$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/25c930ec-0c4c-36c0-9a8d-a5e2d46bab5d.roa File: 25c930ec-0c4c-36c0-9a8d-a5e2d46bab5d.roa (raw, json) Hash identifier: ftPrxkr5lwh6DIntBgWzzOVoBAuV/e/zypGksy7wIjA= Subject key identifier: 4D:C2:E6:9A:52:9D:B9:3C:A3:20:86:E0:64:72:4E:FC:6C:01:4C:14 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C7106790A27762D7924C0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/25c930ec-0c4c-36c0-9a8d-a5e2d46bab5d.roa Signing time: Fri 10 Oct 2025 15:41:23 +0000 ROA not before: Fri 10 Oct 2025 15:41:23 +0000 ROA not after: Thu 08 Jan 2026 16:41:23 +0000 asID: 36850 IP address blocks: 204.85.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:71:06:79:0a:27:76:2d:79:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:23 2025 GMT Not After : Jan 8 16:41:23 2026 GMT Subject: CN=85e8572d-47ec-4635-b7d5-7b78b72348c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ea:ad:57:fa:95:01:bb:f7:45:aa:be:71:b8: 81:42:5a:7c:8c:09:36:b9:70:10:6c:cc:29:77:f1: 98:b8:79:29:8a:29:ee:d8:32:2a:34:95:37:21:7f: 9a:c9:29:1a:2f:4f:1e:01:a2:53:d6:12:2d:ea:b3: 7f:55:46:98:9a:5a:78:f1:2e:67:b0:dd:68:85:c0: 55:d8:d2:7a:f4:fa:52:72:32:c5:f3:d7:c8:01:2c: 33:44:fd:f2:8e:60:b3:18:8c:e7:5b:d2:fe:4d:6d: a6:7e:48:38:53:6c:6d:c5:4e:4a:f0:3f:9e:63:77: 82:b4:06:45:ed:df:33:0c:72:a8:aa:96:ed:2e:b5: 3d:da:bd:f6:71:d5:34:77:7d:be:f5:3f:49:c4:0a: cb:a1:4d:94:32:30:4b:f7:cd:12:dd:01:1e:63:4c: 55:ab:7b:58:30:1f:12:9c:8c:49:37:d9:37:41:98: 00:b0:4e:04:b6:ba:bc:12:fd:a2:90:b2:65:09:64: d3:a4:c7:ab:8b:5e:d9:54:fb:db:cb:11:26:d9:63: 37:25:1d:0e:9e:63:f6:1b:a9:00:dd:e1:f2:b4:4d: 4b:4e:fa:59:81:9a:cf:f3:c6:a9:f1:96:80:ab:b2: a6:4f:e3:f3:64:38:07:17:fe:b1:8d:32:d1:00:b5: 48:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:C2:E6:9A:52:9D:B9:3C:A3:20:86:E0:64:72:4E:FC:6C:01:4C:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/25c930ec-0c4c-36c0-9a8d-a5e2d46bab5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.85.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:79:2f:37:21:79:db:06:7f:b0:58:ea:dd:3c:a6:29:f9:c9: 98:80:65:f4:d8:dc:93:b4:ff:45:8e:b3:91:68:54:58:bb:25: da:1b:25:b0:63:aa:5f:7b:dc:90:65:77:c0:c5:76:97:24:24: 98:49:f7:dc:15:8f:20:7f:04:08:90:87:4b:ef:23:ad:10:38: 96:05:8f:fc:8d:d7:2c:87:a2:8c:4e:5f:6f:c9:00:b0:f6:8f: 2a:bf:ad:cf:c2:25:d1:d0:cd:e7:4d:41:ba:28:2a:46:c0:af: db:67:99:cf:dd:69:4a:8f:74:85:1a:44:c9:71:3c:5b:b2:20: 21:11:3c:6c:92:aa:d8:77:25:c5:c9:46:d4:b1:3f:8d:15:c7: 58:d6:89:67:fc:8d:4a:44:3f:4f:53:07:6c:42:98:f9:88:17: 27:1b:45:3e:ef:08:0a:89:63:dd:ee:ab:4f:df:81:77:61:58: 79:ed:95:75:f2:78:0e:69:e7:60:93:58:8d:90:92:21:22:19: 18:0d:7a:6d:64:a6:a5:4f:04:ff:7e:e5:0a:9c:c0:b7:3f:0a: 87:90:38:9f:93:c9:46:3d:73:77:76:15:c9:56:68:ab:3f:14: eb:c9:ed:ff:1f:ce:4a:19:fa:9d:32:54:0f:a9:9d:ba:c4:30: 2b:bb:4a:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DHEGeQondi15JMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyM1oXDTI2MDEwODE2NDEyM1owLzEtMCsGA1UEAxMk ODVlODU3MmQtNDdlYy00NjM1LWI3ZDUtN2I3OGI3MjM0OGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneqtV/qVAbv3Raq+cbiBQlp8jAk2uXAQbMwp d/GYuHkpiinu2DIqNJU3IX+aySkaL08eAaJT1hIt6rN/VUaYmlp48S5nsN1ohcBV 2NJ69PpScjLF89fIASwzRP3yjmCzGIznW9L+TW2mfkg4U2xtxU5K8D+eY3eCtAZF 7d8zDHKoqpbtLrU92r32cdU0d32+9T9JxArLoU2UMjBL980S3QEeY0xVq3tYMB8S nIxJN9k3QZgAsE4Etrq8Ev2ikLJlCWTTpMeri17ZVPvbyxEm2WM3JR0OnmP2G6kA 3eHytE1LTvpZgZrP88ap8ZaAq7KmT+PzZDgHF/6xjTLRALVIuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3C5ppSnbk8oyCG4GRyTvxsAUwUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMjVjOTMwZWMtMGM0Yy0z NmMwLTlhOGQtYTVlMmQ0NmJhYjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzFWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEV5LzchedsGf7BY6t08pin5yZiAZfTY3JO0/0WOs5FoVFi7JdobJbBj ql973JBld8DFdpckJJhJ99wVjyB/BAiQh0vvI60QOJYFj/yN1yyHooxOX2/JALD2 jyq/rc/CJdHQzedNQbooKkbAr9tnmc/daUqPdIUaRMlxPFuyICERPGySqth3JcXJ RtSxP40Vx1jWiWf8jUpEP09TB2xCmPmIFycbRT7vCAqJY93uq0/fgXdhWHntlXXy eA5p52CTWI2QkiEiGRgNem1kpqVPBP9+5QqcwLc/CoeQOJ+TyUY9c3d2FclWaKs/ FOvJ7f8fzkoZ+p0yVA+pnbrEMCu7SlU= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:32 2025 by rpki-client