$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dd47d650-134c-335c-9cf5-40967ac958e2.roa File: dd47d650-134c-335c-9cf5-40967ac958e2.roa (raw, json) Hash identifier: KO1MDtPtxcio8TMQMxAelM2+Jil+H6NDGnq7yeL1PEM= Subject key identifier: 04:38:F2:86:42:1C:BF:E7:99:99:D0:E6:7C:B4:7C:7C:1E:B0:4A:98 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A16983EE9D823A7B090AC0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dd47d650-134c-335c-9cf5-40967ac958e2.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 152.46.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:69:83:ee:9d:82:3a:7b:09:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=d83df9f7-0c1a-4cad-90ac-d73dfe42828f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:bb:0e:04:0c:fd:e7:6e:92:16:23:59:9b:54: e7:92:16:76:aa:48:2c:e0:bc:f8:17:d7:b9:a9:0b: 59:15:2e:a6:70:66:bf:d9:8d:cf:02:bb:93:ff:d8: 8c:33:b0:c1:d2:68:5a:fc:c0:26:9a:b0:eb:23:d6: 17:b1:26:48:0a:c0:cc:19:e4:af:75:ef:c1:f6:d9: c0:06:b2:11:2f:45:ce:8a:11:cd:ef:e5:6a:58:de: 01:54:fb:fc:14:16:d3:3a:6e:a3:23:d6:cc:20:9a: 7d:7c:75:53:a4:9e:08:00:1b:ba:81:b3:61:5f:ae: 33:d9:b6:48:14:79:2a:96:26:18:cf:45:2a:fb:be: 82:1f:62:7c:55:8a:6e:c5:f8:1a:34:e9:fa:33:77: 5e:90:bf:67:3a:bb:0b:c1:34:37:ad:6f:83:57:40: 84:2b:ba:fd:51:31:8e:81:9d:7e:12:de:a7:5b:58: 9c:55:1a:f8:32:2e:66:82:b4:4b:3f:fc:c2:df:cb: 7e:9d:32:bb:5c:fa:c7:80:23:88:b1:08:f3:d3:fc: 04:f4:c3:ec:f2:3e:d2:e0:47:17:36:59:18:72:ee: 3b:e4:57:4f:07:31:ff:a8:fa:49:a5:85:01:bd:b3: 99:41:03:0c:56:49:f6:1a:0b:bf:1d:8c:45:30:af: 1a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:38:F2:86:42:1C:BF:E7:99:99:D0:E6:7C:B4:7C:7C:1E:B0:4A:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dd47d650-134c-335c-9cf5-40967ac958e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:94:e6:17:c2:f6:d0:db:09:de:39:e7:ca:c9:ef:76:1b:e7: ff:49:69:96:b8:9f:ce:6e:81:5f:64:b9:7d:7a:7a:9b:07:11: ed:49:9e:53:59:05:2b:16:5b:0c:62:4e:cb:2b:ed:71:10:ae: 52:d4:cb:e9:bf:09:13:18:5a:9b:17:6e:23:cc:90:72:cf:62: 0c:fb:ea:61:57:8f:00:1a:1c:9b:7f:06:bf:fc:62:9e:d3:9c: 0f:2f:26:21:ed:99:48:dd:b8:d2:bf:31:6c:b4:72:75:b3:41: 16:79:63:56:4f:25:e2:16:79:99:84:04:1e:72:a7:d9:62:ac: e5:e8:db:8e:76:d1:80:8c:8f:7a:84:95:c3:84:08:63:dd:ec: df:28:ae:b9:90:59:c3:81:ca:13:8b:9f:7f:ee:c0:ff:86:0e: 4d:d8:01:bd:28:55:1d:28:04:b0:f8:cb:76:20:cf:70:9d:ef: 9d:8a:22:5a:48:13:77:0c:69:70:46:aa:99:80:21:1a:89:54: 5e:68:90:c0:df:1e:cd:20:a3:66:50:1d:2c:63:60:41:e0:63: e8:31:e1:13:55:e9:f6:19:fe:e8:7c:58:a6:54:ac:62:2f:17: 81:2e:f3:86:39:b0:16:23:02:96:9a:76:66:19:32:0a:8a:e1: cf:90:79:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWmD7p2COnsJCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk ZDgzZGY5ZjctMGMxYS00Y2FkLTkwYWMtZDczZGZlNDI4MjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLsOBAz9526SFiNZm1TnkhZ2qkgs4Lz4F9e5 qQtZFS6mcGa/2Y3PAruT/9iMM7DB0mha/MAmmrDrI9YXsSZICsDMGeSvde/B9tnA BrIRL0XOihHN7+VqWN4BVPv8FBbTOm6jI9bMIJp9fHVTpJ4IABu6gbNhX64z2bZI FHkqliYYz0Uq+76CH2J8VYpuxfgaNOn6M3dekL9nOrsLwTQ3rW+DV0CEK7r9UTGO gZ1+Et6nW1icVRr4Mi5mgrRLP/zC38t+nTK7XPrHgCOIsQjz0/wE9MPs8j7S4EcX NlkYcu475FdPBzH/qPpJpYUBvbOZQQMMVkn2Ggu/HYxFMK8aYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQ48oZCHL/nmZnQ5ny0fHwesEqYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZGQ0N2Q2NTAtMTM0Yy0z MzVjLTljZjUtNDA5NjdhYzk1OGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCU5hfC9tDbCd4558rJ73Yb5/9JaZa4n85ugV9kuX16epsHEe1JnlNZ BSsWWwxiTssr7XEQrlLUy+m/CRMYWpsXbiPMkHLPYgz76mFXjwAaHJt/Br/8Yp7T nA8vJiHtmUjduNK/MWy0cnWzQRZ5Y1ZPJeIWeZmEBB5yp9lirOXo24520YCMj3qE lcOECGPd7N8orrmQWcOByhOLn3/uwP+GDk3YAb0oVR0oBLD4y3Ygz3Cd752KIlpI E3cMaXBGqpmAIRqJVF5okMDfHs0go2ZQHSxjYEHgY+gx4RNV6fYZ/uh8WKZUrGIv F4Eu84Y5sBYjApaadmYZMgqK4c+QeRE= -----END CERTIFICATE-----Generated at Tue Sep 9 08:05:57 2025 by rpki-client