$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7fb3cbc-959e-3fc9-ba2f-d02cf0494b67.roa File: a7fb3cbc-959e-3fc9-ba2f-d02cf0494b67.roa (raw, json) Hash identifier: KjE485pQB1qs+77l9avwvDNKNPlIHsO66/9aSbPBfhk= Subject key identifier: 36:76:34:93:66:C0:45:0A:EE:C6:B3:E2:78:C4:2C:A7:BB:55:5C:A0 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A1642C3919E4102C957F00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7fb3cbc-959e-3fc9-ba2f-d02cf0494b67.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 152.22.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:64:2c:39:19:e4:10:2c:95:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=a808e61d-1fe0-4acc-879c-0ee998cbd94a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:ba:04:c9:a0:fe:c8:aa:0e:09:a1:f7:14: 28:23:92:3b:1f:bf:ac:99:42:06:de:6f:06:fa:5c: 72:06:08:70:82:57:5c:8c:cf:71:b0:24:f8:96:84: 50:8d:3e:06:40:7d:00:ec:a0:4a:2a:bc:92:b5:fa: 13:e2:4d:14:78:47:96:00:9c:5f:01:35:d2:74:5a: 3d:ae:f7:93:d3:23:7d:a1:62:13:f9:4a:07:67:26: 28:91:31:09:68:56:ac:9b:73:57:51:19:08:92:6d: d7:9f:44:3f:23:78:d6:12:25:dc:e1:18:c6:0c:2a: 03:66:69:db:8b:65:a0:a7:99:3c:3d:52:20:e1:b7: b0:2d:19:0f:81:f0:97:f3:bf:c0:f2:24:ab:0e:b6: 38:19:74:70:91:15:5f:f4:de:69:85:6f:fb:02:26: b0:11:d2:7f:be:92:c1:a7:0a:38:ba:61:69:e8:3b: cc:70:d9:ef:49:63:11:ab:06:da:ae:bf:19:b2:21: 06:e7:09:42:ac:51:28:ee:1f:01:e7:39:2c:b1:3e: 5d:de:00:a7:d7:e3:a6:0d:a1:56:70:49:c3:d8:ea: d8:22:ad:8a:e8:13:21:e8:fd:15:0c:76:f7:e7:e6: 55:c3:11:1c:d2:2d:95:e4:81:6d:26:55:32:88:15: ce:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:76:34:93:66:C0:45:0A:EE:C6:B3:E2:78:C4:2C:A7:BB:55:5C:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a7fb3cbc-959e-3fc9-ba2f-d02cf0494b67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.22.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e9:f7:ca:d3:4a:8e:fe:a2:2a:1e:c6:ed:f3:52:47:a1:77: 59:5e:93:4d:b1:79:5b:eb:a2:a1:9e:73:36:7c:53:72:ff:91: 08:b9:e1:14:eb:e8:d3:4e:b4:ab:a7:18:72:71:9f:42:2a:4b: 0a:18:57:09:bd:6e:88:97:a8:14:54:c9:ea:78:b7:4e:9b:89: e7:e3:f9:36:7c:8b:33:30:db:57:7d:fa:17:98:c8:8a:7b:54: b7:8a:a6:19:a2:04:da:39:68:ca:03:93:88:9a:84:93:bf:8e: 69:a6:e0:ff:81:29:e6:0c:65:a8:2c:ce:35:1f:c0:cb:18:35: 70:c4:43:14:94:e3:f5:70:6f:fd:a5:ee:90:da:63:de:87:80: 83:96:7e:a6:2c:93:71:bb:55:c0:2d:67:0e:5c:1c:14:0a:74: 6f:28:98:c7:2d:c1:5c:66:00:7e:9b:9d:9b:95:8e:ce:b0:7b: e8:57:72:4e:66:8a:e7:f2:61:b5:3a:eb:f6:97:41:48:c5:b1: c7:c9:1a:f7:4b:fc:9e:52:97:10:bb:a2:f8:8a:4c:2b:4b:f9: e0:e3:9b:dd:42:7b:28:4a:39:82:52:9e:4d:00:13:47:b6:0e: 29:1d:36:48:8b:c5:c9:bd:55:65:07:8b:f3:ee:c8:d7:99:b7: 44:83:cb:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWQsORnkECyVfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk YTgwOGU2MWQtMWZlMC00YWNjLTg3OWMtMGVlOTk4Y2JkOTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IW6BMmg/siqDgmh9xQoI5I7H7+smUIG3m8G +lxyBghwgldcjM9xsCT4loRQjT4GQH0A7KBKKryStfoT4k0UeEeWAJxfATXSdFo9 rveT0yN9oWIT+UoHZyYokTEJaFasm3NXURkIkm3Xn0Q/I3jWEiXc4RjGDCoDZmnb i2Wgp5k8PVIg4bewLRkPgfCX87/A8iSrDrY4GXRwkRVf9N5phW/7AiawEdJ/vpLB pwo4umFp6DvMcNnvSWMRqwbarr8ZsiEG5wlCrFEo7h8B5zkssT5d3gCn1+OmDaFW cEnD2OrYIq2K6BMh6P0VDHb35+ZVwxEc0i2V5IFtJlUyiBXOpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZ2NJNmwEUK7saz4njELKe7VVygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTdmYjNjYmMtOTU5ZS0z ZmM5LWJhMmYtZDAyY2YwNDk0YjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfp98rTSo7+oioexu3zUkehd1lek02xeVvroqGeczZ8U3L/kQi54RTr 6NNOtKunGHJxn0IqSwoYVwm9boiXqBRUyep4t06biefj+TZ8izMw21d9+heYyIp7 VLeKphmiBNo5aMoDk4iahJO/jmmm4P+BKeYMZagszjUfwMsYNXDEQxSU4/Vwb/2l 7pDaY96HgIOWfqYsk3G7VcAtZw5cHBQKdG8omMctwVxmAH6bnZuVjs6we+hXck5m iufyYbU66/aXQUjFscfJGvdL/J5SlxC7oviKTCtL+eDjm91CeyhKOYJSnk0AE0e2 DikdNkiLxcm9VWUHi/PuyNeZt0SDyx4= -----END CERTIFICATE-----Generated at Tue Sep 9 08:09:09 2025 by rpki-client