$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a3307c66-4239-3a0a-b637-2e9ad6cc7e34.roa File: a3307c66-4239-3a0a-b637-2e9ad6cc7e34.roa (raw, json) Hash identifier: I4THYf2rWR+zXci5DXcOHdAhQOmI48cZsw+o68GvBE0= Subject key identifier: 24:BC:15:3E:D2:AB:F4:D7:69:B6:DC:42:83:DC:30:06:7E:11:FC:88 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A0727CF2ED1C35613FE8877A0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a3307c66-4239-3a0a-b637-2e9ad6cc7e34.roa Signing time: Fri 30 May 2025 19:11:38 +0000 ROA not before: Fri 30 May 2025 19:11:38 +0000 ROA not after: Thu 28 Aug 2025 19:11:38 +0000 asID: 81 IP address blocks: 152.26.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:27:cf:2e:d1:c3:56:13:fe:88:77:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: May 30 19:11:38 2025 GMT Not After : Aug 28 19:11:38 2025 GMT Subject: CN=7e8ff03f-72bd-4d19-83ee-77e2c4e5440c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:31:2b:80:59:43:18:16:9c:28:36:00:8b:fd: 5b:49:94:ae:4c:28:5b:6c:0b:b1:ee:e4:50:a7:21: 43:48:33:29:84:30:7d:cd:88:58:16:aa:c4:4f:50: 0f:39:5c:74:d1:6b:80:d4:02:c3:92:c7:3b:f8:45: 65:6f:de:e0:fa:00:88:21:70:79:1b:51:ea:48:61: e9:58:af:00:8b:88:98:f3:5c:9a:b4:32:54:f5:13: 20:fa:8e:dc:ee:4d:84:58:de:2c:b0:4e:98:17:3a: c1:07:3c:0d:d4:a9:d7:86:fa:15:44:a4:b6:b2:4c: 2f:1a:38:a2:e0:37:c1:a7:9c:83:9b:10:9d:c3:28: 6c:2e:4f:28:dd:06:65:cc:49:d1:13:f9:b8:2e:97: a4:f2:ff:14:bf:5e:f1:39:bb:83:9b:2f:78:dd:c0: 2c:e9:d3:db:2b:a7:13:5b:c2:67:79:51:0a:7c:c1: da:1a:b0:2b:30:52:66:d6:b3:04:86:e5:11:a2:a2: 77:6a:f1:34:29:c0:48:a5:fb:eb:73:9e:eb:3f:90: 3f:67:4a:c7:ad:bf:bc:cf:cb:3c:12:ad:fb:41:4b: c0:22:26:fe:76:92:8e:e9:c9:95:b0:4e:53:db:7b: a1:ce:77:6b:19:ab:4c:f6:b0:7a:90:9a:e7:1e:28: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BC:15:3E:D2:AB:F4:D7:69:B6:DC:42:83:DC:30:06:7E:11:FC:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a3307c66-4239-3a0a-b637-2e9ad6cc7e34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.26.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:bf:7c:94:50:aa:bf:c4:0b:ff:5d:26:a6:7c:c1:72:3f:9c: b4:44:dc:c8:72:00:6e:f3:90:08:49:b4:cd:c7:10:42:f6:f7: 7b:b6:7f:d6:34:01:c8:15:16:c7:ba:ae:bc:57:01:bd:b7:56: 8a:66:18:e3:eb:f4:e4:c5:55:05:34:b6:c6:ad:31:b5:f1:c7: 25:a6:d3:26:19:f9:98:98:d3:0a:f6:f2:a7:6c:2c:da:9f:54: 9d:f9:19:a0:0b:bb:f1:06:f3:1a:71:53:08:29:f4:a0:ce:65: 69:fd:34:88:4d:ca:1e:f9:27:57:91:64:0a:a6:3c:18:44:85: 50:c8:47:00:53:fe:b2:cc:1b:1b:77:dd:e4:85:fb:d9:6e:b8: a6:4e:0a:c0:eb:d4:cd:b3:d4:37:e2:ca:e9:91:f4:12:3a:9b: 96:18:5c:78:4d:37:6a:fe:ca:3a:46:49:25:5b:c2:d0:b4:0b: 23:ec:42:58:3e:51:ea:28:9b:1f:c7:1b:38:6a:54:42:48:0a: 14:03:c3:f9:ee:04:ec:90:78:ea:9a:05:58:96:c7:0c:bc:d9: 97:2f:4f:b3:6b:fe:15:6f:a6:6c:86:86:3a:48:9d:ae:93:b6: 98:d0:7f:47:b8:dd:5e:0d:79:22:a4:f7:4b:12:33:96:52:0e: 88:18:f1:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ88u0cNWE/6Id6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDUzMDE5MTEzOFoXDTI1MDgyODE5MTEzOFowLzEtMCsGA1UEAxMk N2U4ZmYwM2YtNzJiZC00ZDE5LTgzZWUtNzdlMmM0ZTU0NDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jErgFlDGBacKDYAi/1bSZSuTChbbAux7uRQ pyFDSDMphDB9zYhYFqrET1APOVx00WuA1ALDksc7+EVlb97g+gCIIXB5G1HqSGHp WK8Ai4iY81yatDJU9RMg+o7c7k2EWN4ssE6YFzrBBzwN1KnXhvoVRKS2skwvGjii 4DfBp5yDmxCdwyhsLk8o3QZlzEnRE/m4Lpek8v8Uv17xObuDmy943cAs6dPbK6cT W8JneVEKfMHaGrArMFJm1rMEhuURoqJ3avE0KcBIpfvrc57rP5A/Z0rHrb+8z8s8 Eq37QUvAIib+dpKO6cmVsE5T23uhzndrGatM9rB6kJrnHijsFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCS8FT7Sq/TXabbcQoPcMAZ+EfyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTMzMDdjNjYtNDIzOS0z YTBhLWI2MzctMmU5YWQ2Y2M3ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBoQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGG/fJRQqr/EC/9dJqZ8wXI/nLRE3MhyAG7zkAhJtM3HEEL293u2f9Y0 AcgVFse6rrxXAb23VopmGOPr9OTFVQU0tsatMbXxxyWm0yYZ+ZiY0wr28qdsLNqf VJ35GaALu/EG8xpxUwgp9KDOZWn9NIhNyh75J1eRZAqmPBhEhVDIRwBT/rLMGxt3 3eSF+9luuKZOCsDr1M2z1DfiyumR9BI6m5YYXHhNN2r+yjpGSSVbwtC0CyPsQlg+ Ueoomx/HGzhqVEJIChQDw/nuBOyQeOqaBViWxwy82ZcvT7Nr/hVvpmyGhjpIna6T tpjQf0e43V4NeSKk90sSM5ZSDogY8c0= -----END CERTIFICATE-----Generated at Sat Jun 7 03:20:50 2025 by rpki-client