$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a58dd73-caaf-37a1-b438-2347078734e9.roa File: 9a58dd73-caaf-37a1-b438-2347078734e9.roa (raw, json) Hash identifier: 9a0/DkXBrCtA81MtwiXOwp4QgOHC1XxNJP9uR0LF7p4= Subject key identifier: 9E:A0:61:D0:C5:D3:6F:3C:E4:F6:B5:66:22:CC:EB:3A:9A:A6:78:5E Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584EAF2348B9EB990F67B686F900 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a58dd73-caaf-37a1-b438-2347078734e9.roa Signing time: Fri 31 Jul 2026 18:26:04 +0000 ROA not before: Fri 31 Jul 2026 18:26:04 +0000 ROA not after: Thu 29 Oct 2026 18:26:04 +0000 asID: 81 IP address blocks: 152.14.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 24 Aug 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:23:48:b9:eb:99:0f:67:b6:86:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jul 31 18:26:04 2026 GMT Not After : Oct 29 18:26:04 2026 GMT Subject: CN=da0b1ad9-9ad5-44ec-a9d3-41fdc58ab29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:f7:59:e3:d8:f5:36:27:44:01:21:97:65: 66:62:ea:0a:f1:25:cb:f6:ef:98:b9:e3:a2:ca:1f: a5:0b:71:b5:b4:f3:f6:80:db:1a:8f:83:a4:24:55: a9:39:4d:11:16:ef:fb:db:22:29:be:cc:4e:15:15: 94:56:44:a6:6f:4e:e8:06:42:36:d2:cf:b4:7f:8e: 20:2c:5f:85:75:51:66:2f:d1:68:dc:77:0d:b6:97: f1:56:1c:63:cc:d3:12:74:5d:28:fa:83:4f:35:0d: 55:34:a2:dc:92:eb:97:58:58:1d:7b:71:6a:cd:52: a2:ef:09:a7:f7:19:65:19:ee:12:af:a6:c6:1d:84: 5f:32:97:25:f1:55:bf:02:16:71:c9:8e:b2:f0:92: 7e:78:27:d9:ec:39:7f:24:15:90:d7:7c:89:9d:81: fa:16:68:0b:c1:2d:1d:6a:65:da:a0:6d:b7:0f:8a: e6:d0:6c:35:7c:23:56:1c:e2:c9:c5:70:18:d9:69: ac:cb:d5:01:e3:c6:bc:45:37:d5:0c:4a:fc:2f:81: 02:19:62:d1:03:7c:3c:ad:59:26:96:dc:55:65:62: 0c:8d:a9:38:0a:09:99:95:3f:ad:a6:40:6f:5b:4f: 8f:ce:a6:83:09:67:75:75:e8:07:a5:91:05:32:7a: 73:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A0:61:D0:C5:D3:6F:3C:E4:F6:B5:66:22:CC:EB:3A:9A:A6:78:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9a58dd73-caaf-37a1-b438-2347078734e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.14.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:3d:b8:d2:6d:42:f6:b4:03:7d:3b:fb:69:79:0c:9e:a5:6b: 56:44:d3:8d:d7:cd:73:cd:58:17:99:43:9f:94:3f:d8:06:c5: 52:70:21:fb:3e:9f:2a:09:42:eb:a3:b7:a5:61:f1:3c:e0:09: a4:20:e0:9d:5e:b7:48:a8:d1:ec:54:01:b0:24:86:cc:21:6c: 42:cb:85:f7:6f:21:fa:d5:b9:e6:44:ef:8e:7a:a7:c0:2d:c9: 10:7a:dc:37:6a:40:ba:5f:df:d3:61:fe:3b:f5:62:79:c4:15: 5b:23:af:24:73:01:80:99:83:b6:ed:26:f4:a2:d7:84:50:10: 9a:f6:59:cf:ad:1c:a5:01:07:3f:74:a3:17:49:77:6e:8e:8e: ba:ad:11:54:3c:0f:31:bd:a7:b9:35:a7:f1:40:74:99:73:da: 67:78:4d:09:f0:3f:a5:3b:01:90:ff:cf:da:5b:61:11:60:c3: d5:8e:08:ea:10:86:7d:d5:24:ee:af:ed:9d:74:b5:5e:27:77: b1:cc:3b:e1:e7:ba:a1:2a:9c:73:96:7d:90:9b:1e:14:18:87: 84:76:60:f1:49:b8:42:9f:c4:dd:48:96:6b:c8:bd:c0:6a:7c: 37:46:e5:98:cb:8a:fa:eb:31:fb:31:a7:7b:78:db:58:b3:d5: 12:fd:92:7c -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE6vI0i565kPZ7aG+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDczMTE4MjYwNFoXDTI2MTAyOTE4MjYwNFowLzEtMCsGA1UEAxMk ZGEwYjFhZDktOWFkNS00NGVjLWE5ZDMtNDFmZGM1OGFiMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbP3WePY9TYnRAEhl2VmYuoK8SXL9u+YueOi yh+lC3G1tPP2gNsaj4OkJFWpOU0RFu/72yIpvsxOFRWUVkSmb07oBkI20s+0f44g LF+FdVFmL9Fo3HcNtpfxVhxjzNMSdF0o+oNPNQ1VNKLckuuXWFgde3FqzVKi7wmn 9xllGe4Sr6bGHYRfMpcl8VW/AhZxyY6y8JJ+eCfZ7Dl/JBWQ13yJnYH6FmgLwS0d amXaoG23D4rm0Gw1fCNWHOLJxXAY2Wmsy9UB48a8RTfVDEr8L4ECGWLRA3w8rVkm ltxVZWIMjak4CgmZlT+tpkBvW0+PzqaDCWd1degHpZEFMnpz6wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ6gYdDF02885Pa1ZiLM6zqapnheMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOWE1OGRkNzMtY2FhZi0z N2ExLWI0MzgtMjM0NzA3ODczNGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmA4wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhj240m1C9rQDfTv7aXkMnqVrVkTTjdfNc81YF5lDn5Q/2AbFUnAh+z6f KglC66O3pWHxPOAJpCDgnV63SKjR7FQBsCSGzCFsQsuF928h+tW55kTvjnqnwC3J EHrcN2pAul/f02H+O/ViecQVWyOvJHMBgJmDtu0m9KLXhFAQmvZZz60cpQEHP3Sj F0l3bo6Ouq0RVDwPMb2nuTWn8UB0mXPaZ3hNCfA/pTsBkP/P2lthEWDD1Y4I6hCG fdUk7q/tnXS1Xid3scw74ee6oSqcc5Z9kJseFBiHhHZg8Um4Qp/E3UiWa8i9wGp8 N0blmMuK+usx+zGne3jbWLPVEv2SfA== -----END CERTIFICATE-----Generated at Sat Aug 22 19:26:26 2026 by rpki-client