$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/108f3bf6-348d-3c2f-aaa3-6a355939186d.roa File: 108f3bf6-348d-3c2f-aaa3-6a355939186d.roa (raw, json) Hash identifier: AOjjy2MplW/8LHGYN00hfBF+rOEH9DhD4+Ul3dHsZJ0= Subject key identifier: 7A:C3:0F:3B:FD:95:06:A2:F8:36:3E:F3:F5:C6:28:58:0B:C8:1E:38 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D8847C403922CA6110040 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/108f3bf6-348d-3c2f-aaa3-6a355939186d.roa Signing time: Fri 06 Mar 2026 15:38:26 +0000 ROA not before: Fri 06 Mar 2026 15:38:26 +0000 ROA not after: Thu 04 Jun 2026 14:38:26 +0000 asID: 81 IP address blocks: 152.28.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:88:47:c4:03:92:2c:a6:11:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:26 2026 GMT Not After : Jun 4 14:38:26 2026 GMT Subject: CN=b95cf558-8af5-48ee-9dc0-05cfb7c36ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7a:fd:c7:f5:e3:00:1c:47:70:b0:74:84:b2: bb:31:c8:f3:21:b2:ba:88:46:5f:4c:23:93:1a:7f: dd:f8:65:99:a8:2d:67:8e:17:0a:1c:8e:44:d6:ed: 03:23:4e:2d:7e:18:1e:d1:a1:52:1c:b7:df:c5:8b: 32:35:c7:57:88:7e:ee:c3:17:6e:99:5e:e5:f4:04: cf:95:ed:be:36:89:a5:53:56:30:4e:4c:e1:11:78: 87:d9:fa:01:5c:90:bb:f9:7e:f0:2a:3e:f3:0b:9b: b6:ac:4f:12:68:e8:6b:25:95:24:19:19:89:d5:1b: ad:df:ea:74:ce:51:93:0a:84:c4:6f:4c:88:b8:86: db:6d:f4:9a:2e:ff:41:2f:3a:91:44:a4:48:c5:27: 13:d2:ae:7b:81:44:8f:67:36:d8:e5:3e:a2:ea:18: 2b:56:72:e1:eb:d0:c2:dd:77:47:c7:db:1c:c9:77: 5b:cf:6a:19:27:e8:0e:ab:02:e2:46:99:99:75:0c: 51:2b:8e:6d:eb:d2:41:70:be:88:25:e4:36:4c:1d: 25:99:aa:91:62:18:e9:bc:0f:ba:45:07:a0:2a:c8: 63:f1:1e:a5:a4:e2:c8:3f:78:56:37:07:7d:47:d8: 29:a0:c5:3e:c1:b2:80:10:9b:94:87:1e:eb:14:4e: 47:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C3:0F:3B:FD:95:06:A2:F8:36:3E:F3:F5:C6:28:58:0B:C8:1E:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/108f3bf6-348d-3c2f-aaa3-6a355939186d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.28.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:97:40:52:bd:90:c1:fd:a9:79:f1:d8:f6:4f:77:b3:d5:ea: 08:99:72:1e:ea:2b:33:6e:ad:9f:c4:22:fe:57:26:34:8b:75: 26:71:97:46:30:0b:56:09:36:3b:9b:83:3e:27:ab:ed:ba:9a: 63:e1:0c:20:e8:e2:bc:a6:a9:71:be:12:81:a7:41:55:fc:b5: eb:02:62:e2:31:a5:a9:c8:41:fa:47:f6:d6:fd:bd:8b:8d:db: 64:f4:de:8d:c8:21:ce:3f:5a:9e:ca:d5:6f:51:ce:53:08:27: f9:72:69:f4:31:a6:83:2d:9d:53:57:52:01:0e:c6:71:b6:6a: 29:06:9b:af:62:b5:13:23:34:0a:3a:fd:42:89:1b:41:74:56: b5:86:24:4d:d5:89:1f:83:00:cc:63:d6:f0:16:e4:f6:ee:a4: 55:e0:d6:d3:b0:a4:b0:cd:28:c3:2e:d2:b2:f3:54:44:8e:fd: 5c:b0:1b:48:5d:21:01:94:7e:ec:13:75:1d:ed:6e:d3:17:06: c9:6e:05:5b:eb:f8:1e:59:2c:fb:31:bd:90:4e:e9:95:bd:e1: 1b:6a:89:ca:a5:fb:23:22:3b:12:09:d0:fe:4a:1c:0a:c7:bf: 3b:b6:46:70:d9:0d:e5:59:87:a8:c1:7d:6a:55:c2:94:db:4f: 38:4a:33:a2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0UbYhHxAOSLKYRAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgyNloXDTI2MDYwNDE0MzgyNlowLzEtMCsGA1UEAxMk Yjk1Y2Y1NTgtOGFmNS00OGVlLTlkYzAtMDVjZmI3YzM2ZWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXr9x/XjABxHcLB0hLK7McjzIbK6iEZfTCOT Gn/d+GWZqC1njhcKHI5E1u0DI04tfhge0aFSHLffxYsyNcdXiH7uwxdumV7l9ATP le2+NomlU1YwTkzhEXiH2foBXJC7+X7wKj7zC5u2rE8SaOhrJZUkGRmJ1Rut3+p0 zlGTCoTEb0yIuIbbbfSaLv9BLzqRRKRIxScT0q57gUSPZzbY5T6i6hgrVnLh69DC 3XdHx9scyXdbz2oZJ+gOqwLiRpmZdQxRK45t69JBcL6IJeQ2TB0lmaqRYhjpvA+6 RQegKshj8R6lpOLIP3hWNwd9R9gpoMU+wbKAEJuUhx7rFE5H3wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFHrDDzv9lQai+DY+8/XGKFgLyB44MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMTA4ZjNiZjYtMzQ4ZC0z YzJmLWFhYTMtNmEzNTU5MzkxODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAKZdAUr2Qwf2pefHY9k93s9XqCJlyHuorM26tn8Qi/lcmNIt1JnGXRjAL Vgk2O5uDPier7bqaY+EMIOjivKapcb4SgadBVfy16wJi4jGlqchB+kf21v29i43b ZPTejcghzj9ansrVb1HOUwgn+XJp9DGmgy2dU1dSAQ7GcbZqKQabr2K1EyM0Cjr9 QokbQXRWtYYkTdWJH4MAzGPW8Bbk9u6kVeDW07CksM0owy7SsvNURI79XLAbSF0h AZR+7BN1He1u0xcGyW4FW+v4Hlks+zG9kE7plb3hG2qJyqX7IyI7EgnQ/kocCse/ O7ZGcNkN5VmHqMF9alXClNtPOEozog== -----END CERTIFICATE-----Generated at Thu Mar 26 11:27:06 2026 by rpki-client