$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9b388c20-dd63-3d6c-9417-287b21230756.roa File: 9b388c20-dd63-3d6c-9417-287b21230756.roa (raw, json) Hash identifier: P1mGni9ibnlSfkq+GbeTBooUpnYvGGNlid+IUKK8zeI= Subject key identifier: 20:3A:0F:20:93:FD:C1:E8:47:6A:C8:15:F9:2E:00:67:BA:BB:4D:4E Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A363FF92E3C6E1744334EC450 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9b388c20-dd63-3d6c-9417-287b21230756.roa Signing time: Mon 16 Jun 2025 16:03:19 +0000 ROA not before: Mon 16 Jun 2025 16:03:19 +0000 ROA not after: Sun 14 Sep 2025 16:03:19 +0000 asID: 81 IP address blocks: 152.22.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3f:f9:2e:3c:6e:17:44:33:4e:c4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jun 16 16:03:19 2025 GMT Not After : Sep 14 16:03:19 2025 GMT Subject: CN=82a947d1-7963-419c-b2bb-66de4d773cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e2:3c:a2:db:b2:3c:4d:8b:f5:75:b0:48:cf: f3:f4:18:a1:60:48:9e:1b:6d:66:6e:38:94:1a:dc: b2:91:63:e3:f2:a7:2d:7c:83:e4:9b:aa:7d:3c:da: e4:38:a6:fb:28:9c:d8:49:74:f0:60:93:13:36:79: b1:6a:e2:e8:e2:4f:1e:16:d1:ee:89:72:da:9c:4f: 86:ca:48:73:28:d4:59:fc:09:02:ca:8a:94:bb:3d: 68:33:90:1c:a4:91:c3:20:43:93:e2:d0:6b:53:5d: df:c0:e3:ec:d8:00:6d:57:b1:5a:7d:50:51:4d:de: 71:34:91:2c:7e:10:43:db:7b:b4:5a:e0:bf:77:65: 8d:2d:06:dd:50:35:28:cb:e9:81:2f:50:fa:ad:fd: 35:3f:35:a3:e3:86:50:37:dd:5b:9d:db:77:b2:23: 17:81:8b:51:b5:fb:28:d2:31:b6:e7:e0:7b:f7:00: 68:63:0e:73:4f:5d:1d:d3:65:65:45:0b:eb:0c:2e: f9:66:36:79:19:9d:06:b6:b9:8b:bf:1d:69:39:84: fe:30:b9:68:42:69:1b:8c:97:34:80:88:a3:e1:d9: 66:5a:45:5b:ae:5d:9f:94:ec:80:fe:7b:48:da:17: cc:36:78:43:02:4e:21:3c:40:8f:02:63:08:f8:6f: 22:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3A:0F:20:93:FD:C1:E8:47:6A:C8:15:F9:2E:00:67:BA:BB:4D:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/9b388c20-dd63-3d6c-9417-287b21230756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.22.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0b:f8:41:15:47:b3:34:49:f8:59:67:df:3d:e4:db:04:bc: 4e:49:c7:26:2a:8e:9a:34:4e:ef:ed:24:e2:d5:66:0d:a0:3b: 06:0f:9f:3f:bc:b9:87:44:d9:ed:59:83:be:15:5e:54:4c:4b: ee:48:04:67:04:8d:73:0f:96:07:b2:df:eb:60:aa:09:16:72: 9d:ff:a9:ed:29:00:05:c0:7b:6c:79:80:7c:48:2a:23:49:a0: 5c:92:8c:91:a4:49:b9:e1:2b:de:49:b4:7d:a9:0a:19:ba:b5: 51:e2:fc:75:04:5e:48:f4:49:fe:b7:df:ab:41:b0:f9:8d:be: 41:b4:d0:27:21:30:5d:8b:6c:8c:2e:7d:eb:f5:2b:de:ff:b0: 15:7d:da:46:32:02:83:eb:8f:bd:2f:5a:b6:0c:8c:2d:a8:1b: b7:ad:a5:a8:46:3b:d2:04:6a:34:68:6a:5a:fa:f6:89:15:63: 6f:e4:48:a8:03:0b:fb:7a:4f:38:55:00:b9:fa:5f:ae:10:03: 0d:7c:59:65:13:63:80:31:d9:94:bd:7a:74:51:53:ad:01:13: 3a:0e:4e:e8:9f:f8:0b:6b:6d:b4:59:9e:58:e6:a3:21:46:8e: fa:01:9d:44:97:7f:0e:6f:b8:ba:c7:1f:94:80:73:3f:3b:27: d3:3a:77:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo2P/kuPG4XRDNOxFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDYxNjE2MDMxOVoXDTI1MDkxNDE2MDMxOVowLzEtMCsGA1UEAxMk ODJhOTQ3ZDEtNzk2My00MTljLWIyYmItNjZkZTRkNzczY2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeI8otuyPE2L9XWwSM/z9BihYEieG21mbjiU GtyykWPj8qctfIPkm6p9PNrkOKb7KJzYSXTwYJMTNnmxauLo4k8eFtHuiXLanE+G ykhzKNRZ/AkCyoqUuz1oM5AcpJHDIEOT4tBrU13fwOPs2ABtV7FafVBRTd5xNJEs fhBD23u0WuC/d2WNLQbdUDUoy+mBL1D6rf01PzWj44ZQN91bndt3siMXgYtRtfso 0jG25+B79wBoYw5zT10d02VlRQvrDC75ZjZ5GZ0GtrmLvx1pOYT+MLloQmkbjJc0 gIij4dlmWkVbrl2flOyA/ntI2hfMNnhDAk4hPECPAmMI+G8iKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCA6DyCT/cHoR2rIFfkuAGe6u01OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvOWIzODhjMjAtZGQ2My0z ZDZjLTk0MTctMjg3YjIxMjMwNzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIL+EEVR7M0SfhZZ9895NsEvE5JxyYqjpo0Tu/tJOLVZg2gOwYPnz+8 uYdE2e1Zg74VXlRMS+5IBGcEjXMPlgey3+tgqgkWcp3/qe0pAAXAe2x5gHxIKiNJ oFySjJGkSbnhK95JtH2pChm6tVHi/HUEXkj0Sf6336tBsPmNvkG00CchMF2LbIwu fev1K97/sBV92kYyAoPrj70vWrYMjC2oG7etpahGO9IEajRoalr69okVY2/kSKgD C/t6TzhVALn6X64QAw18WWUTY4Ax2ZS9enRRU60BEzoOTuif+AtrbbRZnljmoyFG jvoBnUSXfw5vuLrHH5SAcz87J9M6d3Y= -----END CERTIFICATE-----Generated at Mon Jun 30 14:19:43 2025 by rpki-client