$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5cd6f429-6a49-3a09-91b6-1e28e68ffdda.roa File: 5cd6f429-6a49-3a09-91b6-1e28e68ffdda.roa (raw, json) Hash identifier: tobuLztQRLyIAYgIPIhsW0CZsU7wgUqvLFXnipRUZIE= Subject key identifier: 37:6F:81:49:43:FF:6D:AE:FF:77:73:B3:92:24:C9:83:E9:DB:80:17 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D8C4F606A5CF12FB47D38 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5cd6f429-6a49-3a09-91b6-1e28e68ffdda.roa Signing time: Fri 06 Mar 2026 15:38:28 +0000 ROA not before: Fri 06 Mar 2026 15:38:28 +0000 ROA not after: Thu 04 Jun 2026 14:38:28 +0000 asID: 81 IP address blocks: 152.28.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:8c:4f:60:6a:5c:f1:2f:b4:7d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:28 2026 GMT Not After : Jun 4 14:38:28 2026 GMT Subject: CN=b21459b2-66f7-48c2-96a9-6b924ff1c9dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:04:ee:d1:df:16:0d:8e:b5:32:5d:f0:c5:b4: 1b:3f:fd:6e:f9:83:08:b4:6f:e5:af:0f:ca:be:16: 14:ed:d2:a4:c5:69:0f:2f:a0:0a:29:a4:f6:a8:8e: 2e:86:b3:5b:a9:58:96:32:ef:eb:d0:1e:85:15:7b: c3:e2:9c:f3:8d:3e:73:a6:83:a7:e8:c1:0e:45:9c: 99:6d:0c:a2:fe:8c:47:17:fe:15:53:4d:74:c7:4c: 6f:d3:4a:cd:ee:24:2a:23:0f:f4:ad:f6:01:05:75: a7:42:fd:3c:65:ab:72:38:fc:a6:51:fe:d3:6c:07: 4a:06:d3:4b:7b:82:5c:7c:5b:ef:17:b4:bf:c5:54: ff:1d:b6:06:c6:b4:96:ee:fb:fc:a6:de:4a:e5:4f: db:2e:41:06:b0:02:20:a8:d4:62:a2:4a:41:71:a5: e8:f6:18:9f:31:aa:5e:38:15:c7:ee:42:d8:09:fa: 62:07:89:1b:ea:f3:e5:48:1b:1c:51:47:18:77:76: a6:5d:4b:c4:dc:75:b8:3d:f0:0a:4b:92:4a:58:53: 3a:14:dc:83:8c:71:83:25:01:89:9b:3c:e7:01:f7: a1:2c:b6:03:1f:5e:c6:d9:3d:aa:48:2d:a5:fb:7f: c6:6f:f6:1e:d4:ff:3a:3d:6d:fc:0d:f7:31:1a:de: de:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:6F:81:49:43:FF:6D:AE:FF:77:73:B3:92:24:C9:83:E9:DB:80:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5cd6f429-6a49-3a09-91b6-1e28e68ffdda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.28.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:6d:9a:30:6d:77:98:8b:5c:1c:7f:89:e6:21:ec:aa:44:9a: ba:21:b7:80:f3:1d:ed:c8:1d:e6:fb:2f:e4:0d:5e:04:c6:82: bb:e5:92:58:62:19:f7:34:08:5c:25:72:3e:c3:33:20:d1:9c: 20:f3:6d:de:05:1d:49:3a:50:05:44:f7:f8:eb:e6:de:09:50: 18:33:9c:bc:a2:45:25:24:38:39:7c:01:c9:c6:d4:1d:e8:d1: 54:ef:28:b5:49:61:8b:0f:73:41:23:1a:62:3c:18:27:ee:c9: d3:86:f1:c8:da:9c:7c:9b:26:6b:aa:24:3e:9b:ce:29:2d:aa: b7:c4:c1:4f:23:b6:30:3a:64:ab:4c:2e:4e:c8:64:ff:f4:cc: 20:1c:6e:55:2e:cb:e0:74:a7:cf:42:8e:37:6d:6f:67:46:26: 72:52:17:f0:e6:38:50:4f:81:cd:0c:31:c3:6e:42:94:1c:06: 99:84:f0:6a:be:bb:7a:eb:ae:fc:2a:f2:8d:cb:5e:35:23:52: 34:2b:1c:82:92:dd:ae:a1:d4:da:5f:8e:b6:25:7d:cb:27:ee: 1a:58:46:c1:fa:9e:65:08:1d:45:f5:3b:99:57:98:ae:2c:97: d9:b3:77:5d:11:60:b1:00:e5:8c:b3:58:20:af:90:49:ce:3c: 54:6b:30:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYxPYGpc8S+0fTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgyOFoXDTI2MDYwNDE0MzgyOFowLzEtMCsGA1UEAxMk YjIxNDU5YjItNjZmNy00OGMyLTk2YTktNmI5MjRmZjFjOWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigTu0d8WDY61Ml3wxbQbP/1u+YMItG/lrw/K vhYU7dKkxWkPL6AKKaT2qI4uhrNbqViWMu/r0B6FFXvD4pzzjT5zpoOn6MEORZyZ bQyi/oxHF/4VU010x0xv00rN7iQqIw/0rfYBBXWnQv08ZatyOPymUf7TbAdKBtNL e4JcfFvvF7S/xVT/HbYGxrSW7vv8pt5K5U/bLkEGsAIgqNRiokpBcaXo9hifMape OBXH7kLYCfpiB4kb6vPlSBscUUcYd3amXUvE3HW4PfAKS5JKWFM6FNyDjHGDJQGJ mzznAfehLLYDH17G2T2qSC2l+3/Gb/Ye1P86PW38DfcxGt7eRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdvgUlD/22u/3dzs5IkyYPp24AXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNWNkNmY0MjktNmE0OS0z YTA5LTkxYjYtMWUyOGU2OGZmZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBwBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxtmjBtd5iLXBx/ieYh7KpEmroht4DzHe3IHeb7L+QNXgTGgrvlklhi Gfc0CFwlcj7DMyDRnCDzbd4FHUk6UAVE9/jr5t4JUBgznLyiRSUkODl8AcnG1B3o 0VTvKLVJYYsPc0EjGmI8GCfuydOG8cjanHybJmuqJD6bziktqrfEwU8jtjA6ZKtM Lk7IZP/0zCAcblUuy+B0p89Cjjdtb2dGJnJSF/DmOFBPgc0MMcNuQpQcBpmE8Gq+ u3rrrvwq8o3LXjUjUjQrHIKS3a6h1NpfjrYlfcsn7hpYRsH6nmUIHUX1O5lXmK4s l9mzd10RYLEA5YyzWCCvkEnOPFRrMKM= -----END CERTIFICATE-----Generated at Thu Mar 26 11:27:24 2026 by rpki-client