$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3ee9ece3-75ca-30c9-a9cb-79a7608e7ae0.roa File: 3ee9ece3-75ca-30c9-a9cb-79a7608e7ae0.roa (raw, json) Hash identifier: rOxjB765cj9i5WnRaYsgX9KN2BO1IWKNJEfy37NQj9c= Subject key identifier: EE:0C:98:7D:A9:C6:DE:36:87:AB:A2:28:53:F5:82:35:4F:BB:CA:78 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A363FFC2AA3771E924BFA3A80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3ee9ece3-75ca-30c9-a9cb-79a7608e7ae0.roa Signing time: Mon 16 Jun 2025 16:03:20 +0000 ROA not before: Mon 16 Jun 2025 16:03:20 +0000 ROA not after: Sun 14 Sep 2025 16:03:20 +0000 asID: 81 IP address blocks: 152.45.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:36:3f:fc:2a:a3:77:1e:92:4b:fa:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Jun 16 16:03:20 2025 GMT Not After : Sep 14 16:03:20 2025 GMT Subject: CN=5c9286c6-448a-4c48-912f-81f42d98062c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:20:17:86:91:29:6a:90:19:16:67:15:d1:61: be:4e:e2:6e:13:1b:a3:d6:0e:3b:16:ff:90:86:86: 81:53:3f:63:32:4f:e9:d3:a5:ea:8b:fb:42:3e:5a: 08:75:46:da:81:35:58:9a:15:96:be:7e:fa:5a:76: 92:ff:0c:a0:e2:94:e6:28:e2:6c:03:0d:50:39:07: 44:74:a3:65:87:85:8b:46:0d:ab:5b:ab:c7:b6:dc: d5:6f:8c:7c:61:05:48:4c:6e:90:fa:fd:a1:d7:a8: cc:01:1a:6e:5e:f9:6a:b2:7e:9c:43:ef:cb:dc:58: 3f:96:11:b7:12:21:2b:85:45:42:9f:9a:a0:e5:0e: 2b:4d:7c:49:44:70:03:fe:81:63:70:ba:80:52:a0: fb:41:be:2d:da:c2:ca:1b:a9:70:d6:73:40:ec:29: f2:e8:ec:13:97:ce:c6:ca:65:8b:d1:9f:13:d8:96: c7:83:fa:22:ef:51:f1:59:fc:7e:05:c3:9e:dd:9d: 0f:30:f0:a6:78:59:40:af:dc:55:84:dd:3f:47:0a: b1:12:ab:a2:db:10:36:12:5f:eb:b5:6b:49:bf:3a: bf:65:e2:d6:72:4f:c7:8e:b5:e5:f1:9c:cc:89:a5: 2f:95:73:9e:a0:dd:07:31:bb:75:72:c5:22:d4:ef: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0C:98:7D:A9:C6:DE:36:87:AB:A2:28:53:F5:82:35:4F:BB:CA:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3ee9ece3-75ca-30c9-a9cb-79a7608e7ae0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4c:1c:41:f7:76:c6:21:2f:f9:29:d0:1d:cf:0a:9c:73:ca: 72:e3:a7:ed:62:c6:bf:b1:e1:19:8a:9c:ed:06:d0:3b:9f:b5: 1f:55:01:1c:e3:a9:c8:85:5d:e3:7b:51:82:95:7e:52:12:83: 78:bf:3d:a9:20:bc:66:7d:59:ef:e8:56:ff:d2:08:f2:5e:ba: 46:af:0d:2a:dd:78:eb:94:53:50:12:14:c7:2f:7c:bb:9f:f2: e3:d9:90:4d:49:33:5a:fb:43:51:16:2c:13:9f:fd:aa:2b:56: 9c:87:e8:ff:75:4f:5a:91:1b:23:62:5b:57:f4:57:ea:fc:20: fe:d9:cf:5e:74:cc:b2:fd:7b:24:ad:6e:1e:1e:96:b2:06:2f: ea:2f:a0:7f:96:b3:53:44:13:71:81:25:4e:ca:fd:05:b0:45: 9f:d1:69:b4:e3:a5:d0:0a:37:44:82:c1:73:14:d5:83:83:d0: ea:65:54:fb:ce:1e:e8:a8:8b:3d:c4:1f:51:46:67:82:88:be: c4:ef:13:4a:19:a3:d8:58:33:a2:19:05:85:3c:e8:f9:c3:98: e6:29:28:1f:67:08:b4:8d:fe:0d:b1:d7:58:98:9b:57:d1:ae: 79:55:32:52:c4:e0:73:d5:27:6a:fb:c7:6a:23:0f:58:1c:99: a4:e2:35:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo2P/wqo3cekkv6OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDYxNjE2MDMyMFoXDTI1MDkxNDE2MDMyMFowLzEtMCsGA1UEAxMk NWM5Mjg2YzYtNDQ4YS00YzQ4LTkxMmYtODFmNDJkOTgwNjJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSAXhpEpapAZFmcV0WG+TuJuExuj1g47Fv+Q hoaBUz9jMk/p06Xqi/tCPloIdUbagTVYmhWWvn76WnaS/wyg4pTmKOJsAw1QOQdE dKNlh4WLRg2rW6vHttzVb4x8YQVITG6Q+v2h16jMARpuXvlqsn6cQ+/L3Fg/lhG3 EiErhUVCn5qg5Q4rTXxJRHAD/oFjcLqAUqD7Qb4t2sLKG6lw1nNA7Cny6OwTl87G ymWL0Z8T2JbHg/oi71HxWfx+BcOe3Z0PMPCmeFlAr9xVhN0/RwqxEqui2xA2El/r tWtJvzq/ZeLWck/HjrXl8ZzMiaUvlXOeoN0HMbt1csUi1O/+6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4MmH2pxt42h6uiKFP1gjVPu8p4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvM2VlOWVjZTMtNzVjYS0z MGM5LWE5Y2ItNzlhNzYwOGU3YWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdMHEH3dsYhL/kp0B3PCpxzynLjp+1ixr+x4RmKnO0G0DuftR9VARzj qciFXeN7UYKVflISg3i/PakgvGZ9We/oVv/SCPJeukavDSrdeOuUU1ASFMcvfLuf 8uPZkE1JM1r7Q1EWLBOf/aorVpyH6P91T1qRGyNiW1f0V+r8IP7Zz150zLL9eySt bh4elrIGL+ovoH+Ws1NEE3GBJU7K/QWwRZ/RabTjpdAKN0SCwXMU1YOD0OplVPvO Huioiz3EH1FGZ4KIvsTvE0oZo9hYM6IZBYU86PnDmOYpKB9nCLSN/g2x11iYm1fR rnlVMlLE4HPVJ2r7x2ojD1gcmaTiNWQ= -----END CERTIFICATE-----Generated at Wed Jun 18 12:23:05 2025 by rpki-client