$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3749369b-c328-31f4-9427-9e0a3e2cb185.roa File: 3749369b-c328-31f4-9427-9e0a3e2cb185.roa (raw, json) Hash identifier: AhkTKy2YB99qNtY6sZ80DLpT1dxF+Q4U5o9pK5gX0qc= Subject key identifier: 93:A4:4A:74:D2:CA:04:AA:2D:9E:7A:6E:DF:17:88:AF:65:35:BB:A0 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C682A5545FD542DA862A0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3749369b-c328-31f4-9427-9e0a3e2cb185.roa Signing time: Fri 10 Oct 2025 15:41:19 +0000 ROA not before: Fri 10 Oct 2025 15:41:19 +0000 ROA not after: Thu 08 Jan 2026 16:41:19 +0000 asID: 81 IP address blocks: 198.86.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:68:2a:55:45:fd:54:2d:a8:62:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:19 2025 GMT Not After : Jan 8 16:41:19 2026 GMT Subject: CN=f945c684-ee1b-41ee-abf2-03e1e626a454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d9:f6:67:3d:4f:b2:d5:ad:c1:28:36:7c:69: c7:16:d4:0b:98:3e:9d:07:b9:06:54:c5:36:fa:73: 2f:19:1d:97:fb:ea:b2:b2:f9:2b:29:0d:75:3d:39: fc:e4:4b:21:b6:32:89:b5:63:0c:08:67:de:03:dd: 38:b3:45:ed:c2:4c:52:58:0c:c1:af:61:68:e9:73: c8:a6:1f:f9:ee:30:87:de:44:5f:d2:2a:a5:d4:38: 0b:02:3d:8b:54:7e:dd:ed:11:40:8d:b2:65:9f:af: 95:2e:e4:4d:6b:05:6c:0c:0e:bc:ed:af:01:bc:db: 0a:ff:b5:31:49:d6:33:bc:13:00:59:19:56:78:d0: 7a:69:98:d0:cd:35:0a:53:90:67:29:2e:6f:45:4e: af:3d:d4:da:6d:23:24:a8:5b:89:cb:ae:91:18:7d: 9a:a3:c9:28:11:14:66:24:d6:f1:b3:ae:c8:e3:e3: c4:07:be:91:44:d5:57:e0:dd:ac:58:fb:73:2e:f9: 3e:92:4e:9a:6d:95:03:01:0a:4a:b0:17:9b:f0:39: a3:4c:58:1f:4b:89:49:fb:a4:88:61:a0:c1:8c:83: d2:76:28:df:fd:12:f8:df:19:9b:d8:c7:5a:68:c9: d9:2b:b6:8e:8c:52:22:48:4f:f5:c3:78:9d:07:6c: 78:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:A4:4A:74:D2:CA:04:AA:2D:9E:7A:6E:DF:17:88:AF:65:35:BB:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3749369b-c328-31f4-9427-9e0a3e2cb185.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:5b:a9:1d:82:56:4e:68:16:36:e7:94:48:ad:df:cd:41:d1: ee:90:1e:9f:16:b6:07:6d:62:42:87:a5:b9:2b:e4:e4:b7:33: 0a:d2:c2:d4:cc:99:1e:d2:11:ad:3d:05:9c:28:8f:b2:5b:dd: 99:42:37:7d:d6:b0:f4:2e:cf:dd:67:15:e1:c1:27:d3:66:f7: bb:0d:28:08:72:cb:e4:71:c3:24:31:52:93:fa:20:cd:e3:f3: 56:74:51:b5:8f:29:87:3b:2e:ab:88:60:4a:92:89:6c:2e:b6: e9:67:33:dd:c9:ac:84:d1:c2:ce:f3:0c:7b:94:1e:f6:44:d1: c6:b8:72:8e:60:90:4b:7d:c1:c9:c6:2a:d4:0b:69:6d:5a:25: 4e:a7:46:bb:c2:f5:d2:72:65:78:bd:7a:44:45:87:56:7d:25: d4:93:1a:d7:44:c3:ff:5d:d6:ac:7b:37:76:85:bc:ca:21:f7: 4f:3c:d5:96:c3:70:31:d7:0f:60:1e:3f:c3:1f:ba:b3:84:f6: 90:fa:ce:6d:9c:fe:0d:5a:13:4a:a5:d8:6f:f3:31:70:e0:89: 4e:27:2a:f3:81:99:73:57:f9:e8:71:30:94:f3:32:7e:03:e5: d4:4f:8b:47:1a:b3:0f:ad:7e:77:ee:17:5b:0a:e8:f6:5d:32: 26:3c:15:d8 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEt6DGgqVUX9VC2oYqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDExOVoXDTI2MDEwODE2NDExOVowLzEtMCsGA1UEAxMk Zjk0NWM2ODQtZWUxYi00MWVlLWFiZjItMDNlMWU2MjZhNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9n2Zz1PstWtwSg2fGnHFtQLmD6dB7kGVMU2 +nMvGR2X++qysvkrKQ11PTn85EshtjKJtWMMCGfeA904s0XtwkxSWAzBr2Fo6XPI ph/57jCH3kRf0iql1DgLAj2LVH7d7RFAjbJln6+VLuRNawVsDA687a8BvNsK/7Ux SdYzvBMAWRlWeNB6aZjQzTUKU5BnKS5vRU6vPdTabSMkqFuJy66RGH2ao8koERRm JNbxs67I4+PEB76RRNVX4N2sWPtzLvk+kk6abZUDAQpKsBeb8DmjTFgfS4lJ+6SI YaDBjIPSdijf/RL43xmb2MdaaMnZK7aOjFIiSE/1w3idB2x47QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJOkSnTSygSqLZ56bt8XiK9lNbugMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMzc0OTM2OWItYzMyOC0z MWY0LTk0MjctOWUwYTNlMmNiMTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxlYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZlupHYJWTmgWNueUSK3fzUHR7pAenxa2B21iQoeluSvk5LczCtLC1MyZ HtIRrT0FnCiPslvdmUI3fdaw9C7P3WcV4cEn02b3uw0oCHLL5HHDJDFSk/ogzePz VnRRtY8phzsuq4hgSpKJbC626Wcz3cmshNHCzvMMe5Qe9kTRxrhyjmCQS33BycYq 1AtpbVolTqdGu8L10nJleL16REWHVn0l1JMa10TD/13WrHs3doW8yiH3TzzVlsNw MdcPYB4/wx+6s4T2kPrObZz+DVoTSqXYb/MxcOCJTicq84GZc1f56HEwlPMyfgPl 1E+LRxqzD61+d+4XWwro9l0yJjwV2A== -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:43 2025 by rpki-client