$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3e207a01-7cb6-3edb-9627-f98b66cc76d9.roa File: 3e207a01-7cb6-3edb-9627-f98b66cc76d9.roa (raw, json) Hash identifier: L7Beq+dIO45qUEEgVVJ2c5ylnBudCgpUaX9aW7JbomU= Subject key identifier: B2:D7:CA:F5:91:A4:05:92:F3:C0:99:3A:1B:15:47:2B:F4:74:43:13 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A16D096C3FD9A6CE8F5C62 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3e207a01-7cb6-3edb-9627-f98b66cc76d9.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 198.86.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:6d:09:6c:3f:d9:a6:ce:8f:5c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=b3b6c4df-21af-4d8f-9aa8-0469f6ac4a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:83:89:df:0d:11:70:ce:15:85:58:8c:36:cb: 7b:2a:07:b0:a9:dd:22:00:35:47:b1:51:af:73:9d: c3:08:ba:a8:6d:ee:89:0c:2d:f9:81:b5:0a:ed:13: 83:bb:a6:31:b9:12:7e:31:c4:d0:6c:46:34:73:da: 8f:42:40:b5:6a:2d:90:13:14:8d:7f:0e:68:7f:25: 79:d7:4a:98:04:c7:a4:a8:07:0f:6b:17:e3:5f:03: 0b:ab:56:95:8b:fc:09:fd:e7:9b:9c:73:85:b1:78: ea:63:7a:ce:2d:f6:21:f6:f8:77:e1:f2:ee:36:08: dd:39:b4:9c:37:df:99:80:60:fa:20:38:87:91:3f: 78:0b:55:fa:95:c5:10:29:bb:01:65:88:7d:07:0b: 4c:c1:18:22:70:16:67:28:e3:b5:4c:ae:47:1e:4e: 86:f1:a5:ac:b6:a8:33:0c:02:f7:65:07:45:c3:77: 73:63:a0:32:7e:84:55:f2:14:45:6d:72:98:a8:8d: cf:8e:0e:fa:9b:3c:e1:b5:00:5d:48:b5:47:ef:fb: ae:e4:99:15:a0:62:8b:83:76:76:4f:22:a5:8a:95: f2:ce:bc:4a:89:9a:74:e0:24:fa:f5:7f:6c:c2:6a: f9:eb:d6:37:c0:aa:bc:6d:61:3b:15:fc:ca:75:8b: f9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D7:CA:F5:91:A4:05:92:F3:C0:99:3A:1B:15:47:2B:F4:74:43:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3e207a01-7cb6-3edb-9627-f98b66cc76d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.248.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f2:e0:39:54:e2:32:24:f8:14:bc:0f:17:80:2f:1e:8a:1a: 51:1e:b1:ff:6d:a3:66:cb:7c:cf:42:c7:58:a0:2b:68:9a:66: 0c:d5:b6:1d:19:0e:af:68:99:d9:90:34:c0:5e:57:93:d2:69: 36:e2:67:82:35:6e:b4:90:17:de:e7:14:d8:aa:11:16:63:24: 6c:97:c0:f5:0b:35:58:62:bb:13:53:7d:12:45:8f:91:f2:ec: 35:46:b1:4f:4f:60:74:6f:62:10:0a:ad:c1:f7:77:a5:90:8b: cc:29:d8:a1:24:73:9a:42:68:39:49:60:8f:b2:91:0e:33:21: 9c:6b:b8:a1:52:2c:24:14:84:03:17:e0:0d:72:7c:ee:2d:90: 96:38:e5:3e:62:4e:ea:be:09:b7:89:70:77:1f:1c:94:55:a8: 08:65:1a:11:dc:69:6b:8e:92:28:2d:83:58:3a:63:1b:bc:57: 00:7c:80:cf:59:9f:2e:b5:30:50:f5:d9:2a:91:38:6d:4b:84: e6:9a:4a:40:44:44:d7:e0:ba:45:09:19:53:12:24:82:46:ee: 66:61:8c:2f:0e:18:6c:18:01:ab:db:25:17:1b:0f:d6:4f:27: 71:8f:99:7e:75:31:9a:dd:55:54:e0:3a:51:5d:b1:09:aa:90: 66:92:59:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoW0JbD/Zps6PXGIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk YjNiNmM0ZGYtMjFhZi00ZDhmLTlhYTgtMDQ2OWY2YWM0YTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64OJ3w0RcM4VhViMNst7Kgewqd0iADVHsVGv c53DCLqobe6JDC35gbUK7RODu6YxuRJ+McTQbEY0c9qPQkC1ai2QExSNfw5ofyV5 10qYBMekqAcPaxfjXwMLq1aVi/wJ/eebnHOFsXjqY3rOLfYh9vh34fLuNgjdObSc N9+ZgGD6IDiHkT94C1X6lcUQKbsBZYh9BwtMwRgicBZnKOO1TK5HHk6G8aWstqgz DAL3ZQdFw3dzY6AyfoRV8hRFbXKYqI3Pjg76mzzhtQBdSLVH7/uu5JkVoGKLg3Z2 TyKlipXyzrxKiZp04CT69X9swmr569Y3wKq8bWE7FfzKdYv5cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLXyvWRpAWS88CZOhsVRyv0dEMTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2UyMDdhMDEtN2NiNi0z ZWRiLTk2MjctZjk4YjY2Y2M3NmQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxlb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvy4DlU4jIk+BS8DxeALx6KGlEesf9to2bLfM9Cx1igK2iaZgzVth0Z Dq9omdmQNMBeV5PSaTbiZ4I1brSQF97nFNiqERZjJGyXwPULNVhiuxNTfRJFj5Hy 7DVGsU9PYHRvYhAKrcH3d6WQi8wp2KEkc5pCaDlJYI+ykQ4zIZxruKFSLCQUhAMX 4A1yfO4tkJY45T5iTuq+CbeJcHcfHJRVqAhlGhHcaWuOkigtg1g6Yxu8VwB8gM9Z ny61MFD12SqROG1LhOaaSkBERNfgukUJGVMSJIJG7mZhjC8OGGwYAavbJRcbD9ZP J3GPmX51MZrdVVTgOlFdsQmqkGaSWbw= -----END CERTIFICATE-----Generated at Tue Sep 9 07:59:40 2025 by rpki-client