$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d83f8938-c911-30b9-a78e-6c061bb3311b.roa File: d83f8938-c911-30b9-a78e-6c061bb3311b.roa (raw, json) Hash identifier: EbBh8jiDVpbEtT05kW4GjjLuHvHFPwIRIFP/gr3wbwk= Subject key identifier: 3F:DD:9D:6E:C5:BE:1B:32:5B:D1:41:91:A6:19:ED:EF:32:27:AC:35 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A1690852114DF94D20EE20 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d83f8938-c911-30b9-a78e-6c061bb3311b.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 152.46.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:69:08:52:11:4d:f9:4d:20:ee:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=f844818d-222e-41d1-b335-5307b6503498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:12:71:3c:56:3a:a3:02:57:de:2f:85:fb:62: aa:fe:9b:3b:57:f0:a4:e9:eb:1a:f1:ca:cf:7f:51: 8b:87:39:12:97:72:90:64:40:a5:6a:c3:5d:05:6f: 5c:9b:2f:26:d2:7a:0e:b5:5f:d8:72:54:69:8b:20: 58:8e:62:59:72:1f:be:f1:8e:a0:de:51:5a:4c:52: 43:e4:59:9e:d3:53:52:4a:c8:47:43:b5:86:91:56: 5e:57:37:75:1d:cc:b2:79:23:4b:e0:a3:66:cc:ec: ef:91:b3:81:13:26:93:d0:eb:75:ea:16:1d:9a:bb: bb:52:6a:d5:be:67:3b:6a:3f:a0:57:47:44:36:cb: 68:00:93:b9:c4:5b:db:9d:c5:96:21:dd:66:20:9b: 5a:8a:af:e9:70:6a:97:d6:fe:d4:41:53:d4:d9:64: ed:2e:6f:3e:f4:b1:3f:c1:f7:fe:c9:2f:c9:97:aa: 5e:8f:d7:29:a0:db:40:40:dd:f4:74:63:ac:71:17: 56:cc:cd:ee:fd:f1:ca:49:36:d4:9d:2e:d2:41:cf: 8c:44:28:8c:8b:d1:0d:34:ed:a3:f1:92:b9:08:02: a3:90:74:48:57:a9:7e:b9:50:f7:f2:05:df:ca:55: de:eb:ad:5f:7b:62:6b:43:d5:ee:ad:3f:00:ef:91: 8c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DD:9D:6E:C5:BE:1B:32:5B:D1:41:91:A6:19:ED:EF:32:27:AC:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d83f8938-c911-30b9-a78e-6c061bb3311b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:2a:75:a2:d6:8a:82:96:1f:8d:49:72:b7:b8:36:2a:d2:30: 66:ad:a4:d0:a9:72:e5:18:38:33:c7:d6:df:d0:be:d0:8f:5d: 8c:ae:68:d0:93:54:45:48:b8:fd:a8:f0:59:47:ce:15:80:70: c8:d1:42:7c:f8:2f:e7:9c:28:cd:1a:45:db:6f:b2:b8:0c:6c: fe:96:a1:fb:88:cf:66:5c:e6:70:09:9d:bf:38:59:59:16:ef: cd:69:30:a6:fa:c3:69:96:2a:68:8e:8c:6d:55:0f:76:49:4d: 80:50:82:3c:6a:bb:d6:8a:2b:f6:2e:93:55:91:69:fe:42:53: e4:a0:5f:7d:57:d8:34:92:9a:01:00:5b:e9:3a:de:8c:be:1a: 3a:ab:61:00:bf:86:4c:d4:20:ff:70:49:e7:06:99:fa:44:85: df:e4:92:72:f1:86:b5:4a:87:c8:8a:5d:92:ac:4e:e9:bf:4f: 67:bf:b0:96:30:d9:8c:a1:51:68:0b:31:4a:96:ef:af:64:fe: d1:aa:04:f6:2d:f9:4f:a6:84:1b:1e:0e:b0:30:41:9b:a7:59: b0:86:15:14:59:16:38:3f:9a:5a:75:8c:9f:75:ce:fa:8c:bc: 61:d8:10:f3:b1:0b:fe:73:26:2e:b5:8d:2d:19:30:02:10:d5: 39:89:eb:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWkIUhFN+U0g7iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk Zjg0NDgxOGQtMjIyZS00MWQxLWIzMzUtNTMwN2I2NTAzNDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhJxPFY6owJX3i+F+2Kq/ps7V/Ck6esa8crP f1GLhzkSl3KQZEClasNdBW9cmy8m0noOtV/YclRpiyBYjmJZch++8Y6g3lFaTFJD 5Fme01NSSshHQ7WGkVZeVzd1HcyyeSNL4KNmzOzvkbOBEyaT0Ot16hYdmru7UmrV vmc7aj+gV0dENstoAJO5xFvbncWWId1mIJtaiq/pcGqX1v7UQVPU2WTtLm8+9LE/ wff+yS/Jl6pej9cpoNtAQN30dGOscRdWzM3u/fHKSTbUnS7SQc+MRCiMi9ENNO2j 8ZK5CAKjkHRIV6l+uVD38gXfylXe661fe2JrQ9XurT8A75GMewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/dnW7FvhsyW9FBkaYZ7e8yJ6w1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDgzZjg5MzgtYzkxMS0z MGI5LWE3OGUtNmMwNjFiYjMzMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmC4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEqdaLWioKWH41Jcre4NirSMGatpNCpcuUYODPH1t/QvtCPXYyuaNCT VEVIuP2o8FlHzhWAcMjRQnz4L+ecKM0aRdtvsrgMbP6WofuIz2Zc5nAJnb84WVkW 781pMKb6w2mWKmiOjG1VD3ZJTYBQgjxqu9aKK/Yuk1WRaf5CU+SgX31X2DSSmgEA W+k63oy+GjqrYQC/hkzUIP9wSecGmfpEhd/kknLxhrVKh8iKXZKsTum/T2e/sJYw 2YyhUWgLMUqW769k/tGqBPYt+U+mhBseDrAwQZunWbCGFRRZFjg/mlp1jJ91zvqM vGHYEPOxC/5zJi61jS0ZMAIQ1TmJ6z8= -----END CERTIFICATE-----Generated at Tue Sep 9 08:06:00 2025 by rpki-client