$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cfb188fe-91e4-383f-8150-321402f9d02b.roa File: cfb188fe-91e4-383f-8150-321402f9d02b.roa (raw, json) Hash identifier: 2UKs4v6icCgfm06jn1ZqlDhJEzF06bAJyRIbFcazLks= Subject key identifier: 1B:54:D6:44:E5:8A:05:C3:29:5F:A3:5F:E6:B2:16:8C:FC:F1:42:99 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A163EA9A6C555C39EE8040 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cfb188fe-91e4-383f-8150-321402f9d02b.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 19718 IP address blocks: 152.22.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:63:ea:9a:6c:55:5c:39:ee:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=2e014168-adcc-4d43-a81c-e5a5359f9dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:51:b1:92:42:ac:34:52:e0:9d:1a:4e:52:1c: 39:36:72:43:c7:84:7a:f6:7a:e6:21:53:67:49:1a: 70:92:8a:3e:18:c1:fd:b4:de:11:8d:36:0f:d4:16: 27:3a:2e:ef:bd:07:c1:bb:a9:83:f0:23:d3:54:52: e4:88:f6:54:cd:42:06:b7:2a:26:1c:11:6d:3f:4f: 51:42:e5:70:97:9a:e7:f2:3d:82:9f:2d:fe:28:a4: c4:25:12:64:d6:e7:81:c4:ab:9e:50:25:4d:ea:a5: 42:ef:cf:ae:e4:f7:a1:eb:5a:66:6d:ef:0e:fc:8c: 55:8d:e1:78:c8:28:56:e4:8f:f9:2c:52:24:48:ce: d7:d3:50:f4:e1:f4:af:b3:6e:dd:d4:36:61:1e:71: 28:8a:5f:de:77:38:e3:f1:33:52:37:3e:78:df:1d: d7:bf:e9:c1:16:eb:5d:bb:81:7a:ea:1a:21:d5:29: b9:ce:e8:b8:b5:e9:8a:01:56:6c:f5:ac:e0:6c:91: 3a:1f:6e:65:41:14:95:30:d8:7e:f3:2b:55:03:17: 16:7f:43:be:1a:a1:90:3b:d5:ed:9f:00:7c:f8:89: 36:04:b8:81:95:f6:68:2f:af:93:8f:67:80:b4:6a: 71:41:0a:b4:f9:30:a2:ea:24:6d:a8:96:7c:78:4e: ef:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:54:D6:44:E5:8A:05:C3:29:5F:A3:5F:E6:B2:16:8C:FC:F1:42:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cfb188fe-91e4-383f-8150-321402f9d02b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.22.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:13:b4:49:a9:24:2e:9f:f7:ba:43:af:c4:3d:8c:9e:17:ac: 07:ba:96:78:59:08:4f:87:d7:e1:8f:c5:35:12:a4:75:b1:68: 97:f4:a2:08:80:2b:00:bb:c9:87:53:b5:11:fb:64:9d:f8:74: 17:06:48:83:16:36:70:f7:c0:78:d2:23:59:31:2f:b1:d7:d2: 2f:39:25:c7:97:63:99:65:55:3c:3d:34:d1:80:67:c7:4f:4a: a2:08:f5:e6:74:84:c8:21:ac:be:1f:e0:2c:65:99:8a:a9:72: f8:6b:5a:a4:7b:bf:2f:03:b0:37:34:55:f3:ea:83:cf:16:80: b8:8a:12:92:29:14:08:fc:75:5a:40:3c:0e:06:58:0d:e3:eb: 4f:7c:0b:89:ec:08:01:8f:65:28:22:5e:e6:41:6f:59:2c:58: 96:5f:37:d7:9f:a6:36:3e:36:50:0f:a7:9e:ff:0f:6a:07:06: 56:47:80:fb:37:52:6b:eb:7d:8a:63:88:1a:7c:de:90:a5:dc: 9f:00:77:e1:12:26:59:91:bb:62:65:c0:e3:02:49:0a:65:5c: 64:00:b3:80:c5:10:af:5e:83:3a:6c:b9:58:84:4d:3e:af:98: 88:49:55:8a:50:f8:6c:81:b7:2d:8b:a1:42:05:74:e1:10:ee: d5:ca:f5:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWPqmmxVXDnugEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk MmUwMTQxNjgtYWRjYy00ZDQzLWE4MWMtZTVhNTM1OWY5ZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVGxkkKsNFLgnRpOUhw5NnJDx4R69nrmIVNn SRpwkoo+GMH9tN4RjTYP1BYnOi7vvQfBu6mD8CPTVFLkiPZUzUIGtyomHBFtP09R QuVwl5rn8j2Cny3+KKTEJRJk1ueBxKueUCVN6qVC78+u5Peh61pmbe8O/IxVjeF4 yChW5I/5LFIkSM7X01D04fSvs27d1DZhHnEoil/edzjj8TNSNz543x3Xv+nBFutd u4F66hoh1Sm5zui4temKAVZs9azgbJE6H25lQRSVMNh+8ytVAxcWf0O+GqGQO9Xt nwB8+Ik2BLiBlfZoL6+Tj2eAtGpxQQq0+TCi6iRtqJZ8eE7vsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtU1kTligXDKV+jX+ayFoz88UKZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvY2ZiMTg4ZmUtOTFlNC0z ODNmLTgxNTAtMzIxNDAyZjlkMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmBbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUTtEmpJC6f97pDr8Q9jJ4XrAe6lnhZCE+H1+GPxTUSpHWxaJf0ogiA KwC7yYdTtRH7ZJ34dBcGSIMWNnD3wHjSI1kxL7HX0i85JceXY5llVTw9NNGAZ8dP SqII9eZ0hMghrL4f4CxlmYqpcvhrWqR7vy8DsDc0VfPqg88WgLiKEpIpFAj8dVpA PA4GWA3j6098C4nsCAGPZSgiXuZBb1ksWJZfN9efpjY+NlAPp57/D2oHBlZHgPs3 UmvrfYpjiBp83pCl3J8Ad+ESJlmRu2JlwOMCSQplXGQAs4DFEK9egzpsuViETT6v mIhJVYpQ+GyBty2LoUIFdOEQ7tXK9TY= -----END CERTIFICATE-----Generated at Tue Sep 9 18:32:11 2025 by rpki-client