$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/76afde7f-333e-3667-bc59-ef27a79dc4f0.roa File: 76afde7f-333e-3667-bc59-ef27a79dc4f0.roa (raw, json) Hash identifier: CAEssqcyjBZ1a9z9zu0CFPOAjB+nrK2nEnR/s6+Qscc= Subject key identifier: 43:D7:21:6B:D6:E0:27:04:CD:DD:98:4D:87:B5:63:8E:7B:71:41:F9 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C71244DC5325815381840 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/76afde7f-333e-3667-bc59-ef27a79dc4f0.roa Signing time: Fri 10 Oct 2025 15:41:23 +0000 ROA not before: Fri 10 Oct 2025 15:41:23 +0000 ROA not after: Thu 08 Jan 2026 16:41:23 +0000 asID: 81 IP address blocks: 204.85.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:71:24:4d:c5:32:58:15:38:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:23 2025 GMT Not After : Jan 8 16:41:23 2026 GMT Subject: CN=663f6f3f-ef78-4d9c-bfae-7ba63309d6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1b:42:c2:4d:4a:7d:50:76:5c:4b:4b:03:bf: ff:0f:e1:36:f3:a1:ef:15:dd:a8:5c:52:eb:07:ab: 2b:30:f4:58:8e:87:d6:5a:62:2f:21:3a:aa:39:84: c5:0e:c5:6e:27:52:e4:67:ee:2d:21:1c:47:af:55: a7:fe:10:75:95:5a:f6:07:a7:d9:fc:b3:f5:c1:07: 1f:77:0e:9d:6d:89:3d:74:89:ff:82:db:03:1c:e2: d2:bb:31:af:7c:0d:4b:00:c0:71:43:5c:df:d9:69: e7:3b:d1:f8:a7:96:5d:e4:53:f8:cc:c1:04:bd:a5: fe:ef:74:47:b2:bd:77:40:69:79:a3:71:fb:b0:35: e1:ee:49:6d:cb:8c:4d:63:76:01:6a:60:83:d7:b7: 6d:d9:50:c6:e0:ef:29:c3:e6:b3:f4:d4:dc:b6:40: 8c:84:bc:da:e2:c3:02:73:20:f6:cc:95:32:10:0f: 9b:7b:5d:59:b3:d5:17:68:80:12:c4:e3:06:4c:86: 0b:1e:e8:3e:64:0e:91:9c:12:1a:8a:f9:a8:a3:85: 48:e3:40:f4:b9:3a:e9:12:74:df:cd:47:4c:7f:d9: 44:ee:85:86:ac:a0:a8:46:95:d9:0d:3e:9d:c7:a3: 67:e1:47:ae:d9:a3:c4:53:6e:e9:a3:7a:e3:14:4d: ed:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D7:21:6B:D6:E0:27:04:CD:DD:98:4D:87:B5:63:8E:7B:71:41:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/76afde7f-333e-3667-bc59-ef27a79dc4f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.85.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:97:f3:7d:0c:90:51:be:5c:62:f3:a6:d8:ea:92:03:dc:7f: be:c2:85:1e:94:b7:4b:e1:b0:40:1d:01:5c:26:2f:37:ab:01: d9:57:0d:07:74:c4:3d:31:97:21:2d:c5:db:50:ce:f5:86:5c: ea:fb:fc:4e:cf:a0:9b:9f:ed:98:6b:9e:9a:94:6b:8c:1d:ff: 4b:bb:9f:f4:cc:ea:d1:81:68:e1:69:66:3f:18:1c:94:af:2b: 89:6d:6f:4b:63:88:18:00:12:5d:80:86:ca:5e:39:f6:ff:75: bb:8b:7d:05:8d:56:81:78:df:6e:9b:dd:53:80:42:ef:ad:7b: 16:ad:a8:3e:20:5d:8d:54:20:83:bb:f0:74:59:52:2b:d7:76: 87:79:cc:4b:05:83:49:c5:7b:84:ac:f6:2c:4f:16:7c:9a:4b: 08:5f:2b:1e:53:93:53:db:64:67:fe:4b:54:4f:27:de:0f:18: e1:4f:15:98:fd:d1:91:9b:03:46:60:2a:d6:29:ef:bb:1f:de: 23:d0:1d:77:eb:51:f1:c8:3f:c6:9d:33:01:98:00:ff:d1:93: b5:ce:54:34:a0:d9:03:31:1a:3b:11:cb:3a:ba:81:73:7b:c7: a8:e1:02:e1:68:d5:86:d4:3a:e2:03:d6:25:66:74:30:fe:21: 24:75:fd:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DHEkTcUyWBU4GEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyM1oXDTI2MDEwODE2NDEyM1owLzEtMCsGA1UEAxMk NjYzZjZmM2YtZWY3OC00ZDljLWJmYWUtN2JhNjMzMDlkNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhtCwk1KfVB2XEtLA7//D+E286HvFd2oXFLr B6srMPRYjofWWmIvITqqOYTFDsVuJ1LkZ+4tIRxHr1Wn/hB1lVr2B6fZ/LP1wQcf dw6dbYk9dIn/gtsDHOLSuzGvfA1LAMBxQ1zf2WnnO9H4p5Zd5FP4zMEEvaX+73RH sr13QGl5o3H7sDXh7klty4xNY3YBamCD17dt2VDG4O8pw+az9NTctkCMhLza4sMC cyD2zJUyEA+be11Zs9UXaIASxOMGTIYLHug+ZA6RnBIaivmoo4VI40D0uTrpEnTf zUdMf9lE7oWGrKCoRpXZDT6dx6Nn4Ueu2aPEU27po3rjFE3tkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPXIWvW4CcEzd2YTYe1Y457cUH5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNzZhZmRlN2YtMzMzZS0z NjY3LWJjNTktZWYyN2E3OWRjNGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzFXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGX830MkFG+XGLzptjqkgPcf77ChR6Ut0vhsEAdAVwmLzerAdlXDQd0 xD0xlyEtxdtQzvWGXOr7/E7PoJuf7ZhrnpqUa4wd/0u7n/TM6tGBaOFpZj8YHJSv K4ltb0tjiBgAEl2AhspeOfb/dbuLfQWNVoF4326b3VOAQu+texatqD4gXY1UIIO7 8HRZUivXdod5zEsFg0nFe4Ss9ixPFnyaSwhfKx5Tk1PbZGf+S1RPJ94PGOFPFZj9 0ZGbA0ZgKtYp77sf3iPQHXfrUfHIP8adMwGYAP/Rk7XOVDSg2QMxGjsRyzq6gXN7 x6jhAuFo1YbUOuID1iVmdDD+ISR1/Tw= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:58 2025 by rpki-client