$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dfbdc18d-0b3a-310e-b5b8-f26af32fb33a.roa File: dfbdc18d-0b3a-310e-b5b8-f26af32fb33a.roa (raw, json) Hash identifier: rcDOhLO92mMpKEpEQaGWAKBGnQ7DXEn1uOU6HSX4g/c= Subject key identifier: 52:D6:D7:3C:9D:66:1A:69:B6:B1:17:C4:C2:B4:C3:61:05:E7:C3:6D Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584F51D29DF9DCAD5C3B7315E080 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dfbdc18d-0b3a-310e-b5b8-f26af32fb33a.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 81 IP address blocks: 152.46.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:9d:f9:dc:ad:5c:3b:73:15:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=88d86d8f-922b-473a-a8bd-651299bf5da6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:76:c3:1a:23:14:60:4e:83:56:5d:d9:83:08: c8:4c:74:9e:4f:29:8c:5c:a5:74:55:44:ed:cc:1c: 67:64:ab:55:f7:9b:24:35:22:44:ba:ec:2c:03:cd: 35:29:ec:01:01:2f:ad:a5:6e:2e:68:a5:3d:b9:b7: c8:15:e0:23:9e:c5:9b:81:49:d1:50:d3:4c:8a:cd: f7:62:1d:8b:83:e5:91:91:6b:ac:6b:36:b1:85:1f: cc:bc:48:cd:ba:e2:55:1b:bb:9e:1c:18:6c:67:da: 7f:b7:d8:c5:eb:bf:92:79:bb:32:c3:60:1a:4f:f5: a3:ad:60:1e:a9:a5:18:7e:68:39:65:57:e4:a9:58: 51:58:1d:13:64:27:4c:00:26:37:8e:60:9d:81:60: af:f5:2a:31:12:63:ef:18:ee:cc:60:4a:f8:e9:2d: bc:c4:4e:10:4e:86:96:a1:6d:46:6e:17:b3:73:33: 9f:2a:9f:11:a8:49:f7:6c:f5:c9:67:9d:b4:0d:21: 3d:de:a4:96:5c:d7:22:86:42:3e:83:8e:b4:b6:fc: 87:3d:8d:b8:5f:97:db:c5:82:7f:63:e6:da:96:17: 3b:e3:b0:bc:9c:c9:02:16:18:7d:13:fc:8f:c8:c6: 84:aa:00:13:5c:db:e7:dc:f2:4d:74:4e:cd:0a:cb: 22:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:D6:D7:3C:9D:66:1A:69:B6:B1:17:C4:C2:B4:C3:61:05:E7:C3:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/dfbdc18d-0b3a-310e-b5b8-f26af32fb33a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4d:06:c3:20:72:86:e0:ce:aa:9e:1e:87:a8:4c:5f:9b:92: 3d:59:43:bf:3c:a5:04:6e:68:1a:13:57:6c:84:84:b4:e3:b5: 30:0d:9a:77:62:6a:06:35:d5:e0:90:ed:59:70:ef:12:05:a2: 98:52:2f:0b:aa:41:b6:38:f3:b3:94:aa:d5:e1:df:dd:1d:09: 2f:bb:e9:07:19:7e:a3:8c:67:e0:d1:85:7f:32:76:74:7a:cf: be:73:fe:f6:72:4f:b9:2a:9d:55:4b:55:e4:11:ad:ff:06:f9: 8d:57:d8:c5:c9:00:03:ce:b7:20:27:41:06:7f:20:af:74:32: 2d:58:b8:be:2b:ff:d3:d3:c6:e1:40:6f:03:fb:8d:bf:4e:2b: c4:bd:d1:cb:31:cf:16:08:33:16:ea:c0:ea:80:c0:c9:2a:9b: 69:82:c8:ea:f2:87:d7:aa:a5:f2:9a:c5:0d:ca:64:7e:b6:54: f2:c4:09:0f:2f:53:4f:de:2d:71:fd:62:b1:21:50:15:47:87: 7c:40:3c:be:5d:7a:3e:32:ad:f8:b0:96:fe:cd:11:f6:15:3d: 7f:da:9e:99:b0:af:7f:0d:7f:9e:ad:9d:99:b0:16:3f:7f:87: b4:6f:40:9c:c1:e8:04:e3:d0:03:a1:99:e5:06:7a:d2:73:6d: 71:2f:de:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0p353K1cO3MV4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk ODhkODZkOGYtOTIyYi00NzNhLWE4YmQtNjUxMjk5YmY1ZGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXbDGiMUYE6DVl3ZgwjITHSeTymMXKV0VUTt zBxnZKtV95skNSJEuuwsA801KewBAS+tpW4uaKU9ubfIFeAjnsWbgUnRUNNMis33 Yh2Lg+WRkWusazaxhR/MvEjNuuJVG7ueHBhsZ9p/t9jF67+Sebsyw2AaT/WjrWAe qaUYfmg5ZVfkqVhRWB0TZCdMACY3jmCdgWCv9SoxEmPvGO7MYEr46S28xE4QToaW oW1GbhezczOfKp8RqEn3bPXJZ520DSE93qSWXNcihkI+g460tvyHPY24X5fbxYJ/ Y+balhc747C8nMkCFhh9E/yPyMaEqgATXNvn3PJNdE7NCssiiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLW1zydZhpptrEXxMK0w2EF58NtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZGZiZGMxOGQtMGIzYS0z MTBlLWI1YjgtZjI2YWYzMmZiMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpNBsMgcobgzqqeHoeoTF+bkj1ZQ788pQRuaBoTV2yEhLTjtTANmndi agY11eCQ7Vlw7xIFophSLwuqQbY487OUqtXh390dCS+76QcZfqOMZ+DRhX8ydnR6 z75z/vZyT7kqnVVLVeQRrf8G+Y1X2MXJAAPOtyAnQQZ/IK90Mi1YuL4r/9PTxuFA bwP7jb9OK8S90csxzxYIMxbqwOqAwMkqm2mCyOryh9eqpfKaxQ3KZH62VPLECQ8v U0/eLXH9YrEhUBVHh3xAPL5dej4yrfiwlv7NEfYVPX/anpmwr38Nf56tnZmwFj9/ h7RvQJzB6ATj0AOhmeUGetJzbXEv3gQ= -----END CERTIFICATE-----Generated at Thu Oct 8 17:28:45 2026 by rpki-client