$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7a7174a1-b8b5-3d66-a89a-e69da0d91ded.roa File: 7a7174a1-b8b5-3d66-a89a-e69da0d91ded.roa (raw, json) Hash identifier: G/1xeeCkM1vOH8/0YfXOZQ6Xp8EI0wcNhnbVNqebU8o= Subject key identifier: 0C:91:AC:8B:9E:9F:A3:E7:2F:14:8E:33:52:69:36:0A:32:C7:D9:9F Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584EAF234902045BCEC82D7EDF00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7a7174a1-b8b5-3d66-a89a-e69da0d91ded.roa Signing time: Fri 31 Jul 2026 18:26:04 +0000 ROA not before: Fri 31 Jul 2026 18:26:04 +0000 ROA not after: Thu 29 Oct 2026 18:26:04 +0000 asID: 81 IP address blocks: 152.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:23:49:02:04:5b:ce:c8:2d:7e:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jul 31 18:26:04 2026 GMT Not After : Oct 29 18:26:04 2026 GMT Subject: CN=745ce8f2-f369-4184-aa2e-90901c806e45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a4:77:d9:3f:ec:f8:47:62:0f:9a:ae:62:e9: 24:ff:e6:af:7d:60:e9:5b:fb:b6:c5:d1:89:3b:9c: cd:d1:7b:b2:58:a9:36:71:48:c9:a4:43:35:54:4c: fa:25:d4:64:ad:c8:7f:f2:d4:5d:72:6d:82:1e:66: 08:2f:1b:d1:06:7e:57:b3:df:dc:db:2d:3d:99:33: ca:98:5c:bb:1b:ba:fe:44:71:aa:9f:86:c8:45:64: 60:d9:4b:83:0e:41:e8:9f:4a:f4:1e:3e:cb:ac:22: 5c:a5:fe:78:dc:c4:d5:87:68:67:5c:69:b8:fe:78: ba:d4:ce:a9:b2:09:d8:f6:7a:01:c1:41:84:2b:44: a6:bb:a3:b2:08:59:ee:92:49:a3:a4:a5:8b:6e:23: 1a:37:2e:6f:c9:c8:fc:5b:50:7a:1f:75:2d:dd:1a: 5c:18:a2:da:de:6d:b3:16:c8:fc:ed:7a:ac:a3:df: 40:a5:59:55:7f:32:a0:c3:b6:19:1c:2c:f5:10:21: f9:93:4b:d7:42:5d:e1:bd:b3:e3:a7:26:c4:e7:9b: 6b:2a:e4:38:e2:05:4f:84:87:fe:79:06:03:e6:73: f0:65:12:fd:d9:c5:9c:5c:49:42:0e:ed:55:d0:13: 8f:67:8a:32:13:5b:8b:0c:35:cc:0c:33:9f:4c:f6: 12:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:91:AC:8B:9E:9F:A3:E7:2F:14:8E:33:52:69:36:0A:32:C7:D9:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/7a7174a1-b8b5-3d66-a89a-e69da0d91ded.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.28.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:d6:e5:b3:63:1f:b7:f3:0b:be:ea:fc:d5:da:51:ec:0d:2a: 95:39:8b:6c:f2:22:47:db:56:24:81:84:50:35:84:d0:f4:e0: 13:cc:a3:5c:3f:c5:55:f7:7f:c8:81:49:a6:d2:08:39:09:97: ba:3c:b5:60:a2:06:42:8d:77:73:db:8c:52:38:79:ac:44:32: 2f:a8:51:3c:7d:95:7c:19:9f:a2:c4:07:d4:a0:0d:2d:c1:b2: 96:57:ea:ec:2d:18:73:b6:de:f3:1f:50:22:6a:89:77:a9:67: c8:7d:60:1a:f6:b7:81:96:6a:71:31:aa:f6:fb:18:0d:1f:c5: 6a:e2:31:46:c6:41:53:f4:e1:b4:e8:b8:e9:8c:0d:4b:61:cc: b8:da:ed:90:d7:e7:ff:36:e9:7e:8c:3e:67:57:f5:46:2b:97: d8:31:e1:ad:ca:f8:de:7a:fb:3f:f6:da:68:07:c8:1e:52:e2: 3f:5b:da:92:87:a5:52:83:94:d0:5c:60:44:bf:9d:3b:f2:97: 3e:16:5b:93:eb:14:e6:2b:96:92:63:20:3b:d0:fa:31:1d:fa: 85:a3:e9:62:ad:af:2e:ba:ea:44:0d:c0:81:9d:ef:2d:2d:f0: 67:9a:8c:8d:c7:d0:4b:a4:10:4c:eb:6c:0c:c3:85:4e:c6:ba: 08:2d:16:1f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6vI0kCBFvOyC1+3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDczMTE4MjYwNFoXDTI2MTAyOTE4MjYwNFowLzEtMCsGA1UEAxMk NzQ1Y2U4ZjItZjM2OS00MTg0LWFhMmUtOTA5MDFjODA2ZTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KR32T/s+EdiD5quYukk/+avfWDpW/u2xdGJ O5zN0XuyWKk2cUjJpEM1VEz6JdRkrch/8tRdcm2CHmYILxvRBn5Xs9/c2y09mTPK mFy7G7r+RHGqn4bIRWRg2UuDDkHon0r0Hj7LrCJcpf543MTVh2hnXGm4/ni61M6p sgnY9noBwUGEK0Smu6OyCFnukkmjpKWLbiMaNy5vycj8W1B6H3Ut3RpcGKLa3m2z Fsj87Xqso99ApVlVfzKgw7YZHCz1ECH5k0vXQl3hvbPjpybE55trKuQ44gVPhIf+ eQYD5nPwZRL92cWcXElCDu1V0BOPZ4oyE1uLDDXMDDOfTPYS7QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFAyRrIuen6PnLxSOM1JpNgoyx9mfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvN2E3MTc0YTEtYjhiNS0z ZDY2LWE4OWEtZTY5ZGEwZDkxZGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEANdbls2Mft/MLvur81dpR7A0qlTmLbPIiR9tWJIGEUDWE0PTgE8yjXD/F Vfd/yIFJptIIOQmXujy1YKIGQo13c9uMUjh5rEQyL6hRPH2VfBmfosQH1KANLcGy llfq7C0Yc7be8x9QImqJd6lnyH1gGva3gZZqcTGq9vsYDR/FauIxRsZBU/ThtOi4 6YwNS2HMuNrtkNfn/zbpfow+Z1f1RiuX2DHhrcr43nr7P/baaAfIHlLiP1vakoel UoOU0FxgRL+dO/KXPhZbk+sU5iuWkmMgO9D6MR36haPpYq2vLrrqRA3AgZ3vLS3w Z5qMjcfQS6QQTOtsDMOFTsa6CC0WHw== -----END CERTIFICATE-----Generated at Sat Aug 22 18:00:36 2026 by rpki-client