$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4f3d2eba-7f1b-3f7d-8cf1-7cc60c8af8e1.roa File: 4f3d2eba-7f1b-3f7d-8cf1-7cc60c8af8e1.roa (raw, json) Hash identifier: nHgHnFwqnS4ItCAYZN5wVt2MFf2K/jEXKXT0ClzOYvM= Subject key identifier: 35:5B:12:21:66:20:8F:D5:5F:E4:8E:47:F6:26:12:31:7F:F0:1C:26 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A363FFFFA6C8EA5652B0C7600 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4f3d2eba-7f1b-3f7d-8cf1-7cc60c8af8e1.roa Signing time: Mon 16 Jun 2025 16:03:22 +0000 ROA not before: Mon 16 Jun 2025 16:03:22 +0000 ROA not after: Sun 14 Sep 2025 16:03:22 +0000 asID: 81 IP address blocks: 198.86.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3f:ff:fa:6c:8e:a5:65:2b:0c:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jun 16 16:03:22 2025 GMT Not After : Sep 14 16:03:22 2025 GMT Subject: CN=aa10dff6-5ecc-4efc-b29c-77466fc45ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c4:aa:97:e4:26:43:88:81:27:a8:ea:83:d3: b5:82:67:79:ff:9e:dd:8e:94:af:2a:b7:98:49:38: 73:8b:32:81:35:a4:c9:7f:37:98:75:be:6c:fb:c6: 4b:1e:89:00:d5:42:87:c4:4e:fe:78:08:5d:94:88: 0b:47:f3:06:2d:2a:1f:1c:33:4a:ba:93:f2:2f:6b: 7f:9c:72:ce:be:cb:44:d8:e6:3a:b2:ed:19:8b:56: 94:0c:8e:0f:62:15:dd:3e:c8:6b:7d:c1:82:f8:d2: 56:bd:2d:cf:55:02:41:a3:e6:ef:75:14:f1:ed:47: 84:01:2e:ea:ca:9e:24:d6:86:b8:6b:00:5d:3a:29: c8:c2:c3:e5:96:6a:75:03:79:2d:06:37:3a:bb:ff: 00:32:32:00:f0:f3:ea:02:1a:03:c3:b2:60:7d:98: 1e:28:44:13:ca:bc:19:04:a3:ee:02:14:ff:4d:8d: 4a:6a:3f:3f:e5:3a:40:ab:a1:fb:55:4d:0e:0f:50: 98:40:57:38:65:cd:99:82:a4:9f:d7:a1:b0:a8:38: 79:15:e7:1f:3d:86:1d:23:ef:f7:02:f4:58:94:7b: 87:b6:47:43:7e:9e:7b:17:21:f3:0b:de:3c:ae:8d: ae:c4:84:cf:fc:d0:a4:c3:e3:0e:5b:cf:57:e8:01: f0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5B:12:21:66:20:8F:D5:5F:E4:8E:47:F6:26:12:31:7F:F0:1C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4f3d2eba-7f1b-3f7d-8cf1-7cc60c8af8e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:69:c2:99:7b:b9:9b:3b:fe:cf:09:22:8d:11:c2:39:d0:00: a0:a6:87:35:ba:bc:0b:e2:fc:6e:6d:ef:bb:5f:83:fd:23:1a: 7a:bf:f1:cb:e6:b0:cf:6f:0a:af:10:95:12:b3:86:ef:b8:05: 09:23:12:c7:3a:62:59:c0:8e:89:d8:bc:3f:1d:f3:b8:97:21: 5b:85:a8:65:44:60:d4:06:54:56:7f:2a:1e:66:7c:a8:f2:90: e6:8a:55:2c:8a:85:8a:d0:7b:50:e0:c5:f9:f2:97:34:fe:b3: 62:7c:9b:89:1e:05:73:c5:1b:f9:17:62:bb:03:79:f2:3c:77: b8:96:f3:f8:1a:2a:b5:ef:73:0c:16:ca:22:4a:29:4a:43:e4: 16:03:e7:39:9b:01:7e:25:5b:41:8a:01:bf:18:62:cc:90:f8: 35:3f:25:1e:0e:6b:42:d2:8c:08:75:3c:9d:b1:af:6f:8d:04: 28:d0:c0:44:03:f2:41:48:17:92:df:73:7b:c3:71:28:56:9c: ee:ae:6f:3d:86:47:af:45:05:0a:95:be:50:d1:7b:f4:9e:44: 29:af:3a:e0:88:d5:79:ee:d4:29:66:bb:07:e7:af:b3:3f:71: ab:7f:6d:9c:aa:bc:97:d1:f9:f4:d8:95:26:23:b7:9a:1a:f9: 8e:2f:03:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo2P//6bI6lZSsMdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDYxNjE2MDMyMloXDTI1MDkxNDE2MDMyMlowLzEtMCsGA1UEAxMk YWExMGRmZjYtNWVjYy00ZWZjLWIyOWMtNzc0NjZmYzQ1ZWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cSql+QmQ4iBJ6jqg9O1gmd5/57djpSvKreY SThzizKBNaTJfzeYdb5s+8ZLHokA1UKHxE7+eAhdlIgLR/MGLSofHDNKupPyL2t/ nHLOvstE2OY6su0Zi1aUDI4PYhXdPshrfcGC+NJWvS3PVQJBo+bvdRTx7UeEAS7q yp4k1oa4awBdOinIwsPllmp1A3ktBjc6u/8AMjIA8PPqAhoDw7JgfZgeKEQTyrwZ BKPuAhT/TY1Kaj8/5TpAq6H7VU0OD1CYQFc4Zc2ZgqSf16GwqDh5FecfPYYdI+/3 AvRYlHuHtkdDfp57FyHzC948ro2uxITP/NCkw+MOW89X6AHwMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVbEiFmII/VX+SOR/YmEjF/8BwmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNGYzZDJlYmEtN2YxYi0z ZjdkLThjZjEtN2NjNjBjOGFmOGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlZuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlpwpl7uZs7/s8JIo0RwjnQAKCmhzW6vAvi/G5t77tfg/0jGnq/8cvm sM9vCq8QlRKzhu+4BQkjEsc6YlnAjonYvD8d87iXIVuFqGVEYNQGVFZ/Kh5mfKjy kOaKVSyKhYrQe1DgxfnylzT+s2J8m4keBXPFG/kXYrsDefI8d7iW8/gaKrXvcwwW yiJKKUpD5BYD5zmbAX4lW0GKAb8YYsyQ+DU/JR4Oa0LSjAh1PJ2xr2+NBCjQwEQD 8kFIF5Lfc3vDcShWnO6ubz2GR69FBQqVvlDRe/SeRCmvOuCI1Xnu1Clmuwfnr7M/ cat/bZyqvJfR+fTYlSYjt5oa+Y4vA5A= -----END CERTIFICATE-----Generated at Mon Jun 30 13:50:21 2025 by rpki-client