$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/de0346ae-6a28-3b1a-b134-92c426e82e3e.roa File: de0346ae-6a28-3b1a-b134-92c426e82e3e.roa (raw, json) Hash identifier: HzWi8fXBmmepU5pJXpo7z8YO/ReyOjPhk7kTGocMAYQ= Subject key identifier: 92:48:55:8D:68:13:D3:D6:EE:F9:76:9D:3A:43:FC:D4:52:AE:03:8D Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A16237DA6F2468305685C0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/de0346ae-6a28-3b1a-b134-92c426e82e3e.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 198.86.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:62:37:da:6f:24:68:30:56:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=2790c815-5f05-44dc-abc0-4602aab0c94f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:63:28:f7:32:fb:2c:1e:f2:e7:18:f4:33:62: c0:ce:92:41:5e:76:4e:0d:18:70:52:4b:a3:22:4f: 93:b9:67:e1:ee:f7:e5:51:c3:d5:08:af:86:da:b9: ad:63:a7:91:de:49:f0:e6:f9:50:69:44:a8:11:77: e8:2a:ea:bc:16:f3:4e:e8:83:6c:38:71:e2:87:37: 60:0c:f2:7f:40:13:d6:55:a3:6d:8a:7a:c0:a4:f6: ac:7d:90:3e:3a:eb:2d:37:90:71:bd:cf:d2:44:b7: bd:1b:c3:b8:4f:4c:17:16:c5:ca:c4:6f:3b:44:1b: bb:24:50:62:93:1b:8b:1d:7b:da:b2:cc:97:45:44: 1c:c5:5c:7c:4e:3d:a4:5e:03:bc:2b:db:0e:fe:f9: b3:7b:17:8c:ef:b4:b4:9e:26:9a:06:5d:ce:02:16: 36:1f:99:9a:a2:b9:dc:7c:c2:b9:6d:99:8f:b9:51: 63:30:30:29:30:5e:16:22:a8:49:48:25:cb:36:58: 48:de:0a:b1:93:ff:dc:f5:31:cd:cf:45:eb:c7:08: 90:a8:c8:b5:41:70:ca:ab:f7:41:93:53:e3:70:ed: a2:79:a6:71:fe:cc:34:6f:85:0f:cc:18:2a:61:8d: 61:88:ce:04:1e:87:5d:37:e1:eb:c8:d7:9b:2d:3e: b5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:48:55:8D:68:13:D3:D6:EE:F9:76:9D:3A:43:FC:D4:52:AE:03:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/de0346ae-6a28-3b1a-b134-92c426e82e3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:7e:c6:02:53:c4:19:3f:52:1c:fc:c2:1e:17:0b:e2:66:f2: e8:09:09:87:a9:ec:e5:ff:8e:ff:7d:d3:c0:22:cb:c2:0e:9c: c1:4c:83:ee:5b:a1:35:35:3b:f7:f4:53:31:8b:c5:95:9d:7a: cc:e5:22:71:5c:25:b5:9d:2c:68:aa:3b:e2:b1:f5:05:85:d8: e9:f3:19:ed:dd:e2:2d:16:57:9d:41:1b:80:53:cb:88:3d:c2: c0:41:f4:0d:2f:3f:1b:5d:3e:7c:38:e1:29:2a:f2:23:c6:1d: b1:2f:58:64:8e:bb:34:ac:6e:3b:06:39:c3:a0:e0:e9:3a:3c: 32:ca:fb:39:85:9c:78:12:4a:1b:75:b4:bf:58:c7:9c:d8:1d: 61:7e:23:f7:22:77:15:b6:c8:a6:95:92:f6:ae:44:a9:b4:24: bd:99:1d:64:2a:e1:b9:eb:6c:24:c1:df:16:42:9f:a7:10:58: 8f:cb:6f:f6:ce:1f:3c:8a:74:41:b9:d6:39:9f:42:69:7d:9f: 29:89:70:bd:ec:e8:9a:1a:9f:c9:5b:ab:a1:53:3e:2e:b6:ca: 9f:f7:1e:40:76:69:ca:c3:9c:89:ca:d5:6e:fb:c7:c5:ca:7a: f8:85:58:84:07:1a:8d:e3:5c:41:00:a1:fe:f5:4a:f1:c6:9a: ba:fd:e7:c0 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsWoWI32m8kaDBWhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk Mjc5MGM4MTUtNWYwNS00NGRjLWFiYzAtNDYwMmFhYjBjOTRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GMo9zL7LB7y5xj0M2LAzpJBXnZODRhwUkuj Ik+TuWfh7vflUcPVCK+G2rmtY6eR3knw5vlQaUSoEXfoKuq8FvNO6INsOHHihzdg DPJ/QBPWVaNtinrApPasfZA+OustN5Bxvc/SRLe9G8O4T0wXFsXKxG87RBu7JFBi kxuLHXvassyXRUQcxVx8Tj2kXgO8K9sO/vmzexeM77S0niaaBl3OAhY2H5maornc fMK5bZmPuVFjMDApMF4WIqhJSCXLNlhI3gqxk//c9THNz0XrxwiQqMi1QXDKq/dB k1PjcO2ieaZx/sw0b4UPzBgqYY1hiM4EHoddN+HryNebLT61YQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJJIVY1oE9PW7vl2nTpD/NRSrgONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZGUwMzQ2YWUtNmEyOC0z YjFhLWIxMzQtOTJjNDI2ZTgyZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAxlYwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAgn7GAlPEGT9SHPzCHhcL4mby6AkJh6ns5f+O/33TwCLLwg6cwUyD7luh NTU79/RTMYvFlZ16zOUicVwltZ0saKo74rH1BYXY6fMZ7d3iLRZXnUEbgFPLiD3C wEH0DS8/G10+fDjhKSryI8YdsS9YZI67NKxuOwY5w6Dg6To8Msr7OYWceBJKG3W0 v1jHnNgdYX4j9yJ3FbbIppWS9q5EqbQkvZkdZCrhuetsJMHfFkKfpxBYj8tv9s4f PIp0QbnWOZ9CaX2fKYlwvezomhqfyVuroVM+LrbKn/ceQHZpysOcicrVbvvHxcp6 +IVYhAcajeNcQQCh/vVK8caauv3nwA== -----END CERTIFICATE-----Generated at Tue Sep 9 08:02:18 2025 by rpki-client