$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1a38e17a-e197-3523-9a0a-566e83ffa938.roa File: 1a38e17a-e197-3523-9a0a-566e83ffa938.roa (raw, json) Hash identifier: Wt/BcAQMcl/ga4CJpsE5vKSEzF6eeZ5nEDVxpa5HomE= Subject key identifier: 29:21:92:96:59:58:76:1A:43:FB:35:8D:ED:CB:94:43:22:0C:0D:D9 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6CD2F826851B12812B00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1a38e17a-e197-3523-9a0a-566e83ffa938.roa Signing time: Fri 10 Oct 2025 15:41:21 +0000 ROA not before: Fri 10 Oct 2025 15:41:21 +0000 ROA not after: Thu 08 Jan 2026 16:41:21 +0000 asID: 81 IP address blocks: 152.46.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6c:d2:f8:26:85:1b:12:81:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:21 2025 GMT Not After : Jan 8 16:41:21 2026 GMT Subject: CN=159a73c8-40ec-4272-9a2c-2a0da4a0d125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8c:6b:96:0e:09:49:1c:8c:bc:fc:8d:a7:75: 7f:16:bd:8f:9a:b2:a1:58:e0:d4:63:90:a0:f1:35: fc:b8:7c:09:a8:15:62:6a:ba:45:bb:fe:9b:98:46: af:fb:8b:28:8d:1c:a1:f9:7e:56:5a:93:21:e8:fa: 97:ff:1f:8d:79:7a:41:ad:0d:24:b1:c2:3b:18:5e: 5a:6a:b0:e2:1b:84:fe:46:86:e2:a1:4f:6c:a1:49: 2f:f9:3b:59:96:ea:71:d5:c0:16:6a:10:d9:45:ca: c1:7d:ab:9c:bc:30:4c:b7:87:b2:25:3d:79:64:09: 98:9f:e2:74:1f:4a:f5:3a:08:13:3e:9e:35:aa:5d: c7:82:b9:1d:ba:da:52:d7:b9:da:85:ca:29:18:54: 51:a6:6e:6a:2b:29:05:39:e5:a1:77:18:40:f5:fa: 70:dd:d2:5f:6f:9a:02:4e:b2:2b:84:df:78:ad:b8: 4f:e2:05:fa:0f:b4:cb:15:be:c0:c1:1f:a9:56:d1: 9f:f7:c2:4a:05:b0:84:10:ad:2d:83:2d:17:5b:9a: 00:53:75:fc:fe:f6:c7:07:e3:04:cd:0c:1a:5a:28: f2:5a:e2:ab:81:93:02:f1:d0:75:72:66:cc:42:93: a7:1a:99:5d:36:8b:98:7e:7c:99:99:ae:65:0d:ba: c4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:21:92:96:59:58:76:1A:43:FB:35:8D:ED:CB:94:43:22:0C:0D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1a38e17a-e197-3523-9a0a-566e83ffa938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:47:7f:35:34:cd:94:30:2f:25:b1:d5:8d:7c:ac:94:1e:6d: b4:a5:6d:4e:24:28:bd:4a:24:cf:de:e8:94:14:09:9b:08:ce: 6a:e4:37:71:c3:f4:30:17:df:f4:b2:0f:6f:9c:54:90:39:eb: 3e:d5:6e:56:20:02:bc:14:81:a3:97:8f:ae:c6:3d:74:a2:86: 44:14:15:69:17:37:36:1f:7d:65:04:b0:d9:f2:7d:db:f8:80: 2f:e1:81:c2:95:d7:3a:b1:0d:32:f5:f2:dc:5c:b2:2f:9c:47: ac:34:e6:48:32:2a:77:dc:9f:e9:67:b7:40:46:3c:b2:b1:11: 69:d3:1f:81:3d:16:e0:7f:de:89:f8:71:21:81:ec:7b:f0:ba: 52:ee:ff:f9:62:fa:e5:47:d1:9a:29:58:01:25:63:b3:95:eb: 93:0e:a6:4d:51:17:a6:67:f3:ea:38:08:a4:39:c1:e7:af:a2: c2:d8:4b:6f:f0:89:a4:74:5e:ac:85:5b:6f:a3:12:f4:bd:5f: 90:1e:bb:29:fb:cd:63:e0:48:da:73:99:b8:37:7f:d1:9b:b4: f1:f1:b7:7d:98:c3:49:44:1d:1a:b3:c7:e8:84:3b:42:9e:aa: f1:97:4b:03:ba:33:c7:3f:e4:e1:5a:69:46:1a:49:07:d9:33: fb:2b:64:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGzS+CaFGxKBKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMVoXDTI2MDEwODE2NDEyMVowLzEtMCsGA1UEAxMk MTU5YTczYzgtNDBlYy00MjcyLTlhMmMtMmEwZGE0YTBkMTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ixrlg4JSRyMvPyNp3V/Fr2PmrKhWODUY5Cg 8TX8uHwJqBViarpFu/6bmEav+4sojRyh+X5WWpMh6PqX/x+NeXpBrQ0kscI7GF5a arDiG4T+RobioU9soUkv+TtZlupx1cAWahDZRcrBfaucvDBMt4eyJT15ZAmYn+J0 H0r1OggTPp41ql3HgrkdutpS17nahcopGFRRpm5qKykFOeWhdxhA9fpw3dJfb5oC TrIrhN94rbhP4gX6D7TLFb7AwR+pVtGf98JKBbCEEK0tgy0XW5oAU3X8/vbHB+ME zQwaWijyWuKrgZMC8dB1cmbMQpOnGpldNouYfnyZma5lDbrEVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkhkpZZWHYaQ/s1je3LlEMiDA3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMWEzOGUxN2EtZTE5Ny0z NTIzLTlhMGEtNTY2ZTgzZmZhOTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRHfzU0zZQwLyWx1Y18rJQebbSlbU4kKL1KJM/e6JQUCZsIzmrkN3HD 9DAX3/SyD2+cVJA56z7VblYgArwUgaOXj67GPXSihkQUFWkXNzYffWUEsNnyfdv4 gC/hgcKV1zqxDTL18txcsi+cR6w05kgyKnfcn+lnt0BGPLKxEWnTH4E9FuB/3on4 cSGB7HvwulLu//li+uVH0ZopWAElY7OV65MOpk1RF6Zn8+o4CKQ5weevosLYS2/w iaR0XqyFW2+jEvS9X5Aeuyn7zWPgSNpzmbg3f9GbtPHxt32Yw0lEHRqzx+iEO0Ke qvGXSwO6M8c/5OFaaUYaSQfZM/srZAc= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:58 2025 by rpki-client