$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3f649392-4570-3de3-8d38-06f53a56c8a8.roa File: 3f649392-4570-3de3-8d38-06f53a56c8a8.roa (raw, json) Hash identifier: 9RDfzl1zoSjm/5YSCvi1Vs3tSjTmP/8jlAd9gN7iyPo= Subject key identifier: 77:B8:7A:63:49:80:E5:1E:66:AE:13:08:64:72:5D:0B:57:97:D6:31 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A363FFCFFA4FA0CAC81024BE0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3f649392-4570-3de3-8d38-06f53a56c8a8.roa Signing time: Mon 16 Jun 2025 16:03:20 +0000 ROA not before: Mon 16 Jun 2025 16:03:20 +0000 ROA not after: Sun 14 Sep 2025 16:03:20 +0000 asID: 81 IP address blocks: 152.46.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3f:fc:ff:a4:fa:0c:ac:81:02:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jun 16 16:03:20 2025 GMT Not After : Sep 14 16:03:20 2025 GMT Subject: CN=6d2610b9-5347-42e0-ab2a-b25ac1313ffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:9a:2c:cb:14:5f:15:f5:0a:49:a7:0c:cf: 55:84:fb:11:3f:a4:cf:72:c7:4d:5b:14:85:23:46: 5b:f6:84:06:c6:7e:a7:92:0d:07:d2:12:e6:80:5e: e0:c1:7c:36:33:1d:e0:cf:51:4b:81:5a:20:68:9b: de:a2:f4:17:e9:84:5c:e1:4e:12:1e:17:7c:ff:6d: 14:e6:01:14:6f:b7:40:1f:df:c1:d8:b5:22:af:b2: 9e:5e:83:43:60:f0:b6:64:bf:f1:1a:71:50:d6:dd: 89:12:b5:19:a1:2b:e8:05:11:26:04:46:81:b3:d9: 82:7d:f3:3e:a1:56:19:46:95:ce:a2:e5:33:85:13: 52:89:99:35:e5:4c:17:4f:79:55:38:28:f3:98:f8: cc:32:c3:ae:8a:e5:b0:6f:f2:57:45:96:9b:c0:7a: 6f:84:d4:8e:b1:99:cc:54:41:1f:3b:2c:f3:91:74: f4:bc:a4:e5:49:a6:86:ae:ec:e6:15:eb:16:4f:f0: 0a:9a:20:fd:26:f8:9e:68:13:f6:53:f9:be:6b:77: 08:ca:36:c7:fa:c3:38:b8:af:22:f2:42:d5:4f:18: f6:00:2f:e2:87:62:71:84:b9:20:b8:d1:59:42:d3: 6e:6f:92:82:e9:80:7e:95:e8:3f:bd:7c:54:78:40: ba:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B8:7A:63:49:80:E5:1E:66:AE:13:08:64:72:5D:0B:57:97:D6:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3f649392-4570-3de3-8d38-06f53a56c8a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:9d:37:b9:e4:a8:bb:77:43:2d:93:56:22:20:59:06:54:b6: 26:3f:ca:99:f7:18:18:6b:27:16:83:fb:24:53:07:38:1e:50: cd:09:9a:89:f8:82:15:0f:4f:f7:b5:69:f6:6a:31:46:93:7e: 77:a7:d6:8d:16:51:74:70:82:b7:bc:95:b3:c2:d5:32:df:3c: 0f:87:40:dd:65:3a:f5:b5:8a:b2:e6:7b:f9:da:3a:be:23:00: ed:46:88:f9:49:7a:19:c6:74:c7:b3:2f:bd:e6:11:30:67:c4: e1:f8:1e:22:01:1d:6e:7d:1d:40:2e:9d:43:f8:2e:43:b9:11: 5b:1c:65:c7:95:cd:f2:2f:a9:26:15:92:5c:64:c0:49:ee:87: 0a:85:83:cc:a5:a2:a6:fc:2c:0d:36:bc:6e:71:e8:29:04:46: a5:fa:b0:60:08:ac:76:99:74:0c:3a:c8:db:03:e7:72:70:8b: cb:ec:45:5d:6a:5d:00:00:74:1d:f8:6e:a1:1b:3f:95:fb:f9: bc:95:01:62:64:89:88:97:5a:49:56:26:ec:ba:47:ed:c6:6e: 4c:f4:f9:ce:8b:ba:1d:61:62:59:1b:63:26:1f:be:a8:b5:79: 55:9e:a6:ea:eb:2e:d2:c6:4e:66:9c:78:59:b1:84:61:2a:93: cd:b2:32:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo2P/z/pPoMrIECS+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDYxNjE2MDMyMFoXDTI1MDkxNDE2MDMyMFowLzEtMCsGA1UEAxMk NmQyNjEwYjktNTM0Ny00MmUwLWFiMmEtYjI1YWMxMzEzZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst2aLMsUXxX1CkmnDM9VhPsRP6TPcsdNWxSF I0Zb9oQGxn6nkg0H0hLmgF7gwXw2Mx3gz1FLgVogaJveovQX6YRc4U4SHhd8/20U 5gEUb7dAH9/B2LUir7KeXoNDYPC2ZL/xGnFQ1t2JErUZoSvoBREmBEaBs9mCffM+ oVYZRpXOouUzhRNSiZk15UwXT3lVOCjzmPjMMsOuiuWwb/JXRZabwHpvhNSOsZnM VEEfOyzzkXT0vKTlSaaGruzmFesWT/AKmiD9JvieaBP2U/m+a3cIyjbH+sM4uK8i 8kLVTxj2AC/ih2JxhLkguNFZQtNub5KC6YB+leg/vXxUeEC6ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHe4emNJgOUeZq4TCGRyXQtXl9YxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2Y2NDkzOTItNDU3MC0z ZGUzLThkMzgtMDZmNTNhNTZjOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+dN7nkqLt3Qy2TViIgWQZUtiY/ypn3GBhrJxaD+yRTBzgeUM0Jmon4 ghUPT/e1afZqMUaTfnen1o0WUXRwgre8lbPC1TLfPA+HQN1lOvW1irLme/naOr4j AO1GiPlJehnGdMezL73mETBnxOH4HiIBHW59HUAunUP4LkO5EVscZceVzfIvqSYV klxkwEnuhwqFg8yloqb8LA02vG5x6CkERqX6sGAIrHaZdAw6yNsD53Jwi8vsRV1q XQAAdB34bqEbP5X7+byVAWJkiYiXWklWJuy6R+3Gbkz0+c6Luh1hYlkbYyYfvqi1 eVWepurrLtLGTmaceFmxhGEqk82yMp0= -----END CERTIFICATE-----Generated at Mon Jun 30 09:52:07 2025 by rpki-client