$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/43546554-c588-39e0-8c08-25eac086b3de.roa File: 43546554-c588-39e0-8c08-25eac086b3de.roa (raw, json) Hash identifier: xLl9EVcgDZ6IdeTMOtKL3FItGKgY5Kkyp/ao+DFjSOI= Subject key identifier: 93:2D:26:D9:19:DF:18:9F:2A:4D:87:09:69:1E:20:20:85:2D:CA:4F Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6F4EDEB5180BAD486A80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/43546554-c588-39e0-8c08-25eac086b3de.roa Signing time: Fri 10 Oct 2025 15:41:22 +0000 ROA not before: Fri 10 Oct 2025 15:41:22 +0000 ROA not after: Thu 08 Jan 2026 16:41:22 +0000 asID: 81 IP address blocks: 198.85.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6f:4e:de:b5:18:0b:ad:48:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:22 2025 GMT Not After : Jan 8 16:41:22 2026 GMT Subject: CN=5db8ca17-6598-4719-ae97-505c67904724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:3e:79:2a:ec:8b:6e:91:eb:5f:3b:e0:a2: 2f:cc:d7:8e:92:46:be:96:b7:9a:46:fd:50:6d:a5: 46:a7:c3:5c:38:f4:51:a6:5a:66:85:9d:55:80:b3: 71:41:5d:77:bb:ac:3a:d9:34:94:30:a8:ff:ba:32: ec:2f:aa:2e:05:81:56:22:4b:d7:80:c3:e1:af:74: 4b:06:07:93:f5:e3:b9:b1:d3:09:0f:a8:65:30:51: 93:08:10:f6:5c:d5:50:c6:8b:3b:d5:ff:fe:f5:9d: 5f:c7:fb:14:d2:d0:73:ed:b7:60:3d:4d:a5:f5:a9: 13:aa:53:d4:e7:1a:4a:41:03:50:1b:98:51:f7:29: 1f:52:26:10:56:8c:56:38:60:9f:81:10:aa:54:45: fd:11:75:25:c2:1d:de:b6:bc:0c:a6:e1:e4:79:fe: 54:52:ba:4d:d0:d4:41:db:da:1e:18:48:a0:18:af: 92:6f:0e:c8:46:84:63:95:40:03:ff:d9:49:1b:63: a6:58:21:27:64:9c:f1:73:54:30:2e:e9:59:68:68: 68:2a:d4:21:25:2b:3b:91:a4:5f:03:60:1e:b6:19: 2c:52:bf:c6:03:25:af:e6:b3:70:0f:7e:12:8e:0b: 78:40:d3:5c:dd:5a:7f:7a:3b:cf:ff:b9:64:ff:16: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:2D:26:D9:19:DF:18:9F:2A:4D:87:09:69:1E:20:20:85:2D:CA:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/43546554-c588-39e0-8c08-25eac086b3de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.85.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:75:c9:f7:ae:d0:98:35:3b:2a:b9:4e:f2:21:b4:81:62:df: 33:9d:f6:bb:4e:94:c1:48:c6:d3:96:d8:5e:a6:89:07:f9:e8: b1:bc:17:50:75:c7:49:08:c3:49:0e:fd:da:ea:c2:e8:ca:d2: bc:24:f9:a1:2a:d4:f5:8e:05:99:8b:53:49:d7:d0:86:11:cd: 9c:15:0e:cb:4f:2c:61:3d:da:af:b0:f4:a0:89:bc:94:92:4d: 99:b2:49:be:43:cb:e2:38:58:4d:38:fd:96:e2:b0:2f:e1:eb: 44:7e:f6:0d:df:e3:25:d2:fc:b2:0a:76:42:9a:ad:c2:c3:20: c2:d0:9b:60:d2:9d:fe:c7:31:9a:21:52:36:a4:3a:7e:ce:47: 20:22:13:78:37:de:6f:af:d8:27:ff:ee:50:f5:e6:07:f8:a8: f7:c6:03:e9:88:03:bc:88:50:f5:28:3a:61:3d:31:a5:83:ba: b0:ba:d4:7e:b0:c9:a1:a8:9f:97:2c:9e:b8:27:4a:8a:66:5a: ca:43:6e:70:95:0b:90:49:86:7d:29:b5:e3:74:66:cc:4f:49: d3:df:bd:50:1b:95:0a:24:25:7e:7f:7a:a0:02:c7:d1:ae:7e: 42:ea:6d:2d:0f:17:6d:85:07:29:da:43:0d:7e:03:fd:1a:86: b4:7c:f1:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DG9O3rUYC61IaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMloXDTI2MDEwODE2NDEyMlowLzEtMCsGA1UEAxMk NWRiOGNhMTctNjU5OC00NzE5LWFlOTctNTA1YzY3OTA0NzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7o+eSrsi26R61874KIvzNeOkka+lreaRv1Q baVGp8NcOPRRplpmhZ1VgLNxQV13u6w62TSUMKj/ujLsL6ouBYFWIkvXgMPhr3RL BgeT9eO5sdMJD6hlMFGTCBD2XNVQxos71f/+9Z1fx/sU0tBz7bdgPU2l9akTqlPU 5xpKQQNQG5hR9ykfUiYQVoxWOGCfgRCqVEX9EXUlwh3etrwMpuHkef5UUrpN0NRB 29oeGEigGK+Sbw7IRoRjlUAD/9lJG2OmWCEnZJzxc1QwLulZaGhoKtQhJSs7kaRf A2AethksUr/GAyWv5rNwD34Sjgt4QNNc3Vp/ejvP/7lk/xbEZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJMtJtkZ3xifKk2HCWkeICCFLcpPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDM1NDY1NTQtYzU4OC0z OWUwLThjMDgtMjVlYWMwODZiM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExlUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIB1yfeu0Jg1Oyq5TvIhtIFi3zOd9rtOlMFIxtOW2F6miQf56LG8F1B1 x0kIw0kO/drqwujK0rwk+aEq1PWOBZmLU0nX0IYRzZwVDstPLGE92q+w9KCJvJSS TZmySb5Dy+I4WE04/ZbisC/h60R+9g3f4yXS/LIKdkKarcLDIMLQm2DSnf7HMZoh UjakOn7ORyAiE3g33m+v2Cf/7lD15gf4qPfGA+mIA7yIUPUoOmE9MaWDurC61H6w yaGon5csnrgnSopmWspDbnCVC5BJhn0pteN0ZsxPSdPfvVAblQokJX5/eqACx9Gu fkLqbS0PF22FBynaQw1+A/0ahrR88fM= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:48 2025 by rpki-client