$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8ffef852-2de2-3292-b775-e79bac7878d7.roa File: 8ffef852-2de2-3292-b775-e79bac7878d7.roa (raw, json) Hash identifier: NN0M0qHp8BnIfWxB0cIo1IwPUCxTsGwlv6S0sBzL0q0= Subject key identifier: 4B:C2:5E:09:40:E3:E8:D6:2D:00:40:24:B9:6D:2E:73:47:B8:E3:85 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6DE061C89C9814964B80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8ffef852-2de2-3292-b775-e79bac7878d7.roa Signing time: Fri 10 Oct 2025 15:41:22 +0000 ROA not before: Fri 10 Oct 2025 15:41:22 +0000 ROA not after: Thu 08 Jan 2026 16:41:22 +0000 asID: 81 IP address blocks: 152.46.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6d:e0:61:c8:9c:98:14:96:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:22 2025 GMT Not After : Jan 8 16:41:22 2026 GMT Subject: CN=09ba7452-ca81-48d6-8103-2a33bf162bdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:15:7d:d0:4d:c4:9a:a4:e8:ff:b3:b5:28:ea: 96:6a:fd:67:0b:0f:b7:7d:26:08:04:da:db:be:54: 49:ce:16:8c:65:d9:97:fd:94:7f:e9:f5:bf:2a:02: 63:12:fe:cb:fe:6e:8f:51:a9:7e:62:2a:de:69:88: bb:a3:59:50:7b:4c:30:e8:69:9d:11:1d:3d:04:15: 4b:9a:c7:fd:0d:34:c1:07:d4:99:8d:15:23:90:43: 13:76:4b:dc:25:7a:91:b4:b3:2f:21:12:f3:2b:8d: 00:06:71:a6:79:8b:88:a5:2a:55:6d:59:81:9c:81: 2f:8d:62:dd:10:ed:13:f9:49:79:e5:bb:ca:d5:7d: a9:78:76:fc:da:8b:83:fe:a9:c9:64:26:57:df:08: 02:54:a6:d2:9a:91:96:cd:b3:63:9f:12:5e:df:11: 26:e1:a2:fa:ad:9e:56:d0:0f:7e:0b:14:78:5b:2c: 65:e5:b4:56:2a:02:0d:00:09:ca:fe:e4:3f:df:9a: a5:a4:76:76:0a:7d:d4:29:fe:9d:a0:0c:eb:2f:a0: bf:ab:30:14:20:d0:6d:ec:9e:e3:01:61:af:25:5d: bf:4b:3e:03:82:ac:33:71:f1:ea:0e:fb:19:a8:55: 79:99:c2:8c:17:42:25:91:ea:54:8e:9b:56:e4:05: b5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C2:5E:09:40:E3:E8:D6:2D:00:40:24:B9:6D:2E:73:47:B8:E3:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/8ffef852-2de2-3292-b775-e79bac7878d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:1f:58:3d:49:95:7e:da:51:5d:fa:90:dc:5b:b0:c3:74:6c: 4e:27:ed:df:33:3c:41:39:e0:22:4c:b2:5e:01:4c:29:f5:25: 42:d0:5c:77:24:6f:c0:c9:ae:77:17:55:cc:9c:d0:e3:e0:01: 8e:dd:33:6e:60:56:49:4a:7f:ce:1f:de:20:f4:3e:9f:65:e1: db:5a:62:b7:2a:9e:41:62:6b:79:f2:fe:89:4a:ce:48:fa:ba: ad:be:df:60:21:1f:c2:af:8f:e8:c4:8f:3c:ea:24:ba:72:d4: 50:1d:2d:e2:79:09:d4:f1:10:bf:e9:6a:ed:43:9f:53:7e:bb: 49:97:6f:b3:a5:dd:5f:e0:16:84:20:b2:16:67:7c:c3:59:a8: 45:66:32:93:f4:98:d4:2d:57:ac:36:9d:d4:5d:a1:56:ec:4f: 8b:69:1a:66:0b:3d:23:a8:a5:98:e9:b6:76:df:cd:dd:e4:7b: 1c:cc:b9:5a:ec:ff:5a:d2:5c:d5:f6:86:43:91:de:84:67:1d: dc:2d:25:a3:fb:f5:ef:12:8c:66:3b:57:53:c2:29:c3:46:ee: ff:31:51:c8:97:0c:b9:44:32:9d:0a:6a:5b:d6:29:25:8b:7d: e9:1f:0e:18:b3:4f:22:02:ff:9f:94:39:de:17:30:9c:43:6a: 21:af:4a:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DG3gYcicmBSWS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMloXDTI2MDEwODE2NDEyMlowLzEtMCsGA1UEAxMk MDliYTc0NTItY2E4MS00OGQ2LTgxMDMtMmEzM2JmMTYyYmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRV90E3EmqTo/7O1KOqWav1nCw+3fSYIBNrb vlRJzhaMZdmX/ZR/6fW/KgJjEv7L/m6PUal+YireaYi7o1lQe0ww6GmdER09BBVL msf9DTTBB9SZjRUjkEMTdkvcJXqRtLMvIRLzK40ABnGmeYuIpSpVbVmBnIEvjWLd EO0T+Ul55bvK1X2peHb82ouD/qnJZCZX3wgCVKbSmpGWzbNjnxJe3xEm4aL6rZ5W 0A9+CxR4Wyxl5bRWKgINAAnK/uQ/35qlpHZ2Cn3UKf6doAzrL6C/qzAUINBt7J7j AWGvJV2/Sz4DgqwzcfHqDvsZqFV5mcKMF0IlkepUjptW5AW1GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvCXglA4+jWLQBAJLltLnNHuOOFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOGZmZWY4NTItMmRlMi0z MjkyLWI3NzUtZTc5YmFjNzg3OGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8fWD1JlX7aUV36kNxbsMN0bE4n7d8zPEE54CJMsl4BTCn1JULQXHck b8DJrncXVcyc0OPgAY7dM25gVklKf84f3iD0Pp9l4dtaYrcqnkFia3ny/olKzkj6 uq2+32AhH8Kvj+jEjzzqJLpy1FAdLeJ5CdTxEL/pau1Dn1N+u0mXb7Ol3V/gFoQg shZnfMNZqEVmMpP0mNQtV6w2ndRdoVbsT4tpGmYLPSOopZjptnbfzd3kexzMuVrs /1rSXNX2hkOR3oRnHdwtJaP79e8SjGY7V1PCKcNG7v8xUciXDLlEMp0KalvWKSWL fekfDhizTyIC/5+UOd4XMJxDaiGvShM= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:53 2025 by rpki-client