$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/48a44f23-eef1-3523-bace-73591d7fa442.roa File: 48a44f23-eef1-3523-bace-73591d7fa442.roa (raw, json) Hash identifier: 8MGZEL9p8oB37EQU5d2sBfbzM5oImPAPTwPTg+S0pM0= Subject key identifier: D6:E4:F7:9B:88:46:5D:03:0B:DA:DB:FD:0F:12:44:12:65:25:87:E2 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C706EB360606EF4974640 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/48a44f23-eef1-3523-bace-73591d7fa442.roa Signing time: Fri 10 Oct 2025 15:41:23 +0000 ROA not before: Fri 10 Oct 2025 15:41:23 +0000 ROA not after: Thu 08 Jan 2026 16:41:23 +0000 asID: 81 IP address blocks: 204.84.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:70:6e:b3:60:60:6e:f4:97:46:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:23 2025 GMT Not After : Jan 8 16:41:23 2026 GMT Subject: CN=57c90b9d-8a0a-4f3c-ab2a-f96ffb398ca4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:12:27:4b:60:34:1f:82:f3:dd:5a:d1:d5:00: bd:25:5f:05:b5:68:a8:fa:37:78:d4:b6:4b:8b:fb: 5a:56:ea:5d:d5:a0:c6:fe:3c:f4:95:6a:06:c5:d2: 2b:06:72:8b:2e:70:e5:c3:75:e7:07:dc:7f:92:e1: d6:00:7f:fb:b8:dd:17:76:77:31:68:20:44:d2:61: 46:17:23:9d:f5:f0:de:9f:4e:2a:35:ff:d1:98:2d: 9d:ad:37:d3:72:be:43:ce:7e:43:54:b6:0d:6e:bc: 0a:bd:57:93:52:39:71:3d:e3:56:cf:96:d8:cc:82: 52:21:e2:a2:06:ab:b3:06:99:67:a7:0c:30:cf:e2: 6d:ea:dd:f5:a1:1a:8b:fd:a7:49:33:44:96:39:93: 13:6a:4f:26:f0:85:c7:c8:58:5c:d0:0b:bd:f4:08: 9c:e2:2a:13:2b:d7:d6:c1:22:15:10:f5:0b:47:d8: d5:3b:05:3b:d6:58:68:d1:cf:e5:65:16:b8:40:94: 1b:ae:7b:42:b6:f6:00:0a:09:92:04:fc:22:ca:eb: ad:09:93:35:2c:38:e7:8c:df:31:ef:79:a1:d4:53: 06:d3:fb:47:2c:ab:7e:29:43:13:bc:5f:72:76:af: 1c:fb:e7:f5:1f:4c:83:fe:29:d6:50:ce:9b:c5:1d: e5:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E4:F7:9B:88:46:5D:03:0B:DA:DB:FD:0F:12:44:12:65:25:87:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/48a44f23-eef1-3523-bace-73591d7fa442.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.84.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f7:45:40:77:e6:a3:fe:d5:67:fa:a5:1e:b3:6e:57:93:27: 4d:f9:a1:c2:f5:54:f1:9e:2e:36:79:6c:88:0e:a2:31:f2:fb: 03:13:a5:c9:24:54:0f:33:19:04:a0:2e:85:8b:b3:be:d1:a6: cc:7d:8d:8b:95:61:84:e7:a8:bd:83:3f:93:a0:4c:c9:dd:d8: d4:ac:24:35:8c:00:71:4c:21:d3:f0:57:af:38:b6:4d:55:7d: 63:a0:b2:47:b1:20:d7:bd:31:f5:1d:57:66:17:99:ec:c9:5c: d7:bb:22:bd:5e:53:a5:d8:8f:1e:f6:48:51:b3:cb:5a:23:4d: 20:45:23:86:3e:e1:82:e9:4a:da:e8:3f:9b:d6:52:8e:0c:a1: 90:fd:8d:55:7a:fa:31:66:6d:8a:38:bf:9f:51:e4:98:b9:44: 6c:b7:db:5d:81:c9:10:b2:cf:83:11:6a:39:4f:87:b0:70:69: 29:5e:46:42:1e:0e:94:a7:9d:a2:c3:18:bc:27:2a:05:41:c4: b6:cb:a1:e3:89:72:0a:be:b2:be:12:04:a7:2d:ae:1c:69:61: 0b:93:b5:b8:c8:c6:b4:73:ee:ff:2f:71:c3:24:5b:e6:a2:d2: 47:c0:a9:d5:8f:41:04:65:7b:52:cb:7f:41:85:2c:69:3f:4f: 04:a5:df:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DHBus2BgbvSXRkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyM1oXDTI2MDEwODE2NDEyM1owLzEtMCsGA1UEAxMk NTdjOTBiOWQtOGEwYS00ZjNjLWFiMmEtZjk2ZmZiMzk4Y2E0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBInS2A0H4Lz3VrR1QC9JV8FtWio+jd41LZL i/taVupd1aDG/jz0lWoGxdIrBnKLLnDlw3XnB9x/kuHWAH/7uN0XdncxaCBE0mFG FyOd9fDen04qNf/RmC2drTfTcr5Dzn5DVLYNbrwKvVeTUjlxPeNWz5bYzIJSIeKi BquzBplnpwwwz+Jt6t31oRqL/adJM0SWOZMTak8m8IXHyFhc0Au99Aic4ioTK9fW wSIVEPULR9jVOwU71lho0c/lZRa4QJQbrntCtvYACgmSBPwiyuutCZM1LDjnjN8x 73mh1FMG0/tHLKt+KUMTvF9ydq8c++f1H0yD/inWUM6bxR3l9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbk95uIRl0DC9rb/Q8SRBJlJYfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDhhNDRmMjMtZWVmMS0z NTIzLWJhY2UtNzM1OTFkN2ZhNDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzFTsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD3RUB35qP+1Wf6pR6zbleTJ035ocL1VPGeLjZ5bIgOojHy+wMTpckk VA8zGQSgLoWLs77Rpsx9jYuVYYTnqL2DP5OgTMnd2NSsJDWMAHFMIdPwV684tk1V fWOgskexINe9MfUdV2YXmezJXNe7Ir1eU6XYjx72SFGzy1ojTSBFI4Y+4YLpStro P5vWUo4MoZD9jVV6+jFmbYo4v59R5Ji5RGy3212ByRCyz4MRajlPh7BwaSleRkIe DpSnnaLDGLwnKgVBxLbLoeOJcgq+sr4SBKctrhxpYQuTtbjIxrRz7v8vccMkW+ai 0kfAqdWPQQRle1LLf0GFLGk/TwSl380= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:57 2025 by rpki-client