$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/def8b784-04b7-3ffd-a840-42e5463ad661.roa File: def8b784-04b7-3ffd-a840-42e5463ad661.roa (raw, json) Hash identifier: qAoH+IB+NE+ks9N/XYCkjJZlQuTePVMuOVEqNhezb4Y= Subject key identifier: EE:CA:60:5C:D8:8E:73:F0:94:5B:FA:CE:32:00:8A:A7:F4:27:5D:CC Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584B7A0C693D2E4439D987550700 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/def8b784-04b7-3ffd-a840-42e5463ad661.roa Signing time: Fri 10 Oct 2025 15:41:20 +0000 ROA not before: Fri 10 Oct 2025 15:41:20 +0000 ROA not after: Thu 08 Jan 2026 16:41:20 +0000 asID: 13371 IP address blocks: 152.22.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:69:3d:2e:44:39:d9:87:55:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Oct 10 15:41:20 2025 GMT Not After : Jan 8 16:41:20 2026 GMT Subject: CN=96453678-2aee-4afc-b5ae-d472bcabd2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:26:73:79:73:0c:26:76:0e:a4:53:1a:3c:78: 23:0f:fc:f6:3d:35:ac:92:e9:c2:e2:d3:d3:d1:4e: a8:1c:b8:cf:c0:1c:3e:e8:6c:be:81:b9:b3:c3:ef: 60:ca:8b:bb:be:fe:c6:69:02:86:1e:b8:5b:76:f7: 36:d4:99:5f:e6:e3:73:c8:4b:da:6b:11:e8:60:df: 6d:5d:03:d1:e8:10:e3:c5:14:92:a3:42:4e:90:b8: e0:c6:b7:8e:06:6e:09:51:81:2e:c3:60:fc:dc:f6: 36:44:19:16:47:3e:9c:c7:a8:bf:1c:86:3d:d5:3c: 28:bd:bb:6f:2f:7f:b3:89:e5:18:ae:24:d1:92:54: b1:fd:9e:43:de:ac:6e:c8:b6:89:a6:8f:13:69:4c: e6:bf:3a:d5:63:80:16:ef:e0:a0:df:e5:92:c6:af: de:59:c0:cb:2a:52:41:d0:f3:65:55:40:d5:08:74: bc:04:f8:22:e4:f1:42:77:b5:09:6f:25:98:d2:66: b3:b5:e7:71:4b:1c:91:a6:63:e5:a5:0e:89:4e:d2: da:c2:f9:68:15:19:f1:0c:2a:d3:ff:20:03:da:df: 82:2e:4c:b2:f4:cb:e6:e5:9b:bc:bc:2c:68:27:b1: 66:0e:3b:0c:9b:87:40:db:b5:e4:bf:06:90:3a:ee: ad:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:CA:60:5C:D8:8E:73:F0:94:5B:FA:CE:32:00:8A:A7:F4:27:5D:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/def8b784-04b7-3ffd-a840-42e5463ad661.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.22.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d7:13:97:e4:81:29:80:fc:ca:ea:83:9b:ab:7b:fe:8a:06: 42:a0:25:2b:7c:e3:e2:da:98:52:d0:3a:db:4a:49:a8:38:5a: 17:57:06:c8:cb:91:15:9f:b2:bb:55:0c:d1:4d:c2:c5:20:8b: e7:21:f6:9a:c2:23:de:76:a3:42:c9:9b:ee:fc:ba:fd:ea:a3: 8d:cd:35:09:44:5d:2f:f2:3c:6d:b0:19:4c:6d:cf:7a:2f:97: 15:8c:c2:ba:85:8c:18:08:54:2e:2a:7d:7e:89:18:94:19:96: 77:2d:ef:23:15:62:7d:f3:56:c1:42:d6:75:6c:75:38:6a:cc: b3:57:b4:cc:f2:23:9a:6f:e2:a7:1b:ce:a6:21:f6:31:31:64: 2e:32:a9:64:2f:c7:28:43:47:25:f1:fa:ea:b5:22:65:f8:c5: 8c:65:d6:be:78:2d:84:12:62:8d:98:31:33:9e:41:d6:0e:f1: 0d:c1:97:c9:e8:8e:e6:73:25:9b:c5:9c:51:f9:97:b4:bb:2f: 36:62:57:21:2d:4a:43:ec:87:7b:b0:1c:bd:97:8b:2b:04:68: 6e:9b:5c:2c:fd:1c:bf:3f:01:c2:59:84:0a:b5:fb:3f:eb:68: 5e:49:7e:84:20:f6:12:51:b5:cf:24:3a:f9:3f:8c:1e:f8:49: 21:f3:18:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DGk9LkQ52YdVBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MTAxMDE1NDEyMFoXDTI2MDEwODE2NDEyMFowLzEtMCsGA1UEAxMk OTY0NTM2NzgtMmFlZS00YWZjLWI1YWUtZDQ3MmJjYWJkMmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiZzeXMMJnYOpFMaPHgjD/z2PTWskunC4tPT 0U6oHLjPwBw+6Gy+gbmzw+9gyou7vv7GaQKGHrhbdvc21Jlf5uNzyEvaaxHoYN9t XQPR6BDjxRSSo0JOkLjgxreOBm4JUYEuw2D83PY2RBkWRz6cx6i/HIY91Twovbtv L3+zieUYriTRklSx/Z5D3qxuyLaJpo8TaUzmvzrVY4AW7+Cg3+WSxq/eWcDLKlJB 0PNlVUDVCHS8BPgi5PFCd7UJbyWY0maztedxSxyRpmPlpQ6JTtLawvloFRnxDCrT /yAD2t+CLkyy9Mvm5Zu8vCxoJ7FmDjsMm4dA27XkvwaQOu6tJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO7KYFzYjnPwlFv6zjIAiqf0J13MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvZGVmOGI3ODQtMDRiNy0z ZmZkLWE4NDAtNDJlNTQ2M2FkNjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmBbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzXE5fkgSmA/Mrqg5ure/6KBkKgJSt84+LamFLQOttKSag4WhdXBsjL kRWfsrtVDNFNwsUgi+ch9prCI952o0LJm+78uv3qo43NNQlEXS/yPG2wGUxtz3ov lxWMwrqFjBgIVC4qfX6JGJQZlnct7yMVYn3zVsFC1nVsdThqzLNXtMzyI5pv4qcb zqYh9jExZC4yqWQvxyhDRyXx+uq1ImX4xYxl1r54LYQSYo2YMTOeQdYO8Q3Bl8no juZzJZvFnFH5l7S7LzZiVyEtSkPsh3uwHL2XiysEaG6bXCz9HL8/AcJZhAq1+z/r aF5JfoQg9hJRtc8kOvk/jB74SSHzGP8= -----END CERTIFICATE-----Generated at Mon Oct 20 14:27:03 2025 by rpki-client