$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/879c9dc4-7ce9-3700-a29d-e047fe16b38d.roa File: 879c9dc4-7ce9-3700-a29d-e047fe16b38d.roa (raw, json) Hash identifier: UoOPeYb6eOBaXiNyDgcpewWTD/x9tZO/1KI4/Y580ls= Subject key identifier: E0:66:01:ED:80:6A:65:E1:CD:9F:DD:88:AF:7A:E0:5B:B4:DD:60:E8 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A164170BC3C2DE219CEDA2 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/879c9dc4-7ce9-3700-a29d-e047fe16b38d.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 152.22.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:64:17:0b:c3:c2:de:21:9c:ed:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=7687a219-ca7d-4d6e-902d-41dd34125dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9a:a1:b7:0b:5a:46:6b:df:d6:29:bc:f0:70: fd:04:cd:f9:fd:2a:7c:7c:df:e7:17:b7:78:4c:ed: 10:27:f0:94:d6:85:26:f1:bd:49:36:af:fe:d6:4f: 9f:4e:6e:4b:30:bb:fb:51:7e:81:3f:a7:e0:65:f1: 4f:1d:46:5b:35:f1:f6:f2:71:60:c4:64:e5:4d:37: bf:34:87:4f:22:a9:58:2b:3a:99:ac:9e:57:3b:90: 51:8d:cb:be:e8:cb:85:9f:12:9d:eb:8c:15:6a:8b: ba:58:53:b1:09:19:67:61:11:50:0d:07:f9:76:f8: d1:33:b2:2c:89:66:6d:58:63:c4:e2:a4:f5:94:41: 9b:a8:f6:1a:b9:f2:d8:e7:6c:c1:35:e5:c7:47:d2: 16:b5:d0:11:3b:d0:74:70:23:f7:ce:c4:6b:8f:11: 07:e2:89:68:af:e1:2c:c0:33:ac:1c:d3:47:83:dc: 0a:60:82:11:23:36:ca:46:b3:9a:17:41:ff:f3:b8: cb:6f:cd:f4:60:a1:40:11:b0:43:11:18:6d:3f:96: ba:8c:13:85:fe:a6:d7:97:5e:39:d3:a1:27:65:50: 0f:1c:ca:3c:a1:7d:33:e6:e7:93:d7:a7:a9:17:a4: 03:55:c7:ae:31:dd:c5:b3:32:95:96:29:bb:bc:6e: 8f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:66:01:ED:80:6A:65:E1:CD:9F:DD:88:AF:7A:E0:5B:B4:DD:60:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/879c9dc4-7ce9-3700-a29d-e047fe16b38d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.22.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6f:2a:bb:b1:8f:8e:d9:03:12:d0:83:7e:4a:69:94:3b:d5: 5d:df:cc:9b:42:ff:b5:97:3a:d4:f9:b1:cf:e2:bd:38:0e:8f: 6e:db:c9:4d:a5:67:bc:16:03:16:fa:47:ec:38:d0:8c:18:d5: 7d:f5:72:13:f0:58:4d:48:01:e0:6b:22:f8:6b:e7:5e:6f:1d: 80:17:d2:89:59:ff:a8:95:27:73:74:6d:65:80:70:9e:95:e6: e0:4a:0a:fb:23:b8:ef:2c:53:01:52:16:e3:47:21:8e:ee:be: 0a:13:61:79:93:92:be:db:4c:ba:2c:34:99:1c:c0:6b:24:86: 25:66:be:22:fe:d6:49:29:61:fe:0c:8c:04:dd:c6:f6:21:81: 80:76:23:57:0b:4f:cd:f1:06:9a:4e:73:49:97:b2:56:8f:63: 52:20:48:ab:76:5a:00:8d:86:1c:17:ac:22:15:a3:52:5b:9e: 60:a7:ac:04:8f:fb:be:9c:e5:40:16:ab:8a:2e:8b:f6:3b:54: e4:c8:47:2a:7e:57:60:78:72:e9:1e:83:ab:30:01:4f:4e:39: 2c:21:4f:5c:18:c7:a0:57:a5:87:2d:e2:88:a5:ce:e6:f4:7e: c3:eb:3f:bd:f3:4f:6d:76:9c:32:d3:33:a8:2c:af:fe:7f:30: 4f:cf:d4:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWQXC8PC3iGc7aIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk NzY4N2EyMTktY2E3ZC00ZDZlLTkwMmQtNDFkZDM0MTI1ZGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5qhtwtaRmvf1im88HD9BM35/Sp8fN/nF7d4 TO0QJ/CU1oUm8b1JNq/+1k+fTm5LMLv7UX6BP6fgZfFPHUZbNfH28nFgxGTlTTe/ NIdPIqlYKzqZrJ5XO5BRjcu+6MuFnxKd64wVaou6WFOxCRlnYRFQDQf5dvjRM7Is iWZtWGPE4qT1lEGbqPYaufLY52zBNeXHR9IWtdARO9B0cCP3zsRrjxEH4olor+Es wDOsHNNHg9wKYIIRIzbKRrOaF0H/87jLb830YKFAEbBDERhtP5a6jBOF/qbXl145 06EnZVAPHMo8oX0z5ueT16epF6QDVceuMd3FszKVlim7vG6PtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBmAe2AamXhzZ/diK964Fu03WDoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvODc5YzlkYzQtN2NlOS0z NzAwLWEyOWQtZTA0N2ZlMTZiMzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlvKruxj47ZAxLQg35KaZQ71V3fzJtC/7WXOtT5sc/ivTgOj27byU2l Z7wWAxb6R+w40IwY1X31chPwWE1IAeBrIvhr515vHYAX0olZ/6iVJ3N0bWWAcJ6V 5uBKCvsjuO8sUwFSFuNHIY7uvgoTYXmTkr7bTLosNJkcwGskhiVmviL+1kkpYf4M jATdxvYhgYB2I1cLT83xBppOc0mXslaPY1IgSKt2WgCNhhwXrCIVo1JbnmCnrASP +76c5UAWq4oui/Y7VOTIRyp+V2B4cukeg6swAU9OOSwhT1wYx6BXpYct4oilzub0 fsPrP73zT212nDLTM6gsr/5/ME/P1Nk= -----END CERTIFICATE-----Generated at Tue Sep 9 07:58:36 2025 by rpki-client