$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ba5f0ca-412c-32bd-8223-32e6c7bc7812.roa File: 1ba5f0ca-412c-32bd-8223-32e6c7bc7812.roa (raw, json) Hash identifier: o79zZm1aA6nAbW4ewZ3SdUU9XwG4NakTRpzefmNT/7M= Subject key identifier: F9:7D:4C:50:C9:CE:17:8A:DE:58:E1:56:D1:1B:95:F7:83:EB:34:1B Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D8CE3F3AC8AD060D61580 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ba5f0ca-412c-32bd-8223-32e6c7bc7812.roa Signing time: Fri 06 Mar 2026 15:38:28 +0000 ROA not before: Fri 06 Mar 2026 15:38:28 +0000 ROA not after: Thu 04 Jun 2026 14:38:28 +0000 asID: 81 IP address blocks: 152.45.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:8c:e3:f3:ac:8a:d0:60:d6:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:28 2026 GMT Not After : Jun 4 14:38:28 2026 GMT Subject: CN=57900e1a-c556-4f7a-a375-5b5a5bd1f7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:c7:e5:e7:1b:59:5f:8a:95:b8:f7:a6:50: 68:6c:3a:10:6e:f0:c6:b1:76:fd:54:a2:4d:f8:67: 36:93:a6:c2:aa:2d:6f:ef:da:05:2f:58:c3:c7:64: d7:23:57:66:ff:06:b4:4b:e4:67:3c:73:68:9a:75: 9e:d7:b1:3b:96:45:cd:2e:af:26:2a:76:bd:5a:71: 19:27:06:bf:e0:b9:44:00:1a:8e:45:73:ed:f5:b0: 53:03:3d:d7:aa:28:b7:e3:6b:11:89:8c:4d:a3:85: d1:09:1d:e7:16:a4:5f:fb:31:d6:ac:7b:cd:e5:0f: b1:7e:60:ca:30:a7:51:4c:f8:91:41:9e:45:4b:be: 1c:9f:42:5a:2e:58:fe:27:bd:74:52:45:b4:17:91: 01:25:71:31:17:6a:43:af:53:f9:ca:2b:dd:b8:2f: 1c:47:d9:94:63:11:10:9c:7a:60:f9:3a:86:7a:ad: 33:3f:5a:c8:3b:fa:fc:f7:45:c8:6d:b7:74:8d:c1: 77:ac:d5:c1:0d:da:d5:b3:97:2f:91:3a:f8:03:42: e2:d0:99:a8:e9:3e:94:ad:80:c4:81:93:00:96:21: e0:6b:79:2b:1f:24:77:7b:df:e0:28:dd:a7:6e:44: a4:13:7e:63:66:9f:28:bd:dc:ea:08:a0:0f:23:e1: 52:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:7D:4C:50:C9:CE:17:8A:DE:58:E1:56:D1:1B:95:F7:83:EB:34:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/1ba5f0ca-412c-32bd-8223-32e6c7bc7812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:94:80:35:7c:2d:3b:73:3f:c5:98:f9:f9:7f:46:fe:9f:0e: fd:c4:a6:14:90:82:66:f0:64:d4:21:54:b6:54:8c:b8:f3:96: 9d:22:c7:81:c3:67:dc:7f:36:c8:a2:73:a1:66:62:ae:8b:b7: 17:d8:fc:2a:b9:1d:5f:f1:e4:99:1e:9a:8d:da:37:70:54:7b: 45:ec:66:22:bb:d0:dd:5d:52:52:00:a7:31:c5:f4:dc:a4:ea: 6d:a4:de:d1:22:7f:a6:05:af:93:c3:8a:23:e6:0e:cc:40:c6: 98:24:dc:96:d4:ff:1e:b8:2a:15:af:9e:66:71:9a:31:b1:57: 9a:ef:33:4f:05:41:02:d4:c6:84:e9:04:8a:54:c7:05:84:a1: ed:fe:c6:fe:cf:fb:a2:6b:2e:73:da:f6:08:0c:e5:02:8b:af: 44:36:33:01:d3:4d:d7:97:c7:93:b3:61:06:04:3b:b9:9b:26: 35:ea:0f:eb:79:b3:5c:e7:cc:2d:99:db:88:81:34:e4:e3:da: 8b:0e:fd:21:81:99:43:3d:97:95:52:27:37:bf:a0:d6:bd:07: 83:88:71:68:ee:36:51:60:f2:36:fb:57:66:68:93:4e:74:3a: d3:06:1a:a9:92:85:c7:89:cd:bf:b9:67:65:4c:68:18:d5:1d: 02:55:94:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYzj86yK0GDWFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgyOFoXDTI2MDYwNDE0MzgyOFowLzEtMCsGA1UEAxMk NTc5MDBlMWEtYzU1Ni00ZjdhLWEzNzUtNWI1YTViZDFmN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu//H5ecbWV+Klbj3plBobDoQbvDGsXb9VKJN +Gc2k6bCqi1v79oFL1jDx2TXI1dm/wa0S+RnPHNomnWe17E7lkXNLq8mKna9WnEZ Jwa/4LlEABqORXPt9bBTAz3Xqii342sRiYxNo4XRCR3nFqRf+zHWrHvN5Q+xfmDK MKdRTPiRQZ5FS74cn0JaLlj+J710UkW0F5EBJXExF2pDr1P5yivduC8cR9mUYxEQ nHpg+TqGeq0zP1rIO/r890XIbbd0jcF3rNXBDdrVs5cvkTr4A0Li0Jmo6T6UrYDE gZMAliHga3krHyR3e9/gKN2nbkSkE35jZp8ovdzqCKAPI+FSlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPl9TFDJzheK3ljhVtEblfeD6zQbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMWJhNWYwY2EtNDEyYy0z MmJkLTgyMjMtMzJlNmM3YmM3ODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWUgDV8LTtzP8WY+fl/Rv6fDv3EphSQgmbwZNQhVLZUjLjzlp0ix4HD Z9x/Nsiic6FmYq6LtxfY/Cq5HV/x5Jkemo3aN3BUe0XsZiK70N1dUlIApzHF9Nyk 6m2k3tEif6YFr5PDiiPmDsxAxpgk3JbU/x64KhWvnmZxmjGxV5rvM08FQQLUxoTp BIpUxwWEoe3+xv7P+6JrLnPa9ggM5QKLr0Q2MwHTTdeXx5OzYQYEO7mbJjXqD+t5 s1znzC2Z24iBNOTj2osO/SGBmUM9l5VSJze/oNa9B4OIcWjuNlFg8jb7V2Zok050 OtMGGqmShceJzb+5Z2VMaBjVHQJVlGI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:11:37 2026 by rpki-client