$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99d1c125-49e6-3549-a390-b976cc7b3382.roa File: 99d1c125-49e6-3549-a390-b976cc7b3382.roa (raw, json) Hash identifier: zWkhw3tt8GrIF61H7HKsbofytJ7Zz3aqtH2g/22NVZM= Subject key identifier: 2B:0C:AA:47:0B:BA:78:44:24:CC:CF:A0:F6:7B:19:55:23:01:F7:B8 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A1687116976D93A805AA80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99d1c125-49e6-3549-a390-b976cc7b3382.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 152.45.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:68:71:16:97:6d:93:a8:05:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=3bbc0b69-39b5-427d-bf69-6a538f146808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a2:14:7b:67:0a:55:51:d7:54:eb:60:35:36: 15:f6:fe:a2:0f:9b:85:64:e5:4f:93:0d:d9:ec:c2: 4e:ac:4a:ae:b2:1c:30:58:d8:c4:6c:8a:16:26:bd: 53:f3:23:22:33:89:81:3c:5e:0c:dc:c6:8e:e7:c3: 5a:84:03:2e:36:13:ac:8b:9c:c3:02:34:72:d8:4f: b2:8d:ac:48:b6:c1:e2:ea:7a:33:69:0e:37:7b:f7: ad:1e:91:0c:7c:06:f1:44:00:de:f3:85:cd:2d:3d: 3c:7d:0d:2a:d0:9d:be:56:33:a1:7b:48:d0:44:cf: 4e:dd:ca:1b:6d:ab:bc:9b:0a:d0:7c:db:27:25:88: 12:7e:7c:ea:42:67:6e:08:cb:66:f4:fa:3a:99:d5: d2:e3:af:9f:74:cf:06:16:f9:ed:26:64:c2:0e:53: 43:55:4d:07:1c:3c:b1:6f:4a:6c:e0:29:8c:9c:71: 7a:02:ef:44:3b:79:ed:da:da:20:d6:bd:d6:73:b1: 19:b7:e4:41:18:e5:9c:f2:e2:9e:79:62:8d:24:ac: 0b:29:b7:ca:22:28:9b:e7:db:8b:c7:d7:bc:2d:c2: bb:88:1e:ed:57:cc:4e:c8:0e:95:cd:9c:48:a7:9c: 95:ad:d3:7e:1d:5c:a3:e7:7b:6e:cc:09:d7:20:13: e2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:0C:AA:47:0B:BA:78:44:24:CC:CF:A0:F6:7B:19:55:23:01:F7:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/99d1c125-49e6-3549-a390-b976cc7b3382.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:6d:60:33:c6:3d:82:a4:52:f0:5e:cd:27:55:76:e2:8b:ea: e2:cf:b1:99:c1:89:95:e8:8b:05:9f:28:29:90:a9:04:57:6d: 51:c3:ab:cd:99:60:a4:2a:0d:3f:2c:42:fa:9d:f6:98:7f:35: d5:b5:c5:01:64:7a:55:37:7f:14:52:d8:b8:7f:36:c3:78:70: 04:29:5c:2d:f6:e7:81:fb:4c:6a:5f:82:37:41:e5:cb:a0:cf: 0b:9e:9a:63:9c:92:68:1e:2f:9b:6d:f9:1c:a3:2d:71:e4:04: f4:52:17:23:c7:a1:c6:c5:dd:78:83:c2:d5:b1:72:8c:b9:c6: 50:d3:b2:26:a2:b3:9d:24:fd:23:9e:d5:7f:57:85:b2:da:c6: b8:b9:cb:1b:bd:25:2a:6e:79:32:dd:8e:da:3e:c8:8f:87:15: dc:1e:cf:12:5b:ec:cf:fb:79:ef:3d:09:0b:65:7b:b5:21:6f: c9:42:7a:6a:71:07:a0:09:71:14:2e:db:f5:fc:ef:92:06:30: 62:a0:cb:a8:7b:36:97:7e:14:2c:3a:ea:7d:82:d6:45:13:f0: 5a:ad:3d:48:1b:fa:4e:f5:50:6c:6b:1e:33:20:52:e7:9c:79: 66:4c:93:b0:f8:74:f4:3f:25:f6:48:95:4d:eb:5f:87:93:0b: fe:8d:6f:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWhxFpdtk6gFqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk M2JiYzBiNjktMzliNS00MjdkLWJmNjktNmE1MzhmMTQ2ODA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqIUe2cKVVHXVOtgNTYV9v6iD5uFZOVPkw3Z 7MJOrEqushwwWNjEbIoWJr1T8yMiM4mBPF4M3MaO58NahAMuNhOsi5zDAjRy2E+y jaxItsHi6nozaQ43e/etHpEMfAbxRADe84XNLT08fQ0q0J2+VjOhe0jQRM9O3cob bau8mwrQfNsnJYgSfnzqQmduCMtm9Po6mdXS46+fdM8GFvntJmTCDlNDVU0HHDyx b0ps4CmMnHF6Au9EO3nt2tog1r3Wc7EZt+RBGOWc8uKeeWKNJKwLKbfKIiib59uL x9e8LcK7iB7tV8xOyA6VzZxIp5yVrdN+HVyj53tuzAnXIBPiDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsMqkcLunhEJMzPoPZ7GVUjAfe4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOTlkMWMxMjUtNDllNi0z NTQ5LWEzOTAtYjk3NmNjN2IzMzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdtYDPGPYKkUvBezSdVduKL6uLPsZnBiZXoiwWfKCmQqQRXbVHDq82Z YKQqDT8sQvqd9ph/NdW1xQFkelU3fxRS2Lh/NsN4cAQpXC3254H7TGpfgjdB5cug zwuemmOckmgeL5tt+RyjLXHkBPRSFyPHocbF3XiDwtWxcoy5xlDTsiais50k/SOe 1X9XhbLaxri5yxu9JSpueTLdjto+yI+HFdwezxJb7M/7ee89CQtle7Uhb8lCempx B6AJcRQu2/X875IGMGKgy6h7Npd+FCw66n2C1kUT8FqtPUgb+k71UGxrHjMgUuec eWZMk7D4dPQ/JfZIlU3rX4eTC/6Nb/s= -----END CERTIFICATE-----Generated at Tue Sep 9 08:03:44 2025 by rpki-client