$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/04ec0560-71f2-3211-9d14-5b48afc413fa.roa File: 04ec0560-71f2-3211-9d14-5b48afc413fa.roa (raw, json) Hash identifier: a0uUQj6jzbXl2aPUHz1EVabyzWoIaCzf+HpsbddVEHk= Subject key identifier: F7:D6:0D:0D:1A:A2:E6:22:B6:61:4C:AA:00:F4:48:60:46:7D:EA:4E Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6FE6A122AB3B90AA3EC0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/04ec0560-71f2-3211-9d14-5b48afc413fa.roa Signing time: Fri 10 Oct 2025 15:41:23 +0000 ROA not before: Fri 10 Oct 2025 15:41:23 +0000 ROA not after: Thu 08 Jan 2026 16:41:23 +0000 asID: 81 IP address blocks: 198.86.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6f:e6:a1:22:ab:3b:90:aa:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:23 2025 GMT Not After : Jan 8 16:41:23 2026 GMT Subject: CN=5670b749-4bd4-4061-84be-b9e4127a8b64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:8c:fe:a6:e7:a1:9f:a6:68:b7:d7:1c:20: f7:bd:50:28:eb:a5:7a:ec:6e:3c:74:5c:8b:57:00: 9f:99:78:49:4a:65:4f:22:93:bc:f6:13:f2:38:ca: 69:9b:c3:87:15:cc:2d:46:41:84:67:f8:c8:37:57: 17:68:6f:11:d5:ab:e4:28:30:2b:8f:da:68:b2:a8: f7:21:99:b5:87:30:e9:c7:1e:37:4e:fe:bc:12:71: ee:33:e5:89:d1:54:5d:d8:3e:d5:0d:0c:7e:60:95: 4e:a9:50:2a:49:0d:1e:9b:b0:58:e7:db:4a:3a:94: a1:d6:d8:58:a5:35:9c:7b:ac:99:dc:8a:4e:8b:6c: f3:94:36:8c:5e:24:4f:bd:d2:0a:83:fa:8f:50:6a: c0:49:29:37:d3:47:cc:c1:bf:7a:ec:29:72:8f:34: cd:7f:7b:bc:cf:c8:41:89:0f:5e:78:2c:9a:07:10: e2:24:75:44:fa:82:40:52:0b:1b:de:6d:7c:2e:46: f5:ea:45:ab:06:96:c9:f4:94:b1:b4:db:a0:12:0d: 4e:c5:03:8f:53:f1:8c:94:23:9c:72:f9:de:02:29: 08:51:c0:10:b4:32:66:f1:42:6d:77:2d:f6:93:fd: fa:09:22:1d:69:26:91:db:5f:1a:e8:0c:ab:47:49: 55:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D6:0D:0D:1A:A2:E6:22:B6:61:4C:AA:00:F4:48:60:46:7D:EA:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/04ec0560-71f2-3211-9d14-5b48afc413fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:51:28:32:c7:ec:2b:5c:1d:65:b5:56:00:c0:6e:9a:c6:f2: 49:97:8c:95:8e:5b:c5:e6:a5:2d:21:31:7b:3a:a5:42:69:ba: 7f:81:c3:37:90:de:d8:b5:0a:f6:54:ba:28:8d:d0:c7:f0:c0: 7f:41:32:1a:7b:1f:60:59:77:c7:7e:ad:a5:07:ab:bf:49:a6: 59:9b:26:2e:9f:b0:fb:aa:8d:9b:13:73:cd:ca:34:e3:c6:8b: 34:67:28:93:7f:e0:27:ff:75:7e:56:50:43:41:1b:39:bc:92: 7a:34:e2:59:1e:80:41:05:f3:06:38:b7:60:d4:df:e4:94:40: e0:1f:f3:b4:c1:c5:9c:2d:53:af:70:22:8d:9f:72:71:2e:a2: a2:9b:14:77:d7:72:7f:d7:c6:89:bb:02:52:3c:54:75:97:aa: 82:01:11:d0:51:ab:91:a7:91:55:a3:0f:1f:97:53:9d:df:7c: 93:9e:83:69:57:cf:28:71:e7:39:3d:18:e5:a3:ac:8d:7e:ee: 41:e9:a9:2b:fd:59:35:64:74:f5:0c:9b:43:5a:cf:68:29:22: 35:2c:b6:d2:6a:1d:b4:14:de:0d:0c:01:5f:c3:51:90:88:a6: c1:86:4a:a8:15:aa:c8:d9:66:15:a6:82:8c:55:59:d5:82:28: 6a:85:85:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DG/moSKrO5CqPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyM1oXDTI2MDEwODE2NDEyM1owLzEtMCsGA1UEAxMk NTY3MGI3NDktNGJkNC00MDYxLTg0YmUtYjllNDEyN2E4YjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1yM/qbnoZ+maLfXHCD3vVAo66V67G48dFyL VwCfmXhJSmVPIpO89hPyOMppm8OHFcwtRkGEZ/jIN1cXaG8R1avkKDArj9posqj3 IZm1hzDpxx43Tv68EnHuM+WJ0VRd2D7VDQx+YJVOqVAqSQ0em7BY59tKOpSh1thY pTWce6yZ3IpOi2zzlDaMXiRPvdIKg/qPUGrASSk300fMwb967ClyjzTNf3u8z8hB iQ9eeCyaBxDiJHVE+oJAUgsb3m18Lkb16kWrBpbJ9JSxtNugEg1OxQOPU/GMlCOc cvneAikIUcAQtDJm8UJtdy32k/36CSIdaSaR218a6AyrR0lVXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfWDQ0aouYitmFMqgD0SGBGfepOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMDRlYzA1NjAtNzFmMi0z MjExLTlkMTQtNWI0OGFmYzQxM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxlb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRRKDLH7CtcHWW1VgDAbprG8kmXjJWOW8XmpS0hMXs6pUJpun+BwzeQ 3ti1CvZUuiiN0MfwwH9BMhp7H2BZd8d+raUHq79JplmbJi6fsPuqjZsTc83KNOPG izRnKJN/4Cf/dX5WUENBGzm8kno04lkegEEF8wY4t2DU3+SUQOAf87TBxZwtU69w Io2fcnEuoqKbFHfXcn/Xxom7AlI8VHWXqoIBEdBRq5GnkVWjDx+XU53ffJOeg2lX zyhx5zk9GOWjrI1+7kHpqSv9WTVkdPUMm0Naz2gpIjUsttJqHbQU3g0MAV/DUZCI psGGSqgVqsjZZhWmgoxVWdWCKGqFhRo= -----END CERTIFICATE-----Generated at Mon Oct 20 11:58:28 2025 by rpki-client