$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cc505f14-afa6-3d37-a669-a9654a3cd068.roa File: cc505f14-afa6-3d37-a669-a9654a3cd068.roa (raw, json) Hash identifier: wZL31ruQAeTyOdZU2cLWKj+xm12qhSt6oXGOfriU6Pg= Subject key identifier: 7E:91:50:97:1A:EF:40:F3:33:0D:E4:3E:CD:A2:97:5D:16:CC:75:4B Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C692E90A67DAC6ABB3900 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cc505f14-afa6-3d37-a669-a9654a3cd068.roa Signing time: Fri 10 Oct 2025 15:41:19 +0000 ROA not before: Fri 10 Oct 2025 15:41:19 +0000 ROA not after: Thu 08 Jan 2026 16:41:19 +0000 asID: 81 IP address blocks: 152.22.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:69:2e:90:a6:7d:ac:6a:bb:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:19 2025 GMT Not After : Jan 8 16:41:19 2026 GMT Subject: CN=303e06c8-9550-4ae2-b85b-400bb35bd3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:db:cb:8c:22:e8:45:97:d0:b9:3e:ca:0b:59: 1b:15:c4:0e:9a:71:28:ab:2f:9f:80:21:cd:0d:06: 02:55:b8:ed:c0:51:4e:8e:37:08:16:a6:ee:8f:99: dd:1a:4f:8a:1c:a6:1a:cf:c0:b0:8b:b2:48:94:04: 38:82:65:b7:0d:da:11:e8:d7:6a:b0:c7:6b:d1:72: fa:7a:4e:96:a4:d6:f2:e3:51:dd:b3:58:97:29:d5: 96:17:a8:91:d5:6b:32:3d:7f:b8:b2:66:63:95:ef: b3:6f:79:01:5e:aa:a9:a9:a0:47:6b:8e:16:b1:b1: ee:cc:fd:28:63:5a:84:41:01:d9:bb:41:f0:3f:39: a4:7a:d0:06:f2:bf:4b:4a:fd:a6:e1:7d:e8:00:1e: 4c:3d:4d:d7:ea:33:3e:64:34:c4:4a:ad:90:65:53: f2:f3:1e:39:af:cb:2a:81:50:b6:4c:61:a8:60:b4: b8:f6:c5:76:b8:3e:29:c9:86:c9:e1:17:54:d3:0f: c6:bb:a3:3d:11:17:da:d3:65:f1:ac:ad:d8:3a:6e: d0:e9:7b:27:16:c3:c3:9e:76:e5:d1:53:a8:61:70: 1a:f7:78:43:12:81:d4:49:8b:4b:34:a2:a4:da:86: 62:2e:f2:85:de:56:8d:fc:84:4a:98:ef:13:c2:b5: 2f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:91:50:97:1A:EF:40:F3:33:0D:E4:3E:CD:A2:97:5D:16:CC:75:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/cc505f14-afa6-3d37-a669-a9654a3cd068.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.22.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:07:3e:6a:06:f3:f3:e5:c0:6e:3d:cd:54:1b:35:ce:de:16: c8:fa:02:10:de:d8:34:53:e1:41:45:54:c5:69:bf:f6:f1:bd: 57:cd:26:37:fe:4a:fc:8a:5a:cb:8e:52:5e:e3:1a:d5:3f:d5: f3:6c:e7:cf:05:a5:86:49:81:97:00:c8:ba:a6:90:27:cd:89: 05:0f:48:40:20:70:db:6b:6b:d5:53:a3:15:a2:a5:a7:05:39: 74:47:f7:52:73:f0:38:3f:fd:57:42:5d:a3:5b:7e:df:26:05: 27:a3:35:92:0c:38:86:95:fe:c9:f5:c1:a5:b3:39:24:ca:e6: d2:ad:f6:2c:89:1f:0c:49:16:0a:97:24:cd:f5:38:cb:71:35: 7e:8b:7a:e0:21:b6:f4:80:d7:d5:98:f5:aa:bf:6e:cb:60:04: 63:36:2f:14:a3:86:a6:51:9f:a9:bd:e1:9a:bf:db:18:32:09: bb:1f:19:c1:e4:0a:ae:3b:22:bf:0d:88:b0:0e:6b:3e:cb:50: 21:11:d2:f4:8f:e9:7b:eb:f4:0b:a5:f5:9f:f6:df:68:96:16: c3:7a:46:e8:7a:ae:05:7f:f6:28:87:80:1e:0f:a2:5a:37:4a: fd:9e:64:57:48:88:c1:f0:bf:eb:0d:5c:f9:4e:ff:d6:b0:1d: c7:d9:b1:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGkukKZ9rGq7OQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDExOVoXDTI2MDEwODE2NDExOVowLzEtMCsGA1UEAxMk MzAzZTA2YzgtOTU1MC00YWUyLWI4NWItNDAwYmIzNWJkM2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtvLjCLoRZfQuT7KC1kbFcQOmnEoqy+fgCHN DQYCVbjtwFFOjjcIFqbuj5ndGk+KHKYaz8Cwi7JIlAQ4gmW3DdoR6NdqsMdr0XL6 ek6WpNby41Hds1iXKdWWF6iR1WsyPX+4smZjle+zb3kBXqqpqaBHa44WsbHuzP0o Y1qEQQHZu0HwPzmketAG8r9LSv2m4X3oAB5MPU3X6jM+ZDTESq2QZVPy8x45r8sq gVC2TGGoYLS49sV2uD4pyYbJ4RdU0w/Gu6M9ERfa02XxrK3YOm7Q6XsnFsPDnnbl 0VOoYXAa93hDEoHUSYtLNKKk2oZiLvKF3laN/IRKmO8TwrUv6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6RUJca70DzMw3kPs2il10WzHVLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvY2M1MDVmMTQtYWZhNi0z ZDM3LWE2NjktYTk2NTRhM2NkMDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMHPmoG8/PlwG49zVQbNc7eFsj6AhDe2DRT4UFFVMVpv/bxvVfNJjf+ SvyKWsuOUl7jGtU/1fNs588FpYZJgZcAyLqmkCfNiQUPSEAgcNtra9VToxWipacF OXRH91Jz8Dg//VdCXaNbft8mBSejNZIMOIaV/sn1waWzOSTK5tKt9iyJHwxJFgqX JM31OMtxNX6LeuAhtvSA19WY9aq/bstgBGM2LxSjhqZRn6m94Zq/2xgyCbsfGcHk Cq47Ir8NiLAOaz7LUCER0vSP6Xvr9Aul9Z/232iWFsN6Ruh6rgV/9iiHgB4Polo3 Sv2eZFdIiMHwv+sNXPlO/9awHcfZsfo= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:09 2025 by rpki-client