$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/68041300-543c-307b-95d9-a41a8a38c0a7.roa File: 68041300-543c-307b-95d9-a41a8a38c0a7.roa (raw, json) Hash identifier: /MMKJqLlf59rJB/iw8HHj7UaAkAqd68htFFW6fiV83M= Subject key identifier: D2:AF:66:EC:CF:4A:0F:34:4C:58:17:31:2D:CA:47:E6:25:55:BA:27 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A16BDC9BC443859A8DBC80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/68041300-543c-307b-95d9-a41a8a38c0a7.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 399050 IP address blocks: 198.85.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:6b:dc:9b:c4:43:85:9a:8d:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=c704bfed-140c-4b7a-b1c8-7740e8d3a55a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bf:f7:ec:28:50:fb:98:b1:14:d9:75:a4:d5: b7:60:6e:22:d3:74:f7:85:d8:9d:d3:6a:78:f0:9a: 56:ac:2c:a3:71:28:1f:a0:d5:eb:e3:e3:19:1c:08: d0:48:5d:02:a5:5a:7b:78:df:73:ee:78:bb:87:0c: dd:2a:ab:ac:31:5f:da:9b:55:b0:b0:5b:eb:71:d7: a2:ec:56:c3:e6:60:5d:54:e2:42:63:3f:7f:c7:62: 3d:fc:8a:d6:0d:2d:d7:7b:80:1b:12:00:12:5f:cb: 61:56:8f:27:80:44:43:c2:de:58:05:45:94:5c:4d: a1:c4:1b:ae:6a:76:4c:d3:73:6a:7d:4f:1c:2f:94: 87:e3:80:0f:b1:e5:df:db:02:01:20:e4:84:a7:72: 3a:5d:12:e8:b0:a8:40:0e:73:b9:36:73:e4:d0:6f: df:c8:29:55:4d:c4:39:de:c7:39:b8:0c:a5:dc:26: 5b:29:8f:de:0c:cb:18:84:97:51:e4:8e:42:ba:8e: 42:fe:e0:94:24:d6:54:86:96:3b:aa:fe:dd:4d:7c: 9d:47:5f:34:9a:3f:56:34:7a:09:f4:45:b4:9e:c7: 13:23:f7:8f:af:d6:94:59:a5:4e:5f:57:41:e8:57: 36:7b:bd:1b:05:06:42:97:d4:bc:61:3e:78:8f:6e: 2b:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:AF:66:EC:CF:4A:0F:34:4C:58:17:31:2D:CA:47:E6:25:55:BA:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/68041300-543c-307b-95d9-a41a8a38c0a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.85.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:0b:ec:6e:59:1e:40:52:26:b5:ea:72:38:9f:ee:59:0b:8c: 12:8a:6d:74:4b:eb:72:9a:07:90:04:90:e2:6b:07:50:6f:7c: 1e:b2:73:40:a5:a2:c3:68:ba:de:93:57:d8:ee:8c:20:19:6f: fd:80:b7:23:40:17:f1:3e:2d:5c:c6:f8:ab:79:f4:54:76:6c: 36:8a:11:64:d3:e0:cd:c7:7c:ff:78:61:bc:d3:e9:a2:23:95: d7:4e:6e:ad:39:36:d8:b9:b8:c5:f8:99:eb:86:ff:48:a8:01: 16:9f:e6:81:82:cf:7f:5d:53:0c:e2:2c:e5:a4:55:df:68:b7: a2:7b:c7:ee:49:89:53:cd:f9:4d:e0:dd:f7:9f:6e:bb:df:07: 5d:e5:8c:59:bb:0a:2b:f5:80:21:98:e6:6d:b0:11:a0:f2:5a: 81:14:08:0a:d0:d2:98:ab:ec:9b:c3:db:86:4a:43:9c:48:e6: 1f:86:59:93:e3:19:65:84:4b:fd:6e:f9:8a:5e:69:e5:a1:77: ca:e7:c3:4e:20:7e:bd:b8:8e:49:c8:4d:1a:ce:52:63:eb:de: 1b:d4:05:97:54:d1:b5:62:6e:7b:ac:41:f9:fd:42:e8:b1:03: c5:b7:18:43:6a:de:60:33:42:b9:6d:4e:56:40:ce:3a:53:7e: 71:63:ac:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWvcm8RDhZqNvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk YzcwNGJmZWQtMTQwYy00YjdhLWIxYzgtNzc0MGU4ZDNhNTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr/37ChQ+5ixFNl1pNW3YG4i03T3hdid02p4 8JpWrCyjcSgfoNXr4+MZHAjQSF0CpVp7eN9z7ni7hwzdKqusMV/am1WwsFvrcdei 7FbD5mBdVOJCYz9/x2I9/IrWDS3Xe4AbEgASX8thVo8ngERDwt5YBUWUXE2hxBuu anZM03NqfU8cL5SH44APseXf2wIBIOSEp3I6XRLosKhADnO5NnPk0G/fyClVTcQ5 3sc5uAyl3CZbKY/eDMsYhJdR5I5Cuo5C/uCUJNZUhpY7qv7dTXydR180mj9WNHoJ 9EW0nscTI/ePr9aUWaVOX1dB6Fc2e70bBQZCl9S8YT54j24r6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKvZuzPSg80TFgXMS3KR+YlVbonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNjgwNDEzMDAtNTQzYy0z MDdiLTk1ZDktYTQxYThhMzhjMGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxlXUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACEL7G5ZHkBSJrXqcjif7lkLjBKKbXRL63KaB5AEkOJrB1BvfB6yc0Cl osNout6TV9jujCAZb/2AtyNAF/E+LVzG+Kt59FR2bDaKEWTT4M3HfP94YbzT6aIj lddObq05Nti5uMX4meuG/0ioARaf5oGCz39dUwziLOWkVd9ot6J7x+5JiVPN+U3g 3fefbrvfB13ljFm7Civ1gCGY5m2wEaDyWoEUCArQ0pir7JvD24ZKQ5xI5h+GWZPj GWWES/1u+YpeaeWhd8rnw04gfr24jknITRrOUmPr3hvUBZdU0bVibnusQfn9Quix A8W3GENq3mAzQrltTlZAzjpTfnFjrAI= -----END CERTIFICATE-----Generated at Tue Sep 9 18:30:58 2025 by rpki-client