$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/45e4122e-2a20-3567-a51c-f1fc18af355a.roa File: 45e4122e-2a20-3567-a51c-f1fc18af355a.roa (raw, json) Hash identifier: QL/00EOD1bJRD9C4/Yp0sO6wLtKH7dSq2bxCf45wdxI= Subject key identifier: D3:D3:A2:60:86:5F:54:4E:BF:B1:FA:2E:2E:CE:E4:42:8B:91:38:D1 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584CEBC21AAA54187B83C6D0A458 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/45e4122e-2a20-3567-a51c-f1fc18af355a.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 81 IP address blocks: 152.45.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:1a:aa:54:18:7b:83:c6:d0:a4:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=c85e8809-128e-49ac-9dd5-9b4ff0b4f073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d3:93:62:9c:6f:b6:5d:14:0c:c7:6f:d4:fe: 26:5f:bf:2e:64:49:a5:5f:d8:3a:92:06:bd:34:6c: ff:4a:35:04:25:33:f0:fc:79:f6:3d:fe:ad:29:67: c9:4f:60:70:2e:c6:8d:58:f4:fe:a7:a9:12:74:1d: 13:82:b2:2a:9c:ca:db:44:96:8f:92:54:88:e9:28: 22:1a:2f:2f:38:f1:6e:65:d0:8f:81:09:7b:58:c3: 1d:4d:57:73:97:93:b6:0e:28:f2:17:72:3e:d1:21: d4:71:0b:98:2e:88:85:ae:15:18:1d:ba:32:7a:f0: 11:12:a0:91:61:5e:6c:18:cd:36:d4:5e:e9:9d:c2: ee:a8:e1:fa:7e:2f:5e:21:b1:e8:41:43:92:81:ea: 0b:de:d2:80:c3:30:ce:b0:1a:88:75:23:79:76:ed: 6b:40:7f:fd:56:4e:bf:07:9b:3a:53:ad:b8:8c:bd: 40:0d:b7:0d:79:69:ae:16:0a:4a:8a:d2:8a:bf:c6: 8f:e4:ff:a7:85:b6:0c:be:92:71:d7:95:74:78:02: 8f:fd:e1:5d:08:17:a0:85:c2:86:35:df:13:f5:cb: 8f:33:87:6d:f5:1b:09:f9:09:d0:46:04:e8:0d:c0: ea:18:59:2b:d7:59:78:55:45:ff:1b:a0:06:20:e7: 93:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D3:A2:60:86:5F:54:4E:BF:B1:FA:2E:2E:CE:E4:42:8B:91:38:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/45e4122e-2a20-3567-a51c-f1fc18af355a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.45.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5d:40:6c:ee:48:77:47:91:8f:dc:b0:9a:52:ce:9b:e2:94: 62:af:69:d7:93:16:5f:eb:41:c6:24:3a:69:05:70:9d:e6:7e: f2:59:97:86:bd:b5:9d:1a:1f:77:2a:43:1b:00:93:94:08:13: 58:67:7a:d8:52:10:a8:ee:da:0f:09:01:61:34:ec:c1:db:b5: b3:84:a5:fb:15:d9:d0:9b:aa:2b:32:84:c7:88:d2:db:2f:71: f6:b7:c2:d6:1b:b5:bd:6e:cd:8f:0e:46:a7:a6:4a:c2:b3:0a: 59:f1:2c:4b:16:e2:11:ce:47:68:a4:96:10:2b:ee:c1:6f:35: ee:02:89:94:69:60:fd:9b:95:11:f5:c3:cf:42:41:94:52:7a: 26:8e:31:4a:f2:44:45:91:14:a1:1b:00:15:81:22:a1:3a:98: 93:90:47:34:55:a9:f0:36:db:0b:d5:73:77:c0:74:6f:4c:e7: f3:92:7c:7e:d6:09:71:a3:76:82:34:3c:54:8a:8a:5a:88:a7: 3f:ce:e1:02:9e:3d:dd:d4:31:f8:81:d0:b6:f0:ca:41:70:79: a4:6a:67:28:4e:d2:3b:b8:21:12:c2:cd:17:d2:11:ab:d1:54: 07:eb:74:bd:a0:17:46:dd:69:38:ea:d0:40:50:23:0f:ce:4c: 96:c8:e1:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwhqqVBh7g8bQpFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk Yzg1ZTg4MDktMTI4ZS00OWFjLTlkZDUtOWI0ZmYwYjRmMDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNOTYpxvtl0UDMdv1P4mX78uZEmlX9g6kga9 NGz/SjUEJTPw/Hn2Pf6tKWfJT2BwLsaNWPT+p6kSdB0TgrIqnMrbRJaPklSI6Sgi Gi8vOPFuZdCPgQl7WMMdTVdzl5O2DijyF3I+0SHUcQuYLoiFrhUYHboyevAREqCR YV5sGM021F7pncLuqOH6fi9eIbHoQUOSgeoL3tKAwzDOsBqIdSN5du1rQH/9Vk6/ B5s6U624jL1ADbcNeWmuFgpKitKKv8aP5P+nhbYMvpJx15V0eAKP/eFdCBeghcKG Nd8T9cuPM4dt9RsJ+QnQRgToDcDqGFkr11l4VUX/G6AGIOeTAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPTomCGX1ROv7H6Li7O5EKLkTjRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNDVlNDEyMmUtMmEyMC0z NTY3LWE1MWMtZjFmYzE4YWYzNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmC0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBdQGzuSHdHkY/csJpSzpvilGKvadeTFl/rQcYkOmkFcJ3mfvJZl4a9 tZ0aH3cqQxsAk5QIE1hnethSEKju2g8JAWE07MHbtbOEpfsV2dCbqisyhMeI0tsv cfa3wtYbtb1uzY8ORqemSsKzClnxLEsW4hHOR2iklhAr7sFvNe4CiZRpYP2blRH1 w89CQZRSeiaOMUryREWRFKEbABWBIqE6mJOQRzRVqfA22wvVc3fAdG9M5/OSfH7W CXGjdoI0PFSKilqIpz/O4QKePd3UMfiB0LbwykFweaRqZyhO0ju4IRLCzRfSEavR VAfrdL2gF0bdaTjq0EBQIw/OTJbI4Zg= -----END CERTIFICATE-----Generated at Mon Mar 2 10:23:17 2026 by rpki-client