$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c91c0ecc-113c-3fd8-ab77-41a6f7ff1b6d.roa File: c91c0ecc-113c-3fd8-ab77-41a6f7ff1b6d.roa (raw, json) Hash identifier: gkWPxkfNl9EAXDe1yiM53YDSKQrFav4GWyAmJ0nns2o= Subject key identifier: D1:4A:63:70:53:BD:C1:37:DE:32:D0:19:B9:78:8C:0C:BD:21:E4:10 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6F6CB144744EFD9F9180 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c91c0ecc-113c-3fd8-ab77-41a6f7ff1b6d.roa Signing time: Fri 10 Oct 2025 15:41:22 +0000 ROA not before: Fri 10 Oct 2025 15:41:22 +0000 ROA not after: Thu 08 Jan 2026 16:41:22 +0000 asID: 81 IP address blocks: 198.86.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6f:6c:b1:44:74:4e:fd:9f:91:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:22 2025 GMT Not After : Jan 8 16:41:22 2026 GMT Subject: CN=af0eff04-87b7-4628-a07c-2e8e5d1243ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:bc:32:63:7f:46:b4:c6:17:2d:ab:e3:34: 94:20:ec:27:42:04:d4:79:9a:50:a8:20:6a:1c:0f: af:31:2a:f6:7b:53:99:a4:bc:c5:c7:92:9a:1c:23: 65:a1:f2:b8:fe:2d:c3:6e:65:d2:b9:3d:c1:d8:04: fc:e8:6d:ca:af:38:4c:3b:6d:de:8f:f5:fa:39:ac: b4:5b:78:86:43:33:f3:83:22:89:2e:4b:c9:60:e2: 30:aa:54:24:8f:33:28:dd:78:6f:e6:7d:31:a9:5f: 1d:f8:3d:c3:83:c8:9f:a2:7c:34:12:4f:b8:0b:c8: 8b:4c:a8:f2:61:5b:da:67:c1:4d:42:a3:8d:65:1a: 1d:d9:d9:d8:16:6c:7b:4b:b8:dd:95:28:3e:27:9b: b2:f1:bb:64:79:81:87:aa:df:e3:c5:94:a8:c8:c8: 29:dc:2e:23:8e:3c:34:c6:70:46:77:f5:1d:cf:5d: 43:a3:25:f7:cb:77:ba:4d:31:64:bf:d7:28:65:48: 2f:08:77:e7:cb:0e:e2:11:4d:dc:c8:17:e9:0d:4a: 55:46:06:9a:fa:fd:96:df:89:2b:ae:8f:9e:ff:53: 75:e0:c0:9d:ca:24:26:be:90:ea:e1:bd:4f:61:2b: a4:8c:d0:3b:7a:8b:fa:9d:3a:78:40:60:b1:25:9f: 08:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4A:63:70:53:BD:C1:37:DE:32:D0:19:B9:78:8C:0C:BD:21:E4:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c91c0ecc-113c-3fd8-ab77-41a6f7ff1b6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 198.86.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:61:55:d6:f1:78:08:81:7c:38:b2:e1:35:88:1f:64:26:67: 03:65:f7:3d:6a:7f:ac:9f:fd:d4:46:a3:14:7e:ca:5c:4a:15: 48:3f:72:7b:d2:4f:c1:17:08:fe:ce:60:dd:63:61:8e:40:b0: 3f:a3:87:e6:72:01:94:f5:94:be:d9:40:c6:b4:df:d5:19:d5: 44:ee:61:0f:84:25:bb:b4:4f:ab:27:63:31:30:7f:a4:75:92: 12:74:20:fa:c5:36:75:f6:25:db:36:c1:bd:52:e9:dc:a4:8f: bb:cd:47:21:7e:95:c9:cc:4d:46:b6:4a:6e:34:81:0f:be:3a: 7e:98:70:3e:72:fb:f9:1d:88:4d:0b:ed:0e:65:3a:10:c1:5b: 38:eb:5e:44:4a:3d:f5:5c:c9:a3:6c:b5:68:35:26:89:51:d1: e6:f7:b2:bc:50:a7:5f:73:f5:54:b0:d1:e2:b5:6f:02:15:50: ba:a8:8e:99:32:21:92:52:85:ae:4e:8a:40:8a:d5:ba:9d:2d: ec:c7:e4:33:db:cc:d9:05:54:5f:7f:97:ed:3c:04:98:57:7a: a1:09:d8:87:5a:89:8c:99:db:42:a3:19:94:e1:06:4a:75:81: 24:a3:f0:67:e3:8c:74:c2:27:10:b2:4d:db:9b:2f:45:11:a2: da:09:97:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DG9ssUR0Tv2fkYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMloXDTI2MDEwODE2NDEyMlowLzEtMCsGA1UEAxMk YWYwZWZmMDQtODdiNy00NjI4LWEwN2MtMmU4ZTVkMTI0M2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY+8MmN/RrTGFy2r4zSUIOwnQgTUeZpQqCBq HA+vMSr2e1OZpLzFx5KaHCNlofK4/i3DbmXSuT3B2AT86G3KrzhMO23ej/X6Oay0 W3iGQzPzgyKJLkvJYOIwqlQkjzMo3Xhv5n0xqV8d+D3Dg8ifonw0Ek+4C8iLTKjy YVvaZ8FNQqONZRod2dnYFmx7S7jdlSg+J5uy8btkeYGHqt/jxZSoyMgp3C4jjjw0 xnBGd/Udz11DoyX3y3e6TTFkv9coZUgvCHfnyw7iEU3cyBfpDUpVRgaa+v2W34kr ro+e/1N14MCdyiQmvpDq4b1PYSukjNA7eov6nTp4QGCxJZ8IIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFKY3BTvcE33jLQGbl4jAy9IeQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYzkxYzBlY2MtMTEzYy0z ZmQ4LWFiNzctNDFhNmY3ZmYxYjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZhVdbxeAiBfDiy4TWIH2QmZwNl9z1qf6yf/dRGoxR+ylxKFUg/cnvS T8EXCP7OYN1jYY5AsD+jh+ZyAZT1lL7ZQMa039UZ1UTuYQ+EJbu0T6snYzEwf6R1 khJ0IPrFNnX2Jds2wb1S6dykj7vNRyF+lcnMTUa2Sm40gQ++On6YcD5y+/kdiE0L 7Q5lOhDBWzjrXkRKPfVcyaNstWg1JolR0eb3srxQp19z9VSw0eK1bwIVULqojpky IZJSha5OikCK1bqdLezH5DPbzNkFVF9/l+08BJhXeqEJ2IdaiYyZ20KjGZThBkp1 gSSj8GfjjHTCJxCyTdubL0URotoJlzI= -----END CERTIFICATE-----Generated at Wed Nov 5 14:48:45 2025 by rpki-client