$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5bf75650-f4ac-33ae-a7b1-b397f8b1c385.roa File: 5bf75650-f4ac-33ae-a7b1-b397f8b1c385.roa (raw, json) Hash identifier: ThlOf2m72wL54kY+4TLwnIKCy34oVClpXZBHTM1DyXs= Subject key identifier: 9C:5B:86:27:22:BF:DB:1E:D0:96:D1:EE:74:C9:D6:DF:3F:49:BC:15 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A363FFB69A70C85E738B17880 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5bf75650-f4ac-33ae-a7b1-b397f8b1c385.roa Signing time: Mon 16 Jun 2025 16:03:20 +0000 ROA not before: Mon 16 Jun 2025 16:03:20 +0000 ROA not after: Sun 14 Sep 2025 16:03:20 +0000 asID: 81 IP address blocks: 152.26.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3f:fb:69:a7:0c:85:e7:38:b1:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jun 16 16:03:20 2025 GMT Not After : Sep 14 16:03:20 2025 GMT Subject: CN=c3f35a25-5bbf-4c9d-ad9b-46f88c28989c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ab:27:dc:7e:f1:1e:a6:79:88:ab:31:c7:57: f6:eb:ad:2e:c4:b2:a9:2c:6a:90:67:0e:a2:bd:4a: dd:25:69:dd:12:ad:74:68:4d:12:35:09:3c:f7:cc: c1:e7:ad:70:1c:b8:b6:8f:8e:ff:a1:9e:ec:95:d4: a6:7c:bc:43:d6:5b:de:06:10:de:d2:9e:1e:65:65: bb:ae:35:a8:47:c8:02:7c:43:54:48:2a:af:cd:14: 7c:cd:d1:cb:59:b5:1b:b3:af:51:a4:85:f5:a7:40: 03:6e:cc:f2:fa:c3:3a:9e:18:83:8c:7f:a0:f0:ad: ec:bf:7d:09:72:44:35:cd:4e:ba:8b:c6:6d:de:b1: 6a:68:f9:f7:2b:a5:ce:4f:ba:37:f9:04:b0:c3:b8: 34:18:81:23:92:34:3b:bf:c1:cf:10:6d:a3:36:58: f7:77:dd:1b:df:9b:5c:21:4e:48:cf:6d:d3:80:81: 01:d8:47:a0:d6:42:57:b9:82:8d:6e:35:dd:65:f2: c0:fa:03:88:72:df:fc:d9:ea:fa:68:de:41:52:26: 72:e8:be:d2:2d:d6:89:c0:27:62:0d:ff:30:2c:90: fd:4a:36:0c:34:70:e2:87:83:ee:ed:b0:23:5e:70: 1a:d2:93:cb:a3:d9:06:8b:2f:09:d3:03:fd:06:48: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:5B:86:27:22:BF:DB:1E:D0:96:D1:EE:74:C9:D6:DF:3F:49:BC:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5bf75650-f4ac-33ae-a7b1-b397f8b1c385.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.26.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:f0:96:cc:5f:e3:db:b7:70:8b:1d:31:00:9e:60:26:e1:fa: 5c:c5:5c:49:54:d7:d6:34:b6:bb:88:73:00:e8:dc:fc:b9:9d: 6c:d1:53:2e:ab:3d:c5:5c:08:04:36:91:77:10:c1:fd:80:02: 68:0b:f7:10:50:21:ed:0b:a1:13:7d:c8:b9:6c:f0:2b:0d:80: 86:90:47:9c:30:b5:f6:d6:28:63:a5:23:46:de:71:7e:b4:6f: d4:e2:6c:96:74:24:10:89:83:45:7f:16:2d:ef:1d:75:49:46: 5c:23:d0:a9:fe:e0:b9:4c:8d:df:2b:b2:f0:1f:d8:42:da:27: c0:34:cb:ba:81:86:f0:2d:74:94:02:d7:e6:51:8a:d2:9c:0e: 8c:be:4d:fe:90:c5:69:b7:07:7b:d4:fe:9d:a5:46:66:f4:60: 0e:cb:d5:a0:26:08:95:02:0b:0e:f4:6c:73:44:28:ca:b2:e0: e0:b6:2c:73:0b:61:7b:f7:1e:b0:7c:57:11:3a:c9:13:e3:10: 78:bb:e1:ec:1b:f1:73:be:b9:5a:16:70:70:6b:e8:50:94:c5: a2:5e:cb:40:64:03:52:6b:23:da:17:f5:61:b9:5c:f5:4a:64: 3d:b5:8b:be:04:aa:4e:1c:2c:2f:0d:03:13:6b:f9:47:15:f4: a5:79:a5:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo2P/tppwyF5zixeIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDYxNjE2MDMyMFoXDTI1MDkxNDE2MDMyMFowLzEtMCsGA1UEAxMk YzNmMzVhMjUtNWJiZi00YzlkLWFkOWItNDZmODhjMjg5ODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqsn3H7xHqZ5iKsxx1f2660uxLKpLGqQZw6i vUrdJWndEq10aE0SNQk898zB561wHLi2j47/oZ7sldSmfLxD1lveBhDe0p4eZWW7 rjWoR8gCfENUSCqvzRR8zdHLWbUbs69RpIX1p0ADbszy+sM6nhiDjH+g8K3sv30J ckQ1zU66i8Zt3rFqaPn3K6XOT7o3+QSww7g0GIEjkjQ7v8HPEG2jNlj3d90b35tc IU5Iz23TgIEB2Eeg1kJXuYKNbjXdZfLA+gOIct/82er6aN5BUiZy6L7SLdaJwCdi Df8wLJD9SjYMNHDih4Pu7bAjXnAa0pPLo9kGiy8J0wP9BkjwRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJxbhiciv9se0JbR7nTJ1t8/SbwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNWJmNzU2NTAtZjRhYy0z M2FlLWE3YjEtYjM5N2Y4YjFjMzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBpXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnwlsxf49u3cIsdMQCeYCbh+lzFXElU19Y0truIcwDo3Py5nWzRUy6r PcVcCAQ2kXcQwf2AAmgL9xBQIe0LoRN9yLls8CsNgIaQR5wwtfbWKGOlI0becX60 b9TibJZ0JBCJg0V/Fi3vHXVJRlwj0Kn+4LlMjd8rsvAf2ELaJ8A0y7qBhvAtdJQC 1+ZRitKcDoy+Tf6QxWm3B3vU/p2lRmb0YA7L1aAmCJUCCw70bHNEKMqy4OC2LHML YXv3HrB8VxE6yRPjEHi74ewb8XO+uVoWcHBr6FCUxaJey0BkA1JrI9oX9WG5XPVK ZD21i74Eqk4cLC8NAxNr+UcV9KV5pY0= -----END CERTIFICATE-----Generated at Tue Jul 1 13:00:07 2025 by rpki-client