$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2e7e918a-8f54-3fe9-9692-3dcdeeb69298.roa File: 2e7e918a-8f54-3fe9-9692-3dcdeeb69298.roa (raw, json) Hash identifier: 9eBFo/dbM78ioSq/M9hGUpOB5Y7jgGsz6z8DDLI4J5w= Subject key identifier: B5:5E:12:E1:60:3F:B5:C3:42:E0:BF:56:75:89:1C:86:40:7D:5D:76 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A161095B12E9FF25A44980 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2e7e918a-8f54-3fe9-9692-3dcdeeb69298.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 152.49.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:61:09:5b:12:e9:ff:25:a4:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=a0269bb6-02eb-4a3b-825e-a0d2d873a316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5b:60:16:fa:d4:e6:46:13:28:f5:a7:75:7c: 2b:78:ff:d5:62:34:6e:71:25:01:11:5c:29:aa:a7: c4:4f:43:8a:c0:48:f1:46:13:fe:27:cc:64:1e:c8: ee:f7:4d:93:fc:ea:a7:c3:85:06:33:15:14:8c:d3: df:0b:c7:c1:d4:97:44:1f:a3:1e:8a:e7:a2:88:d2: 65:23:f5:ca:a0:d1:91:3b:43:d8:a6:44:7a:fd:65: 2d:35:85:26:83:75:a3:44:d2:76:d3:8e:79:55:01: fc:4a:b2:f6:88:ce:15:53:e8:7e:40:a7:c8:74:92: 36:f1:48:72:a4:5d:8a:21:68:8b:be:aa:73:09:7f: cc:03:1b:6a:e8:66:d6:66:a5:7f:fd:81:77:81:1d: dc:4c:df:4a:ed:b9:6c:55:41:b5:ce:53:de:99:a3: da:36:6a:da:9b:ae:c0:26:fa:6e:81:fb:d8:c6:95: d2:48:7c:83:93:cb:04:25:c1:63:e6:1c:4f:2f:c6: 9d:2f:59:8d:64:aa:27:54:69:0b:75:35:e2:d8:79: 79:1f:ef:50:38:42:fb:e0:ec:aa:4a:55:0f:b3:6e: 5e:3c:96:93:45:a8:9c:1b:32:8c:07:87:a9:f0:13: 69:14:03:d9:94:9f:fd:2b:94:7f:2b:6c:1b:33:69: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:5E:12:E1:60:3F:B5:C3:42:E0:BF:56:75:89:1C:86:40:7D:5D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/2e7e918a-8f54-3fe9-9692-3dcdeeb69298.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.49.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:ad:e8:7d:66:de:c2:5a:2c:30:18:57:6d:87:7f:c9:fd:42: 59:df:1c:6a:c2:cc:5a:b5:3c:fb:2d:e8:98:da:c2:a3:e9:a2: d2:0a:a6:4e:b6:0d:2a:58:25:be:be:74:f8:9f:83:bc:b7:6f: 31:3f:a1:2e:3b:2e:13:ac:c8:db:3c:6d:26:79:82:1d:ca:c7: ee:78:94:1f:00:16:6a:97:88:d8:6b:36:b3:95:80:78:f5:0b: be:20:07:11:9b:b3:c2:28:20:29:eb:8c:f5:8e:cb:5b:65:06: c5:bf:33:a2:62:49:73:79:23:06:86:e0:24:3a:2d:18:56:79: 43:b1:13:8b:87:bb:9d:0d:cf:eb:0c:aa:49:e3:cd:ba:33:41: 7e:3b:f9:d0:c5:89:18:99:b7:1f:a6:e6:d3:87:82:0f:19:e4: ed:e9:38:96:86:8a:36:75:a7:5e:af:25:73:d9:83:f9:65:95: 7f:7a:73:4a:a2:47:e6:a5:64:b7:67:fe:5c:ee:ea:c2:7b:00: 71:30:67:c3:1b:29:0e:34:61:6e:d7:12:e2:46:22:f8:0e:7b: 88:47:72:9f:2c:5e:61:0b:09:36:40:06:57:f8:f3:d4:8d:d7: b5:91:00:f8:71:76:b0:c6:64:40:15:00:bd:f7:be:25:2f:28: ee:75:e5:94 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsWoWEJWxLp/yWkSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk YTAyNjliYjYtMDJlYi00YTNiLTgyNWUtYTBkMmQ4NzNhMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVtgFvrU5kYTKPWndXwreP/VYjRucSUBEVwp qqfET0OKwEjxRhP+J8xkHsju902T/Oqnw4UGMxUUjNPfC8fB1JdEH6MeiueiiNJl I/XKoNGRO0PYpkR6/WUtNYUmg3WjRNJ20455VQH8SrL2iM4VU+h+QKfIdJI28Uhy pF2KIWiLvqpzCX/MAxtq6GbWZqV//YF3gR3cTN9K7blsVUG1zlPemaPaNmram67A JvpugfvYxpXSSHyDk8sEJcFj5hxPL8adL1mNZKonVGkLdTXi2Hl5H+9QOEL74Oyq SlUPs25ePJaTRaicGzKMB4ep8BNpFAPZlJ/9K5R/K2wbM2lT5QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLVeEuFgP7XDQuC/VnWJHIZAfV12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMmU3ZTkxOGEtOGY1NC0z ZmU5LTk2OTItM2RjZGVlYjY5Mjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEASa3ofWbewlosMBhXbYd/yf1CWd8casLMWrU8+y3omNrCo+mi0gqmTrYN Klglvr50+J+DvLdvMT+hLjsuE6zI2zxtJnmCHcrH7niUHwAWapeI2Gs2s5WAePUL viAHEZuzwiggKeuM9Y7LW2UGxb8zomJJc3kjBobgJDotGFZ5Q7ETi4e7nQ3P6wyq SePNujNBfjv50MWJGJm3H6bm04eCDxnk7ek4loaKNnWnXq8lc9mD+WWVf3pzSqJH 5qVkt2f+XO7qwnsAcTBnwxspDjRhbtcS4kYi+A57iEdynyxeYQsJNkAGV/jz1I3X tZEA+HF2sMZkQBUAvfe+JS8o7nXllA== -----END CERTIFICATE-----Generated at Tue Sep 9 08:00:16 2025 by rpki-client