$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d94e37e6-22dd-3b73-ace3-089535a9c6a2.roa File: d94e37e6-22dd-3b73-ace3-089535a9c6a2.roa (raw, json) Hash identifier: 6IeoNlTnR103gc2pGUYbrOt3LCuuDGLDrVy9WNs8KUg= Subject key identifier: FF:88:CD:EB:07:8D:47:D6:AE:05:FF:04:38:EC:D5:D7:08:04:EB:2F Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C669C72AF5414A78CAE00 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d94e37e6-22dd-3b73-ace3-089535a9c6a2.roa Signing time: Fri 10 Oct 2025 15:41:18 +0000 ROA not before: Fri 10 Oct 2025 15:41:18 +0000 ROA not after: Thu 08 Jan 2026 16:41:18 +0000 asID: 81 IP address blocks: 152.16.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:66:9c:72:af:54:14:a7:8c:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:18 2025 GMT Not After : Jan 8 16:41:18 2026 GMT Subject: CN=94b90290-3fef-43fa-bd4f-1275dd1c80ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:78:c0:39:d1:55:65:b5:02:6a:7a:61:4f:b0: 53:64:0d:d2:09:e2:1e:47:ad:ed:89:2b:77:f7:95: e8:bf:fc:06:b2:e7:b1:15:96:d0:a1:91:65:10:9c: c0:f4:6e:c2:bc:8f:21:79:90:73:ab:17:93:b7:9d: 3e:c4:f9:31:ee:65:a0:dc:02:55:c8:7e:cf:f0:c0: f1:e2:4a:b2:96:c8:63:fe:d9:ab:b8:76:cd:03:e8: df:b8:2c:c9:09:20:c0:98:0c:85:b5:20:f4:3b:e1: 9d:cf:db:60:df:aa:d6:d5:3c:c8:bf:3c:35:47:64: e0:cc:7c:c4:c4:c2:98:49:c0:cc:01:43:bb:8f:0d: 38:4a:bc:e7:b9:a0:13:8d:45:b6:48:83:94:04:bc: 36:ff:fd:12:ac:5d:8d:ec:00:d6:17:c8:6b:84:c7: 14:5e:12:5b:57:ec:50:33:02:e5:0b:9f:2b:e5:2a: a2:8a:6b:85:18:a4:81:fa:9b:b3:f5:76:32:aa:c3: 79:e4:cd:c6:6c:b4:19:9b:b7:c3:cd:88:02:87:ef: 11:b6:71:bd:53:9b:58:cd:ea:1d:02:c0:f5:97:65: c9:46:18:9b:aa:06:42:d4:a8:21:7d:56:05:c1:03: 88:b7:89:01:a9:70:19:a7:bb:d7:e7:7c:9b:a4:0a: 7e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:88:CD:EB:07:8D:47:D6:AE:05:FF:04:38:EC:D5:D7:08:04:EB:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d94e37e6-22dd-3b73-ace3-089535a9c6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.16.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:dd:c5:25:3c:87:48:be:e1:53:e8:4c:2d:25:31:f8:b5:4e: 50:39:ad:19:9c:f6:4f:1a:b6:e6:5a:0b:f5:f4:f1:31:87:23: 04:e8:3e:91:4a:fb:a9:a5:85:93:99:a8:12:66:b5:ef:cd:be: a9:f1:93:49:5c:5c:16:61:37:95:72:3d:d7:70:25:d5:3c:02: ea:60:bb:e1:ac:29:8e:d5:02:46:cf:a1:0f:dc:58:d3:c6:de: 36:4f:a3:d6:c1:ac:37:c9:2f:41:8a:28:8b:32:bf:82:5e:62: 3e:5f:79:4e:f4:9e:70:6c:7b:6b:74:2d:f7:5b:cb:74:6f:3d: 6f:cd:6a:d9:8f:6b:79:32:03:48:35:4f:01:ea:32:d7:a9:b9: c1:2d:76:55:3a:26:fd:1a:fb:c8:47:7f:fd:20:18:5a:44:1b: c0:1d:27:11:69:96:ec:d3:0b:cd:1a:a9:b3:cd:d0:4d:ca:90: 83:6d:95:3a:65:43:f6:ff:56:6d:2a:c2:2c:78:97:b6:2c:ae: a1:25:ec:6e:45:a0:8d:51:92:f5:fa:0e:da:e2:28:c5:00:e9: 67:42:e6:68:81:29:5d:8e:6d:fe:d9:9c:21:9f:17:af:27:7e: 39:33:ca:ff:4b:b4:7c:84:7c:b9:fa:49:02:48:75:70:13:a7: a9:9b:91:44 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEt6DGaccq9UFKeMrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDExOFoXDTI2MDEwODE2NDExOFowLzEtMCsGA1UEAxMk OTRiOTAyOTAtM2ZlZi00M2ZhLWJkNGYtMTI3NWRkMWM4MGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXjAOdFVZbUCanphT7BTZA3SCeIeR63tiSt3 95Xov/wGsuexFZbQoZFlEJzA9G7CvI8heZBzqxeTt50+xPkx7mWg3AJVyH7P8MDx 4kqylshj/tmruHbNA+jfuCzJCSDAmAyFtSD0O+Gdz9tg36rW1TzIvzw1R2TgzHzE xMKYScDMAUO7jw04SrznuaATjUW2SIOUBLw2//0SrF2N7ADWF8hrhMcUXhJbV+xQ MwLlC58r5SqiimuFGKSB+puz9XYyqsN55M3GbLQZm7fDzYgCh+8RtnG9U5tYzeod AsD1l2XJRhibqgZC1KghfVYFwQOIt4kBqXAZp7vX53ybpAp+tQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFP+IzesHjUfWrgX/BDjs1dcIBOsvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZDk0ZTM3ZTYtMjJkZC0z YjczLWFjZTMtMDg5NTM1YTljNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmBAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAT93FJTyHSL7hU+hMLSUx+LVOUDmtGZz2Txq25loL9fTxMYcjBOg+kUr7 qaWFk5moEma1782+qfGTSVxcFmE3lXI913Al1TwC6mC74awpjtUCRs+hD9xY08be Nk+j1sGsN8kvQYooizK/gl5iPl95TvSecGx7a3Qt91vLdG89b81q2Y9reTIDSDVP Aeoy16m5wS12VTom/Rr7yEd//SAYWkQbwB0nEWmW7NMLzRqps83QTcqQg22VOmVD 9v9WbSrCLHiXtiyuoSXsbkWgjVGS9foO2uIoxQDpZ0LmaIEpXY5t/tmcIZ8Xryd+ OTPK/0u0fIR8ufpJAkh1cBOnqZuRRA== -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:35 2025 by rpki-client