$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f22d5ea0-6131-3e8c-9389-3c27af1c5e8e.roa File: f22d5ea0-6131-3e8c-9389-3c27af1c5e8e.roa (raw, json) Hash identifier: zhUyrAlEzZrkSb2wqQDrPU0Ox425yhHranLm+Bh4CH8= Subject key identifier: 1D:3C:6F:21:D8:D3:A5:BE:82:34:C0:98:99:C0:55:70:BB:03:BD:B7 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C7022C9A42FA67CF05244 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f22d5ea0-6131-3e8c-9389-3c27af1c5e8e.roa Signing time: Fri 10 Oct 2025 15:41:23 +0000 ROA not before: Fri 10 Oct 2025 15:41:23 +0000 ROA not after: Thu 08 Jan 2026 16:41:23 +0000 asID: 81 IP address blocks: 204.84.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:70:22:c9:a4:2f:a6:7c:f0:52:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:23 2025 GMT Not After : Jan 8 16:41:23 2026 GMT Subject: CN=1e5fafb1-976e-4f5c-afe8-8f93b010a905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ae:d2:bf:8b:18:1b:40:31:73:99:af:21:c9: 4d:5f:1b:c5:b9:9b:58:fa:19:67:3e:9e:65:b1:21: af:c7:05:fd:92:e9:c0:25:bc:85:f8:38:42:a5:16: 08:40:81:75:db:2f:d2:6c:64:9d:80:c2:69:ff:5c: e0:a5:60:81:08:79:64:a1:dd:f6:e2:c2:1a:1d:48: a7:88:ac:82:3d:90:70:12:3e:76:b2:e0:18:52:e5: 62:11:22:04:4c:13:fb:20:28:63:2e:37:a4:2e:47: ae:e0:4b:74:c1:a8:a4:fd:d3:c1:10:55:64:df:87: 35:b5:fe:7b:ae:2c:27:4e:99:ff:54:50:84:3f:8c: d7:6e:44:69:9c:56:e3:8d:e4:71:e6:3e:35:df:80: 12:c7:f6:1d:1e:39:4e:27:85:39:18:80:af:d2:36: 86:97:d9:f8:67:79:43:7d:0e:68:ef:13:71:0c:53: 63:89:4f:1c:cb:59:ab:cc:bf:10:01:f4:4d:f7:09: 23:3d:f2:d9:95:87:4b:db:39:9a:04:b9:f9:64:f2: 3b:88:9d:1c:ff:77:ec:ce:20:5f:a1:8b:8a:e3:db: ab:81:ab:2f:07:75:ac:05:9e:00:c2:1f:b4:3f:f5: 34:45:3d:25:b4:31:a6:96:11:97:32:55:8b:8f:53: 36:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3C:6F:21:D8:D3:A5:BE:82:34:C0:98:99:C0:55:70:BB:03:BD:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f22d5ea0-6131-3e8c-9389-3c27af1c5e8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.84.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:70:88:77:82:2e:d0:7c:29:34:55:43:0d:28:2a:ed:ef:e7: f1:29:77:43:f7:13:b0:1c:4a:70:df:13:26:41:d6:21:fe:5c: 28:8c:83:4b:f8:60:89:65:6b:6c:cf:70:1e:12:aa:14:1b:83: c0:30:47:9d:f7:c7:31:4b:f4:ac:6c:53:9b:58:89:76:77:88: 38:f1:3d:bd:fa:7d:85:b4:ed:c4:bf:ab:c6:75:6a:c7:ee:df: 28:aa:0e:40:0d:82:6c:fd:0c:98:22:36:26:6c:ec:9f:bb:b7: c2:5e:b8:85:27:0c:c1:d6:7a:90:c9:0b:af:e4:d0:5b:f2:06: 0c:94:54:ca:bf:cb:66:bd:1d:3d:f8:5e:30:fb:0a:05:ba:a5: 72:5d:ac:1e:fb:32:6e:22:7b:a5:68:00:aa:d2:a1:7b:0c:e7: 90:87:e7:e4:ba:0c:5e:76:9a:d7:d7:b4:36:0a:c3:c8:67:09: 0f:92:12:7a:5b:8e:86:7c:ca:c5:91:91:32:53:d2:7b:bf:a3: 90:8f:c6:21:b9:d5:4c:a4:c5:f2:09:f3:5b:a1:85:8b:52:8f: 8e:e1:fc:ff:31:9e:9f:14:bd:01:ac:72:2e:19:da:79:a9:8f: de:17:bb:14:e1:c2:e7:c0:4b:ec:eb:15:29:6a:31:ed:72:f1: 9a:44:e0:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DHAiyaQvpnzwUkQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyM1oXDTI2MDEwODE2NDEyM1owLzEtMCsGA1UEAxMk MWU1ZmFmYjEtOTc2ZS00ZjVjLWFmZTgtOGY5M2IwMTBhOTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK7Sv4sYG0Axc5mvIclNXxvFuZtY+hlnPp5l sSGvxwX9kunAJbyF+DhCpRYIQIF12y/SbGSdgMJp/1zgpWCBCHlkod324sIaHUin iKyCPZBwEj52suAYUuViESIETBP7IChjLjekLkeu4Et0waik/dPBEFVk34c1tf57 riwnTpn/VFCEP4zXbkRpnFbjjeRx5j4134ASx/YdHjlOJ4U5GICv0jaGl9n4Z3lD fQ5o7xNxDFNjiU8cy1mrzL8QAfRN9wkjPfLZlYdL2zmaBLn5ZPI7iJ0c/3fsziBf oYuK49urgasvB3WsBZ4Awh+0P/U0RT0ltDGmlhGXMlWLj1M25QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB08byHY06W+gjTAmJnAVXC7A723MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZjIyZDVlYTAtNjEzMS0z ZThjLTkzODktM2MyN2FmMWM1ZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzFRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVwiHeCLtB8KTRVQw0oKu3v5/Epd0P3E7AcSnDfEyZB1iH+XCiMg0v4 YIlla2zPcB4SqhQbg8AwR533xzFL9KxsU5tYiXZ3iDjxPb36fYW07cS/q8Z1asfu 3yiqDkANgmz9DJgiNiZs7J+7t8JeuIUnDMHWepDJC6/k0FvyBgyUVMq/y2a9HT34 XjD7CgW6pXJdrB77Mm4ie6VoAKrSoXsM55CH5+S6DF52mtfXtDYKw8hnCQ+SEnpb joZ8ysWRkTJT0nu/o5CPxiG51UykxfIJ81uhhYtSj47h/P8xnp8UvQGsci4Z2nmp j94XuxThwufAS+zrFSlqMe1y8ZpE4L8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:17 2025 by rpki-client