:8a:b3:9a:4a:0f:78:34:bb:be:bd:d0:4b:ee:fa: 33:60:bd:24:1e:b7:79:4e:96:d3:74:a6:30:74:1b: c2:e1:3b:ef:78:de:d0:d6:94:b5:01:33:19:7e:eb: 32:c9:09:86:97:53:c0:23:66:ac:71:d9:99:74:74: 8f:0c:b0:c7:36:2e:eb:95:00:8e:17:88:b9:aa:81: d9:fa:ca:4c:15:73:ff:da:e0:47:c1:03:4e:52:7a: 0e:8b:72:c4:2e:44:55:2d:e9:2f:99:5e:2f:db:ed: 8b:31:ce:6b:45:bd:0a:b3:42:60:04:2f:25:01:c9: 68:28:ab:61:63:b0:60:fe:38:92:42:3c:9b:17:97: b4:9a:24:50:32:54:36:a8:e4:78:2a:31:e5:94:a9: a1:21:60:a6:c0:c6:e3:84:1f:f5:a2:a4:48:fb:23: 7c:16:b2:43:a6:23:7c:62:28:bf:51:95:e0:ec:1f: 80:1b:f9:11:6b:a7:d7:2b:e8:49:50:a9:79:8c:2d: 08:ec:ba:9a:1c:ba:94:c4:60:5a:55:c5:e9:d4:9b: 5d:4b:e3:52:42:b1:1b:08:7c:7f:24:7d:bc:85:46: b2:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3B:12:BF:F3:41:E8:25:5B:46:61:98:CB:EA:32:8D:8D:E9:60:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/aa8db4aa-92d1-3c01-b7ef-86cdaafff606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127/9e1491d6-2ab7-4c14-bee6-122ee4531127.crl X509v3 Authority Key Identifier: keyid:C2:B5:FB:E5:85:57:E2:F0:2A:41:C4:C8:DA:D4:D7:06:C3:0E:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9e1491d6-2ab7-4c14-bee6-122ee4531127.cer sbgp-ipAddrBlock: critical IPv4: 152.228.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ef:3c:a1:78:c0:d2:87:da:fc:c9:09:9e:52:80:44:e5:78: e6:61:ea:99:56:14:3a:bb:16:09:ba:20:fe:e7:ce:cf:e5:25: 7c:c3:9b:a1:58:2f:e9:1f:97:60:b6:cf:3a:40:c2:ee:74:cc: d9:55:6c:4c:35:55:55:01:f0:81:67:d9:bf:ad:1f:c6:0e:c1: 5a:2e:fd:4f:0b:76:c4:24:98:74:b6:9e:5a:79:72:77:ad:db: d9:22:40:09:33:97:f0:b4:f4:b7:12:7d:d3:58:18:c1:09:c5: 95:d5:72:28:d5:b4:e6:dc:6e:36:f6:3d:e1:7d:cf:27:f5:19: 0f:0e:71:fd:95:22:f3:43:d0:97:7f:de:7f:fd:4a:f1:e1:de: db:84:10:eb:8d:79:cd:a8:37:e4:ee:97:05:e2:fc:1d:b5:ff: c0:d4:a5:ca:52:95:f1:0b:ee:41:e6:82:24:d6:fa:33:fa:b9: 4b:ac:d8:2d:5a:70:5a:f0:f8:0d:b5:07:35:39:9e:c4:4d:cf: 88:a0:66:94:66:b5:be:d4:86:88:13:7a:d2:da:bb:5a:29:16: fc:7b:fc:d1:6d:c5:ec:31:12:be:69:91:a1:a6:42:5a:f5:e6: 0b:de:cc:c2:9c:29:8f:2e:7c:36:6f:50:c2:21:04:26:38:99: bd:f5:bf:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMfijyAKlK5qNB8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWUxNDkxZDYtMmFiNy00YzE0LWJlZTYtMTIyZWU0NTMx MTI3MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk YTdmYWMxYjEtZWVjYi00MDVlLTk5YWUtNmY4OTZkZTEzYWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAye2Jizx8HuxcP5ZQozGrMzuJIhIGQesRWcHh Ke9birOaSg94NLu+vdBL7vozYL0kHrd5TpbTdKYwdBvC4TvveN7Q1pS1ATMZfusy yQmGl1PAI2ascdmZdHSPDLDHNi7rlQCOF4i5qoHZ+spMFXP/2uBHwQNOUnoOi3LE LkRVLekvmV4v2+2LMc5rRb0Ks0JgBC8lAcloKKthY7Bg/jiSQjybF5e0miRQMlQ2 qOR4KjHllKmhIWCmwMbjhB/1oqRI+yN8FrJDpiN8Yii/UZXg7B+AG/kRa6fXK+hJ UKl5jC0I7LqaHLqUxGBaVcXp1JtdS+NSQrEbCHx/JH28hUayswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ7Er/zQeglW0ZhmMvqMo2N6WAZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0 OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJlZTQ1MzExMjcvYWE4ZGI0YWEtOTJkMS0z YzAxLWI3ZWYtODZjZGFhZmZmNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWUxNDkxZDYtMmFiNy00YzE0LWJl ZTYtMTIyZWU0NTMxMTI3LzllMTQ5MWQ2LTJhYjctNGMxNC1iZWU2LTEyMmVlNDUz MTEyNy5jcmwwHwYDVR0jBBgwFoAUwrX75YVX4vAqQcTI2tTXBsMOm2gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZTE0OTFkNi0yYWI3LTRjMTQtYmVlNi0xMjJl ZTQ1MzExMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOQxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABPvPKF4wNKH2vzJCZ5SgETleOZh6plWFDq7Fgm6IP7nzs/lJXzDm6FY L+kfl2C2zzpAwu50zNlVbEw1VVUB8IFn2b+tH8YOwVou/U8LdsQkmHS2nlp5cnet 29kiQAkzl/C09LcSfdNYGMEJxZXVcijVtObcbjb2PeF9zyf1GQ8Ocf2VIvND0Jd/ 3n/9SvHh3tuEEOuNec2oN+TulwXi/B21/8DUpcpSlfEL7kHmgiTW+jP6uUus2C1a cFrw+A21BzU5nsRNz4igZpRmtb7UhogTetLau1opFvx7/NFtxewxEr5pkaGmQlr1 5gvezMKcKY8ufDZvUMIhBCY4mb31v7I= -----END CERTIFICATE-----Generated at Sun Oct 26 21:52:10 2025 by rpki-client