$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/af840d99-c264-3ad5-b86a-255704639113.roa File: af840d99-c264-3ad5-b86a-255704639113.roa (raw, json) Hash identifier: dUuMNBClnV6amur4cia3+jY7k7XOR+KipcdtsLacY9Y= Subject key identifier: 21:F7:B1:13:BB:BB:1C:C2:AD:38:82:40:14:90:47:02:D3:8E:61:E0 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C6D76202A493B9DAF0820 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/af840d99-c264-3ad5-b86a-255704639113.roa Signing time: Fri 10 Oct 2025 15:41:22 +0000 ROA not before: Fri 10 Oct 2025 15:41:22 +0000 ROA not after: Thu 08 Jan 2026 16:41:22 +0000 asID: 81 IP address blocks: 152.46.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:6d:76:20:2a:49:3b:9d:af:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:22 2025 GMT Not After : Jan 8 16:41:22 2026 GMT Subject: CN=948b4db3-105f-47eb-8b7b-5695dadc300c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c2:9a:e9:f2:6c:f8:2d:ca:4e:c2:26:1f:72: a5:8c:27:80:1d:df:cf:39:dd:d9:28:ac:91:6e:dd: 6e:14:19:e1:d1:07:c8:7b:e7:f5:8e:95:ed:00:3a: 81:b7:b0:aa:c6:89:b5:50:ad:de:9f:1e:df:19:cb: a7:88:d7:1c:cd:f1:51:2d:02:a8:3e:71:e5:a7:cd: a5:4c:89:94:cc:2b:21:e6:7e:5e:c4:75:97:84:89: 17:51:ef:4e:00:96:61:15:1c:00:d1:80:34:05:94: af:fb:e4:0b:98:04:6a:13:37:51:84:8d:dd:ea:48: 77:27:0f:c6:df:5d:bb:0b:94:fe:ac:5e:26:40:2b: db:91:a7:a0:8d:1a:4d:8b:51:8d:bc:3f:76:35:e2: 4c:95:dc:80:da:47:f6:b8:66:87:5d:b9:7c:6f:89: a4:8c:de:99:54:5e:d1:19:f7:79:50:ce:cd:c8:76: 8b:03:f5:61:0f:bf:69:7c:04:9f:e5:03:7e:d0:56: ae:41:8e:9c:d9:72:6b:b8:06:b7:9f:3c:e2:15:65: 9f:54:6a:c1:a1:c5:5e:8a:95:67:cf:12:e9:23:bc: 34:dc:2c:ee:65:41:a7:ba:ca:a9:fd:a8:21:3b:0d: 74:15:2b:22:b6:23:a4:81:ba:95:4f:99:44:e2:7c: 5c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F7:B1:13:BB:BB:1C:C2:AD:38:82:40:14:90:47:02:D3:8E:61:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/af840d99-c264-3ad5-b86a-255704639113.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.46.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:65:e5:37:d8:9b:b2:2f:52:56:ce:ca:e0:74:fb:91:c8:7f: f8:da:7d:94:bd:7a:69:12:3f:b1:e7:f8:80:5f:c8:7e:5f:36: 2b:de:72:29:ce:32:d8:25:90:b7:04:c4:fc:f8:46:03:a4:6b: 37:17:fc:d3:94:25:b0:7a:fe:b0:8e:26:66:6d:cf:18:61:d7: 43:b2:c9:b5:2e:1f:6b:24:62:66:a0:22:6a:08:85:8f:c7:bb: 9e:73:91:f6:a8:47:4c:02:db:46:80:0d:6d:49:ba:6b:5d:2e: 63:da:7a:47:21:e7:46:d0:47:11:ab:22:64:1a:9f:5e:16:15: 2d:55:8a:87:ac:08:c8:55:b6:4e:da:5c:1d:90:19:5e:d3:fe: ff:55:93:fc:ff:e3:c1:3c:cc:cc:0f:00:e0:0f:e4:c9:84:0f: b3:00:a9:41:d0:7e:04:f7:e7:ed:db:a4:59:0f:fd:7d:ba:b6: ba:9a:78:52:0d:74:f8:37:a5:92:90:e4:47:45:c5:f0:a9:b6: 5a:81:14:cb:41:8f:fd:31:95:1f:fe:49:d9:81:2e:31:b0:67: 0e:36:a8:b2:30:c4:52:22:ed:d4:67:dc:b3:da:18:9c:66:9a: 0a:94:27:92:bb:52:7d:b6:04:94:0a:97:f3:74:3c:1b:38:c1: 86:8d:e3:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DG12ICpJO52vCCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMloXDTI2MDEwODE2NDEyMlowLzEtMCsGA1UEAxMk OTQ4YjRkYjMtMTA1Zi00N2ViLThiN2ItNTY5NWRhZGMzMDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sKa6fJs+C3KTsImH3KljCeAHd/POd3ZKKyR bt1uFBnh0QfIe+f1jpXtADqBt7Cqxom1UK3enx7fGcuniNcczfFRLQKoPnHlp82l TImUzCsh5n5exHWXhIkXUe9OAJZhFRwA0YA0BZSv++QLmARqEzdRhI3d6kh3Jw/G 3127C5T+rF4mQCvbkaegjRpNi1GNvD92NeJMldyA2kf2uGaHXbl8b4mkjN6ZVF7R Gfd5UM7NyHaLA/VhD79pfASf5QN+0FauQY6c2XJruAa3nzziFWWfVGrBocVeipVn zxLpI7w03CzuZUGnusqp/aghOw10FSsitiOkgbqVT5lE4nxcZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCH3sRO7uxzCrTiCQBSQRwLTjmHgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYWY4NDBkOTktYzI2NC0z YWQ1LWI4NmEtMjU1NzA0NjM5MTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC4DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdl5TfYm7IvUlbOyuB0+5HIf/jafZS9emkSP7Hn+IBfyH5fNivecinO MtglkLcExPz4RgOkazcX/NOUJbB6/rCOJmZtzxhh10OyybUuH2skYmagImoIhY/H u55zkfaoR0wC20aADW1JumtdLmPaekch50bQRxGrImQan14WFS1VioesCMhVtk7a XB2QGV7T/v9Vk/z/48E8zMwPAOAP5MmED7MAqUHQfgT35+3bpFkP/X26trqaeFIN dPg3pZKQ5EdFxfCptlqBFMtBj/0xlR/+SdmBLjGwZw42qLIwxFIi7dRn3LPaGJxm mgqUJ5K7Un22BJQKl/N0PBs4wYaN4/4= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:05 2025 by rpki-client