$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/43d623dc-7aba-31e6-8df9-5cea3346649e.roa File: 43d623dc-7aba-31e6-8df9-5cea3346649e.roa (raw, json) Hash identifier: pI8mqdW5fBcZo8gTN4qdgEDjCaiMvxoh2x0cWfs53RM= Subject key identifier: BB:F1:01:72:B5:E1:B7:72:61:9F:90:3B:83:2B:3B:4B:5E:69:30:61 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584EAF23502572D080B9DB975240 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/43d623dc-7aba-31e6-8df9-5cea3346649e.roa Signing time: Fri 31 Jul 2026 18:26:07 +0000 ROA not before: Fri 31 Jul 2026 18:26:07 +0000 ROA not after: Thu 29 Oct 2026 18:26:07 +0000 asID: 6559 IP address blocks: 198.85.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:23:50:25:72:d0:80:b9:db:97:52:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jul 31 18:26:07 2026 GMT Not After : Oct 29 18:26:07 2026 GMT Subject: CN=21c217d2-9649-49e9-8cee-dcccbecc1d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:02:ff:d5:5e:de:e1:46:7b:f1:c1:04:65:e0: c6:c5:e7:73:69:c8:50:e8:d1:d8:09:db:b5:6e:4a: 73:ee:c3:49:31:dd:61:c5:18:5c:4e:77:f1:54:a6: d8:df:b4:44:9f:b9:14:d7:cf:4c:a6:50:8c:06:8e: e4:1c:39:f9:fe:50:87:52:86:5c:da:26:2e:19:0e: f9:4d:cc:5e:95:bb:8d:8f:62:d5:3b:34:c3:b6:29: 49:e9:d4:dd:9d:99:4f:41:80:a0:d5:27:b0:d1:1b: 39:1e:1b:72:58:2a:c8:fa:c9:35:e6:66:e3:49:5a: 38:3e:4d:f3:73:51:ea:e4:33:36:17:49:7f:f7:44: ba:ff:99:ba:69:6c:91:b4:4a:fa:f4:20:50:15:1d: 67:c3:b4:81:b3:bc:4e:bf:d1:6a:8b:f6:ef:4f:16: c3:09:35:34:a4:8e:50:ca:0e:34:c1:5c:a8:6c:96: 28:e6:5e:c2:87:c7:2d:20:30:60:79:5c:e0:da:ee: ce:3c:2d:ee:bb:fd:66:5d:cc:1c:a9:4f:43:65:e9: 5a:79:20:23:82:16:ad:4a:1f:31:61:2d:fe:a9:b7: 19:17:1f:44:b6:84:4a:7b:65:64:3b:78:ae:e3:9f: ae:5f:2e:e4:a3:54:0a:56:d0:94:5e:14:ed:4b:4b: d3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F1:01:72:B5:E1:B7:72:61:9F:90:3B:83:2B:3B:4B:5E:69:30:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/43d623dc-7aba-31e6-8df9-5cea3346649e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.85.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:31:91:e2:19:85:6b:30:55:9b:eb:7f:4a:cc:71:0e:db:c6: f4:15:4b:82:93:c0:05:41:7a:6e:c3:8c:15:b1:0f:3b:ab:a3: 70:8a:2c:08:b2:78:45:50:bc:68:18:ef:fb:8a:4e:66:95:3f: 16:b1:03:bc:92:1b:d1:2e:bd:8a:1e:10:6b:9e:35:e9:e3:17: d1:87:68:86:33:44:5e:ed:1d:b3:1b:a3:1e:77:80:98:f9:a1: 63:5d:93:ad:c2:d3:d6:84:5d:5e:6e:fb:b3:32:5f:4b:5e:63: c4:ed:6a:96:49:43:cb:0d:49:cf:b3:3d:13:c5:61:8a:2f:52: 41:3d:8d:dd:90:af:14:2b:4c:b0:9f:42:5c:b9:43:69:cd:11: 10:ef:bc:a5:bd:a2:d9:65:99:32:a0:bc:f9:84:64:ed:84:18: 61:00:8b:ec:39:7b:a8:9a:f8:d5:78:39:fd:54:d1:58:b2:53: 44:4d:3a:dc:c1:d8:10:c2:a3:35:28:d8:ff:17:de:45:7a:f2: 7a:32:5b:0d:ff:99:43:ba:ac:27:82:d1:6c:52:2a:c7:de:56: 7a:a0:d9:e3:b2:d1:f7:6a:9b:63:a8:d2:f5:84:10:af:64:ea: 49:1c:26:79:fb:0a:ef:6c:34:4b:a8:3f:aa:48:b4:d7:a3:4f: 9b:1d:66:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6vI1AlctCAuduXUkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDczMTE4MjYwN1oXDTI2MTAyOTE4MjYwN1owLzEtMCsGA1UEAxMk MjFjMjE3ZDItOTY0OS00OWU5LThjZWUtZGNjY2JlY2MxZDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQL/1V7e4UZ78cEEZeDGxedzachQ6NHYCdu1 bkpz7sNJMd1hxRhcTnfxVKbY37REn7kU189MplCMBo7kHDn5/lCHUoZc2iYuGQ75 TcxelbuNj2LVOzTDtilJ6dTdnZlPQYCg1Sew0Rs5HhtyWCrI+sk15mbjSVo4Pk3z c1Hq5DM2F0l/90S6/5m6aWyRtEr69CBQFR1nw7SBs7xOv9Fqi/bvTxbDCTU0pI5Q yg40wVyobJYo5l7Ch8ctIDBgeVzg2u7OPC3uu/1mXcwcqU9DZelaeSAjghatSh8x YS3+qbcZFx9EtoRKe2VkO3iu45+uXy7ko1QKVtCUXhTtS0vTJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvxAXK14bdyYZ+QO4MrO0teaTBhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDNkNjIzZGMtN2FiYS0z MWU2LThkZjktNWNlYTMzNDY2NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlV1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUxkeIZhWswVZvrf0rMcQ7bxvQVS4KTwAVBem7DjBWxDzuro3CKLAiy eEVQvGgY7/uKTmaVPxaxA7ySG9EuvYoeEGueNenjF9GHaIYzRF7tHbMbox53gJj5 oWNdk63C09aEXV5u+7MyX0teY8TtapZJQ8sNSc+zPRPFYYovUkE9jd2QrxQrTLCf Qly5Q2nNERDvvKW9otllmTKgvPmEZO2EGGEAi+w5e6ia+NV4Of1U0ViyU0RNOtzB 2BDCozUo2P8X3kV68noyWw3/mUO6rCeC0WxSKsfeVnqg2eOy0fdqm2Oo0vWEEK9k 6kkcJnn7Cu9sNEuoP6pItNejT5sdZjY= -----END CERTIFICATE-----Generated at Sat Aug 22 18:44:14 2026 by rpki-client