$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8a2a82d1-4be1-3620-a1b7-dd29be094823.roa File: 8a2a82d1-4be1-3620-a1b7-dd29be094823.roa (raw, json) Hash identifier: KKtnHhmle0W+dFQYDOWuvFLDywpcgMr9vi0JQI2vSzw= Subject key identifier: DF:BE:5E:D0:33:86:79:AC:3E:07:BE:BE:43:0D:6E:E4:B8:62:31:A8 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A16E78FD8FBD335212E080 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8a2a82d1-4be1-3620-a1b7-dd29be094823.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 36850 IP address blocks: 204.85.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:6e:78:fd:8f:bd:33:52:12:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=8e46ec8d-9783-46ba-81b3-c69df1840c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d1:f0:15:73:61:92:84:aa:ab:42:24:33:06: 98:a0:0b:83:1c:ac:3b:b2:62:76:68:ff:92:b7:ca: f3:4b:de:74:06:42:85:a3:af:b7:c9:25:88:08:f2: b9:6a:52:b5:1a:3a:78:5d:f5:70:51:58:e9:ae:38: 60:12:f4:43:66:27:94:f3:d4:3f:a4:74:d1:c1:ed: e4:c7:50:97:13:36:fd:75:1a:eb:a7:d1:5e:d3:0c: 88:a9:48:b2:07:89:ca:a4:7e:7c:83:29:93:b0:35: e6:0d:9b:16:c3:64:13:55:22:6b:c7:ea:73:48:9e: 83:a6:8a:6c:af:5a:40:5b:94:a1:bc:1a:07:b9:fe: c6:36:f6:88:43:47:af:7b:5a:60:02:d3:d2:97:9f: e0:43:06:87:9e:5f:41:af:09:f4:41:a3:9d:25:3f: d7:d3:3d:2d:ee:8b:a9:92:2e:3e:fa:2e:f5:50:93: eb:c5:bf:53:94:7f:87:1b:10:de:3a:80:34:83:ff: d5:61:36:82:89:dd:cc:a9:3e:18:f0:40:90:8d:41: a8:18:21:4c:05:fb:a7:5d:f7:23:86:89:43:14:79: 83:f3:1e:e2:e6:93:70:13:96:c3:a4:0a:91:3b:c3: 18:33:94:17:7b:18:fb:f6:f6:21:4d:c1:5b:86:54: 30:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:BE:5E:D0:33:86:79:AC:3E:07:BE:BE:43:0D:6E:E4:B8:62:31:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8a2a82d1-4be1-3620-a1b7-dd29be094823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 204.85.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:5e:b0:a7:95:c4:62:75:82:0b:cc:dd:1b:20:4c:65:a3:80: 33:93:f5:fb:20:19:bb:bc:08:6e:f4:5c:e4:4a:59:f6:5c:57: 48:87:f1:34:4a:ed:7f:00:ed:ac:62:42:f6:2c:a9:36:0e:f9: 42:d6:bd:b4:7e:64:fa:81:a5:da:d6:e9:29:4d:2d:4c:4c:36: 6b:31:6f:a1:d9:fd:8e:bc:b2:e4:45:98:96:01:23:73:8b:dc: c2:bb:e2:38:6b:8d:ef:b6:4d:64:3a:98:df:39:ea:52:36:c8: 2d:d2:53:87:bf:09:48:06:fc:9a:67:0b:0b:30:ee:01:60:ba: b1:22:3b:07:62:8f:90:f8:a1:fe:62:af:f5:28:85:34:c0:85: 3a:34:cc:f5:28:6f:07:26:cd:40:7d:e7:61:71:c2:a7:86:29: 4f:f5:e0:0a:33:5e:a0:94:c7:d8:45:d2:9d:23:d9:8f:98:f2: 3f:4f:85:8c:f3:15:c5:ac:99:3f:4c:df:c9:7c:cb:fe:2e:55: 76:10:3c:97:b4:f9:4e:6e:1e:33:2a:ee:b5:d9:1c:1e:89:77: 11:41:f8:5f:d0:53:f9:08:83:01:c0:fb:8b:74:f4:15:cf:ab: 31:ab:bc:6d:e8:f5:fd:45:b6:68:78:ed:58:45:33:7c:a5:dc: 62:34:f5:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoW54/Y+9M1IS4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk OGU0NmVjOGQtOTc4My00NmJhLTgxYjMtYzY5ZGYxODQwYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdHwFXNhkoSqq0IkMwaYoAuDHKw7smJ2aP+S t8rzS950BkKFo6+3ySWICPK5alK1Gjp4XfVwUVjprjhgEvRDZieU89Q/pHTRwe3k x1CXEzb9dRrrp9Fe0wyIqUiyB4nKpH58gymTsDXmDZsWw2QTVSJrx+pzSJ6Dpops r1pAW5ShvBoHuf7GNvaIQ0eve1pgAtPSl5/gQwaHnl9Brwn0QaOdJT/X0z0t7oup ki4++i71UJPrxb9TlH+HGxDeOoA0g//VYTaCid3MqT4Y8ECQjUGoGCFMBfunXfcj holDFHmD8x7i5pNwE5bDpAqRO8MYM5QXexj79vYhTcFbhlQwowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN++XtAzhnmsPge+vkMNbuS4YjGoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOGEyYTgyZDEtNGJlMS0z NjIwLWExYjctZGQyOWJlMDk0ODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzFWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBesKeVxGJ1ggvM3RsgTGWjgDOT9fsgGbu8CG70XORKWfZcV0iH8TRK 7X8A7axiQvYsqTYO+ULWvbR+ZPqBpdrW6SlNLUxMNmsxb6HZ/Y68suRFmJYBI3OL 3MK74jhrje+2TWQ6mN856lI2yC3SU4e/CUgG/JpnCwsw7gFgurEiOwdij5D4of5i r/UohTTAhTo0zPUobwcmzUB952FxwqeGKU/14AozXqCUx9hF0p0j2Y+Y8j9PhYzz FcWsmT9M38l8y/4uVXYQPJe0+U5uHjMq7rXZHB6JdxFB+F/QU/kIgwHA+4t09BXP qzGrvG3o9f1Ftmh47VhFM3yl3GI09QQ= -----END CERTIFICATE-----Generated at Tue Sep 9 18:31:03 2025 by rpki-client