$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/574a87ca-691f-36a3-ad3b-a8ba74c05f33.roa File: 574a87ca-691f-36a3-ad3b-a8ba74c05f33.roa (raw, json) Hash identifier: qO3W3L63kT7ZXSL+DEc/XEgdUK6C/hd2gdLpcQeyN7M= Subject key identifier: 56:ED:61:69:17:E1:E0:B9:2F:AC:29:5E:0D:FF:7D:B6:9C:90:31:B7 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A16C7E1EEA2192AECE8680 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/574a87ca-691f-36a3-ad3b-a8ba74c05f33.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 198.86.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:6c:7e:1e:ea:21:92:ae:ce:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=f8ec242f-c01f-4632-8426-12b63a7de096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:a7:b8:0e:70:02:3d:10:a7:87:71:6c:df: e8:15:95:45:10:fd:03:00:43:87:d3:99:55:3f:15: 55:13:a7:76:dc:c8:4f:cc:48:6f:4e:73:96:24:a7: ca:1b:bb:cd:3b:74:de:cc:c7:2e:23:e2:af:5a:9f: 49:41:0c:1c:6a:f4:17:97:8a:a6:15:46:4c:b5:37: 5b:7e:46:e0:7e:3e:62:8c:17:42:ba:55:aa:5a:8f: d9:d5:5d:86:b3:05:5c:82:91:c9:84:31:17:a2:62: 08:22:dc:36:c5:3b:2b:90:c3:81:cd:bb:78:1e:54: 39:f7:44:fe:37:a6:37:b1:87:68:7f:ca:bf:77:c2: 7b:e6:59:ea:10:1d:61:18:26:2d:a2:f5:d4:1c:17: cd:a6:e4:1f:b2:b9:e3:f0:ca:62:63:53:4a:50:ab: 0c:52:64:8a:da:2b:be:32:90:ab:37:83:0d:99:e2: 59:16:22:63:e3:d0:a6:f2:a5:2c:95:12:9c:14:fc: d9:38:e7:2a:c0:66:15:e9:0d:f8:f7:b6:6d:a4:82: 05:94:c2:22:d2:e0:16:7e:24:58:f3:6b:42:f6:e8: ef:d6:89:e3:c4:4c:87:2e:2b:90:31:f3:58:63:e6: 13:d1:fb:aa:ff:95:d4:df:3a:b3:ed:d0:20:da:60: 06:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:ED:61:69:17:E1:E0:B9:2F:AC:29:5E:0D:FF:7D:B6:9C:90:31:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/574a87ca-691f-36a3-ad3b-a8ba74c05f33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:66:fe:b4:49:1c:13:12:28:aa:cf:5f:84:4e:4f:6d:bc:bb: 07:2e:24:bf:24:ca:94:38:07:6f:2f:8e:31:16:3d:ea:c3:5e: ea:4e:80:4c:de:f9:8b:bf:55:0f:22:94:42:37:04:5a:32:92: 2c:04:c0:25:cb:26:be:fe:9f:e1:43:5e:ba:cd:9a:3c:33:a1: 07:94:87:b7:b9:05:f6:a1:ac:ef:57:e4:2e:98:0f:d8:a8:1d: c3:a3:5e:fa:9b:ff:e6:3d:98:dc:e2:d7:00:89:39:37:71:07: d4:a7:00:72:90:74:9f:ae:3a:5b:bb:56:cc:ab:34:73:21:60: a7:cd:39:d6:ac:00:58:45:3b:9c:b4:19:70:7e:dc:e3:d2:dd: cd:e6:ab:ec:e7:1b:5a:55:88:ef:f7:63:e3:89:17:ea:8a:6b: 12:cb:8b:c2:ec:77:e6:12:5c:08:d7:2e:8f:d7:66:b5:b5:df: f9:4d:31:70:52:29:fc:e2:c4:c6:e9:7d:a4:22:8c:e0:46:95: ea:a9:a4:fd:9e:05:82:87:cc:30:63:ca:6c:6c:5f:03:ba:82: 75:9c:58:df:f6:92:87:ea:40:29:96:40:16:53:9e:41:84:0f: 64:26:d8:eb:26:f3:98:9d:d6:78:28:0c:7f:c9:35:47:07:08: ba:83:25:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWx+Huohkq7OhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjhlYzI0MmYtYzAxZi00NjMyLTg0MjYtMTJiNjNhN2RlMDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdCnuA5wAj0Qp4dxbN/oFZVFEP0DAEOH05lV PxVVE6d23MhPzEhvTnOWJKfKG7vNO3TezMcuI+KvWp9JQQwcavQXl4qmFUZMtTdb fkbgfj5ijBdCulWqWo/Z1V2GswVcgpHJhDEXomIIItw2xTsrkMOBzbt4HlQ590T+ N6Y3sYdof8q/d8J75lnqEB1hGCYtovXUHBfNpuQfsrnj8MpiY1NKUKsMUmSK2iu+ MpCrN4MNmeJZFiJj49Cm8qUslRKcFPzZOOcqwGYV6Q3497ZtpIIFlMIi0uAWfiRY 82tC9ujv1onjxEyHLiuQMfNYY+YT0fuq/5XU3zqz7dAg2mAGrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbtYWkX4eC5L6wpXg3/fbackDG3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNTc0YTg3Y2EtNjkxZi0z NmEzLWFkM2ItYThiYTc0YzA1ZjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhm/rRJHBMSKKrPX4ROT228uwcuJL8kypQ4B28vjjEWPerDXupOgEze +Yu/VQ8ilEI3BFoykiwEwCXLJr7+n+FDXrrNmjwzoQeUh7e5BfahrO9X5C6YD9io HcOjXvqb/+Y9mNzi1wCJOTdxB9SnAHKQdJ+uOlu7VsyrNHMhYKfNOdasAFhFO5y0 GXB+3OPS3c3mq+znG1pViO/3Y+OJF+qKaxLLi8Lsd+YSXAjXLo/XZrW13/lNMXBS KfzixMbpfaQijOBGleqppP2eBYKHzDBjymxsXwO6gnWcWN/2kofqQCmWQBZTnkGE D2Qm2Osm85id1ngoDH/JNUcHCLqDJfw= -----END CERTIFICATE-----Generated at Tue Sep 9 07:58:43 2025 by rpki-client