$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c58ce82d-ecd7-3ba0-8da1-e67af30d58a9.roa File: c58ce82d-ecd7-3ba0-8da1-e67af30d58a9.roa (raw, json) Hash identifier: M2HCV+kjPrY1Zz1enze2EOciGLii3LIqNNzsSnp9TQQ= Subject key identifier: B0:22:0A:BC:B9:7C:79:85:DB:20:C1:E8:EA:36:08:58:5F:8B:0D:89 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6F7BD3A03E2EC4F70490 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c58ce82d-ecd7-3ba0-8da1-e67af30d58a9.roa Signing time: Fri 10 Oct 2025 15:41:22 +0000 ROA not before: Fri 10 Oct 2025 15:41:22 +0000 ROA not after: Thu 08 Jan 2026 16:41:22 +0000 asID: 81 IP address blocks: 198.86.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6f:7b:d3:a0:3e:2e:c4:f7:04:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:22 2025 GMT Not After : Jan 8 16:41:22 2026 GMT Subject: CN=e9b94ed0-9b5a-4ca4-a5d2-c61a73f9e4a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:60:8d:86:5b:b0:fb:f9:b9:d2:b6:ab:fa:66: b7:0a:fb:7c:a8:ec:87:f2:43:db:fc:08:1f:cc:4a: b6:a9:14:be:85:13:1c:04:cb:9c:9f:20:8e:c2:4e: 5e:65:ba:74:f5:8b:f0:f6:ca:10:a4:3c:2b:37:52: 1e:1d:f7:c9:e5:98:d7:39:18:53:2e:81:d8:a1:c5: 10:67:e1:f4:83:24:5e:12:0b:9f:c5:d8:df:20:90: d5:21:6e:2c:1f:94:ea:d7:33:a2:01:da:fa:95:9b: 15:73:bc:59:bb:82:62:40:a1:02:eb:e3:9f:1b:df: 8c:ed:9d:57:6a:ee:04:a7:59:c1:84:99:cd:35:b0: 39:93:f3:df:c2:eb:aa:1a:16:68:e1:7b:f5:da:6c: 8e:2b:05:82:7b:ee:5e:f5:f3:6d:5d:43:11:01:7c: 37:42:8a:86:1a:28:1e:c2:ee:8e:67:98:24:45:97: 0d:14:1f:ee:e7:63:11:9f:f3:cf:8b:b8:24:91:0b: 82:c4:b5:67:b6:17:86:f1:e6:9f:70:c7:6a:ea:b7: 2c:94:ea:4f:84:96:18:82:9c:49:83:fc:b6:e1:f3: 0a:34:59:54:d0:68:c0:d0:4b:8e:c9:3e:29:03:e8: 31:ae:89:23:d6:94:74:46:b7:5b:7f:5d:83:6b:e4: 29:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:22:0A:BC:B9:7C:79:85:DB:20:C1:E8:EA:36:08:58:5F:8B:0D:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c58ce82d-ecd7-3ba0-8da1-e67af30d58a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:61:3d:d5:f2:12:c7:66:51:6f:df:94:bb:70:0f:02:32:dd: ec:df:50:7b:12:81:16:26:25:fa:04:8c:c5:c6:74:56:8d:52: f0:e3:ee:9c:72:f7:25:62:d5:fb:95:56:22:0d:0c:a7:56:98: f1:94:5f:6b:2d:57:ae:84:a3:f3:8b:cc:9e:6f:0c:65:e4:06: 1d:26:36:7e:32:ae:85:08:7e:c2:8b:83:57:79:d6:80:b7:8e: 4e:5b:80:81:11:ee:fe:e4:43:df:b0:6a:7e:32:fb:c1:4a:ab: 98:99:f5:51:f4:ec:6d:42:82:38:0f:7a:9a:6e:a9:4d:96:2c: 07:9c:cd:d6:2d:30:30:ff:4c:5d:c1:48:b4:36:dc:aa:34:75: 01:6d:b9:f2:cc:e7:3e:8e:ad:23:b7:0f:96:69:cc:7c:2e:8d: 54:ff:94:02:5b:1f:fe:d8:42:ef:d7:85:d4:e7:38:e5:d7:dd: 90:57:c4:25:66:af:35:ed:62:c3:5e:9f:95:f0:39:4a:af:3d: 4f:f1:78:39:54:da:71:ef:1a:6e:25:41:3f:16:25:08:84:dc: c9:f6:a2:8c:a8:24:e3:51:35:2b:82:db:5e:0c:41:7e:1d:82: 7a:78:db:62:3f:e9:f3:4d:64:1a:e4:98:21:14:95:8c:ce:7e: cc:4a:75:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DG9706A+LsT3BJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMloXDTI2MDEwODE2NDEyMlowLzEtMCsGA1UEAxMk ZTliOTRlZDAtOWI1YS00Y2E0LWE1ZDItYzYxYTczZjllNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGCNhluw+/m50rar+ma3Cvt8qOyH8kPb/Agf zEq2qRS+hRMcBMucnyCOwk5eZbp09Yvw9soQpDwrN1IeHffJ5ZjXORhTLoHYocUQ Z+H0gyReEgufxdjfIJDVIW4sH5Tq1zOiAdr6lZsVc7xZu4JiQKEC6+OfG9+M7Z1X au4Ep1nBhJnNNbA5k/PfwuuqGhZo4Xv12myOKwWCe+5e9fNtXUMRAXw3QoqGGige wu6OZ5gkRZcNFB/u52MRn/PPi7gkkQuCxLVntheG8eafcMdq6rcslOpPhJYYgpxJ g/y24fMKNFlU0GjA0EuOyT4pA+gxrokj1pR0Rrdbf12Da+QpzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAiCry5fHmF2yDB6Oo2CFhfiw2JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYzU4Y2U4MmQtZWNkNy0z YmEwLThkYTEtZTY3YWYzMGQ1OGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlZqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdhPdXyEsdmUW/flLtwDwIy3ezfUHsSgRYmJfoEjMXGdFaNUvDj7pxy 9yVi1fuVViINDKdWmPGUX2stV66Eo/OLzJ5vDGXkBh0mNn4yroUIfsKLg1d51oC3 jk5bgIER7v7kQ9+wan4y+8FKq5iZ9VH07G1CgjgPeppuqU2WLAeczdYtMDD/TF3B SLQ23Ko0dQFtufLM5z6OrSO3D5ZpzHwujVT/lAJbH/7YQu/XhdTnOOXX3ZBXxCVm rzXtYsNen5XwOUqvPU/xeDlU2nHvGm4lQT8WJQiE3Mn2ooyoJONRNSuC214MQX4d gnp422I/6fNNZBrkmCEUlYzOfsxKdXw= -----END CERTIFICATE-----Generated at Mon Oct 20 11:55:55 2025 by rpki-client