$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ae8c45b-9853-3f97-9696-6bbe6373915e.roa File: 1ae8c45b-9853-3f97-9696-6bbe6373915e.roa (raw, json) Hash identifier: 9TDivDnelVfMDaWXso9NEYi2X5DaM+lpW2N+yQbVRWs= Subject key identifier: EA:9D:BB:5F:C0:60:D6:79:E9:57:FD:B8:7C:E1:C8:E0:EE:94:CA:8F Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6BD5CF1FF0DF8CCBD880 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ae8c45b-9853-3f97-9696-6bbe6373915e.roa Signing time: Fri 10 Oct 2025 15:41:21 +0000 ROA not before: Fri 10 Oct 2025 15:41:21 +0000 ROA not after: Thu 08 Jan 2026 16:41:21 +0000 asID: 53785 IP address blocks: 152.40.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6b:d5:cf:1f:f0:df:8c:cb:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:21 2025 GMT Not After : Jan 8 16:41:21 2026 GMT Subject: CN=aadaf887-77e5-40ec-a2a1-74a3113e94b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:50:2c:2a:2a:a9:0c:8c:b2:f1:6f:df:ef: a1:f4:bc:8a:28:33:2b:9e:4f:8e:9e:6d:36:7b:db: fa:cf:f8:50:52:cf:76:f6:72:18:5b:0d:cc:59:bf: 96:5f:cd:b4:37:db:0d:f0:15:bb:ac:a4:bc:cf:6f: 3f:ea:6d:13:07:d1:0d:14:77:02:cf:dc:26:a8:ac: 40:31:f9:d5:c8:1d:0a:f5:57:67:83:da:43:d2:f5: ed:78:b8:0c:15:90:e9:0e:8d:13:86:0b:1e:b4:52: d9:f1:ef:39:f5:9d:fd:82:4a:1d:13:4a:18:e7:a2: 7d:00:42:45:c5:48:d0:14:ef:d6:27:0e:a4:cc:59: fe:da:36:46:5d:57:6e:6d:d9:ed:c8:cb:9e:50:20: 6d:b0:62:44:cc:2b:03:da:7f:45:60:c2:09:19:75: 26:69:1f:e9:3c:42:bc:01:a8:3f:3e:46:3d:db:3a: ea:d8:03:96:ed:cc:ca:b7:b9:1f:7f:d6:64:cd:0a: e2:5e:5d:65:b7:53:2a:c6:a1:fb:ce:00:30:8d:d2: d3:8c:86:71:2f:7d:de:60:00:2d:f9:c4:e8:62:a1: fd:22:fe:24:50:cf:b9:1b:90:8e:5f:e1:88:af:5a: 8f:b2:36:da:2a:47:bf:43:86:14:28:77:ef:8b:6c: 13:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9D:BB:5F:C0:60:D6:79:E9:57:FD:B8:7C:E1:C8:E0:EE:94:CA:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ae8c45b-9853-3f97-9696-6bbe6373915e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.40.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:98:d7:16:c9:f3:9f:ab:f6:8c:9f:08:e1:97:73:cb:f6:66: 7a:b3:54:ea:2f:0c:ca:d2:fb:2e:95:32:70:42:44:ab:73:d7: 7e:d2:f5:3c:dd:36:79:42:af:63:e3:ad:7d:40:3c:fc:77:cf: 7e:cc:64:70:3e:c7:e7:1f:f4:46:d3:f5:80:c0:e1:6e:c0:00: 53:99:96:ec:ee:3b:db:48:83:9f:94:07:8d:2b:08:f6:cb:f0: 03:b8:9d:fa:15:ed:04:4c:03:1a:d8:fc:60:7e:5f:8c:db:a8: 5d:17:ee:7f:c0:c6:c5:c0:9b:9f:47:5a:87:79:f2:97:96:47: 19:12:9e:3a:51:40:d2:59:13:84:13:a7:74:a6:c9:1d:1c:fc: 3a:b4:b2:ab:46:83:07:48:74:7b:40:7d:a2:7f:09:6d:49:9d: ff:ee:9a:e6:8d:da:69:f3:42:ff:5b:2d:57:7e:1d:b2:92:e9: 9c:6a:0b:cc:0c:80:44:1f:c1:9e:48:62:4a:31:e0:94:a9:12: 97:ae:ad:46:b3:3e:a0:12:bf:b7:95:af:05:d0:0b:60:ab:d3: 4d:9d:a2:8b:20:96:bb:23:f4:d7:50:f2:f5:a7:63:78:b9:32: 2f:3a:eb:67:0d:be:d9:e6:62:9b:4f:70:60:cb:df:52:95:2a: c6:7f:41:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGvVzx/w34zL2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMVoXDTI2MDEwODE2NDEyMVowLzEtMCsGA1UEAxMk YWFkYWY4ODctNzdlNS00MGVjLWEyYTEtNzRhMzExM2U5NGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobdQLCoqqQyMsvFv3++h9LyKKDMrnk+Onm02 e9v6z/hQUs929nIYWw3MWb+WX820N9sN8BW7rKS8z28/6m0TB9ENFHcCz9wmqKxA MfnVyB0K9Vdng9pD0vXteLgMFZDpDo0ThgsetFLZ8e859Z39gkodE0oY56J9AEJF xUjQFO/WJw6kzFn+2jZGXVdubdntyMueUCBtsGJEzCsD2n9FYMIJGXUmaR/pPEK8 Aag/PkY92zrq2AOW7czKt7kff9ZkzQriXl1lt1MqxqH7zgAwjdLTjIZxL33eYAAt +cToYqH9Iv4kUM+5G5COX+GIr1qPsjbaKke/Q4YUKHfvi2wTowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqdu1/AYNZ56Vf9uHzhyODulMqPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMWFlOGM0NWItOTg1My0z Zjk3LTk2OTYtNmJiZTYzNzM5MTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmCgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWY1xbJ85+r9oyfCOGXc8v2ZnqzVOovDMrS+y6VMnBCRKtz137S9Tzd NnlCr2PjrX1APPx3z37MZHA+x+cf9EbT9YDA4W7AAFOZluzuO9tIg5+UB40rCPbL 8AO4nfoV7QRMAxrY/GB+X4zbqF0X7n/AxsXAm59HWod58peWRxkSnjpRQNJZE4QT p3SmyR0c/Dq0sqtGgwdIdHtAfaJ/CW1Jnf/umuaN2mnzQv9bLVd+HbKS6ZxqC8wM gEQfwZ5IYkox4JSpEpeurUazPqASv7eVrwXQC2Cr002doosglrsj9NdQ8vWnY3i5 Mi8662cNvtnmYptPcGDL31KVKsZ/QUg= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:48 2025 by rpki-client