$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a9baa5b5-3a00-31b7-ae94-947d32485f38.roa File: a9baa5b5-3a00-31b7-ae94-947d32485f38.roa (raw, json) Hash identifier: sBpZ76frWvGd3LU6yZvDuHNqWRLMVIxnSb3ogDkKCJE= Subject key identifier: BB:C3:28:45:8D:57:B0:72:CC:A9:D7:B6:38:47:44:93:52:2A:C3:A6 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6C116D74865A1ED90280 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a9baa5b5-3a00-31b7-ae94-947d32485f38.roa Signing time: Fri 10 Oct 2025 15:41:21 +0000 ROA not before: Fri 10 Oct 2025 15:41:21 +0000 ROA not after: Thu 08 Jan 2026 16:41:21 +0000 asID: 81 IP address blocks: 152.45.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6c:11:6d:74:86:5a:1e:d9:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:21 2025 GMT Not After : Jan 8 16:41:21 2026 GMT Subject: CN=082a439c-dfb0-4e34-8faf-104a72b2cd80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:62:19:90:d2:b2:01:ad:3d:65:22:a3:fa:f5: 34:1e:c1:3f:36:67:68:78:61:ef:6b:89:39:48:a9: fc:ba:98:41:f5:c1:ec:65:59:55:a5:c1:2c:d4:24: 30:65:73:53:9a:a0:b3:f1:12:9e:a9:05:c7:a6:30: 3d:bc:52:8d:6a:f0:0b:1d:00:bc:73:c6:ed:72:c6: 2c:a5:29:6b:51:c0:08:9b:e3:21:4f:fd:17:ca:9d: 31:1b:c6:71:00:ad:f1:62:2c:c6:61:44:af:aa:41: e4:7d:14:35:a5:af:8a:76:fe:e7:55:92:14:79:89: e8:6e:fd:8e:ca:70:3f:92:4b:26:00:2b:13:7e:35: b7:85:26:41:a1:97:c3:c8:c0:a1:9b:b4:f4:b7:31: d2:ac:fb:16:ed:dc:1c:86:97:26:9f:54:f2:be:ff: b1:b9:e5:92:c2:a3:83:2f:37:e5:c1:6c:4b:5f:73: 81:21:17:08:8e:d4:4e:b2:62:3d:40:8a:60:30:87: 56:1e:64:0c:e5:37:e5:97:09:e0:7c:38:42:e3:08: 4e:26:70:49:ad:67:64:ea:2e:2e:14:0c:b4:b6:79: ad:15:32:43:34:a2:62:a2:05:12:27:c5:79:ae:70: cb:5b:95:f4:d8:16:6b:3f:d9:92:9f:7a:5f:16:81: ce:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C3:28:45:8D:57:B0:72:CC:A9:D7:B6:38:47:44:93:52:2A:C3:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a9baa5b5-3a00-31b7-ae94-947d32485f38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:42:de:a5:2c:27:bd:67:32:06:8b:c0:2f:d2:02:88:28:86: 57:39:24:1a:06:bd:ca:68:e2:9e:c5:59:62:28:82:4e:d8:e7: 63:ce:03:df:dc:ef:e8:68:c8:19:93:a1:5b:a5:65:c9:b8:81: bd:d7:83:0a:69:10:6c:36:10:2b:45:ce:d7:62:c9:bb:be:8a: aa:a2:bc:24:33:8f:d1:b9:29:18:ed:c2:48:31:8a:30:76:d1: 5a:73:5d:42:d7:c4:0c:c8:98:b7:c4:23:f4:ef:7b:11:fe:69: d9:a3:14:a3:86:e8:00:9a:b3:f1:07:74:2d:f6:21:fe:f3:ae: 0f:9f:52:d5:70:28:38:0a:03:93:51:77:3f:9c:c8:db:37:4e: 59:c4:58:30:88:c5:54:ce:73:5d:a3:84:02:78:7d:88:7c:ea: 94:2f:dd:86:95:08:64:f9:1c:26:39:60:a4:e5:6b:87:97:9b: d9:79:b2:a6:36:ee:ad:e7:15:9d:db:41:59:e3:f1:2d:2d:14: 3a:7d:dc:17:72:29:70:c3:e0:73:2e:f5:03:e9:e5:a0:7c:e6: a7:01:9d:40:33:4e:8e:9a:49:56:4c:4e:01:9b:4c:41:37:f9: d1:65:47:0e:f3:a2:b8:0f:6a:76:a8:7f:39:93:57:f5:05:70: 18:c8:0e:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGwRbXSGWh7ZAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMVoXDTI2MDEwODE2NDEyMVowLzEtMCsGA1UEAxMk MDgyYTQzOWMtZGZiMC00ZTM0LThmYWYtMTA0YTcyYjJjZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWIZkNKyAa09ZSKj+vU0HsE/NmdoeGHva4k5 SKn8uphB9cHsZVlVpcEs1CQwZXNTmqCz8RKeqQXHpjA9vFKNavALHQC8c8btcsYs pSlrUcAIm+MhT/0Xyp0xG8ZxAK3xYizGYUSvqkHkfRQ1pa+Kdv7nVZIUeYnobv2O ynA/kksmACsTfjW3hSZBoZfDyMChm7T0tzHSrPsW7dwchpcmn1Tyvv+xueWSwqOD LzflwWxLX3OBIRcIjtROsmI9QIpgMIdWHmQM5TfllwngfDhC4whOJnBJrWdk6i4u FAy0tnmtFTJDNKJiogUSJ8V5rnDLW5X02BZrP9mSn3pfFoHOuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLvDKEWNV7ByzKnXtjhHRJNSKsOmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTliYWE1YjUtM2EwMC0z MWI3LWFlOTQtOTQ3ZDMyNDg1ZjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhC3qUsJ71nMgaLwC/SAogohlc5JBoGvcpo4p7FWWIogk7Y52POA9/c 7+hoyBmToVulZcm4gb3XgwppEGw2ECtFztdiybu+iqqivCQzj9G5KRjtwkgxijB2 0VpzXULXxAzImLfEI/TvexH+admjFKOG6ACas/EHdC32If7zrg+fUtVwKDgKA5NR dz+cyNs3TlnEWDCIxVTOc12jhAJ4fYh86pQv3YaVCGT5HCY5YKTla4eXm9l5sqY2 7q3nFZ3bQVnj8S0tFDp93BdyKXDD4HMu9QPp5aB85qcBnUAzTo6aSVZMTgGbTEE3 +dFlRw7zorgPanaofzmTV/UFcBjIDhA= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:58 2025 by rpki-client