$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/864c338d-5a25-3db3-bc07-8eae220c9f88.roa File: 864c338d-5a25-3db3-bc07-8eae220c9f88.roa (raw, json) Hash identifier: VqPEtfe1m86sgXA3bWTOhcYV7rE55h5+7gGo5/0KN7Y= Subject key identifier: 15:46:40:99:4C:9B:39:E1:9F:B7:7B:89:B9:33:4C:9F:29:0E:45:5A Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C71340C8A16E7DB31FB80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/864c338d-5a25-3db3-bc07-8eae220c9f88.roa Signing time: Fri 10 Oct 2025 15:41:23 +0000 ROA not before: Fri 10 Oct 2025 15:41:23 +0000 ROA not after: Thu 08 Jan 2026 16:41:23 +0000 asID: 81 IP address blocks: 204.85.24.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:71:34:0c:8a:16:e7:db:31:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:23 2025 GMT Not After : Jan 8 16:41:23 2026 GMT Subject: CN=980bd6be-c28f-4423-8289-403dde4c2403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f6:a9:4c:3e:93:1a:ea:47:3e:24:02:c7:d8: 2b:aa:73:02:fe:00:e1:96:50:05:fe:2a:1a:21:37: f5:7f:db:e6:4a:4d:a2:eb:59:a1:0c:d9:dd:a1:50: a6:b4:68:53:72:54:d1:5b:cf:70:ad:93:08:ba:d3: 0c:97:b0:88:eb:f1:d1:96:5c:12:d8:9b:a1:6a:61: 88:fb:80:80:7e:f4:44:2b:b2:08:a9:e5:2b:7a:64: 95:db:36:3b:63:26:06:9b:ec:75:92:70:eb:11:76: 54:fd:10:ab:2b:89:1f:ac:2b:c9:c3:56:51:d9:2e: 79:af:57:df:e5:69:ff:8b:06:58:e0:9a:23:c5:28: c1:41:da:34:b9:57:5f:90:2c:10:8a:e8:1f:5f:00: a1:28:77:e7:1b:a4:bc:2e:dc:6e:cf:72:f6:4f:7f: 75:c3:81:8b:b4:c5:c9:14:4b:02:d6:86:58:30:cf: 89:24:93:7e:2a:65:33:36:93:54:02:50:2c:d4:ee: 93:fa:a1:09:aa:6b:fa:47:a0:0b:47:23:ef:81:fa: 6d:0e:a7:63:c1:9c:15:95:fb:5a:df:ee:c8:a7:8c: 1b:16:9e:4c:af:6b:67:c6:ed:2a:f2:82:3f:a7:28: 33:b5:8e:07:b7:07:34:10:d6:b9:fb:93:29:7c:33: 1d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:46:40:99:4C:9B:39:E1:9F:B7:7B:89:B9:33:4C:9F:29:0E:45:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/864c338d-5a25-3db3-bc07-8eae220c9f88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.85.24.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7a:e4:56:9b:1b:04:d5:a0:b6:56:ec:94:aa:3f:95:92:b0: 6c:72:39:44:5e:3d:bf:d1:f8:26:b8:74:1c:9b:2f:10:72:f9: 25:68:3c:28:f7:f7:32:2a:51:f3:ce:0c:63:d7:53:28:ad:9f: a2:ac:9e:8a:f1:70:81:1f:bf:fa:1d:26:fa:2e:ab:61:d4:be: 4d:66:e2:52:4a:b0:aa:a7:bf:c2:8c:0a:c0:6d:da:04:a4:87: ad:2d:62:a7:c9:1e:ad:39:cd:6e:09:73:b3:fa:53:27:c0:cd: 70:09:d2:aa:e3:55:de:70:a3:67:0b:f9:09:a8:71:d0:bb:21: 1f:52:b0:bd:60:ad:4b:c6:9a:76:6c:c1:7d:2a:7d:0d:f5:d3: f0:90:e2:a2:9e:f6:b4:17:9c:25:b5:a6:15:78:90:26:c2:f7: 4d:b9:f2:1f:a7:7e:51:92:4c:20:48:9d:7d:6b:48:2f:95:78: 47:0e:66:5f:4f:d5:51:3f:6d:df:93:3b:11:b4:94:85:06:3c: 2c:ca:39:08:58:2c:6e:ed:d8:98:27:e4:c6:fe:b9:d3:6f:ee: a3:1e:a9:c2:a0:3e:f4:1b:3f:68:2d:6b:e2:4d:24:4e:53:49: 5b:18:19:23:ce:a2:4c:78:0c:ef:45:72:c3:d1:82:ee:65:a4: 61:a6:c3:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DHE0DIoW59sx+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyM1oXDTI2MDEwODE2NDEyM1owLzEtMCsGA1UEAxMk OTgwYmQ2YmUtYzI4Zi00NDIzLTgyODktNDAzZGRlNGMyNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvapTD6TGupHPiQCx9grqnMC/gDhllAF/ioa ITf1f9vmSk2i61mhDNndoVCmtGhTclTRW89wrZMIutMMl7CI6/HRllwS2JuhamGI +4CAfvREK7IIqeUremSV2zY7YyYGm+x1knDrEXZU/RCrK4kfrCvJw1ZR2S55r1ff 5Wn/iwZY4JojxSjBQdo0uVdfkCwQiugfXwChKHfnG6S8Ltxuz3L2T391w4GLtMXJ FEsC1oZYMM+JJJN+KmUzNpNUAlAs1O6T+qEJqmv6R6ALRyPvgfptDqdjwZwVlfta 3+7Ip4wbFp5Mr2tnxu0q8oI/pygztY4Htwc0ENa5+5MpfDMd9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVGQJlMmznhn7d7ibkzTJ8pDkVaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvODY0YzMzOGQtNWEyNS0z ZGIzLWJjMDctOGVhZTIyMGM5Zjg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzFUYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ65FabGwTVoLZW7JSqP5WSsGxyOURePb/R+Ca4dBybLxBy+SVoPCj3 9zIqUfPODGPXUyitn6KsnorxcIEfv/odJvouq2HUvk1m4lJKsKqnv8KMCsBt2gSk h60tYqfJHq05zW4Jc7P6UyfAzXAJ0qrjVd5wo2cL+QmocdC7IR9SsL1grUvGmnZs wX0qfQ310/CQ4qKe9rQXnCW1phV4kCbC90258h+nflGSTCBInX1rSC+VeEcOZl9P 1VE/bd+TOxG0lIUGPCzKOQhYLG7t2Jgn5Mb+udNv7qMeqcKgPvQbP2gta+JNJE5T SVsYGSPOokx4DO9FcsPRgu5lpGGmw30= -----END CERTIFICATE-----Generated at Mon Nov 3 09:46:46 2025 by rpki-client