$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a23f8658-c1a5-3d91-b793-a08aa6dc77c2.roa File: a23f8658-c1a5-3d91-b793-a08aa6dc77c2.roa (raw, json) Hash identifier: CaFFyU31CgZSJulxqhQRHbH0i8P59Z934BY8+57XGFo= Subject key identifier: BF:28:93:B0:E6:78:1E:63:30:3B:A1:F5:6E:97:79:AF:E7:80:1C:7C Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A363FFC0AA6707ED701399500 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a23f8658-c1a5-3d91-b793-a08aa6dc77c2.roa Signing time: Mon 16 Jun 2025 16:03:20 +0000 ROA not before: Mon 16 Jun 2025 16:03:20 +0000 ROA not after: Sun 14 Sep 2025 16:03:20 +0000 asID: 81 IP address blocks: 152.45.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3f:fc:0a:a6:70:7e:d7:01:39:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jun 16 16:03:20 2025 GMT Not After : Sep 14 16:03:20 2025 GMT Subject: CN=6ecc72e1-2294-429a-8a4a-6050173edf44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:11:a6:49:c6:c4:d2:13:73:ab:ba:ea:92:8c: 1e:77:03:68:88:66:b9:0c:29:52:ec:92:6d:f4:e8: 13:59:82:46:62:f4:17:04:e5:1b:a3:ff:bc:cb:4a: 46:8c:a4:38:c7:a5:e4:dc:79:fe:ae:05:bf:73:dd: 00:e1:0b:c4:39:e2:33:53:b7:dc:0f:99:af:be:2e: 75:d9:d3:04:ba:b3:3a:a7:5d:4f:67:e0:39:c9:25: b5:e7:83:0a:54:e0:cf:34:90:64:9e:24:eb:5f:14: 92:43:3f:14:bb:56:9b:13:61:21:86:ba:94:08:ae: 01:e7:18:f0:51:ad:17:82:71:d0:8a:60:7a:b8:d9: 4f:9d:b9:90:6f:ef:7d:16:06:16:93:26:bf:44:a0: 61:9a:9e:ed:46:eb:20:ad:62:7c:38:df:be:86:22: 0e:c1:97:22:a8:e0:3c:65:cf:2b:d9:5a:d6:84:07: 45:2b:dc:e1:35:8b:71:9b:63:53:ee:e7:f1:45:76: 21:91:c4:ca:3d:c7:04:b3:5b:aa:a7:07:fb:2a:a8: 15:5d:46:b0:9d:fd:e6:f6:42:e0:e2:1d:0c:c5:0f: 0f:aa:38:ed:53:48:a7:78:14:a8:7c:81:1a:18:e8: 90:d3:30:e9:a4:04:2e:e8:73:9c:7d:4f:15:8f:10: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:28:93:B0:E6:78:1E:63:30:3B:A1:F5:6E:97:79:AF:E7:80:1C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a23f8658-c1a5-3d91-b793-a08aa6dc77c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:42:f1:1e:57:a2:ca:16:ae:a9:e9:c7:ad:13:54:f5:c2:fc: 87:0e:de:fe:dd:bc:d4:d1:cb:3e:57:87:d1:4e:58:c9:0d:a8: 19:b3:39:64:27:53:58:5d:51:dd:22:95:be:09:68:81:32:59: 0b:a2:da:3b:25:a3:ed:4c:d4:a5:db:9d:e2:7d:c4:6e:cd:b4: 0e:af:be:52:14:69:fd:dc:d6:78:f1:b9:78:87:c1:81:4f:8c: 92:ef:d1:d8:1c:0a:e1:1b:8e:35:fa:08:6a:93:fa:29:15:6b: 0a:3a:7b:b1:12:e5:e4:d9:7f:6e:94:85:c5:88:a1:f2:9f:48: 7f:e5:ad:20:0f:99:66:ca:ce:43:a7:7f:1b:2b:2b:63:81:c7: ff:95:db:43:f6:8d:0a:8a:e9:a0:3b:e9:c8:d8:10:02:22:30: d3:8c:7f:58:c5:3a:9c:85:28:89:90:ab:7c:55:af:d7:e2:b9: 2e:e9:b0:73:e3:27:ba:a8:df:88:68:10:53:2a:1e:ff:03:66: 98:a2:9a:20:78:75:30:e6:4c:f1:48:16:af:d8:4a:cd:74:ed: cb:e2:70:ad:e2:00:b3:ba:40:22:0f:3c:33:5b:d1:ee:be:fb: e4:99:ef:f2:3f:26:5b:95:0b:8e:61:2e:69:f6:c9:bc:7d:5c: d4:1c:ae:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo2P/wKpnB+1wE5lQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDYxNjE2MDMyMFoXDTI1MDkxNDE2MDMyMFowLzEtMCsGA1UEAxMk NmVjYzcyZTEtMjI5NC00MjlhLThhNGEtNjA1MDE3M2VkZjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhGmScbE0hNzq7rqkowedwNoiGa5DClS7JJt 9OgTWYJGYvQXBOUbo/+8y0pGjKQ4x6Xk3Hn+rgW/c90A4QvEOeIzU7fcD5mvvi51 2dMEurM6p11PZ+A5ySW154MKVODPNJBkniTrXxSSQz8Uu1abE2EhhrqUCK4B5xjw Ua0XgnHQimB6uNlPnbmQb+99FgYWkya/RKBhmp7tRusgrWJ8ON++hiIOwZciqOA8 Zc8r2VrWhAdFK9zhNYtxm2NT7ufxRXYhkcTKPccEs1uqpwf7KqgVXUawnf3m9kLg 4h0MxQ8PqjjtU0ineBSofIEaGOiQ0zDppAQu6HOcfU8VjxDyjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8ok7DmeB5jMDuh9W6Xea/ngBx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTIzZjg2NTgtYzFhNS0z ZDkxLWI3OTMtYTA4YWE2ZGM3N2MyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhC8R5XosoWrqnpx60TVPXC/IcO3v7dvNTRyz5Xh9FOWMkNqBmzOWQn U1hdUd0ilb4JaIEyWQui2jslo+1M1KXbneJ9xG7NtA6vvlIUaf3c1njxuXiHwYFP jJLv0dgcCuEbjjX6CGqT+ikVawo6e7ES5eTZf26UhcWIofKfSH/lrSAPmWbKzkOn fxsrK2OBx/+V20P2jQqK6aA76cjYEAIiMNOMf1jFOpyFKImQq3xVr9fiuS7psHPj J7qo34hoEFMqHv8DZpiimiB4dTDmTPFIFq/YSs107cvicK3iALO6QCIPPDNb0e6+ ++SZ7/I/JluVC45hLmn2ybx9XNQcrqc= -----END CERTIFICATE-----Generated at Mon Jun 30 08:27:07 2025 by rpki-client