$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f7d3c744-5275-3c56-a4b5-7a4711a317d2.roa File: f7d3c744-5275-3c56-a4b5-7a4711a317d2.roa (raw, json) Hash identifier: 9hHn6ch296sNC1s2clBmSiUkavSLBMwLWmMnbAQ2C9I= Subject key identifier: B6:37:B9:A5:A2:BD:74:14:C1:84:BC:5C:DA:98:00:34:E4:9C:9F:10 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B16A1605E96A11436F5A54F40 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f7d3c744-5275-3c56-a4b5-7a4711a317d2.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 81 IP address blocks: 152.29.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 10 Sep 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:60:5e:96:a1:14:36:f5:a5:4f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=c97b6443-dcbb-4ee2-8f0a-081da99e5454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:93:21:da:a8:5e:42:70:83:1b:52:b1:6d:72: b8:fc:da:21:49:d9:d4:8e:06:ba:a2:e3:d7:a0:37: 36:f4:ad:4d:4d:2f:d2:ff:5e:81:a6:ef:09:11:a5: bb:fc:da:d8:9d:89:2e:6f:85:1d:6b:a6:5e:d5:03: 14:56:fa:83:f7:77:00:e6:be:bf:5e:f7:0c:d0:46: 49:05:16:b8:22:e5:6f:cc:e2:5c:68:ed:e4:23:8d: af:83:b5:f2:c6:54:2e:b7:86:40:90:f9:e5:37:43: 3f:b4:5d:af:04:2a:39:de:2e:2c:d7:f4:18:73:f8: 37:2d:19:36:5c:a4:99:3c:0c:a7:59:60:f0:cb:0f: cb:14:d0:f9:92:4f:e3:33:8f:43:17:36:92:00:87: e0:df:f8:d0:4e:60:12:c6:31:e0:84:41:c1:b7:a7: 57:70:79:be:a5:fd:dc:70:69:eb:03:05:10:06:81: 54:5f:7c:95:7d:bf:d0:33:a1:f7:52:f5:07:ce:85: 42:4a:a7:80:19:79:b0:07:54:af:96:f4:b0:dc:74: 38:54:bf:d0:db:1b:dc:57:26:2d:cd:5a:93:24:a1: f3:80:c1:07:8c:4f:a5:60:10:83:a5:0a:42:52:60: bf:b2:fa:69:93:ba:ac:e7:c7:33:88:fb:52:eb:c3: 49:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:37:B9:A5:A2:BD:74:14:C1:84:BC:5C:DA:98:00:34:E4:9C:9F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f7d3c744-5275-3c56-a4b5-7a4711a317d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.29.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:44:14:03:cc:9d:1d:0a:e9:d5:e5:8a:46:68:0d:10:df:93: e6:36:44:cc:4f:5d:bd:fa:e3:93:21:b9:d3:ef:db:fe:a5:a5: aa:64:dd:02:b7:94:8a:94:51:70:43:e0:c7:50:a7:28:2a:f6: 02:f8:7c:6e:b6:44:fd:8a:d3:f5:72:09:4e:ce:6a:d5:58:9f: c0:e0:c8:2d:cb:37:5f:6a:4c:33:37:d2:0d:6d:19:5e:00:2a: d9:b8:67:e8:27:65:0d:45:9f:ea:10:c2:09:07:29:76:c4:05: ea:75:75:4c:0e:89:30:e5:ea:81:b2:ab:a4:91:1b:c9:e9:4b: 13:e2:dc:91:bb:e8:cd:10:42:f3:77:b7:df:f1:d6:1b:76:03: 3f:17:fa:fd:c5:8b:ed:7a:ce:af:67:20:df:22:f2:e5:e2:6d: e6:a3:01:93:80:d1:d3:3e:3b:4c:b8:ee:f4:fd:e4:52:00:b0: a2:1d:cf:8e:27:f5:a0:33:5c:3e:fa:3c:74:fc:b4:df:f2:26: 3f:71:89:79:00:9f:19:2c:37:79:42:57:72:d2:d5:aa:03:25: 69:94:55:93:73:1d:ce:91:01:1d:09:14:b9:a7:68:39:ae:8f: 85:af:24:a0:10:79:05:ae:f8:c2:96:c8:93:00:aa:2c:8a:d3: 7c:20:e4:8d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEsWoWBelqEUNvWlT0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk Yzk3YjY0NDMtZGNiYi00ZWUyLThmMGEtMDgxZGE5OWU1NDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZMh2qheQnCDG1KxbXK4/NohSdnUjga6ouPX oDc29K1NTS/S/16Bpu8JEaW7/NrYnYkub4Uda6Ze1QMUVvqD93cA5r6/XvcM0EZJ BRa4IuVvzOJcaO3kI42vg7XyxlQut4ZAkPnlN0M/tF2vBCo53i4s1/QYc/g3LRk2 XKSZPAynWWDwyw/LFND5kk/jM49DFzaSAIfg3/jQTmASxjHghEHBt6dXcHm+pf3c cGnrAwUQBoFUX3yVfb/QM6H3UvUHzoVCSqeAGXmwB1SvlvSw3HQ4VL/Q2xvcVyYt zVqTJKHzgMEHjE+lYBCDpQpCUmC/svppk7qs58cziPtS68NJawIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFLY3uaWivXQUwYS8XNqYADTknJ8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZjdkM2M3NDQtNTI3NS0z YzU2LWE0YjUtN2E0NzExYTMxN2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmB0wVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACUQUA8ydHQrp1eWKRmgNEN+T5jZEzE9dvfrjkyG50+/b/qWlqmTdAreU ipRRcEPgx1CnKCr2Avh8brZE/YrT9XIJTs5q1VifwODILcs3X2pMMzfSDW0ZXgAq 2bhn6CdlDUWf6hDCCQcpdsQF6nV1TA6JMOXqgbKrpJEbyelLE+LckbvozRBC83e3 3/HWG3YDPxf6/cWL7XrOr2cg3yLy5eJt5qMBk4DR0z47TLju9P3kUgCwoh3Pjif1 oDNcPvo8dPy03/ImP3GJeQCfGSw3eUJXctLVqgMlaZRVk3MdzpEBHQkUuadoOa6P ha8koBB5Ba74wpbIkwCqLIrTfCDkjQ== -----END CERTIFICATE-----Generated at Tue Sep 9 08:00:16 2025 by rpki-client