$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3c17ea1d-c34e-3982-a56f-09c1f5cc1fc1.roa File: 3c17ea1d-c34e-3982-a56f-09c1f5cc1fc1.roa (raw, json) Hash identifier: 296QItVZ19ImOeW4wJkayxZFmP1SnA7bmX4pPWit/DE= Subject key identifier: 5B:9C:18:D4:98:C5:EC:49:88:C5:9E:E1:20:C7:4D:A6:4A:45:1B:C8 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D88C9E207FD595A9AED80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3c17ea1d-c34e-3982-a56f-09c1f5cc1fc1.roa Signing time: Fri 06 Mar 2026 15:38:26 +0000 ROA not before: Fri 06 Mar 2026 15:38:26 +0000 ROA not after: Thu 04 Jun 2026 14:38:26 +0000 asID: 81 IP address blocks: 152.49.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:88:c9:e2:07:fd:59:5a:9a:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:26 2026 GMT Not After : Jun 4 14:38:26 2026 GMT Subject: CN=525076f8-8551-46d0-96b6-a90293715a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:37:d3:4b:16:a3:15:19:15:c9:6b:8f:d4: b9:de:96:02:91:a2:89:cc:a9:c6:ae:7d:a3:39:ee: ba:c7:4f:3a:bb:38:d6:49:11:14:44:92:c1:f4:75: ba:b9:b6:40:20:4b:e0:10:ba:32:13:e7:bc:3f:0c: a9:bb:18:83:49:94:35:0a:98:b4:f1:29:a0:97:b1: d5:a1:3e:3f:c8:68:6f:13:5f:2c:ad:c0:99:7b:85: bf:08:53:1a:d0:45:3b:b3:50:65:4e:8d:92:71:69: 66:5f:cf:45:14:1d:6f:6f:8b:75:8a:88:e4:5b:6b: 3d:79:b1:78:83:a3:d0:5e:e7:c1:ce:32:a8:14:a9: d9:06:8c:bc:b3:d7:54:ef:e9:d2:cc:43:02:09:c1: 47:eb:09:08:0a:53:b8:37:f6:68:a3:da:43:e5:0e: ad:bf:e4:9f:b9:fa:52:63:f2:d1:af:92:0d:73:39: 2d:2c:a1:f7:71:d8:68:66:bd:2d:b1:cf:5b:2c:fd: 39:e3:9a:bb:b5:3a:a8:ec:0b:8a:b4:f5:c6:e9:57: ea:b3:89:1a:1d:c6:5d:7d:9c:fe:ee:f4:ea:19:d8: ac:bc:90:e9:6e:cf:97:04:20:c7:18:4c:ac:d6:89: f9:3a:cc:8e:9e:77:4c:88:d4:86:d6:ce:93:cc:01: d7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9C:18:D4:98:C5:EC:49:88:C5:9E:E1:20:C7:4D:A6:4A:45:1B:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3c17ea1d-c34e-3982-a56f-09c1f5cc1fc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.49.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6f:a7:e0:71:fd:73:6f:47:54:a0:ac:33:60:b1:cf:7e:83: 22:4f:5e:2f:73:31:65:b9:84:0a:1e:a0:b7:43:d7:92:a7:a8: 22:f0:b3:e8:d4:58:29:86:cf:44:7b:f7:1f:af:35:57:88:44: bd:6c:6c:dc:b8:86:04:89:f0:21:5a:99:da:d8:17:f7:1e:d4: 4f:aa:50:64:be:bf:96:9b:82:12:3a:36:b7:90:b5:dd:6a:dc: 74:87:b5:87:b3:94:76:24:d2:a1:97:cb:ad:47:c4:db:3c:b9: a2:d0:c5:19:ea:8b:26:3c:be:5d:52:1b:69:5c:09:d4:fa:77: de:24:5d:94:a0:9a:74:3d:b6:95:9e:7c:f3:ef:9b:c5:67:23: ef:03:29:92:45:00:da:13:70:a6:53:01:ab:23:37:e6:90:a6: a6:e3:8b:09:7e:98:4d:4d:a7:65:c1:15:de:d3:59:e7:8f:15: 10:24:7b:56:ed:8a:70:37:41:a5:7f:79:29:71:c8:f7:b6:97: cb:a8:5f:34:04:1b:5f:16:8f:4c:d0:0f:4c:5e:36:f0:fd:6c: c5:bd:1a:34:56:ea:ba:d5:bd:0b:7c:71:24:91:91:de:c4:0e: 50:5d:c3:d7:63:25:53:c0:8f:1d:d7:b7:ce:2d:a7:e8:ef:29: 9f:18:ea:f5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE0UbYjJ4gf9WVqa7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgyNloXDTI2MDYwNDE0MzgyNlowLzEtMCsGA1UEAxMk NTI1MDc2ZjgtODU1MS00NmQwLTk2YjYtYTkwMjkzNzE1YTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlws300sWoxUZFclrj9S53pYCkaKJzKnGrn2j Oe66x086uzjWSREURJLB9HW6ubZAIEvgELoyE+e8PwypuxiDSZQ1Cpi08Smgl7HV oT4/yGhvE18srcCZe4W/CFMa0EU7s1BlTo2ScWlmX89FFB1vb4t1iojkW2s9ebF4 g6PQXufBzjKoFKnZBoy8s9dU7+nSzEMCCcFH6wkIClO4N/Zoo9pD5Q6tv+SfufpS Y/LRr5INczktLKH3cdhoZr0tsc9bLP0545q7tTqo7AuKtPXG6Vfqs4kaHcZdfZz+ 7vTqGdisvJDpbs+XBCDHGEys1on5OsyOnndMiNSG1s6TzAHXlwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFucGNSYxexJiMWe4SDHTaZKRRvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2MxN2VhMWQtYzM0ZS0z OTgyLWE1NmYtMDljMWY1Y2MxZmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAP2+n4HH9c29HVKCsM2Cxz36DIk9eL3MxZbmECh6gt0PXkqeoIvCz6NRY KYbPRHv3H681V4hEvWxs3LiGBInwIVqZ2tgX9x7UT6pQZL6/lpuCEjo2t5C13Wrc dIe1h7OUdiTSoZfLrUfE2zy5otDFGeqLJjy+XVIbaVwJ1Pp33iRdlKCadD22lZ58 8++bxWcj7wMpkkUA2hNwplMBqyM35pCmpuOLCX6YTU2nZcEV3tNZ548VECR7Vu2K cDdBpX95KXHI97aXy6hfNAQbXxaPTNAPTF428P1sxb0aNFbqutW9C3xxJJGR3sQO UF3D12MlU8CPHde3zi2n6O8pnxjq9Q== -----END CERTIFICATE-----Generated at Thu Mar 26 14:01:59 2026 by rpki-client