$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8f62a97f-bbcd-3dee-9df5-40b8962e6f8b.roa File: 8f62a97f-bbcd-3dee-9df5-40b8962e6f8b.roa (raw, json) Hash identifier: amvgCoVJNTF7YEL4gW7VKb1Wqj/0vVPIMLL+/nnjpfU= Subject key identifier: CD:59:C5:2D:24:EE:B6:93:09:DA:90:FD:EE:AA:F0:E0:8C:F2:FB:F5 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6C200C8E910E5C69DDD8 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8f62a97f-bbcd-3dee-9df5-40b8962e6f8b.roa Signing time: Fri 10 Oct 2025 15:41:21 +0000 ROA not before: Fri 10 Oct 2025 15:41:21 +0000 ROA not after: Thu 08 Jan 2026 16:41:21 +0000 asID: 81 IP address blocks: 152.45.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6c:20:0c:8e:91:0e:5c:69:dd:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:21 2025 GMT Not After : Jan 8 16:41:21 2026 GMT Subject: CN=7a4ec983-f800-4605-b851-6ace468b0c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:64:17:99:0e:0d:28:49:77:56:70:61:c5:87: 27:27:89:7b:17:eb:5c:46:7f:77:a9:ae:6a:2c:ab: 61:3e:c8:12:53:ef:ef:05:33:cb:3d:e0:49:c6:38: ee:ba:50:5a:ba:2a:e7:17:a6:bf:96:13:50:cb:56: 06:c7:1d:d6:42:04:d3:e6:ff:4b:20:ba:25:2f:bf: 7d:3b:de:f1:b7:55:d4:2b:f0:d5:80:5b:d0:ff:53: c0:a5:7e:9a:64:ee:dc:8e:be:03:91:5b:1b:cf:ac: 08:92:07:ea:15:51:fe:ab:5d:46:03:67:7f:ea:96: 5b:01:e5:15:e5:36:77:e2:16:60:20:ab:d4:93:a2: 51:b8:f4:ba:05:0d:97:85:95:f3:88:87:9f:70:58: 09:24:b4:2e:b5:a1:fa:87:6e:cf:6e:32:a0:85:2f: 08:d7:5c:c7:66:db:5f:02:85:91:7d:98:0f:45:09: 17:c7:92:3a:64:b3:08:5b:77:f1:b2:a9:1d:37:ed: 2e:b9:da:95:a7:1d:fc:3d:4a:7e:af:49:c0:2d:90: 9b:65:c3:03:df:28:84:23:0d:ac:99:bc:5c:10:56: 59:9a:25:8d:8c:97:61:fe:fe:8e:ba:a2:b5:19:91: 9d:c1:3a:ee:a4:ae:d8:65:ff:35:77:68:15:46:cb: aa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:59:C5:2D:24:EE:B6:93:09:DA:90:FD:EE:AA:F0:E0:8C:F2:FB:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8f62a97f-bbcd-3dee-9df5-40b8962e6f8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:ca:0a:da:17:e6:35:88:d3:ab:b1:c6:1c:0b:82:15:1c:94: bf:13:9c:e6:99:86:8e:1f:36:8d:91:7f:dc:3d:eb:7b:89:9d: 67:13:0e:54:f5:6d:97:68:a0:c3:a3:3c:b8:30:5b:c1:6c:47: a8:f9:fb:cd:ff:6e:79:1e:1d:c9:70:9b:f8:f2:dc:b6:85:54: 8c:27:3c:2e:7f:00:db:5a:cf:7f:d8:e1:08:ce:86:42:5d:22: a0:81:44:52:bf:3c:66:5d:c6:b1:9c:cf:e3:63:74:77:9a:c7: b9:82:59:58:ed:fe:b2:50:58:94:35:60:8a:cc:6f:62:e1:de: 55:ba:39:20:10:48:23:0f:ec:73:ab:fa:cf:e7:b6:7d:3b:7e: 3f:23:c0:bb:82:60:f8:5c:b3:3e:a9:1d:18:1a:80:64:32:e2: fd:b8:2e:33:fa:87:f0:f2:69:b5:b3:a1:ff:ca:a7:d2:35:ea: e3:1d:14:5d:d0:0f:b5:54:7e:00:1f:db:56:aa:95:04:f2:ef: ae:ba:af:5d:e9:c8:16:e4:28:d1:d1:22:81:c0:e7:31:70:fe: a4:0b:bc:f9:39:6c:4c:4e:5b:64:71:24:ec:09:77:5f:0f:a7: 33:18:b2:40:7a:8e:4e:da:fc:ce:e0:62:07:90:63:71:25:ca: 6d:d5:24:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGwgDI6RDlxp3dgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMVoXDTI2MDEwODE2NDEyMVowLzEtMCsGA1UEAxMk N2E0ZWM5ODMtZjgwMC00NjA1LWI4NTEtNmFjZTQ2OGIwYzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWQXmQ4NKEl3VnBhxYcnJ4l7F+tcRn93qa5q LKthPsgSU+/vBTPLPeBJxjjuulBauirnF6a/lhNQy1YGxx3WQgTT5v9LILolL799 O97xt1XUK/DVgFvQ/1PApX6aZO7cjr4DkVsbz6wIkgfqFVH+q11GA2d/6pZbAeUV 5TZ34hZgIKvUk6JRuPS6BQ2XhZXziIefcFgJJLQutaH6h27PbjKghS8I11zHZttf AoWRfZgPRQkXx5I6ZLMIW3fxsqkdN+0uudqVpx38PUp+r0nALZCbZcMD3yiEIw2s mbxcEFZZmiWNjJdh/v6OuqK1GZGdwTrupK7YZf81d2gVRsuqTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1ZxS0k7raTCdqQ/e6q8OCM8vv1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOGY2MmE5N2YtYmJjZC0z ZGVlLTlkZjUtNDBiODk2MmU2ZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELKCtoX5jWI06uxxhwLghUclL8TnOaZho4fNo2Rf9w963uJnWcTDlT1 bZdooMOjPLgwW8FsR6j5+83/bnkeHclwm/jy3LaFVIwnPC5/ANtaz3/Y4QjOhkJd IqCBRFK/PGZdxrGcz+NjdHeax7mCWVjt/rJQWJQ1YIrMb2Lh3lW6OSAQSCMP7HOr +s/ntn07fj8jwLuCYPhcsz6pHRgagGQy4v24LjP6h/DyabWzof/Kp9I16uMdFF3Q D7VUfgAf21aqlQTy7666r13pyBbkKNHRIoHA5zFw/qQLvPk5bExOW2RxJOwJd18P pzMYskB6jk7a/M7gYgeQY3Elym3VJC0= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:24 2025 by rpki-client