$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f32a703f-e48f-3d06-ac2d-4d270eab8f7f.roa File: f32a703f-e48f-3d06-ac2d-4d270eab8f7f.roa (raw, json) Hash identifier: CBe0y4uxGRzvnbx1i0T6fOghxaB77ZlDWhpIZjFTuf8= Subject key identifier: E8:B1:92:D8:63:2E:80:E1:7D:54:6B:6F:22:3F:BE:6F:1E:C1:28:D3 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A1684BB5DFF7D4EF5B5100 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f32a703f-e48f-3d06-ac2d-4d270eab8f7f.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 152.45.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:68:4b:b5:df:f7:d4:ef:5b:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=35ba149e-cba0-4805-b9a4-f70d7d944a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b9:e9:f7:6e:22:27:f8:70:2d:02:db:27:2a: 0d:30:70:4c:4d:52:6b:d5:8b:29:00:3b:0d:bb:95: 13:25:0c:1d:5b:08:f9:0a:7e:6b:4f:35:ce:51:48: d9:68:69:e3:0b:3c:65:b3:d2:d0:0b:d8:ee:5e:4b: 88:74:33:34:65:9c:38:1d:0e:06:dd:4f:35:ef:69: 97:29:d1:8f:e4:03:6f:9e:2a:3e:a2:57:62:63:89: 13:d1:50:df:a3:f7:6b:41:b7:0f:13:ca:2f:08:b4: d2:21:3e:15:e9:25:4a:01:74:dc:86:1d:0c:1c:fc: 73:92:e4:3a:63:94:64:d4:6e:af:65:51:a5:15:61: 90:94:31:b0:73:35:d1:48:9e:0d:78:b1:56:8a:cc: 42:e1:26:be:8b:c6:87:c2:2a:46:b8:c0:63:88:83: fb:14:43:c4:cf:b9:dd:79:18:78:74:c0:e1:0c:a0: b5:a6:69:f4:29:aa:e2:53:15:90:ee:03:be:b9:61: 85:ef:31:49:f2:a8:26:c7:88:e7:20:73:cb:b3:d5: 47:8d:50:63:44:23:e7:82:88:ac:2e:71:f8:ab:f6: 53:0b:02:70:f4:3e:d8:3d:46:36:aa:51:91:fb:c4: 5d:d4:22:e9:89:83:9a:9b:69:28:4e:e9:14:e4:a8: 01:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B1:92:D8:63:2E:80:E1:7D:54:6B:6F:22:3F:BE:6F:1E:C1:28:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f32a703f-e48f-3d06-ac2d-4d270eab8f7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:4b:da:68:ad:01:20:ed:b0:b7:16:96:e9:b2:16:42:2e:2f: cc:95:3b:d2:c3:3f:1a:d7:d8:6d:1c:1a:0a:ad:2c:2f:e7:f9: ac:b5:a7:e8:66:63:b3:ef:2e:28:8f:05:26:47:11:99:fa:8d: 13:f2:c4:ac:92:3c:4e:00:5e:1b:d9:49:fb:23:3b:d7:9c:52: e8:ce:e6:15:71:20:c4:36:52:21:73:7a:0a:df:8f:ac:dd:bd: f6:93:44:f7:28:44:da:8d:4d:c9:13:05:cf:6a:e1:6d:bf:26: 50:d5:6a:cc:65:b0:6c:7c:1f:b8:d6:e9:0b:a6:d2:8a:04:7e: 6a:5d:5c:33:fa:5d:81:c8:65:34:7e:03:ce:6d:4b:01:6d:42: 90:5a:f6:aa:12:49:32:82:85:2b:6f:fa:80:6b:c8:9c:f9:e2: 5c:ca:c7:b2:b9:ce:a7:11:4c:dd:66:49:20:2a:06:40:4d:e3: 45:53:11:a5:bc:c4:fb:57:61:32:71:32:b3:7d:11:80:3a:b3: d9:46:d8:7a:59:30:47:7c:91:8b:a7:cb:21:47:d4:13:c0:3f: eb:91:c5:a4:c1:d2:e6:c9:36:c8:88:75:f2:0a:77:99:02:79: 82:7c:05:1d:e4:cd:31:ef:35:1c:79:f8:76:09:3f:32:02:80: cd:56:aa:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoWhLtd/31O9bUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk MzViYTE0OWUtY2JhMC00ODA1LWI5YTQtZjcwZDdkOTQ0YTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Lnp924iJ/hwLQLbJyoNMHBMTVJr1YspADsN u5UTJQwdWwj5Cn5rTzXOUUjZaGnjCzxls9LQC9juXkuIdDM0ZZw4HQ4G3U8172mX KdGP5ANvnio+oldiY4kT0VDfo/drQbcPE8ovCLTSIT4V6SVKAXTchh0MHPxzkuQ6 Y5Rk1G6vZVGlFWGQlDGwczXRSJ4NeLFWisxC4Sa+i8aHwipGuMBjiIP7FEPEz7nd eRh4dMDhDKC1pmn0KariUxWQ7gO+uWGF7zFJ8qgmx4jnIHPLs9VHjVBjRCPngois LnH4q/ZTCwJw9D7YPUY2qlGR+8Rd1CLpiYOam2koTukU5KgBvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOixkthjLoDhfVRrbyI/vm8ewSjTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZjMyYTcwM2YtZTQ4Zi0z ZDA2LWFjMmQtNGQyNzBlYWI4ZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZL2mitASDtsLcWlumyFkIuL8yVO9LDPxrX2G0cGgqtLC/n+ay1p+hm Y7PvLiiPBSZHEZn6jRPyxKySPE4AXhvZSfsjO9ecUujO5hVxIMQ2UiFzegrfj6zd vfaTRPcoRNqNTckTBc9q4W2/JlDVasxlsGx8H7jW6Qum0ooEfmpdXDP6XYHIZTR+ A85tSwFtQpBa9qoSSTKChStv+oBryJz54lzKx7K5zqcRTN1mSSAqBkBN40VTEaW8 xPtXYTJxMrN9EYA6s9lG2HpZMEd8kYunyyFH1BPAP+uRxaTB0ubJNsiIdfIKd5kC eYJ8BR3kzTHvNRx5+HYJPzICgM1WqlQ= -----END CERTIFICATE-----Generated at Tue Sep 9 07:57:18 2025 by rpki-client