$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b322f811-a93d-37a9-83be-95a8f4cf8043.roa File: b322f811-a93d-37a9-83be-95a8f4cf8043.roa (raw, json) Hash identifier: ErCAqZr5A+bESSajCaIw2Wp39VDrpjhW0dgViWj61fI= Subject key identifier: 23:0B:61:C8:3A:88:44:4D:5E:46:BD:56:E1:4E:F8:74:61:D5:01:A9 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A363FFBFA65BE0FFCCACA7D80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b322f811-a93d-37a9-83be-95a8f4cf8043.roa Signing time: Mon 16 Jun 2025 16:03:20 +0000 ROA not before: Mon 16 Jun 2025 16:03:20 +0000 ROA not after: Sun 14 Sep 2025 16:03:20 +0000 asID: 81 IP address blocks: 152.45.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3f:fb:fa:65:be:0f:fc:ca:ca:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jun 16 16:03:20 2025 GMT Not After : Sep 14 16:03:20 2025 GMT Subject: CN=9d1f4a43-fabe-4caf-b2c3-7d20ceba4005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0a:e4:a5:9e:1d:ec:c2:55:a4:b4:52:1a:0d: b3:5c:98:0b:41:20:47:b3:14:31:46:14:cc:53:b0: bb:b2:aa:10:01:9b:94:3a:ec:f4:a4:28:03:25:5c: c4:fb:c5:cb:24:2f:dc:c2:ae:9b:05:79:08:27:36: 97:c0:ff:e9:d7:c1:96:d8:a4:82:f5:fd:e5:cb:94: c4:f4:f5:25:8e:dc:56:81:8b:5b:dc:60:83:cc:5f: 71:48:6d:d4:60:2a:50:74:59:83:9e:aa:dc:56:34: 58:df:be:76:a8:14:45:5b:48:d4:0b:d3:4c:5b:58: f9:f6:24:e7:a2:64:85:ab:5e:2c:61:53:cc:af:58: 53:c1:9f:af:3f:39:4a:da:92:34:aa:86:e2:18:7a: 56:82:a8:4b:bd:6c:da:8a:90:ad:bb:89:54:a3:ef: 18:99:c2:ff:e1:80:8b:7c:2b:85:55:6b:23:73:83: 95:58:b9:95:be:cb:fb:e4:37:48:db:73:0b:a0:df: 60:8e:ae:e0:95:e1:7c:3f:37:8a:48:67:82:2b:92: f5:f0:31:e3:d4:dc:59:42:59:c3:77:d9:ca:f4:9a: e1:e8:35:4d:fc:56:1b:e9:52:61:dc:ea:c5:b3:49: 0a:9b:b2:59:3e:e6:ee:53:d4:a2:e1:ea:b8:f8:20: 3d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0B:61:C8:3A:88:44:4D:5E:46:BD:56:E1:4E:F8:74:61:D5:01:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b322f811-a93d-37a9-83be-95a8f4cf8043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:2c:3a:06:3d:45:44:0f:d7:f0:8a:1e:8c:35:56:20:5b:3d: 72:f1:50:9c:62:bc:10:92:12:66:21:af:68:e1:ff:a7:6a:3c: 75:06:d1:e0:1e:19:92:c0:5e:e7:e0:ce:89:6a:4f:a0:7e:cc: f1:71:50:0a:44:84:09:2b:f2:bd:32:77:b7:01:a1:33:b3:34: 16:6d:3f:e8:cc:75:56:bb:eb:4c:bf:73:f1:4f:32:99:5b:29: 5a:b3:a6:75:e8:4e:38:e5:05:27:64:30:3e:ea:ea:d3:7b:8b: 71:bf:1e:56:78:48:78:50:80:a6:db:60:cd:1d:5e:b4:2d:25: 28:a1:8f:6d:af:c2:32:86:e6:22:38:9d:dd:27:f9:60:c2:40: d5:a6:ba:cf:f1:df:6e:65:f3:cc:dd:66:7c:64:fa:90:6e:06: 96:da:b5:dd:c7:da:1c:1f:6b:85:16:db:51:86:d5:5a:8b:e9: 29:8c:59:53:0f:6b:06:8a:c5:28:e9:80:d2:49:f8:18:5a:61: 0a:b6:2c:7f:83:97:be:51:29:d4:ab:0e:5e:77:10:c0:af:e0: b1:b5:61:33:a2:dd:b4:eb:96:07:b2:96:0e:b8:c0:26:f1:91: 9e:6f:08:2f:f3:3d:6f:3f:17:47:ff:7f:3e:a9:b9:11:58:e5: 65:39:0d:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo2P/v6Zb4P/MrKfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDYxNjE2MDMyMFoXDTI1MDkxNDE2MDMyMFowLzEtMCsGA1UEAxMk OWQxZjRhNDMtZmFiZS00Y2FmLWIyYzMtN2QyMGNlYmE0MDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1grkpZ4d7MJVpLRSGg2zXJgLQSBHsxQxRhTM U7C7sqoQAZuUOuz0pCgDJVzE+8XLJC/cwq6bBXkIJzaXwP/p18GW2KSC9f3ly5TE 9PUljtxWgYtb3GCDzF9xSG3UYCpQdFmDnqrcVjRY3752qBRFW0jUC9NMW1j59iTn omSFq14sYVPMr1hTwZ+vPzlK2pI0qobiGHpWgqhLvWzaipCtu4lUo+8YmcL/4YCL fCuFVWsjc4OVWLmVvsv75DdI23MLoN9gjq7gleF8PzeKSGeCK5L18DHj1NxZQlnD d9nK9Jrh6DVN/FYb6VJh3OrFs0kKm7JZPubuU9Si4eq4+CA9HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMLYcg6iERNXka9VuFO+HRh1QGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYjMyMmY4MTEtYTkzZC0z N2E5LTgzYmUtOTVhOGY0Y2Y4MDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACosOgY9RUQP1/CKHow1ViBbPXLxUJxivBCSEmYhr2jh/6dqPHUG0eAe GZLAXufgzolqT6B+zPFxUApEhAkr8r0yd7cBoTOzNBZtP+jMdVa760y/c/FPMplb KVqzpnXoTjjlBSdkMD7q6tN7i3G/HlZ4SHhQgKbbYM0dXrQtJSihj22vwjKG5iI4 nd0n+WDCQNWmus/x325l88zdZnxk+pBuBpbatd3H2hwfa4UW21GG1VqL6SmMWVMP awaKxSjpgNJJ+BhaYQq2LH+Dl75RKdSrDl53EMCv4LG1YTOi3bTrlgeylg64wCbx kZ5vCC/zPW8/F0f/fz6puRFY5WU5Da4= -----END CERTIFICATE-----Generated at Mon Jun 30 17:36:00 2025 by rpki-client