$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7e02fdb9-3309-38d3-8b94-bcb5ff7d1b44.roa File: 7e02fdb9-3309-38d3-8b94-bcb5ff7d1b44.roa (raw, json) Hash identifier: Xubs4BfwgtgX1wzZzXR1lQjoF1kjx0CjIMcR3K3rSXI= Subject key identifier: C3:11:B6:2C:44:E1:61:45:87:03:00:0D:B1:FB:62:90:56:05:B5:F4 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6FB9A83ECE8B18774300 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7e02fdb9-3309-38d3-8b94-bcb5ff7d1b44.roa Signing time: Fri 10 Oct 2025 15:41:23 +0000 ROA not before: Fri 10 Oct 2025 15:41:23 +0000 ROA not after: Thu 08 Jan 2026 16:41:23 +0000 asID: 81 IP address blocks: 198.86.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6f:b9:a8:3e:ce:8b:18:77:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:23 2025 GMT Not After : Jan 8 16:41:23 2026 GMT Subject: CN=e8d97745-7638-4a19-b367-8f753df986ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:87:17:74:0a:62:48:9f:38:43:81:a8:46:e0: c2:3d:c3:94:43:0b:78:70:fc:b8:c5:4f:41:7c:8e: 49:f8:45:79:f8:24:f9:17:58:a8:1c:62:e6:73:b8: 8c:d6:4d:18:63:e5:94:3f:49:25:32:40:18:58:37: d2:63:6c:08:20:ac:a2:d8:74:be:5c:35:30:41:b5: 1e:19:33:fe:96:62:49:7c:20:94:84:aa:0c:54:a1: c0:5d:96:6d:98:de:61:83:24:51:f0:5e:45:22:31: 34:0c:f2:d0:38:29:82:58:47:c0:ff:d8:54:05:50: 1c:d0:34:38:a5:69:95:43:67:66:58:33:30:03:32: 48:8c:e5:06:43:aa:c4:81:e5:a5:c8:9a:ed:c8:0e: 8c:c5:36:60:61:70:90:9c:ab:c0:35:64:96:09:36: 71:0c:ca:72:cc:f2:b7:02:20:f4:9a:4d:9f:4a:db: 2c:e2:9a:a8:21:38:18:53:33:55:1a:e7:9a:97:24: b5:24:37:cf:fb:0d:a1:4c:64:2e:f9:f6:5a:b1:0c: 6c:c6:ba:98:b4:f7:d8:05:c1:02:49:e7:23:03:ff: d7:ec:00:43:62:17:36:1c:74:a9:05:7f:58:c7:ed: 33:4d:0b:2f:6a:d6:82:35:70:48:75:71:9f:fd:a8: 25:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:11:B6:2C:44:E1:61:45:87:03:00:0D:B1:FB:62:90:56:05:B5:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7e02fdb9-3309-38d3-8b94-bcb5ff7d1b44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:e8:ca:25:b8:04:f0:4e:1a:c6:5d:a9:56:e6:0f:38:28:74: 54:fd:9e:af:4c:db:52:87:26:5e:fd:79:52:26:02:c7:a7:f2: ea:16:94:f0:55:0e:a7:c9:e8:79:7a:cc:cb:ff:f5:c1:7c:e1: f2:f6:cb:88:90:04:63:50:ef:21:b9:13:b7:61:44:9c:a1:ce: 05:b3:f4:6f:8c:b9:e5:29:e4:e2:a7:e3:c1:fd:20:ef:e3:03: 43:b0:9f:5a:19:1d:4e:78:e6:07:d7:a9:a3:0d:e7:44:5c:c4: 63:30:e9:55:3a:13:77:32:13:0d:df:89:c8:30:cc:08:68:ca: 6e:04:de:58:e9:df:82:73:c2:92:15:ee:75:e4:10:c1:40:1c: 06:80:68:f3:d2:f4:b5:a4:72:7e:2c:5d:4c:97:56:6e:ae:b4: 85:1a:e4:5f:42:cd:4e:e6:75:85:cf:05:bf:4b:be:fd:55:9f: 86:82:64:d6:b7:88:ac:83:74:e0:f0:4d:e4:f9:e9:4f:0f:aa: ac:a8:28:06:57:7a:2e:f4:96:c1:c5:7d:31:ff:3d:09:2b:3f: b0:f0:65:b2:58:3f:6f:20:ef:16:15:f9:fe:6d:d0:64:b8:53: 05:fd:9f:42:7d:70:07:a7:30:51:3a:60:21:22:8c:35:ed:a1: b7:ba:3b:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DG+5qD7Oixh3QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyM1oXDTI2MDEwODE2NDEyM1owLzEtMCsGA1UEAxMk ZThkOTc3NDUtNzYzOC00YTE5LWIzNjctOGY3NTNkZjk4NmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIcXdApiSJ84Q4GoRuDCPcOUQwt4cPy4xU9B fI5J+EV5+CT5F1ioHGLmc7iM1k0YY+WUP0klMkAYWDfSY2wIIKyi2HS+XDUwQbUe GTP+lmJJfCCUhKoMVKHAXZZtmN5hgyRR8F5FIjE0DPLQOCmCWEfA/9hUBVAc0DQ4 pWmVQ2dmWDMwAzJIjOUGQ6rEgeWlyJrtyA6MxTZgYXCQnKvANWSWCTZxDMpyzPK3 AiD0mk2fStss4pqoITgYUzNVGuealyS1JDfP+w2hTGQu+fZasQxsxrqYtPfYBcEC SecjA//X7ABDYhc2HHSpBX9Yx+0zTQsvataCNXBIdXGf/aglTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMMRtixE4WFFhwMADbH7YpBWBbX0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvN2UwMmZkYjktMzMwOS0z OGQzLThiOTQtYmNiNWZmN2QxYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3oyiW4BPBOGsZdqVbmDzgodFT9nq9M21KHJl79eVImAsen8uoWlPBV DqfJ6Hl6zMv/9cF84fL2y4iQBGNQ7yG5E7dhRJyhzgWz9G+MueUp5OKn48H9IO/j A0Own1oZHU545gfXqaMN50RcxGMw6VU6E3cyEw3ficgwzAhoym4E3ljp34JzwpIV 7nXkEMFAHAaAaPPS9LWkcn4sXUyXVm6utIUa5F9CzU7mdYXPBb9Lvv1Vn4aCZNa3 iKyDdODwTeT56U8PqqyoKAZXei70lsHFfTH/PQkrP7DwZbJYP28g7xYV+f5t0GS4 UwX9n0J9cAenMFE6YCEijDXtobe6O0g= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:05 2025 by rpki-client