$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a4ec8679-4849-37fa-aa1f-17eafe665e03.roa File: a4ec8679-4849-37fa-aa1f-17eafe665e03.roa (raw, json) Hash identifier: AefORZxcV4x9Wos7rUsVod0fs7BQgCC3ZJg+MYhwGTw= Subject key identifier: 5C:8A:EF:38:84:5A:54:37:A3:90:DC:33:06:99:67:DD:7A:6C:A4:01 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584D146D8CB78190BC1A2BCBBF00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a4ec8679-4849-37fa-aa1f-17eafe665e03.roa Signing time: Fri 06 Mar 2026 15:38:28 +0000 ROA not before: Fri 06 Mar 2026 15:38:28 +0000 ROA not after: Thu 04 Jun 2026 14:38:28 +0000 asID: 81 IP address blocks: 152.45.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:6d:8c:b7:81:90:bc:1a:2b:cb:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Mar 6 15:38:28 2026 GMT Not After : Jun 4 14:38:28 2026 GMT Subject: CN=c6a2067b-29a4-4c93-b8b3-bb59a7123590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:10:5c:cd:49:a7:62:9a:d7:a5:60:62:b1:c7: f7:5c:51:3f:12:64:7d:cb:94:05:a8:1b:ea:e9:86: 99:6b:29:36:f8:57:63:ca:7f:a4:93:f0:20:ee:93: db:fc:78:88:bf:2a:40:86:e4:ba:d7:cc:4c:0b:a5: 7c:01:f0:64:94:56:67:65:16:22:06:90:08:39:2b: de:89:96:ba:59:d8:9c:6b:16:8b:ff:30:a9:a7:90: a3:d5:ec:8f:8e:73:62:52:e3:2e:2b:a6:0a:60:a5: f5:63:84:cf:fd:8b:24:f6:91:20:cf:cf:3b:1d:52: 18:d9:c4:b4:11:e6:b5:97:88:d4:5f:8f:04:8f:f0: 75:a8:10:47:7b:d3:77:08:a9:c1:55:1a:ec:3b:cb: 9b:93:50:d4:7e:a7:fa:8a:58:7e:d3:52:c3:a7:60: 99:48:e6:8e:55:c4:63:67:38:32:c9:74:45:99:87: a5:33:0d:66:62:d1:c8:7c:ce:a3:74:91:99:27:6e: e0:74:98:bf:d0:53:27:ea:39:7d:d2:60:56:4c:bd: 8d:ec:13:ee:07:12:e1:53:84:62:1f:ee:9c:6f:a5: c4:68:67:d4:8c:7b:d3:06:fb:01:b2:47:96:0a:b8: 46:61:e8:63:72:a5:db:39:cc:60:cd:31:d8:89:87: 6a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8A:EF:38:84:5A:54:37:A3:90:DC:33:06:99:67:DD:7A:6C:A4:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a4ec8679-4849-37fa-aa1f-17eafe665e03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c9:9a:6f:6b:22:5e:f3:e3:c6:10:cc:32:de:9a:68:b3:48: ca:15:60:99:0d:51:09:ed:4d:d2:28:8f:3c:d8:4e:d8:68:55: 08:66:91:44:f8:40:27:83:7a:ec:4c:f4:7c:2b:1c:7f:2a:e3: 26:4a:d1:ae:c5:b6:bd:5f:bb:49:27:cf:e7:a2:0d:23:ef:1e: f7:59:2e:46:fc:07:03:e4:2c:9b:be:2e:e3:4b:e0:d0:05:aa: a6:d8:7c:5e:cd:33:75:2f:d2:9d:22:c3:51:b6:8c:11:79:26: 6b:c4:06:e4:7d:94:bd:6e:79:c7:48:f0:cb:68:25:d0:2c:fe: 81:d1:0d:a8:18:2f:a8:ae:a3:24:91:2e:9c:4f:5f:39:63:bf: a6:af:6b:f3:2a:0f:40:29:02:b3:89:a6:66:3a:62:56:ec:f2: b5:80:7f:e6:81:4c:2c:a8:f9:cc:e1:62:fc:fb:b1:7a:8f:4a: de:a2:6a:52:42:c7:06:42:4c:8e:60:ed:4a:7f:2e:71:f2:f1: e7:87:f0:2c:51:eb:70:7d:6a:2e:84:6b:d8:e5:86:13:0e:b6: bb:db:2a:e3:0a:af:53:7e:01:22:cf:4f:77:c6:d5:16:7c:57: 99:b5:ec:6a:08:73:57:d9:a4:74:b2:89:3b:3d:26:ca:6c:3b: 51:fc:07:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UbYy3gZC8GivLvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDMwNjE1MzgyOFoXDTI2MDYwNDE0MzgyOFowLzEtMCsGA1UEAxMk YzZhMjA2N2ItMjlhNC00YzkzLWI4YjMtYmI1OWE3MTIzNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBBczUmnYprXpWBiscf3XFE/EmR9y5QFqBvq 6YaZayk2+Fdjyn+kk/Ag7pPb/HiIvypAhuS618xMC6V8AfBklFZnZRYiBpAIOSve iZa6WdicaxaL/zCpp5Cj1eyPjnNiUuMuK6YKYKX1Y4TP/Ysk9pEgz887HVIY2cS0 Eea1l4jUX48Ej/B1qBBHe9N3CKnBVRrsO8ubk1DUfqf6ilh+01LDp2CZSOaOVcRj ZzgyyXRFmYelMw1mYtHIfM6jdJGZJ27gdJi/0FMn6jl90mBWTL2N7BPuBxLhU4Ri H+6cb6XEaGfUjHvTBvsBskeWCrhGYehjcqXbOcxgzTHYiYdqaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFyK7ziEWlQ3o5DcMwaZZ916bKQBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTRlYzg2NzktNDg0OS0z N2ZhLWFhMWYtMTdlYWZlNjY1ZTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITJmm9rIl7z48YQzDLemmizSMoVYJkNUQntTdIojzzYTthoVQhmkUT4 QCeDeuxM9HwrHH8q4yZK0a7Ftr1fu0knz+eiDSPvHvdZLkb8BwPkLJu+LuNL4NAF qqbYfF7NM3Uv0p0iw1G2jBF5JmvEBuR9lL1uecdI8MtoJdAs/oHRDagYL6iuoySR LpxPXzljv6ava/MqD0ApArOJpmY6Ylbs8rWAf+aBTCyo+czhYvz7sXqPSt6ialJC xwZCTI5g7Up/LnHy8eeH8CxR63B9ai6Ea9jlhhMOtrvbKuMKr1N+ASLPT3fG1RZ8 V5m17GoIc1fZpHSyiTs9JspsO1H8B1I= -----END CERTIFICATE-----Generated at Thu Mar 26 10:12:13 2026 by rpki-client