$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/abdf534e-c9d7-31d0-b4a4-96a0461c0925.roa File: abdf534e-c9d7-31d0-b4a4-96a0461c0925.roa (raw, json) Hash identifier: aHcv/jAU5ByIzM1rbp57umdT5yvhxolD+Zoz4PCVwIY= Subject key identifier: D6:DC:00:62:22:09:67:77:BF:E5:A7:35:C2:6D:88:C6:AB:31:EF:B1 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6F12A9579BB30E63D520 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/abdf534e-c9d7-31d0-b4a4-96a0461c0925.roa Signing time: Fri 10 Oct 2025 15:41:22 +0000 ROA not before: Fri 10 Oct 2025 15:41:22 +0000 ROA not after: Thu 08 Jan 2026 16:41:22 +0000 asID: 399050 IP address blocks: 198.85.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6f:12:a9:57:9b:b3:0e:63:d5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:22 2025 GMT Not After : Jan 8 16:41:22 2026 GMT Subject: CN=7a78d9f8-c708-4570-ba59-2156bb1c8148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a6:10:4d:8b:fc:52:31:cd:7e:45:2c:28:db: ed:be:27:d2:f2:50:40:56:4c:8f:ef:ac:4a:f8:9e: 49:11:94:0b:21:0d:52:24:3d:30:16:b9:a1:79:30: 31:55:66:99:c4:9e:a3:72:29:ca:e2:b5:cf:80:f3: 4a:81:6f:6a:8a:60:ff:9b:b1:40:97:95:df:14:dc: 17:3b:b2:8e:0b:66:d0:ae:76:f2:f8:f2:dd:03:8d: 1f:4f:37:e2:e6:3c:3d:5c:f1:f5:6d:55:d0:19:85: 36:9f:8c:31:cf:7e:e4:55:d3:35:c2:f0:a0:0d:8a: 92:19:5e:03:3e:18:a4:6a:bc:32:b9:99:81:f4:63: 8d:3c:6b:10:58:9c:46:a1:7e:cd:27:16:8a:86:c7: dd:0b:de:ea:1c:b4:ec:cd:69:58:6d:f4:e5:da:4b: 83:8b:b5:e4:09:28:a4:d3:0b:b6:4d:ec:f5:f8:32: bb:41:41:58:a2:3f:b0:4a:04:5a:b9:e3:15:70:e1: fc:13:03:1e:5f:b8:a3:5c:95:98:67:a2:4b:23:ba: 68:a1:07:af:f7:46:34:1f:23:3f:f2:74:73:94:87: 0e:a7:31:72:4d:d5:b3:19:b8:07:e1:b8:ff:39:e7: e1:cd:33:bb:65:a1:1b:b9:d7:da:77:07:fa:96:38: a9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:DC:00:62:22:09:67:77:BF:E5:A7:35:C2:6D:88:C6:AB:31:EF:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/abdf534e-c9d7-31d0-b4a4-96a0461c0925.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.85.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:51:22:3e:a4:89:d7:29:9e:2a:dd:32:f8:d4:fd:2f:ef:7d: 0e:c9:3f:f5:69:78:55:05:40:c2:ca:e1:45:c0:f2:7e:ef:be: cf:2c:08:da:7b:49:61:c3:9a:ed:e5:8d:f6:ac:36:c6:22:90: db:93:a3:c2:88:3f:68:e7:3a:3c:c1:0e:4b:c7:0f:f0:31:85: fe:b5:3f:46:ea:c5:0d:06:6f:02:cc:46:57:ce:e1:3a:f0:01: 63:98:1b:54:d8:da:3b:4f:5c:76:2c:51:42:5b:e6:4f:3e:78: b7:79:aa:dc:a2:70:95:8d:ca:97:eb:ff:fe:4f:66:48:0c:b0: 9f:69:59:17:11:5b:a5:04:5b:44:78:39:ae:56:d3:2a:bd:a2: 60:9d:83:fe:96:b2:e3:0d:aa:98:9b:94:7c:30:ce:a5:c1:c9: 32:78:1a:ea:c7:be:03:d3:5d:22:69:92:e5:11:43:66:3a:5c: ad:c2:67:09:70:92:64:e6:9b:2c:18:7c:17:c6:36:23:2b:5a: 4e:1e:df:11:cf:b9:98:4e:23:4a:d2:46:1d:66:d1:1f:fa:88: 6e:16:92:5d:25:bf:35:30:6b:bb:96:08:9c:36:52:62:45:b9: 0f:77:29:e6:08:7f:70:44:0a:9b:cd:3a:7f:59:bc:3b:58:cc: aa:48:23:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DG8SqVebsw5j1SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMloXDTI2MDEwODE2NDEyMlowLzEtMCsGA1UEAxMk N2E3OGQ5ZjgtYzcwOC00NTcwLWJhNTktMjE1NmJiMWM4MTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqYQTYv8UjHNfkUsKNvtvifS8lBAVkyP76xK +J5JEZQLIQ1SJD0wFrmheTAxVWaZxJ6jcinK4rXPgPNKgW9qimD/m7FAl5XfFNwX O7KOC2bQrnby+PLdA40fTzfi5jw9XPH1bVXQGYU2n4wxz37kVdM1wvCgDYqSGV4D PhikarwyuZmB9GONPGsQWJxGoX7NJxaKhsfdC97qHLTszWlYbfTl2kuDi7XkCSik 0wu2Tez1+DK7QUFYoj+wSgRaueMVcOH8EwMeX7ijXJWYZ6JLI7pooQev90Y0HyM/ 8nRzlIcOpzFyTdWzGbgH4bj/OefhzTO7ZaEbudfadwf6ljipWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbcAGIiCWd3v+WnNcJtiMarMe+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYWJkZjUzNGUtYzlkNy0z MWQwLWI0YTQtOTZhMDQ2MWMwOTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABRIj6kidcpnirdMvjU/S/vfQ7JP/VpeFUFQMLK4UXA8n7vvs8sCNp7 SWHDmu3ljfasNsYikNuTo8KIP2jnOjzBDkvHD/Axhf61P0bqxQ0GbwLMRlfO4Trw AWOYG1TY2jtPXHYsUUJb5k8+eLd5qtyicJWNypfr//5PZkgMsJ9pWRcRW6UEW0R4 Oa5W0yq9omCdg/6WsuMNqpiblHwwzqXByTJ4GurHvgPTXSJpkuURQ2Y6XK3CZwlw kmTmmywYfBfGNiMrWk4e3xHPuZhOI0rSRh1m0R/6iG4Wkl0lvzUwa7uWCJw2UmJF uQ93KeYIf3BECpvNOn9ZvDtYzKpIIxw= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:27 2025 by rpki-client