$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a78cd2a-2900-34eb-9966-94f289fcaad8.roa File: 3a78cd2a-2900-34eb-9966-94f289fcaad8.roa (raw, json) Hash identifier: 1BMznqw2nNOQHqJo9FlbLFtBUjmVIyYtpwpTfx86cNQ= Subject key identifier: DB:68:44:64:65:4F:60:00:78:E5:58:85:20:22:50:05:57:5C:E1:C9 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C67895AA72BF66CBB2400 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a78cd2a-2900-34eb-9966-94f289fcaad8.roa Signing time: Fri 10 Oct 2025 15:41:19 +0000 ROA not before: Fri 10 Oct 2025 15:41:19 +0000 ROA not after: Thu 08 Jan 2026 16:41:19 +0000 asID: 81 IP address blocks: 152.60.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:67:89:5a:a7:2b:f6:6c:bb:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:19 2025 GMT Not After : Jan 8 16:41:19 2026 GMT Subject: CN=09c54fc9-0e7e-406d-b61b-f1a5958a27db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e9:2c:de:fa:0d:97:cb:d8:fd:22:c9:ea:5d: 68:7a:19:28:93:9e:90:20:4f:07:5a:41:8d:1c:97: 8c:4a:3d:f6:32:55:d3:74:ba:52:12:a4:f9:5a:2e: 2d:c8:93:49:60:e7:96:72:50:42:83:e1:dc:57:1a: 6d:7e:eb:ac:eb:2d:53:94:09:a2:1f:13:87:39:ec: 25:e5:72:f3:bb:2b:d8:54:ec:77:74:4f:36:de:ba: e4:a0:f4:fd:c7:a6:5b:a0:92:51:d4:2f:27:a0:da: 35:74:ef:08:8e:7e:e1:39:dd:ef:77:9d:f0:0d:bc: 7c:7b:df:b3:6e:5f:4b:75:8d:8b:15:40:1c:7a:14: 23:96:2a:c5:8c:83:29:6b:2a:7e:40:e2:b0:ef:6f: 5d:51:2f:b8:99:83:09:d0:fd:df:12:39:10:80:91: e6:c3:f6:71:f6:73:56:4e:6c:d8:67:a2:14:9e:c8: 92:32:3e:84:b5:09:82:c4:2e:5e:e4:9f:14:c7:f3: c9:b3:29:cf:03:f4:18:69:21:b7:90:ba:11:46:6f: d1:2f:51:f9:fb:71:f6:15:4e:91:bd:43:c2:9f:d2: 64:d3:d0:25:cc:26:09:0a:85:0a:ce:5a:27:d7:71: 71:58:67:9c:c1:d7:8e:da:af:d9:04:f1:b8:a4:d4: 22:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:68:44:64:65:4F:60:00:78:E5:58:85:20:22:50:05:57:5C:E1:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a78cd2a-2900-34eb-9966-94f289fcaad8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.60.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:7a:18:d9:71:40:88:40:2f:40:83:b4:70:75:31:41:dc:10: 3b:f2:c5:45:04:84:00:99:46:f0:9c:4e:5e:41:f7:67:0e:c5: 11:fc:fa:8c:dc:55:36:bc:e7:a3:1c:9a:df:13:6b:1a:f3:5e: a5:46:c7:44:ff:30:74:bc:e9:ab:c8:11:a7:02:ef:c7:bc:60: ae:fa:03:f3:00:fc:70:94:73:4c:21:eb:5d:0a:9b:64:22:0b: 68:44:85:16:3e:c2:de:52:59:af:92:9e:81:41:c7:a0:8e:41: b5:08:ad:d7:0d:6e:ef:1c:85:73:de:3c:13:0a:3c:fa:db:8b: 66:c5:6b:d2:62:44:c0:49:d9:e3:da:c6:eb:bf:71:8a:fb:e6: 11:cf:43:7d:01:da:12:f0:c8:4b:89:89:e9:8c:63:f5:70:5e: 8f:1c:8a:c8:41:84:09:e3:3a:6d:93:76:c8:d3:f4:79:9f:04: 57:e3:51:11:6b:63:12:ea:e5:d0:06:bc:35:29:ae:06:d5:9e: 00:cc:55:52:a2:c2:5f:1e:72:90:45:83:12:da:dc:52:df:12: 83:13:c8:e8:0a:dd:18:cf:25:40:31:98:6a:4c:a6:49:fe:38: 22:58:42:3e:47:35:ab:60:2c:cb:5a:79:88:56:b4:f2:b9:28: 9a:c2:e4:26 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEt6DGeJWqcr9my7JAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDExOVoXDTI2MDEwODE2NDExOVowLzEtMCsGA1UEAxMk MDljNTRmYzktMGU3ZS00MDZkLWI2MWItZjFhNTk1OGEyN2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+ks3voNl8vY/SLJ6l1oehkok56QIE8HWkGN HJeMSj32MlXTdLpSEqT5Wi4tyJNJYOeWclBCg+HcVxptfuus6y1TlAmiHxOHOewl 5XLzuyvYVOx3dE823rrkoPT9x6ZboJJR1C8noNo1dO8Ijn7hOd3vd53wDbx8e9+z bl9LdY2LFUAcehQjlirFjIMpayp+QOKw729dUS+4mYMJ0P3fEjkQgJHmw/Zx9nNW TmzYZ6IUnsiSMj6EtQmCxC5e5J8Ux/PJsynPA/QYaSG3kLoRRm/RL1H5+3H2FU6R vUPCn9Jk09AlzCYJCoUKzlon13FxWGecwdeO2q/ZBPG4pNQiuwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNtoRGRlT2AAeOVYhSAiUAVXXOHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2E3OGNkMmEtMjkwMC0z NGViLTk5NjYtOTRmMjg5ZmNhYWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABnoY2XFAiEAvQIO0cHUxQdwQO/LFRQSEAJlG8JxOXkH3Zw7FEfz6jNxV Nrznoxya3xNrGvNepUbHRP8wdLzpq8gRpwLvx7xgrvoD8wD8cJRzTCHrXQqbZCIL aESFFj7C3lJZr5KegUHHoI5BtQit1w1u7xyFc948Ewo8+tuLZsVr0mJEwEnZ49rG 679xivvmEc9DfQHaEvDIS4mJ6Yxj9XBejxyKyEGECeM6bZN2yNP0eZ8EV+NREWtj Eurl0Aa8NSmuBtWeAMxVUqLCXx5ykEWDEtrcUt8SgxPI6ArdGM8lQDGYakymSf44 IlhCPkc1q2Asy1p5iFa08rkomsLkJg== -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:49 2025 by rpki-client