$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d8694f18-e67a-34ad-99b7-12bfc5a5476b.roa File: d8694f18-e67a-34ad-99b7-12bfc5a5476b.roa (raw, json) Hash identifier: 8CiSZLOPdIJmVB7XlBw04IRCCwhp5vk7L9UvKDPUH8I= Subject key identifier: 82:B2:26:06:F1:3F:F5:3F:C4:7F:FE:0C:B2:05:94:2B:2C:94:54:D5 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C694BCFF73E3C5BC549E0 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d8694f18-e67a-34ad-99b7-12bfc5a5476b.roa Signing time: Fri 10 Oct 2025 15:41:20 +0000 ROA not before: Fri 10 Oct 2025 15:41:20 +0000 ROA not after: Thu 08 Jan 2026 16:41:20 +0000 asID: 19718 IP address blocks: 152.22.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:69:4b:cf:f7:3e:3c:5b:c5:49:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:20 2025 GMT Not After : Jan 8 16:41:20 2026 GMT Subject: CN=b772ac95-316b-419e-bba4-e3f153dd6b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c6:e1:89:3e:6c:6e:98:2f:37:c8:49:f0:79: 6d:89:4f:1d:97:fc:6d:10:4d:d8:6f:0b:2d:09:3e: 71:a9:f0:35:f6:c4:d3:0a:3a:a6:67:f9:22:f9:9a: d8:f1:9c:55:ea:a9:b6:c4:b9:b1:5c:05:34:68:0e: bf:c5:2a:a6:14:13:4d:4a:46:41:0a:64:72:8c:14: 07:af:bf:97:21:92:ee:3e:4e:a7:a7:05:1b:72:20: 89:37:4d:00:c5:4e:31:4b:ad:71:05:95:24:23:08: af:74:a1:74:c1:c8:e2:51:a7:40:e3:55:e4:67:5a: 95:8b:c9:7a:4f:c7:61:6d:b0:53:78:d5:9b:44:f1: 33:0a:ea:c0:bb:22:38:db:74:85:cc:c6:1a:4b:28: 8b:d3:4b:3b:fd:1b:e8:c9:76:1c:6b:96:27:d1:2e: 8e:f7:e0:56:9d:dd:79:e5:d2:7a:78:0c:0d:58:f3: 15:fc:35:07:8c:f4:40:65:87:51:74:80:6e:53:d6: 1f:84:15:a1:e4:65:d7:50:57:a7:95:59:2d:b1:59: 2e:4a:67:38:a0:c4:63:6f:02:3d:53:a5:f1:90:85: f5:ed:9e:78:18:01:3b:40:c8:80:81:65:14:30:a5: d2:43:9d:3d:7a:27:0d:16:ad:e1:9d:54:1a:0d:33: 84:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B2:26:06:F1:3F:F5:3F:C4:7F:FE:0C:B2:05:94:2B:2C:94:54:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d8694f18-e67a-34ad-99b7-12bfc5a5476b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.22.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:90:1b:d0:44:c7:95:4d:6c:40:9e:a8:aa:78:69:d3:5e:7d: e5:e5:d1:77:80:45:d7:e4:af:07:6f:90:2c:25:cf:f1:de:ad: d0:5b:5a:f4:fb:d4:5f:4a:1a:4d:69:c7:6d:ec:12:ad:e6:ed: 7e:ba:f2:bb:70:56:8a:54:d1:82:16:95:1e:29:a7:06:41:25: 5d:82:2f:91:3d:fa:f5:d7:70:1d:7c:7d:b6:d1:4e:c8:58:b5: 93:c2:55:4f:03:53:09:ad:38:ab:83:e5:20:a4:da:ae:39:3f: 3f:6f:42:c6:62:9a:af:95:69:f7:30:9f:af:03:8d:e7:29:ae: ef:12:45:54:f1:5c:11:30:3f:10:14:5c:d5:99:75:01:d5:3e: 44:a8:45:6c:1a:1a:a6:9d:17:5f:84:b4:3f:fb:e8:b9:a6:06: de:f7:3e:da:3b:bc:40:a6:db:5e:c9:0d:cc:c3:be:9d:42:78: e9:dd:92:f2:0a:34:c9:89:f6:69:f4:40:49:7a:73:79:c9:2d: 32:c1:4d:af:8b:08:5c:32:67:31:ec:0e:9c:67:7b:0d:db:f2: ed:02:28:9e:c7:9c:0f:7d:16:fc:a0:7b:08:de:1b:1b:64:3f: 3f:72:2a:27:c4:f7:74:ba:87:12:9e:b8:f0:28:24:b4:17:80: f4:fe:7f:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGlLz/c+PFvFSeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMFoXDTI2MDEwODE2NDEyMFowLzEtMCsGA1UEAxMk Yjc3MmFjOTUtMzE2Yi00MTllLWJiYTQtZTNmMTUzZGQ2Yjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8bhiT5sbpgvN8hJ8HltiU8dl/xtEE3Ybwst CT5xqfA19sTTCjqmZ/ki+ZrY8ZxV6qm2xLmxXAU0aA6/xSqmFBNNSkZBCmRyjBQH r7+XIZLuPk6npwUbciCJN00AxU4xS61xBZUkIwivdKF0wcjiUadA41XkZ1qVi8l6 T8dhbbBTeNWbRPEzCurAuyI423SFzMYaSyiL00s7/RvoyXYca5Yn0S6O9+BWnd15 5dJ6eAwNWPMV/DUHjPRAZYdRdIBuU9YfhBWh5GXXUFenlVktsVkuSmc4oMRjbwI9 U6XxkIX17Z54GAE7QMiAgWUUMKXSQ509eicNFq3hnVQaDTOExwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIKyJgbxP/U/xH/+DLIFlCsslFTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDg2OTRmMTgtZTY3YS0z NGFkLTk5YjctMTJiZmM1YTU0NzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmBbwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaQG9BEx5VNbECeqKp4adNefeXl0XeARdfkrwdvkCwlz/HerdBbWvT7 1F9KGk1px23sEq3m7X668rtwVopU0YIWlR4ppwZBJV2CL5E9+vXXcB18fbbRTshY tZPCVU8DUwmtOKuD5SCk2q45Pz9vQsZimq+Vafcwn68Djecpru8SRVTxXBEwPxAU XNWZdQHVPkSoRWwaGqadF1+EtD/76LmmBt73Pto7vECm217JDczDvp1CeOndkvIK NMmJ9mn0QEl6c3nJLTLBTa+LCFwyZzHsDpxnew3b8u0CKJ7HnA99FvygewjeGxtk Pz9yKifE93S6hxKeuPAoJLQXgPT+f+U= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:12 2025 by rpki-client