$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5b50e40a-c6f9-3441-8446-c56f56cf087d.roa File: 5b50e40a-c6f9-3441-8446-c56f56cf087d.roa (raw, json) Hash identifier: s1jeSNj/46YsQdQcdE6pnJVWShlAqU+PLSiFw+fJ9m4= Subject key identifier: 5B:37:DD:E5:6E:E1:DF:3D:E7:5C:F1:38:9F:55:DA:49:72:47:11:4B Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6C4BF576F1A0AD096DC0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5b50e40a-c6f9-3441-8446-c56f56cf087d.roa Signing time: Fri 10 Oct 2025 15:41:21 +0000 ROA not before: Fri 10 Oct 2025 15:41:21 +0000 ROA not after: Thu 08 Jan 2026 16:41:21 +0000 asID: 81 IP address blocks: 152.45.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6c:4b:f5:76:f1:a0:ad:09:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:21 2025 GMT Not After : Jan 8 16:41:21 2026 GMT Subject: CN=fe43df33-9d2a-4f4d-93f4-f06e307cc5a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:46:5d:5a:58:09:ef:34:7c:eb:92:20:6f:f3: da:b5:24:df:ef:72:1e:5b:bc:91:d8:a1:c9:20:2f: 25:59:e1:a9:f2:1d:9b:53:8f:fc:3c:ab:8d:28:d9: 28:76:a2:1b:f8:e1:69:1f:1b:2c:fd:ed:fc:eb:45: ac:98:b0:a3:a1:4c:5b:ad:c0:4b:1a:ea:b9:c8:ca: eb:b8:8e:a0:5b:51:cd:73:0a:09:7a:51:9c:a7:71: 0c:9c:37:4e:a5:df:45:42:20:55:fa:07:71:f6:5f: 21:6e:5d:69:2a:9e:92:f9:a9:52:8f:c8:38:19:dc: da:b5:00:49:d5:8e:85:58:e9:3b:4e:ee:56:65:bf: 22:b3:6c:3c:c7:91:c1:64:79:2c:a3:fa:03:be:37: e8:06:cb:85:e3:4d:27:d4:db:59:cc:64:ee:75:5a: fe:0a:09:16:a6:a3:71:ef:07:7c:ec:4f:66:b3:a3: 87:c4:a6:38:4f:50:e0:64:e0:20:23:fe:91:da:93: 83:67:56:57:90:a9:70:ac:28:26:3a:df:03:96:f6: 27:d5:51:8a:83:83:41:31:0f:23:f2:90:7c:64:33: 12:e5:02:98:b4:f6:9d:26:de:dc:a5:c4:74:8b:97: 70:a8:81:7c:2c:3b:d7:9d:c4:79:6f:79:13:49:3d: 93:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:37:DD:E5:6E:E1:DF:3D:E7:5C:F1:38:9F:55:DA:49:72:47:11:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5b50e40a-c6f9-3441-8446-c56f56cf087d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:e2:c9:a5:5e:e0:45:17:3b:d6:6d:e5:3a:4d:52:70:74:16: dd:55:98:4b:94:84:c4:56:f1:a3:16:be:93:14:5c:51:44:2d: 28:52:9a:4e:b4:f8:51:b4:73:d1:a6:ac:35:61:84:33:2e:a6: 69:27:68:1a:2e:52:bb:65:e1:a5:45:63:bd:76:f3:36:97:7f: a8:a1:db:66:bb:ba:07:36:00:5b:ce:ac:7f:bc:43:f6:89:6a: 77:4f:9b:98:82:11:51:55:c5:c9:25:f1:85:83:a2:e5:83:67: f8:04:1c:50:e1:68:70:00:69:32:63:96:06:6e:d6:0d:90:75: db:be:01:57:ea:a8:f0:39:cb:e5:f6:98:b6:24:40:7c:35:09: f6:88:af:81:53:36:64:b9:f0:2d:fd:5e:51:43:3d:32:6a:f2: 74:d2:4b:c7:f0:f8:2a:78:b9:f5:9c:6c:06:e0:d4:d4:6d:a0: 0e:1c:4c:7c:f0:71:13:e9:1c:c9:cc:29:58:dc:a4:1b:d3:c5: 61:94:d6:a8:fb:bd:3d:ef:75:03:f9:5a:25:40:da:61:00:80: ca:9b:a5:35:d1:28:fe:3f:bb:69:2e:b7:86:5b:59:9b:79:7a: e2:50:a4:72:43:91:c6:07:be:1a:f7:29:19:02:fa:b7:5d:8a: f1:f9:87:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGxL9XbxoK0JbcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMVoXDTI2MDEwODE2NDEyMVowLzEtMCsGA1UEAxMk ZmU0M2RmMzMtOWQyYS00ZjRkLTkzZjQtZjA2ZTMwN2NjNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUZdWlgJ7zR865Igb/PatSTf73IeW7yR2KHJ IC8lWeGp8h2bU4/8PKuNKNkodqIb+OFpHxss/e3860WsmLCjoUxbrcBLGuq5yMrr uI6gW1HNcwoJelGcp3EMnDdOpd9FQiBV+gdx9l8hbl1pKp6S+alSj8g4GdzatQBJ 1Y6FWOk7Tu5WZb8is2w8x5HBZHkso/oDvjfoBsuF400n1NtZzGTudVr+CgkWpqNx 7wd87E9ms6OHxKY4T1DgZOAgI/6R2pODZ1ZXkKlwrCgmOt8DlvYn1VGKg4NBMQ8j 8pB8ZDMS5QKYtPadJt7cpcR0i5dwqIF8LDvXncR5b3kTST2T2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFs33eVu4d8951zxOJ9V2klyRxFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNWI1MGU0MGEtYzZmOS0z NDQxLTg0NDYtYzU2ZjU2Y2YwODdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/iyaVe4EUXO9Zt5TpNUnB0Ft1VmEuUhMRW8aMWvpMUXFFELShSmk60 +FG0c9GmrDVhhDMupmknaBouUrtl4aVFY7128zaXf6ih22a7ugc2AFvOrH+8Q/aJ andPm5iCEVFVxckl8YWDouWDZ/gEHFDhaHAAaTJjlgZu1g2Qddu+AVfqqPA5y+X2 mLYkQHw1CfaIr4FTNmS58C39XlFDPTJq8nTSS8fw+Cp4ufWcbAbg1NRtoA4cTHzw cRPpHMnMKVjcpBvTxWGU1qj7vT3vdQP5WiVA2mEAgMqbpTXRKP4/u2kut4ZbWZt5 euJQpHJDkcYHvhr3KRkC+rddivH5hy0= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:21 2025 by rpki-client