$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a7e6dc2-8136-3794-be42-a94ae14cf15f.roa File: 3a7e6dc2-8136-3794-be42-a94ae14cf15f.roa (raw, json) Hash identifier: CUOLM1dGMtyvLvnshs3g4nhCl0NdaMYByGZxQe1+14U= Subject key identifier: 6F:0C:86:BB:16:AA:86:16:8A:94:FE:EC:0F:2C:CA:62:09:C9:A9:26 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584CEBC2182C4BFB6958B9CA4180 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a7e6dc2-8136-3794-be42-a94ae14cf15f.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 81 IP address blocks: 152.22.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:18:2c:4b:fb:69:58:b9:ca:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=f6c78238-600e-473e-942b-2c5b33fc5a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:61:fd:ff:7b:be:27:cf:26:86:3e:da:bf:22: b8:37:84:11:8c:26:e4:da:3c:0b:5a:ef:69:ae:98: f7:48:a6:b1:40:55:9a:67:b6:fe:f8:1e:5b:86:43: dd:30:cd:6e:4d:8c:0a:d2:0d:29:cd:5d:ab:ba:c9: 53:af:f8:65:74:1f:3e:86:ab:65:d8:6a:10:bd:30: 9c:bf:11:a0:01:ec:e7:71:cf:6b:02:36:c8:4d:aa: 38:43:d0:0b:b7:ea:4f:94:35:43:92:2b:d0:cf:d8: e5:6b:a6:64:a3:a3:8e:7b:35:0f:b7:49:d7:57:a8: 5b:e9:cb:88:e3:e1:e4:d2:b2:79:07:df:55:95:de: 72:12:bc:9b:be:7d:a9:f5:68:50:13:56:11:4e:5b: 03:d8:04:bc:f4:7e:ea:d1:d5:d0:b7:36:2b:93:7e: 83:71:e6:4d:95:7c:2a:fa:50:af:4c:21:2e:6d:37: 09:d1:5f:24:08:e4:e6:e3:aa:03:3c:c8:04:66:6a: 3d:37:77:40:f6:2c:ee:26:c4:a9:cb:b7:65:94:70: 3f:a8:16:5a:74:a8:d1:36:4f:9c:72:3b:78:1d:25: 56:23:60:f3:fb:a0:77:1b:4e:e1:4a:91:6f:ba:a7: 53:e1:7d:6b:81:a9:97:3a:fc:78:e4:1f:3b:1d:11: f7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:0C:86:BB:16:AA:86:16:8A:94:FE:EC:0F:2C:CA:62:09:C9:A9:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3a7e6dc2-8136-3794-be42-a94ae14cf15f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.22.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:d6:61:1d:1a:55:7c:20:2c:e9:6c:20:b6:c1:cc:9f:dd:a3: ed:1b:63:d6:22:7e:1f:c5:7b:b5:ac:bb:13:41:57:b6:a2:c7: 07:a6:68:97:26:29:5c:c3:0d:3c:fa:88:b0:41:67:34:ea:d1: 46:27:75:3f:09:72:3b:c0:7e:ac:f3:88:aa:bb:4d:73:06:5b: 3f:df:b0:5d:9f:e6:de:b7:43:01:f5:ec:24:49:78:c4:84:4d: 7b:a4:d8:36:e4:18:a1:3e:2e:b5:db:e5:01:ed:fd:6d:be:63: 38:62:3c:d1:33:51:f0:7b:fd:3e:65:4c:a4:97:f8:53:9b:62: 34:53:08:0f:c4:aa:43:16:d6:18:54:e4:88:7d:31:9d:7b:3d: c7:bf:0f:69:8d:2d:a9:ff:a3:14:ca:dc:31:e5:fb:a3:cf:7f: 88:dd:68:8c:b4:7f:7a:03:51:96:19:17:4b:14:a9:1c:c2:c1: e4:35:9d:08:f6:75:c9:59:20:f9:3c:9c:9d:cf:42:8d:fd:4b: 12:76:1a:ef:ae:4b:e1:61:dd:71:d4:96:b1:0c:fb:ed:3c:95: 07:d5:0f:22:39:cc:63:e1:d3:6e:d4:c2:f4:ea:2e:ed:12:4b: 9c:55:04:82:9d:b9:70:2d:da:ed:35:98:3a:be:fa:54:64:31: 78:a8:bf:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwhgsS/tpWLnKQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk ZjZjNzgyMzgtNjAwZS00NzNlLTk0MmItMmM1YjMzZmM1YTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWH9/3u+J88mhj7avyK4N4QRjCbk2jwLWu9p rpj3SKaxQFWaZ7b++B5bhkPdMM1uTYwK0g0pzV2ruslTr/hldB8+hqtl2GoQvTCc vxGgAezncc9rAjbITao4Q9ALt+pPlDVDkivQz9jla6Zko6OOezUPt0nXV6hb6cuI 4+Hk0rJ5B99Vld5yErybvn2p9WhQE1YRTlsD2AS89H7q0dXQtzYrk36DceZNlXwq +lCvTCEubTcJ0V8kCOTm46oDPMgEZmo9N3dA9izuJsSpy7dllHA/qBZadKjRNk+c cjt4HSVWI2Dz+6B3G07hSpFvuqdT4X1rgamXOvx45B87HRH39QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8MhrsWqoYWipT+7A8symIJyakmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2E3ZTZkYzItODEzNi0z Nzk0LWJlNDItYTk0YWUxNGNmMTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3WYR0aVXwgLOlsILbBzJ/do+0bY9Yifh/Fe7WsuxNBV7aixwemaJcm KVzDDTz6iLBBZzTq0UYndT8JcjvAfqzziKq7TXMGWz/fsF2f5t63QwH17CRJeMSE TXuk2DbkGKE+LrXb5QHt/W2+YzhiPNEzUfB7/T5lTKSX+FObYjRTCA/EqkMW1hhU 5Ih9MZ17Pce/D2mNLan/oxTK3DHl+6PPf4jdaIy0f3oDUZYZF0sUqRzCweQ1nQj2 dclZIPk8nJ3PQo39SxJ2Gu+uS+Fh3XHUlrEM++08lQfVDyI5zGPh027UwvTqLu0S S5xVBIKduXAt2u01mDq++lRkMXiovzQ= -----END CERTIFICATE-----Generated at Mon Mar 2 18:49:22 2026 by rpki-client