$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3b8c0bc5-3091-320c-9e38-153831c6805d.roa File: 3b8c0bc5-3091-320c-9e38-153831c6805d.roa (raw, json) Hash identifier: kouWAwLKFCOKY/bwDIJqBn/lDwzIsmBbq1lKmV0i4TY= Subject key identifier: 63:5E:8E:C5:D3:9B:61:08:23:FB:94:A1:38:15:01:41:E6:38:67:3B Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D8C99AEF02BC8BBBE1A00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3b8c0bc5-3091-320c-9e38-153831c6805d.roa Signing time: Fri 06 Mar 2026 15:38:28 +0000 ROA not before: Fri 06 Mar 2026 15:38:28 +0000 ROA not after: Thu 04 Jun 2026 14:38:28 +0000 asID: 81 IP address blocks: 152.45.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:8c:99:ae:f0:2b:c8:bb:be:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:28 2026 GMT Not After : Jun 4 14:38:28 2026 GMT Subject: CN=8ca99835-ee0b-482a-a35e-0b85df2df45b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:64:47:74:c5:69:15:48:17:e5:6b:0c:96:b1: 07:b9:04:09:e2:6f:d1:55:66:6b:9a:42:ef:35:cf: 16:33:8a:dd:48:b1:77:19:83:9f:89:4f:98:c2:7e: c3:bc:63:d5:d9:20:39:25:4c:32:4c:4a:6f:34:a9: 3a:20:dc:e3:e9:1f:9a:e8:71:51:d2:d8:0e:d1:1c: 08:a0:ac:42:e8:0b:86:f1:87:0d:88:ce:e5:ff:e0: 98:11:a0:2d:cf:0b:a3:42:34:ea:b2:17:d4:6a:f5: 55:47:76:24:61:f5:60:a0:bb:0c:45:ce:47:97:79: 29:03:35:65:4b:38:77:30:fd:d8:34:cb:a3:ab:a6: 08:3c:19:82:9e:0b:af:a3:ed:d2:b3:2d:41:30:6a: 02:30:3c:cc:1b:61:4f:28:d8:21:41:f3:d6:1d:c6: 71:21:98:0e:87:73:1b:47:c7:02:ca:48:de:50:d0: 4f:19:27:67:e8:6b:38:ba:ad:88:68:73:53:ff:bf: 0d:94:d4:db:ca:95:30:af:90:43:e6:6e:13:ef:51: 69:cb:42:52:59:73:cb:73:13:4a:dd:06:6a:d0:23: cc:f9:4c:ee:d4:7e:0e:88:4b:80:7b:3f:4b:3f:f1: 2b:38:f6:a0:71:ff:9a:6b:42:1b:27:d7:7f:e5:f4: 48:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:5E:8E:C5:D3:9B:61:08:23:FB:94:A1:38:15:01:41:E6:38:67:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3b8c0bc5-3091-320c-9e38-153831c6805d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:08:86:46:fc:85:84:9c:18:d7:82:3b:6b:0f:28:49:bb:c4: b6:3f:bf:09:88:a7:18:1b:77:af:24:e6:62:1b:97:aa:e1:fb: 89:9a:5f:0a:bc:88:d1:a4:eb:5b:4b:5d:d0:66:2f:19:10:5a: f7:94:5b:b2:59:f5:a8:d3:39:7d:67:ec:33:0f:97:1f:d9:5e: 93:73:43:0a:02:35:ab:70:db:22:3f:73:cc:b5:78:e8:af:0b: 01:62:5c:8f:e1:9c:a3:c4:eb:65:d8:00:b3:ee:9a:af:36:9d: b8:64:d5:60:6a:16:7b:99:3e:ba:42:de:29:5c:a0:45:d4:b0: 50:46:66:97:c2:c3:6a:68:69:5a:d7:96:53:8c:d3:7c:58:a3: 1b:44:64:1e:b9:fe:b8:62:94:42:00:1a:10:ab:88:92:95:c4: b7:50:42:42:a4:8f:4b:09:7b:a9:e4:26:3d:b0:3a:0b:98:76: 22:bf:b2:cc:23:04:6e:c2:bd:f9:e1:35:a3:b9:35:f1:19:db: 24:b2:32:14:0d:f7:b9:7b:ed:d6:e7:08:a8:48:1e:c8:f2:ba: cd:a4:f1:64:5a:a7:e0:c9:80:3b:b3:da:a5:4a:fe:3d:dc:1e: a2:13:6f:35:c4:bf:2e:ad:82:10:e4:d5:f4:bf:a2:55:af:92: 87:cd:a2:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYyZrvAryLu+GgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgyOFoXDTI2MDYwNDE0MzgyOFowLzEtMCsGA1UEAxMk OGNhOTk4MzUtZWUwYi00ODJhLWEzNWUtMGI4NWRmMmRmNDViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGRHdMVpFUgX5WsMlrEHuQQJ4m/RVWZrmkLv Nc8WM4rdSLF3GYOfiU+Ywn7DvGPV2SA5JUwyTEpvNKk6INzj6R+a6HFR0tgO0RwI oKxC6AuG8YcNiM7l/+CYEaAtzwujQjTqshfUavVVR3YkYfVgoLsMRc5Hl3kpAzVl Szh3MP3YNMujq6YIPBmCnguvo+3Ssy1BMGoCMDzMG2FPKNghQfPWHcZxIZgOh3Mb R8cCykjeUNBPGSdn6Gs4uq2IaHNT/78NlNTbypUwr5BD5m4T71Fpy0JSWXPLcxNK 3QZq0CPM+Uzu1H4OiEuAez9LP/ErOPagcf+aa0IbJ9d/5fRIYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNejsXTm2EII/uUoTgVAUHmOGc7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2I4YzBiYzUtMzA5MS0z MjBjLTllMzgtMTUzODMxYzY4MDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0Ihkb8hYScGNeCO2sPKEm7xLY/vwmIpxgbd68k5mIbl6rh+4maXwq8 iNGk61tLXdBmLxkQWveUW7JZ9ajTOX1n7DMPlx/ZXpNzQwoCNatw2yI/c8y1eOiv CwFiXI/hnKPE62XYALPumq82nbhk1WBqFnuZPrpC3ilcoEXUsFBGZpfCw2poaVrX llOM03xYoxtEZB65/rhilEIAGhCriJKVxLdQQkKkj0sJe6nkJj2wOguYdiK/sswj BG7CvfnhNaO5NfEZ2ySyMhQN97l77dbnCKhIHsjyus2k8WRap+DJgDuz2qVK/j3c HqITbzXEvy6tghDk1fS/olWvkofNokc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:41:40 2026 by rpki-client