$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ae904245-7871-3791-a14b-191f04f77bca.roa File: ae904245-7871-3791-a14b-191f04f77bca.roa (raw, json) Hash identifier: t9xlKzLKiWv7Hh2B55sfQBejIP6MkbSa8jkqxEAlHqQ= Subject key identifier: E9:E8:83:21:37:84:BE:B8:CE:A7:8F:37:39:B4:7F:00:FC:F3:A9:27 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6B8AF9C4EBC660C1F110 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ae904245-7871-3791-a14b-191f04f77bca.roa Signing time: Fri 10 Oct 2025 15:41:21 +0000 ROA not before: Fri 10 Oct 2025 15:41:21 +0000 ROA not after: Thu 08 Jan 2026 16:41:21 +0000 asID: 81 IP address blocks: 152.27.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6b:8a:f9:c4:eb:c6:60:c1:f1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:21 2025 GMT Not After : Jan 8 16:41:21 2026 GMT Subject: CN=588de473-c31a-4066-9480-c78f9b0e3963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b3:1e:bb:3d:af:a7:03:65:86:47:11:1a:74: 65:44:03:00:5f:e0:fd:d0:36:95:0d:54:fc:d1:77: ac:dc:3d:ac:cf:5a:2a:74:8d:96:fa:cd:5b:2d:82: 85:a1:f2:35:d8:bc:a0:b1:09:8d:2b:78:b3:ae:ae: 64:b4:7b:d7:83:2c:02:1c:6f:94:1f:37:77:bd:95: 47:16:ac:97:4b:11:80:f3:03:da:26:60:12:10:1f: 3f:00:92:fd:4f:a1:1d:7e:cd:46:6a:54:3b:7a:7b: d0:fc:3d:f8:75:57:22:78:f5:4a:2b:64:92:5b:f6: d9:b4:15:06:04:00:37:35:7d:a0:37:ef:a5:9b:4d: 16:71:95:26:79:bf:42:78:0d:2c:19:1a:19:11:18: 4b:25:59:30:b8:46:7f:95:22:a8:fa:3f:0b:d6:04: b3:b5:1f:b8:a4:b4:b0:9a:f7:34:9f:ef:dc:7b:7c: a5:e4:88:9a:58:65:70:97:45:1d:54:79:4f:e7:bb: 0a:81:28:81:c1:88:5d:e9:3f:92:a0:f7:fa:24:e7: d9:bb:e4:de:e9:2f:37:c9:30:af:42:7a:17:96:43: cd:a9:99:6b:5b:b3:3a:48:85:2b:90:42:82:35:81: cd:78:22:f9:1e:f1:8f:b1:19:c3:4e:9f:23:f6:81: fc:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E8:83:21:37:84:BE:B8:CE:A7:8F:37:39:B4:7F:00:FC:F3:A9:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ae904245-7871-3791-a14b-191f04f77bca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.27.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:28:79:cb:aa:a6:97:0f:3f:eb:b3:a6:5c:49:97:55:af:37: 48:09:ec:4b:d0:46:35:87:80:13:47:90:a5:68:cf:af:0f:f5: 72:a5:da:ce:8a:48:95:0b:ad:f7:3a:31:0d:95:77:44:d7:b0: e1:17:95:df:1e:48:b4:0a:98:78:00:7a:c5:0b:39:66:11:d3: 9f:c2:98:e1:e8:d5:b5:f3:f7:7c:d5:f8:dc:fa:f1:0f:73:26: b6:7b:9e:59:22:c1:53:77:8d:3c:c1:87:6e:99:e8:0b:12:ef: a1:2a:e1:1a:d4:a6:f3:b0:45:61:e0:da:03:35:54:3f:f0:6f: 54:50:19:ba:e7:e0:53:47:00:65:b7:26:ea:d5:fd:a5:d2:c6: 1d:f6:15:7e:59:db:d5:44:56:ea:57:33:97:b7:2c:bc:44:fd: 1e:2b:3e:e2:e1:db:98:a1:3a:b8:10:f5:1a:61:2b:20:9f:dd: 2e:d5:a0:93:43:ad:56:83:30:12:df:4a:8c:24:d4:dd:2c:af: 27:c1:08:8c:35:9a:c3:64:94:40:f7:6c:f8:03:64:d2:12:24: e0:33:d6:71:22:75:08:0f:bc:cd:d8:10:f8:da:1f:d5:a4:8c: 1d:c6:66:95:1f:01:28:ae:b4:13:d0:12:c2:33:8b:13:6f:3c: 9d:56:df:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGuK+cTrxmDB8RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMVoXDTI2MDEwODE2NDEyMVowLzEtMCsGA1UEAxMk NTg4ZGU0NzMtYzMxYS00MDY2LTk0ODAtYzc4ZjliMGUzOTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7Meuz2vpwNlhkcRGnRlRAMAX+D90DaVDVT8 0Xes3D2sz1oqdI2W+s1bLYKFofI12LygsQmNK3izrq5ktHvXgywCHG+UHzd3vZVH FqyXSxGA8wPaJmASEB8/AJL9T6Edfs1GalQ7envQ/D34dVciePVKK2SSW/bZtBUG BAA3NX2gN++lm00WcZUmeb9CeA0sGRoZERhLJVkwuEZ/lSKo+j8L1gSztR+4pLSw mvc0n+/ce3yl5IiaWGVwl0UdVHlP57sKgSiBwYhd6T+SoPf6JOfZu+Te6S83yTCv QnoXlkPNqZlrW7M6SIUrkEKCNYHNeCL5HvGPsRnDTp8j9oH8ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnogyE3hL64zqePNzm0fwD886knMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYWU5MDQyNDUtNzg3MS0z NzkxLWExNGItMTkxZjA0Zjc3YmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIoecuqppcPP+uzplxJl1WvN0gJ7EvQRjWHgBNHkKVoz68P9XKl2s6K SJULrfc6MQ2Vd0TXsOEXld8eSLQKmHgAesULOWYR05/CmOHo1bXz93zV+Nz68Q9z JrZ7nlkiwVN3jTzBh26Z6AsS76Eq4RrUpvOwRWHg2gM1VD/wb1RQGbrn4FNHAGW3 JurV/aXSxh32FX5Z29VEVupXM5e3LLxE/R4rPuLh25ihOrgQ9RphKyCf3S7VoJND rVaDMBLfSowk1N0sryfBCIw1msNklED3bPgDZNISJOAz1nEidQgPvM3YEPjaH9Wk jB3GZpUfASiutBPQEsIzixNvPJ1W34Q= -----END CERTIFICATE-----Generated at Mon Oct 20 14:26:54 2025 by rpki-client