$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fa11b24c-50fd-3389-a524-2a2d78e6a6ce.roa File: fa11b24c-50fd-3389-a524-2a2d78e6a6ce.roa (raw, json) Hash identifier: 8qCh7NzQiK7dVi1if8Au5HCC5bdhdokSuj76yHMrSDQ= Subject key identifier: 71:63:CD:F6:BE:44:E1:DF:C9:16:C5:06:02:76:FC:30:6B:EF:D2:DA Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C709CCD39FD9752D9C180 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fa11b24c-50fd-3389-a524-2a2d78e6a6ce.roa Signing time: Fri 10 Oct 2025 15:41:23 +0000 ROA not before: Fri 10 Oct 2025 15:41:23 +0000 ROA not after: Thu 08 Jan 2026 16:41:23 +0000 asID: 11442 IP address blocks: 204.84.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:70:9c:cd:39:fd:97:52:d9:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:23 2025 GMT Not After : Jan 8 16:41:23 2026 GMT Subject: CN=5dca0f74-86c0-4692-988b-2f70c40e69d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:e2:fc:eb:86:66:b2:6c:49:10:53:3b:ab: 95:35:71:dd:2b:fb:6e:29:07:15:ef:74:24:5e:c4: 04:be:48:f9:6a:3f:ed:92:66:2c:ee:57:15:2f:45: a4:25:eb:7b:04:86:d6:97:ed:37:c0:82:f6:1c:b9: 07:31:d3:ef:2e:b7:c4:ec:b1:a2:04:d9:63:29:85: 52:4b:3e:ae:1f:b4:87:e7:0d:82:6a:5f:90:94:a2: 8c:21:06:e6:e2:7f:59:de:c7:c4:5a:26:d4:09:a6: 82:78:23:e9:3c:bc:1c:4b:d8:6d:31:4a:52:95:0f: 10:69:f2:cb:5c:70:c1:6c:67:56:41:fe:fd:ef:09: c9:62:46:f1:cb:3a:40:ae:cc:24:1a:0d:af:af:4b: f6:02:69:32:f5:af:78:08:7e:94:43:7f:18:42:e4: f9:f8:f9:58:65:74:29:1f:b0:07:f8:b1:5b:f7:22: e0:d1:8b:cb:6d:39:9b:dd:04:da:77:a0:97:0e:82: b7:57:d6:88:70:df:ce:0a:3c:d5:e7:4d:bf:cf:f2: c4:03:1b:5e:b4:ce:11:1a:e9:b6:06:4e:0f:81:17: 79:b8:6b:b9:d6:5b:4c:50:9c:ec:bb:d5:bf:81:ab: c8:b4:37:d2:a5:f9:b6:8f:52:f1:80:31:6e:e0:61: 71:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:63:CD:F6:BE:44:E1:DF:C9:16:C5:06:02:76:FC:30:6B:EF:D2:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/fa11b24c-50fd-3389-a524-2a2d78e6a6ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.84.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:4c:42:c2:fb:eb:d4:2a:d7:6a:f7:52:50:47:7c:29:4a:8c: 00:13:f0:48:7a:cb:5b:2b:7e:25:b5:ac:d4:c9:cf:44:76:41: 2d:11:cc:2c:60:8d:d7:50:ea:72:d6:9a:99:7d:22:dc:1c:4d: 10:d4:50:bd:8e:09:3f:d8:04:7a:5d:87:53:ac:5a:c9:21:3d: ad:d6:5c:b0:d2:35:8e:72:a1:5d:6c:bd:fd:af:e5:ac:b9:04: f8:a5:df:b9:a4:78:8a:0d:1d:b7:c2:0e:0f:1e:33:44:f8:01: 53:1e:55:c7:06:ac:c2:a1:85:16:ea:01:59:6d:6e:00:4b:9d: 4a:6c:54:39:28:15:22:9a:e5:a8:af:c4:fd:f1:68:5f:fa:79: f6:80:41:6e:ef:e9:73:db:de:72:f4:e0:78:36:0a:86:5f:ba: 35:ca:40:27:20:1e:d6:8a:88:50:7b:91:f7:0d:cf:20:7c:d2: 7a:91:fb:77:c3:ad:6b:bc:51:0b:a6:06:7d:99:48:da:f4:54: ee:51:91:b6:47:dc:b4:e2:5a:f9:14:1a:a3:e0:71:80:ec:f5: bf:74:95:a1:bb:4f:c7:bf:bd:3c:1e:ec:ab:bb:51:b7:c0:1c: 3f:ed:8c:52:6d:82:47:e2:7f:2a:cf:a2:47:8d:8b:94:ea:2d: a9:2c:48:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DHCczTn9l1LZwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyM1oXDTI2MDEwODE2NDEyM1owLzEtMCsGA1UEAxMk NWRjYTBmNzQtODZjMC00NjkyLTk4OGItMmY3MGM0MGU2OWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymHi/OuGZrJsSRBTO6uVNXHdK/tuKQcV73Qk XsQEvkj5aj/tkmYs7lcVL0WkJet7BIbWl+03wIL2HLkHMdPvLrfE7LGiBNljKYVS Sz6uH7SH5w2Cal+QlKKMIQbm4n9Z3sfEWibUCaaCeCPpPLwcS9htMUpSlQ8QafLL XHDBbGdWQf797wnJYkbxyzpArswkGg2vr0v2Amky9a94CH6UQ38YQuT5+PlYZXQp H7AH+LFb9yLg0YvLbTmb3QTad6CXDoK3V9aIcN/OCjzV502/z/LEAxtetM4RGum2 Bk4PgRd5uGu51ltMUJzsu9W/gavItDfSpfm2j1LxgDFu4GFxEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFjzfa+ROHfyRbFBgJ2/DBr79LaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZmExMWIyNGMtNTBmZC0z Mzg5LWE1MjQtMmEyZDc4ZTZhNmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzFT0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdMQsL769Qq12r3UlBHfClKjAAT8Eh6y1srfiW1rNTJz0R2QS0RzCxg jddQ6nLWmpl9ItwcTRDUUL2OCT/YBHpdh1OsWskhPa3WXLDSNY5yoV1svf2v5ay5 BPil37mkeIoNHbfCDg8eM0T4AVMeVccGrMKhhRbqAVltbgBLnUpsVDkoFSKa5aiv xP3xaF/6efaAQW7v6XPb3nL04Hg2CoZfujXKQCcgHtaKiFB7kfcNzyB80nqR+3fD rWu8UQumBn2ZSNr0VO5RkbZH3LTiWvkUGqPgcYDs9b90laG7T8e/vTwe7Ku7UbfA HD/tjFJtgkfifyrPokeNi5TqLaksSDA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:15 2025 by rpki-client