$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/16306f15-e3d6-3d5d-88f0-4dd0e0444acd.roa File: 16306f15-e3d6-3d5d-88f0-4dd0e0444acd.roa (raw, json) Hash identifier: DvDcoSffpXHsF3Wj6JkwFh7ndajyUL61xYzslwPyJR0= Subject key identifier: 7B:03:00:31:57:E2:75:E7:D3:D9:0E:23:A8:04:19:B2:F0:D2:CB:9B Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A16C183B5E7FC3395D1C00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/16306f15-e3d6-3d5d-88f0-4dd0e0444acd.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 36850 IP address blocks: 198.85.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:6c:18:3b:5e:7f:c3:39:5d:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=2c34035e-f6c0-45d6-96c3-2aa14110fa78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:99:40:0f:4a:59:48:fc:82:07:38:28:89:ad: a5:bd:c0:2e:81:e5:ac:9c:57:ec:e2:d3:70:23:bd: f1:0a:e3:30:16:1f:ca:f6:03:ab:d4:7e:83:aa:a9: 7c:57:21:82:68:a8:46:7b:c9:fa:a7:fa:fc:a1:f2: 3f:89:1f:17:4a:c3:c3:a8:8d:03:2f:60:c3:e4:64: 65:71:3c:1b:7a:51:af:1c:0e:56:1e:09:bc:35:e9: f8:d5:f5:b7:87:2a:77:16:56:c9:ab:b4:39:6f:2f: 39:b7:1a:fe:67:00:5b:eb:6f:af:86:bc:03:d3:5d: d9:b3:5d:83:b6:03:74:e8:cb:17:47:32:7e:9f:2b: 97:1e:0b:c6:b5:8a:69:8a:03:30:ea:1c:1d:13:8a: be:8b:6d:b2:1c:11:1d:bf:86:16:ec:90:78:04:43: 04:04:84:24:ac:b6:c7:7b:3e:86:a9:59:3b:95:f9: 7f:e2:7c:0b:1a:4c:7a:bc:28:b3:4f:47:44:23:e8: 25:b6:26:32:59:e3:7e:d8:8d:af:f6:c8:22:6c:76: 76:f4:6e:af:4d:cc:60:11:57:91:2b:99:82:3b:e3: 68:22:35:02:d7:59:65:5d:d7:7b:92:02:4a:0c:bc: 79:91:7b:9d:4f:d2:82:e1:1c:41:73:9a:3e:00:6c: 0e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:03:00:31:57:E2:75:E7:D3:D9:0E:23:A8:04:19:B2:F0:D2:CB:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/16306f15-e3d6-3d5d-88f0-4dd0e0444acd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.85.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:f2:73:17:85:55:eb:e1:cf:5d:d9:1f:0a:1b:6f:cc:0f:df: 6f:a9:f3:30:97:c2:fb:54:9f:e4:2d:df:95:b5:59:23:1e:d9: 71:e4:1c:40:a3:34:a9:de:3c:50:ed:6b:fa:27:ea:2c:d0:3f: 22:9f:93:e2:0c:9e:af:18:c8:b4:c9:0f:2d:96:ea:6c:26:71: 09:3a:8c:9c:50:6e:f1:b3:c4:49:5e:7e:68:22:05:25:80:c9: ce:76:c8:58:5b:64:d1:dc:90:e3:7f:72:8c:60:6e:cf:ff:5a: 87:2d:ae:74:73:a4:c5:10:e8:d1:17:81:74:11:cd:3f:60:eb: 9e:63:37:b2:69:9d:f7:4d:fc:f4:bf:1d:f7:22:3c:a1:8b:cf: 50:a4:5d:1c:3a:c4:1f:9c:3d:ed:71:ee:c9:e4:98:58:8c:dc: 69:e2:93:d2:64:d4:98:da:33:ad:ad:3b:f4:d0:8a:06:cc:0f: 3b:43:51:14:7b:89:b8:81:ba:12:21:61:cf:5e:b9:62:1f:99: d9:66:aa:1c:36:8e:2c:e4:68:92:9c:a1:5e:fe:ba:e0:87:93: 25:9a:a5:f0:7a:1e:61:4d:b5:96:57:68:9d:8f:71:8e:0c:50: a9:db:e9:62:88:fa:f9:2b:de:fa:d1:0e:ab:2d:8e:07:8a:ba: 42:5c:97:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWwYO15/wzldHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk MmMzNDAzNWUtZjZjMC00NWQ2LTk2YzMtMmFhMTQxMTBmYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6plAD0pZSPyCBzgoia2lvcAugeWsnFfs4tNw I73xCuMwFh/K9gOr1H6Dqql8VyGCaKhGe8n6p/r8ofI/iR8XSsPDqI0DL2DD5GRl cTwbelGvHA5WHgm8Nen41fW3hyp3FlbJq7Q5by85txr+ZwBb62+vhrwD013Zs12D tgN06MsXRzJ+nyuXHgvGtYppigMw6hwdE4q+i22yHBEdv4YW7JB4BEMEBIQkrLbH ez6GqVk7lfl/4nwLGkx6vCizT0dEI+gltiYyWeN+2I2v9sgibHZ29G6vTcxgEVeR K5mCO+NoIjUC11llXdd7kgJKDLx5kXudT9KC4RxBc5o+AGwOzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHsDADFX4nXn09kOI6gEGbLw0subMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMTYzMDZmMTUtZTNkNi0z ZDVkLTg4ZjAtNGRkMGUwNDQ0YWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlXmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXycxeFVevhz13ZHwobb8wP32+p8zCXwvtUn+Qt35W1WSMe2XHkHECj NKnePFDta/on6izQPyKfk+IMnq8YyLTJDy2W6mwmcQk6jJxQbvGzxElefmgiBSWA yc52yFhbZNHckON/coxgbs//WoctrnRzpMUQ6NEXgXQRzT9g655jN7JpnfdN/PS/ HfciPKGLz1CkXRw6xB+cPe1x7snkmFiM3Gnik9Jk1JjaM62tO/TQigbMDztDURR7 ibiBuhIhYc9euWIfmdlmqhw2jizkaJKcoV7+uuCHkyWapfB6HmFNtZZXaJ2PcY4M UKnb6WKI+vkr3vrRDqstjgeKukJcl8I= -----END CERTIFICATE-----Generated at Tue Sep 9 18:31:03 2025 by rpki-client