$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c66cb00c-52ca-30b7-b582-2c59f5ec5a03.roa File: c66cb00c-52ca-30b7-b582-2c59f5ec5a03.roa (raw, json) Hash identifier: sgqA7GPA2grud0c24nl5S+gYsvJKBoVgt+lUdOmTrS8= Subject key identifier: 50:F0:46:99:B7:80:E6:3A:59:AA:9C:3A:94:83:7E:46:5F:09:C4:71 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C67155A19797F02F4FE80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c66cb00c-52ca-30b7-b582-2c59f5ec5a03.roa Signing time: Fri 10 Oct 2025 15:41:18 +0000 ROA not before: Fri 10 Oct 2025 15:41:18 +0000 ROA not after: Thu 08 Jan 2026 16:41:18 +0000 asID: 81 IP address blocks: 152.40.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:67:15:5a:19:79:7f:02:f4:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:18 2025 GMT Not After : Jan 8 16:41:18 2026 GMT Subject: CN=c1fd69fd-1ede-48a0-9178-f899091b8937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:01:d3:16:0c:96:af:1d:79:bb:88:d9:4a:ac: ce:58:05:b4:e6:c7:2b:ea:69:6c:5c:99:bd:f0:d4: f8:58:68:e3:25:e9:7b:3d:ad:06:6f:47:40:fb:08: f5:83:39:14:1b:6a:3c:2f:c9:1c:3b:cb:f6:52:08: c8:d4:a9:37:00:9f:cf:d9:ab:8e:d2:36:f4:f5:52: 67:b1:ca:ce:e2:5a:ae:e4:17:14:e2:9d:24:f6:f9: 91:eb:2e:61:4e:4a:d4:ab:1e:c2:08:69:ba:f7:f4: 52:86:04:d8:85:86:05:66:2f:1d:28:6a:ef:43:5f: ab:2a:42:f3:d2:67:27:e6:2e:bc:36:79:62:b1:e1: 12:cf:8e:b2:fc:b5:41:b4:69:db:07:21:9e:5b:38: f9:1c:bf:21:2e:a1:b6:63:17:7b:6e:8e:eb:4a:d3: 43:96:c5:91:a7:8f:53:36:a8:71:49:7d:89:7b:f1: 70:6b:59:dd:be:e7:c0:e7:91:c6:fc:30:9d:c0:fd: ff:8a:fc:49:25:2b:a7:48:ab:52:0d:d1:b1:65:01: 8e:ce:d2:d1:0d:38:9b:d7:77:34:ee:97:4c:98:40: 4f:1e:d8:17:e3:02:b8:83:9e:69:21:a0:dc:77:4f: 94:c3:73:c2:f1:ff:3c:15:61:30:90:ca:b1:93:22: 4d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:F0:46:99:B7:80:E6:3A:59:AA:9C:3A:94:83:7E:46:5F:09:C4:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c66cb00c-52ca-30b7-b582-2c59f5ec5a03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.40.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:0b:9f:8e:04:7c:ca:57:3a:d3:3c:ec:54:75:ee:34:3e:bc: 34:46:cc:c3:a4:f6:91:f6:58:59:71:bf:92:df:f6:94:cd:1a: 0e:56:6e:5c:d8:7f:d1:1a:c8:e1:2e:ef:fa:c0:f9:ef:f7:33: 48:33:a4:a2:bb:fd:c4:4d:20:83:34:71:67:e4:8f:86:27:71: 55:30:e6:21:20:d5:54:1a:5d:40:1a:5b:43:c1:de:93:46:53: fa:09:c7:91:2e:69:6d:b5:9c:58:85:d9:9b:7b:e9:ff:b2:75: 78:5f:3e:aa:f3:f8:8d:9c:11:8b:bd:c7:d9:86:b9:6b:2c:13: 87:84:3c:a7:74:77:53:c6:af:05:76:dc:bd:41:fb:68:d7:ca: db:77:80:a2:c5:f2:21:3a:e6:69:83:9f:16:95:11:ee:35:9a: 81:14:32:fc:82:49:86:d2:3d:21:e7:26:0c:a9:d2:a3:d9:6d: 42:21:17:8d:54:50:02:74:41:67:09:e3:e8:c8:ba:c5:f3:fc: 07:76:b1:00:86:2e:8c:33:a4:e2:c1:06:2d:d9:78:3b:a1:b5: c3:17:ea:3d:eb:57:8e:d2:e3:5f:00:89:7d:3b:12:a5:76:26: 3b:e3:94:fb:27:b8:f3:ba:af:20:5e:7c:25:3b:5b:dd:05:81: 6b:c4:7f:8f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEt6DGcVWhl5fwL0/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDExOFoXDTI2MDEwODE2NDExOFowLzEtMCsGA1UEAxMk YzFmZDY5ZmQtMWVkZS00OGEwLTkxNzgtZjg5OTA5MWI4OTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAHTFgyWrx15u4jZSqzOWAW05scr6mlsXJm9 8NT4WGjjJel7Pa0Gb0dA+wj1gzkUG2o8L8kcO8v2UgjI1Kk3AJ/P2auO0jb09VJn scrO4lqu5BcU4p0k9vmR6y5hTkrUqx7CCGm69/RShgTYhYYFZi8dKGrvQ1+rKkLz 0mcn5i68NnliseESz46y/LVBtGnbByGeWzj5HL8hLqG2Yxd7bo7rStNDlsWRp49T NqhxSX2Je/Fwa1ndvufA55HG/DCdwP3/ivxJJSunSKtSDdGxZQGOztLRDTib13c0 7pdMmEBPHtgX4wK4g55pIaDcd0+Uw3PC8f88FWEwkMqxkyJNewIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFFDwRpm3gOY6WaqcOpSDfkZfCcRxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYzY2Y2IwMGMtNTJjYS0z MGI3LWI1ODItMmM1OWY1ZWM1YTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmCgwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABQufjgR8ylc60zzsVHXuND68NEbMw6T2kfZYWXG/kt/2lM0aDlZuXNh/ 0RrI4S7v+sD57/czSDOkorv9xE0ggzRxZ+SPhidxVTDmISDVVBpdQBpbQ8Hek0ZT +gnHkS5pbbWcWIXZm3vp/7J1eF8+qvP4jZwRi73H2Ya5aywTh4Q8p3R3U8avBXbc vUH7aNfK23eAosXyITrmaYOfFpUR7jWagRQy/IJJhtI9IecmDKnSo9ltQiEXjVRQ AnRBZwnj6Mi6xfP8B3axAIYujDOk4sEGLdl4O6G1wxfqPetXjtLjXwCJfTsSpXYm O+OU+ye487qvIF58JTtb3QWBa8R/jw== -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:15 2025 by rpki-client