$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0695d6d0-9bf2-3fc8-ae3a-222064ebe5c8.roa File: 0695d6d0-9bf2-3fc8-ae3a-222064ebe5c8.roa (raw, json) Hash identifier: BkfUK3zKvLfuVm+qVo7VKLvR1dqlxewsdhbPekIaCog= Subject key identifier: 3A:D9:96:27:41:F5:63:C6:A8:B0:B8:BF:75:B2:32:6E:19:48:C0:84 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C711521A92CF2186C7380 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0695d6d0-9bf2-3fc8-ae3a-222064ebe5c8.roa Signing time: Fri 10 Oct 2025 15:41:23 +0000 ROA not before: Fri 10 Oct 2025 15:41:23 +0000 ROA not after: Thu 08 Jan 2026 16:41:23 +0000 asID: 36850 IP address blocks: 204.85.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:71:15:21:a9:2c:f2:18:6c:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:23 2025 GMT Not After : Jan 8 16:41:23 2026 GMT Subject: CN=95fee7cd-aaba-42e8-980b-8c5c9b293f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:1a:ff:5d:3d:68:c9:69:81:8c:ea:7e:d6:43: a0:26:cd:d2:72:c8:0e:70:94:c3:e7:7c:47:46:f2: fe:12:b0:47:08:3b:52:a4:b5:49:42:82:76:73:65: c1:6b:32:cb:75:5f:87:3d:3b:d9:e8:f3:df:1d:79: c8:1f:ca:ba:e4:e6:78:b2:7f:d1:a8:a9:74:8e:34: e6:5c:b2:75:d2:af:10:e0:56:44:89:3d:e7:2f:90: 9d:cd:fb:e2:85:62:24:4d:b9:55:5f:a0:27:8a:9b: 74:12:7a:c4:b4:94:08:8c:bc:5d:72:f0:e5:64:25: 4c:40:be:30:f4:9b:22:6f:44:bb:34:6f:96:f8:6d: 2a:b1:2c:bb:b8:5d:0e:2b:99:51:03:82:75:8c:de: 80:c5:1f:30:52:82:76:e9:f4:2a:7c:7e:f6:d8:fd: a3:d9:c2:54:ef:22:ff:63:20:10:da:b6:27:db:5d: dc:2d:48:9d:cb:e0:c5:49:4c:79:30:87:68:8f:97: a9:19:78:c7:d6:a1:a7:44:e9:74:d8:71:2d:2f:65: d0:dd:00:b9:9e:df:52:7d:c4:52:f5:6c:7f:09:18: d3:a9:41:5b:1e:74:05:47:85:9b:fa:03:f4:a7:a9: c5:0d:53:0f:7e:87:cc:d8:f8:11:97:50:35:7e:3e: d0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D9:96:27:41:F5:63:C6:A8:B0:B8:BF:75:B2:32:6E:19:48:C0:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/0695d6d0-9bf2-3fc8-ae3a-222064ebe5c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.85.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:00:52:41:a0:27:17:e2:d5:72:4d:fc:c0:2e:5e:1a:df:27: 62:78:ca:17:5b:3d:02:c0:f1:08:d5:c2:e1:1e:25:d9:42:47: f0:d9:48:9e:7c:8c:af:b9:6c:0a:73:7a:e6:fa:ac:c1:db:74: 83:3d:8c:ba:e0:1b:3b:cb:a5:38:0f:cc:e2:f4:29:d2:cc:56: 14:11:6e:6c:1f:dc:b1:f5:eb:30:d1:4e:e5:1a:4c:18:43:65: 20:3c:ba:11:84:59:85:55:ac:56:6c:ac:ad:df:8f:02:4e:3f: e6:bd:e5:e4:aa:22:e6:4d:24:8b:35:44:6e:ba:b3:62:f6:7b: 79:e6:1d:f5:ea:92:c5:88:27:09:74:ed:ea:b0:89:4b:a5:aa: be:5f:ea:d4:2f:fc:b4:9d:70:3c:89:0b:36:c1:f3:cc:03:34: 45:3e:0c:96:d8:8b:74:6f:d1:52:bf:88:9d:41:5f:93:4c:1c: 43:7d:32:65:50:c4:e9:65:7f:01:1e:ed:79:c1:bd:7d:ff:ba: 81:19:8e:48:b4:2b:7b:2f:79:f8:c6:d0:b3:96:38:33:c0:a7: bc:80:56:b5:19:a7:35:af:c1:eb:59:ac:13:95:54:ea:0a:b9: a8:61:6c:e8:a7:58:ec:23:be:27:bf:3e:2a:5f:a3:b2:28:c9: b2:90:ed:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DHEVIaks8hhsc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyM1oXDTI2MDEwODE2NDEyM1owLzEtMCsGA1UEAxMk OTVmZWU3Y2QtYWFiYS00MmU4LTk4MGItOGM1YzliMjkzZjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxr/XT1oyWmBjOp+1kOgJs3ScsgOcJTD53xH RvL+ErBHCDtSpLVJQoJ2c2XBazLLdV+HPTvZ6PPfHXnIH8q65OZ4sn/RqKl0jjTm XLJ10q8Q4FZEiT3nL5CdzfvihWIkTblVX6Anipt0EnrEtJQIjLxdcvDlZCVMQL4w 9Jsib0S7NG+W+G0qsSy7uF0OK5lRA4J1jN6AxR8wUoJ26fQqfH722P2j2cJU7yL/ YyAQ2rYn213cLUidy+DFSUx5MIdoj5epGXjH1qGnROl02HEtL2XQ3QC5nt9SfcRS 9Wx/CRjTqUFbHnQFR4Wb+gP0p6nFDVMPfofM2PgRl1A1fj7Q4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrZlidB9WPGqLC4v3WyMm4ZSMCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMDY5NWQ2ZDAtOWJmMi0z ZmM4LWFlM2EtMjIyMDY0ZWJlNWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFW/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsAUkGgJxfi1XJN/MAuXhrfJ2J4yhdbPQLA8QjVwuEeJdlCR/DZSJ58 jK+5bApzeub6rMHbdIM9jLrgGzvLpTgPzOL0KdLMVhQRbmwf3LH16zDRTuUaTBhD ZSA8uhGEWYVVrFZsrK3fjwJOP+a95eSqIuZNJIs1RG66s2L2e3nmHfXqksWIJwl0 7eqwiUulqr5f6tQv/LSdcDyJCzbB88wDNEU+DJbYi3Rv0VK/iJ1BX5NMHEN9MmVQ xOllfwEe7XnBvX3/uoEZjki0K3svefjG0LOWODPAp7yAVrUZpzWvwetZrBOVVOoK uahhbOinWOwjvie/Pipfo7IoybKQ7ZM= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:11 2025 by rpki-client