$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9306ed2c-6bfd-31b5-93cf-c692c8a719e8.roa File: 9306ed2c-6bfd-31b5-93cf-c692c8a719e8.roa (raw, json) Hash identifier: Sbc9bLirCQgWc3f1Pi16Jn6LZf9tcpCEHcy+/Y3QFCU= Subject key identifier: 68:1C:66:64:54:86:AD:5A:44:32:AC:FB:AC:5A:A9:F9:3D:CF:8D:4B Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A1699A2EC22093ACCAE880 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9306ed2c-6bfd-31b5-93cf-c692c8a719e8.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 152.46.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:69:9a:2e:c2:20:93:ac:ca:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=138c2a69-2d0e-4d14-b883-587605b5808f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:9a:80:3d:44:75:37:c7:a0:91:c5:ce:2e:9c: 85:d7:f8:a2:ff:0f:19:df:3d:ae:fc:38:a5:1b:ae: 28:49:15:a5:9f:2d:73:47:bf:72:f5:ad:f9:8e:f2: 1f:92:d8:26:3e:1c:e4:a5:71:7e:c2:bc:7a:06:b5: 78:dc:8a:25:9d:b3:e4:b5:9d:0f:a9:0f:97:c0:7e: 98:a8:1a:40:b3:99:2b:79:33:d6:8f:50:75:61:ac: 8b:d1:bf:1c:1d:6f:7b:04:c5:a7:d4:75:3a:eb:ec: 92:68:e6:d6:bc:79:63:41:cb:9e:49:15:50:92:95: aa:bb:68:2c:78:8a:93:54:89:3b:ca:63:a4:9d:e4: 2c:8a:b0:c5:78:0f:b5:39:58:26:f7:63:50:24:50: f3:4e:17:30:ba:3b:51:fe:bb:d5:83:8e:a5:c5:d7: 4c:c4:25:59:64:d4:5b:f8:f6:15:4c:ac:e7:ab:99: 86:bd:62:a7:99:c0:89:5d:b1:7e:79:e3:77:77:c8: ff:af:60:a6:12:47:e6:03:b2:47:e6:16:7e:be:bd: 0f:c2:4d:d6:79:bf:f2:aa:21:96:a1:ae:b6:cc:69: 0e:87:81:2a:31:6f:dd:00:64:a8:fc:bf:25:dc:4f: 35:08:fd:38:07:ae:9f:62:74:f7:a0:d2:4b:ec:da: 94:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:1C:66:64:54:86:AD:5A:44:32:AC:FB:AC:5A:A9:F9:3D:CF:8D:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9306ed2c-6bfd-31b5-93cf-c692c8a719e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f9:d8:8d:49:d7:10:dd:55:60:f6:f9:67:12:10:a0:c9:26: 76:b9:85:5d:75:a3:5e:e5:39:a6:e7:5f:5f:e5:dd:99:cc:9f: 99:51:ef:e8:3f:9f:b0:58:2a:a4:73:fa:d8:c5:90:d8:bc:b6: a4:f9:21:f9:0f:82:5e:c5:00:60:c9:ff:72:4e:7f:b3:49:e5: d8:c9:8b:de:d9:6b:45:36:9c:c9:bc:fd:41:b9:42:96:63:63: 8b:8b:e3:ee:f1:c0:4d:73:1a:80:31:af:b7:8c:7a:44:2f:06: 39:98:3a:d6:64:dd:70:3f:e8:fa:ab:69:b0:bf:f2:b7:8c:94: e7:d1:98:ab:57:ac:e4:59:43:57:94:10:64:76:a3:3b:53:91: a2:af:98:3b:ee:70:ac:7f:6c:b5:47:ac:0e:13:c0:c5:83:0f: 82:26:54:7b:dc:fc:dd:95:d3:ed:0a:71:d8:5a:94:b2:a0:5d: f0:86:ba:a9:6d:da:03:ff:b3:9c:3d:ca:61:8e:44:c4:cc:42: 58:b3:a5:c4:84:01:00:03:e6:f8:56:eb:0e:82:25:53:33:5c: a5:51:68:21:e4:58:30:5c:23:d2:88:a7:b0:a1:26:83:6d:2a: a6:42:fd:b4:1c:ee:ea:01:e5:b4:ee:44:d3:43:6f:7b:1a:25: 98:22:f8:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWmaLsIgk6zK6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTM4YzJhNjktMmQwZS00ZDE0LWI4ODMtNTg3NjA1YjU4MDhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5qAPUR1N8egkcXOLpyF1/ii/w8Z3z2u/Dil G64oSRWlny1zR79y9a35jvIfktgmPhzkpXF+wrx6BrV43IolnbPktZ0PqQ+XwH6Y qBpAs5kreTPWj1B1YayL0b8cHW97BMWn1HU66+ySaObWvHljQcueSRVQkpWqu2gs eIqTVIk7ymOkneQsirDFeA+1OVgm92NQJFDzThcwujtR/rvVg46lxddMxCVZZNRb +PYVTKznq5mGvWKnmcCJXbF+eeN3d8j/r2CmEkfmA7JH5hZ+vr0Pwk3Web/yqiGW oa62zGkOh4EqMW/dAGSo/L8l3E81CP04B66fYnT3oNJL7NqUYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGgcZmRUhq1aRDKs+6xaqfk9z41LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOTMwNmVkMmMtNmJmZC0z MWI1LTkzY2YtYzY5MmM4YTcxOWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB352I1J1xDdVWD2+WcSEKDJJna5hV11o17lOabnX1/l3ZnMn5lR7+g/ n7BYKqRz+tjFkNi8tqT5IfkPgl7FAGDJ/3JOf7NJ5djJi97Za0U2nMm8/UG5QpZj Y4uL4+7xwE1zGoAxr7eMekQvBjmYOtZk3XA/6PqrabC/8reMlOfRmKtXrORZQ1eU EGR2oztTkaKvmDvucKx/bLVHrA4TwMWDD4ImVHvc/N2V0+0KcdhalLKgXfCGuqlt 2gP/s5w9ymGORMTMQlizpcSEAQAD5vhW6w6CJVMzXKVRaCHkWDBcI9KIp7ChJoNt KqZC/bQc7uoB5bTuRNNDb3saJZgi+KU= -----END CERTIFICATE-----Generated at Tue Sep 9 07:59:39 2025 by rpki-client