$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23864855-5f69-36d6-8a89-816620ede705.roa File: 23864855-5f69-36d6-8a89-816620ede705.roa (raw, json) Hash identifier: 3E3tzp4WBzWTJirn8nsW/PL+kSeXms9J+Rclr1il1Vo= Subject key identifier: A5:2C:26:80:7C:8F:1A:39:65:DB:70:58:A4:D9:93:F1:E2:C4:D8:3D Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A16D1E0A288E930C5C1500 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23864855-5f69-36d6-8a89-816620ede705.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 13371 IP address blocks: 198.86.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:6d:1e:0a:28:8e:93:0c:5c:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=e20bd278-5dbf-4cc4-bd4e-cfad005c291a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:3f:f2:85:65:4d:6f:ca:ec:5c:4b:99:45: fa:38:be:7c:4c:1a:cc:40:c8:15:bd:54:e3:27:44: 34:c1:01:ed:f5:20:c9:f7:69:88:89:13:63:a7:43: 34:08:10:40:13:91:53:c4:74:91:14:39:ee:bb:d4: 9a:ec:1c:9d:1e:29:a4:95:27:da:62:87:b5:07:ea: ef:2f:63:3f:d4:4e:ed:f9:ec:56:93:34:3d:8d:90: 6c:ef:56:d9:c5:d7:fe:c2:e3:34:0a:62:23:ee:a5: 0d:14:4c:7f:c5:e3:e2:7a:2a:02:82:7c:59:63:11: 04:6b:96:25:9a:0e:9b:25:0a:0e:44:45:45:69:cb: 35:74:3b:fc:cd:0e:59:06:72:94:b4:84:90:69:0d: 94:55:23:bf:30:db:ba:e2:c4:2d:19:8d:c6:08:bf: 7c:d9:c9:e9:87:7f:20:5b:06:ec:67:28:b6:08:4e: 0b:76:0e:e7:9c:a5:29:c2:a5:d9:77:f8:96:3b:03: 3f:e6:b9:7b:d0:7c:7e:aa:da:88:73:ee:19:ba:4e: 3a:04:4c:11:84:53:68:bc:e0:ec:6b:14:d2:4e:a8: 2b:bb:dc:5c:a3:0d:0e:90:1d:a3:f7:c7:91:ce:d6: b7:8a:92:75:4a:d3:5b:1c:ac:20:c3:a9:e8:d9:53: b1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2C:26:80:7C:8F:1A:39:65:DB:70:58:A4:D9:93:F1:E2:C4:D8:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/23864855-5f69-36d6-8a89-816620ede705.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:09:c3:5f:fa:bd:65:63:ff:de:0c:77:ba:8e:da:4f:f6:ad: d2:42:e7:40:54:38:7e:a9:7e:68:4b:17:24:12:0a:a5:86:07: 96:56:de:7c:36:96:41:90:45:e2:4a:54:0b:00:39:40:5e:e0: 50:4a:51:7c:1d:e3:e8:a2:ff:54:72:d2:4d:7a:bf:e4:ef:09: da:3b:58:2a:a4:85:00:3c:96:19:eb:97:e8:e0:c9:32:97:89: 76:3f:c3:d6:28:50:a9:4a:d4:08:71:93:f1:53:ec:07:93:28: 56:42:a3:fb:7e:f8:ce:ad:5a:26:01:67:b9:98:46:fa:48:6d: e6:a7:ed:db:01:8f:75:ad:28:07:12:47:88:64:22:18:65:da: 19:6e:c6:94:4f:51:28:69:dc:b8:32:91:4f:a3:82:2f:af:5a: b7:28:62:e8:2b:80:99:60:6a:54:68:04:f3:c5:cc:d4:c8:32: b3:2a:ca:dc:1a:f8:fe:f3:70:8f:a0:41:58:13:c9:9f:78:18: da:4f:04:21:fe:18:2f:28:10:74:13:25:91:6d:fa:a9:2a:69: 31:da:78:b4:52:57:7e:9d:12:af:05:20:73:20:d3:2d:ec:c2: 95:27:43:c6:f5:54:6b:da:63:43:35:29:cf:95:d7:b6:55:83: b8:9b:fe:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoW0eCiiOkwxcFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZTIwYmQyNzgtNWRiZi00Y2M0LWJkNGUtY2ZhZDAwNWMyOTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmk/8oVlTW/K7FxLmUX6OL58TBrMQMgVvVTj J0Q0wQHt9SDJ92mIiRNjp0M0CBBAE5FTxHSRFDnuu9Sa7BydHimklSfaYoe1B+rv L2M/1E7t+exWkzQ9jZBs71bZxdf+wuM0CmIj7qUNFEx/xePieioCgnxZYxEEa5Yl mg6bJQoOREVFacs1dDv8zQ5ZBnKUtISQaQ2UVSO/MNu64sQtGY3GCL982cnph38g WwbsZyi2CE4Ldg7nnKUpwqXZd/iWOwM/5rl70Hx+qtqIc+4Zuk46BEwRhFNovODs axTSTqgru9xcow0OkB2j98eRzta3ipJ1StNbHKwgw6no2VOxkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUsJoB8jxo5ZdtwWKTZk/HixNg9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMjM4NjQ4NTUtNWY2OS0z NmQ2LThhODktODE2NjIwZWRlNzA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUJw1/6vWVj/94Md7qO2k/2rdJC50BUOH6pfmhLFyQSCqWGB5ZW3nw2 lkGQReJKVAsAOUBe4FBKUXwd4+ii/1Ry0k16v+TvCdo7WCqkhQA8lhnrl+jgyTKX iXY/w9YoUKlK1Ahxk/FT7AeTKFZCo/t++M6tWiYBZ7mYRvpIbean7dsBj3WtKAcS R4hkIhhl2hluxpRPUShp3LgykU+jgi+vWrcoYugrgJlgalRoBPPFzNTIMrMqytwa +P7zcI+gQVgTyZ94GNpPBCH+GC8oEHQTJZFt+qkqaTHaeLRSV36dEq8FIHMg0y3s wpUnQ8b1VGvaY0M1Kc+V17ZVg7ib/n8= -----END CERTIFICATE-----Generated at Tue Sep 9 18:24:39 2025 by rpki-client