$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ae145a35-011d-32a5-af94-cb5f474ba125.roa File: ae145a35-011d-32a5-af94-cb5f474ba125.roa (raw, json) Hash identifier: nWw2RJGp8boxKjdjL0r9pwC8aVkiPK2MkgGq6AYxTmQ= Subject key identifier: BB:39:3D:61:7C:05:CD:9C:32:39:67:50:BF:FB:AD:96:CC:90:BD:6A Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584CEBC217E0F2AD0230A78FA180 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ae145a35-011d-32a5-af94-cb5f474ba125.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 81 IP address blocks: 152.22.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:17:e0:f2:ad:02:30:a7:8f:a1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=42436fec-9e0d-4136-8ba0-154779d17da3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e1:a5:fb:ca:24:8f:25:64:a9:b2:22:a1:4c: 94:48:d8:70:ca:d7:33:c4:d9:91:51:3d:07:1f:f8: 70:32:6e:c2:ea:40:db:b4:1e:c7:0c:af:c2:81:34: 48:43:bf:5e:e5:9c:8c:a5:e5:07:34:af:8a:4c:75: ca:82:35:33:e1:22:76:cf:8d:cb:51:de:34:67:1a: 76:19:f2:f8:b4:6c:98:aa:3f:73:8b:e0:28:b7:93: 88:50:8b:fd:4b:38:19:e6:7c:e0:ff:3c:66:62:ff: 8a:2a:cb:a7:c1:95:eb:a0:6e:0f:ed:7c:89:5c:06: 55:e2:3a:86:7f:03:88:83:dd:c9:fc:05:d9:96:74: e2:06:6a:c7:df:20:c4:38:d5:30:47:6d:86:fe:22: eb:14:18:37:59:fe:62:45:3c:af:3f:fc:26:83:5a: ae:92:b0:45:95:ba:a8:ae:e1:7e:88:44:25:d5:6b: 53:17:52:be:a8:03:85:e8:c9:43:0b:a1:88:89:1c: 62:62:94:bf:a0:f0:29:e7:ce:d1:30:ee:ef:91:f6: 8e:11:9f:cd:1c:80:4d:6f:0e:0c:80:c3:6f:40:41: 70:0b:3f:ce:d2:b0:ce:5f:3b:97:73:b7:dc:44:89: f4:40:30:33:93:ea:38:75:72:2d:24:18:6b:35:eb: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:39:3D:61:7C:05:CD:9C:32:39:67:50:BF:FB:AD:96:CC:90:BD:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/ae145a35-011d-32a5-af94-cb5f474ba125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.22.48.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:36:07:f4:17:68:0d:dc:70:4f:47:65:65:5f:02:a8:f8:99: 5d:cf:98:e3:94:a3:90:dd:e2:57:12:87:cd:0b:31:7e:b5:8c: 00:91:32:e9:72:65:80:b4:bf:ad:d7:e6:46:65:a5:ec:19:1e: 3c:a2:c7:77:75:3d:cf:1b:1e:58:41:46:14:51:a4:14:4d:ec: d7:77:7b:cb:f7:31:77:04:69:23:63:10:83:ff:7a:ad:66:09: f7:0c:ac:19:10:b6:ef:74:6a:a8:dc:22:e8:99:90:92:51:1c: 3c:00:c6:4b:96:bc:74:53:2c:dd:07:00:4c:f5:fb:2d:6b:c2: dc:04:da:bd:f1:12:5e:d8:bc:80:94:34:4e:90:a7:c0:50:d6: 7f:25:fb:a4:51:f1:62:99:17:00:0e:19:56:f6:ae:7a:c5:12: 4d:6a:06:8c:29:ab:99:6d:96:89:1d:8f:20:94:01:7d:ea:f4: c2:02:8d:9a:01:b1:f5:99:52:e5:01:a2:9e:2c:45:13:a5:dd: 18:57:f6:28:6d:2e:26:fe:cc:69:29:de:58:65:5e:5a:c1:a6: cd:6a:3c:ab:2b:e3:64:e5:7a:0d:be:2d:98:8d:c8:d1:20:19: 97:ae:82:a1:3c:92:2c:fa:49:41:45:e7:53:38:bd:80:66:e6: da:e3:be:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwhfg8q0CMKePoYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk NDI0MzZmZWMtOWUwZC00MTM2LThiYTAtMTU0Nzc5ZDE3ZGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOGl+8okjyVkqbIioUyUSNhwytczxNmRUT0H H/hwMm7C6kDbtB7HDK/CgTRIQ79e5ZyMpeUHNK+KTHXKgjUz4SJ2z43LUd40Zxp2 GfL4tGyYqj9zi+Aot5OIUIv9SzgZ5nzg/zxmYv+KKsunwZXroG4P7XyJXAZV4jqG fwOIg93J/AXZlnTiBmrH3yDEONUwR22G/iLrFBg3Wf5iRTyvP/wmg1qukrBFlbqo ruF+iEQl1WtTF1K+qAOF6MlDC6GIiRxiYpS/oPAp587RMO7vkfaOEZ/NHIBNbw4M gMNvQEFwCz/O0rDOXzuXc7fcRIn0QDAzk+o4dXItJBhrNettHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLs5PWF8Bc2cMjlnUL/7rZbMkL1qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYWUxNDVhMzUtMDExZC0z MmE1LWFmOTQtY2I1ZjQ3NGJhMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmBYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs2B/QXaA3ccE9HZWVfAqj4mV3PmOOUo5Dd4lcSh80LMX61jACRMuly ZYC0v63X5kZlpewZHjyix3d1Pc8bHlhBRhRRpBRN7Nd3e8v3MXcEaSNjEIP/eq1m CfcMrBkQtu90aqjcIuiZkJJRHDwAxkuWvHRTLN0HAEz1+y1rwtwE2r3xEl7YvICU NE6Qp8BQ1n8l+6RR8WKZFwAOGVb2rnrFEk1qBowpq5ltlokdjyCUAX3q9MICjZoB sfWZUuUBop4sRROl3RhX9ihtLib+zGkp3lhlXlrBps1qPKsr42Tleg2+LZiNyNEg GZeugqE8kiz6SUFF51M4vYBm5trjvqA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:49:47 2026 by rpki-client