$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a96e5087-8396-3af1-9c38-d634de68a320.roa File: a96e5087-8396-3af1-9c38-d634de68a320.roa (raw, json) Hash identifier: 0UPDQcG6DZEX8bX1vrqcN2w5qDhLlB4XnP3bvjOpM/M= Subject key identifier: A1:D6:14:20:45:3D:20:30:58:BE:23:67:2A:5D:B9:25:CC:16:D3:35 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584A07293B0B010E891F0C87CE80 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a96e5087-8396-3af1-9c38-d634de68a320.roa Signing time: Fri 30 May 2025 19:14:30 +0000 ROA not before: Fri 30 May 2025 19:14:30 +0000 ROA not after: Thu 28 Aug 2025 19:14:30 +0000 asID: 15153 IP address blocks: 152.26.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:29:3b:0b:01:0e:89:1f:0c:87:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: May 30 19:14:30 2025 GMT Not After : Aug 28 19:14:30 2025 GMT Subject: CN=8fd6a6d5-6edd-4609-a268-53a9483ea3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:36:c9:a8:e7:5e:68:1a:1a:a6:5d:cc:46:06: e8:0d:5f:a0:ec:0c:30:aa:65:06:a7:96:47:b1:13: b1:d6:d6:dd:86:6f:61:1c:34:90:4c:6d:a1:84:6a: 01:16:63:10:fb:64:4b:e9:bc:f6:d7:b1:70:79:af: 0c:6d:3d:16:97:66:21:ad:d3:14:1b:47:c5:71:fb: 33:12:63:8d:fc:28:b1:54:67:48:0f:80:f0:e3:92: 1f:62:be:86:5d:f7:70:cd:74:06:57:46:25:ba:08: 3a:fb:3e:bc:e8:a9:23:07:b4:e7:20:9f:48:94:18: ce:9b:48:17:dd:ac:1b:a1:92:9f:7d:85:24:e0:8c: ec:f3:c6:8a:90:bf:28:b0:30:8f:fa:9c:c2:7f:d8: 90:56:7e:ae:fa:ef:01:e1:f2:ea:b1:1a:c6:97:eb: a7:60:07:15:96:68:80:dd:08:4b:9a:7c:1a:40:e7: 98:49:50:38:eb:ba:cc:05:c2:af:74:1f:e0:86:a6: 14:88:42:3a:b3:d6:4b:d7:69:c4:0d:82:76:13:5d: a5:f8:eb:a7:19:bb:7f:24:a6:b1:d1:f0:f8:4a:08: 06:dc:41:51:3f:94:4f:72:5e:51:b6:97:31:c7:c7: 3f:98:25:d4:1b:f7:2c:03:0f:e2:71:4b:8a:34:b9: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:D6:14:20:45:3D:20:30:58:BE:23:67:2A:5D:B9:25:CC:16:D3:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/a96e5087-8396-3af1-9c38-d634de68a320.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.26.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:96:d0:78:09:69:e7:aa:57:5f:88:a9:1b:01:3d:03:32:a5: df:1a:4d:7e:b9:46:11:7a:51:2d:87:a1:ce:af:a3:f4:e5:56: b2:2a:f8:0d:a0:75:d3:79:83:7e:d9:00:62:8e:3f:cd:9b:b2: 25:73:4b:e3:0d:12:4b:c9:21:bb:55:26:66:a9:1a:eb:88:f8: c8:f7:da:8f:ef:3c:cc:f5:c1:b1:a6:85:91:5c:60:0d:97:b7: 7a:56:02:f4:63:28:f5:9a:26:2f:af:fc:b9:23:d7:32:72:f7: 0c:d8:5d:61:f8:3b:ee:e9:c6:67:80:23:99:30:bb:d3:25:82: fa:6b:40:5f:b2:24:f2:43:7d:8b:70:8c:30:52:79:3a:7e:64: 6a:ea:73:bb:82:04:33:a2:e1:1e:87:de:74:25:72:4a:43:14: 73:78:21:65:f9:09:9b:63:48:b5:9d:af:e0:a8:68:a7:5c:da: 58:b5:d2:c9:99:7d:a9:4a:aa:b1:41:fa:be:6c:6a:2f:74:2c: 3f:43:b2:34:0f:b5:2a:8c:60:03:b4:01:c9:ec:d9:4e:7c:f3: 2e:7b:87:66:b6:bc:56:61:ee:7f:67:59:72:45:99:59:03:09: 3a:77:9b:c0:d8:b6:81:5a:fc:d3:b2:de:63:17:94:0f:93:37: e9:d7:91:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHKTsLAQ6JHwyHzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI1MDUzMDE5MTQzMFoXDTI1MDgyODE5MTQzMFowLzEtMCsGA1UEAxMk OGZkNmE2ZDUtNmVkZC00NjA5LWEyNjgtNTNhOTQ4M2VhM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDbJqOdeaBoapl3MRgboDV+g7AwwqmUGp5ZH sROx1tbdhm9hHDSQTG2hhGoBFmMQ+2RL6bz217Fwea8MbT0Wl2YhrdMUG0fFcfsz EmON/CixVGdID4Dw45IfYr6GXfdwzXQGV0Ylugg6+z686KkjB7TnIJ9IlBjOm0gX 3awboZKffYUk4Izs88aKkL8osDCP+pzCf9iQVn6u+u8B4fLqsRrGl+unYAcVlmiA 3QhLmnwaQOeYSVA467rMBcKvdB/ghqYUiEI6s9ZL12nEDYJ2E12l+OunGbt/JKax 0fD4SggG3EFRP5RPcl5Rtpcxx8c/mCXUG/csAw/icUuKNLlcdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKHWFCBFPSAwWL4jZypduSXMFtM1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYTk2ZTUwODctODM5Ni0z YWYxLTljMzgtZDYzNGRlNjhhMzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmBo3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGW0HgJaeeqV1+IqRsBPQMypd8aTX65RhF6US2Hoc6vo/TlVrIq+A2g ddN5g37ZAGKOP82bsiVzS+MNEkvJIbtVJmapGuuI+Mj32o/vPMz1wbGmhZFcYA2X t3pWAvRjKPWaJi+v/Lkj1zJy9wzYXWH4O+7pxmeAI5kwu9MlgvprQF+yJPJDfYtw jDBSeTp+ZGrqc7uCBDOi4R6H3nQlckpDFHN4IWX5CZtjSLWdr+CoaKdc2li10smZ falKqrFB+r5sai90LD9DsjQPtSqMYAO0Acns2U588y57h2a2vFZh7n9nWXJFmVkD CTp3m8DYtoFa/NOy3mMXlA+TN+nXkZ4= -----END CERTIFICATE-----Generated at Mon Jun 16 12:57:06 2025 by rpki-client