$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3854ed80-8c5d-39e6-b398-2a1f91211d94.roa File: 3854ed80-8c5d-39e6-b398-2a1f91211d94.roa (raw, json) Hash identifier: 9oYmS+Xcz0wWfNydn9Ej7K+XFy9gyswG/k8wLnZq73s= Subject key identifier: DC:23:BD:31:A7:6B:CE:74:3B:6D:C6:16:4F:7C:B4:A3:D4:17:EF:FE Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6F5E01CD14AF0AC66330 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3854ed80-8c5d-39e6-b398-2a1f91211d94.roa Signing time: Fri 10 Oct 2025 15:41:22 +0000 ROA not before: Fri 10 Oct 2025 15:41:22 +0000 ROA not after: Thu 08 Jan 2026 16:41:22 +0000 asID: 81 IP address blocks: 198.86.104.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6f:5e:01:cd:14:af:0a:c6:63:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:22 2025 GMT Not After : Jan 8 16:41:22 2026 GMT Subject: CN=279f093c-4672-443b-8b77-c28f005438f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:00:1c:79:b9:62:f8:86:48:c2:98:7a:f4:d5: e9:8e:fa:95:09:f2:77:4b:41:b0:06:00:9e:ac:7f: 1c:7e:97:f4:96:a9:cf:24:f2:f4:91:1a:19:91:a5: ae:4c:de:a9:a4:56:2b:56:6f:b8:12:d6:c6:41:0e: 44:b9:56:ef:e7:dc:a4:3d:f3:d1:1d:9e:3a:cf:00: a9:1c:c6:ec:f0:18:09:8d:3b:0f:03:6b:ea:b4:d0: 68:0f:80:0a:5a:e8:3c:6e:54:3e:5a:0d:ce:ba:be: fb:71:f4:db:ec:e4:c2:48:33:72:61:bf:ee:ac:d9: 60:bd:ff:70:7f:2c:41:bc:b4:2f:91:23:4a:1a:79: b4:4b:bb:48:0a:20:40:f4:46:6a:c9:cd:30:30:8f: 49:67:e8:c4:a0:70:b3:40:d2:8e:b6:4e:59:a3:10: 53:bb:35:3f:3b:65:3f:f0:a3:c3:fd:d3:88:01:aa: 07:75:7a:64:be:8e:b3:cb:fa:a4:fd:ac:99:6b:10: 9e:26:78:ec:d3:61:dd:3b:37:bd:6a:1d:1c:82:32: 82:da:7f:7d:f3:ca:11:ee:84:72:74:bd:6d:0d:63: 26:bb:b5:51:5a:c1:85:c1:3a:c2:b2:f0:32:5b:0f: 88:d7:dd:97:37:58:36:6b:b5:9e:de:9e:a2:39:02: 67:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:23:BD:31:A7:6B:CE:74:3B:6D:C6:16:4F:7C:B4:A3:D4:17:EF:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3854ed80-8c5d-39e6-b398-2a1f91211d94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.104.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:89:fa:24:23:20:13:af:25:a3:db:6f:74:39:41:c4:52:1c: 38:0b:50:dd:a2:fe:d1:f9:38:f6:4a:c1:f7:7f:a5:ae:b9:ad: da:ea:e9:7a:44:37:34:5a:0d:fd:1b:de:e0:c9:0f:84:14:af: 51:3e:83:d5:b7:13:c7:2e:cd:85:ba:f1:25:fc:12:c3:ed:83: be:2a:cd:ab:ee:e6:59:d1:1b:48:13:4b:53:e2:ea:4a:7f:ec: 4c:a7:62:ac:81:a9:dd:ca:47:87:3f:df:0e:c8:5d:bc:da:32: 2d:07:cb:06:13:4c:8f:04:a6:8d:fd:69:20:5c:1e:54:60:a8: 98:5b:d7:a5:a2:0e:c6:96:68:ad:16:e7:3f:fd:5f:d3:1c:37: 6a:5f:20:33:0b:54:8b:94:aa:c8:66:3d:f0:47:0c:9b:9b:e7: 0e:10:b6:06:72:b6:17:44:bc:f5:2f:f5:ed:a9:0a:8c:4a:aa: 94:b7:20:70:ee:3d:55:27:f0:1c:89:8b:27:51:66:24:4c:45: c5:cc:18:a7:3e:b6:ff:14:b9:db:6b:3e:e9:85:4b:90:5a:6f: 02:db:e3:a8:42:b2:ae:8d:d9:40:e1:b0:f2:36:42:7d:ae:29: bc:14:45:af:44:d6:98:8b:ed:9c:0f:dd:0d:c9:f4:9e:ca:cc: 90:35:10:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DG9eAc0UrwrGYzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMloXDTI2MDEwODE2NDEyMlowLzEtMCsGA1UEAxMk Mjc5ZjA5M2MtNDY3Mi00NDNiLThiNzctYzI4ZjAwNTQzOGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQAcebli+IZIwph69NXpjvqVCfJ3S0GwBgCe rH8cfpf0lqnPJPL0kRoZkaWuTN6ppFYrVm+4EtbGQQ5EuVbv59ykPfPRHZ46zwCp HMbs8BgJjTsPA2vqtNBoD4AKWug8blQ+Wg3Our77cfTb7OTCSDNyYb/urNlgvf9w fyxBvLQvkSNKGnm0S7tICiBA9EZqyc0wMI9JZ+jEoHCzQNKOtk5ZoxBTuzU/O2U/ 8KPD/dOIAaoHdXpkvo6zy/qk/ayZaxCeJnjs02HdOze9ah0cgjKC2n9988oR7oRy dL1tDWMmu7VRWsGFwTrCsvAyWw+I192XN1g2a7We3p6iOQJnBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwjvTGna850O23GFk98tKPUF+/+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMzg1NGVkODAtOGM1ZC0z OWU2LWIzOTgtMmExZjkxMjExZDk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxlZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqJ+iQjIBOvJaPbb3Q5QcRSHDgLUN2i/tH5OPZKwfd/pa65rdrq6XpE NzRaDf0b3uDJD4QUr1E+g9W3E8cuzYW68SX8EsPtg74qzavu5lnRG0gTS1Pi6kp/ 7EynYqyBqd3KR4c/3w7IXbzaMi0HywYTTI8Epo39aSBcHlRgqJhb16WiDsaWaK0W 5z/9X9McN2pfIDMLVIuUqshmPfBHDJub5w4QtgZythdEvPUv9e2pCoxKqpS3IHDu PVUn8ByJiydRZiRMRcXMGKc+tv8UudtrPumFS5BabwLb46hCsq6N2UDhsPI2Qn2u KbwURa9E1piL7ZwP3Q3J9J7KzJA1EBY= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:01 2025 by rpki-client