$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b3d2addc-e6ff-3ebd-8a00-9d8ec93cd2a8.roa File: b3d2addc-e6ff-3ebd-8a00-9d8ec93cd2a8.roa (raw, json) Hash identifier: s6lb9LFYIh0ekNYKlkJZJnMgYezBg0UP9pwePKTMuaE= Subject key identifier: CB:1C:0E:0C:5F:97:3F:72:16:72:8C:84:C2:5D:92:00:9A:CF:7B:E9 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584CEBC2158851F08DAAB5554600 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b3d2addc-e6ff-3ebd-8a00-9d8ec93cd2a8.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 81 IP address blocks: 152.60.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:15:88:51:f0:8d:aa:b5:55:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=88fd02cf-41e5-400d-876b-0c5322596e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d8:de:47:31:3c:f3:f0:42:08:55:1c:06:94: 9a:a8:08:b0:4b:b3:1d:cf:d2:b5:cf:b2:63:77:c1: 07:68:58:2e:ee:fe:de:23:77:01:7b:f1:cb:3d:ca: 63:de:17:e9:bf:3a:98:90:b4:52:69:9e:50:1e:ad: d9:46:de:94:6d:d0:c1:ef:0c:1a:cd:41:a9:49:9d: fc:be:5c:d2:22:69:20:67:8f:af:2f:35:07:42:d5: ab:b2:2a:ce:91:04:f9:6a:94:40:e6:c9:1f:71:08: 5c:b9:0b:ee:02:4d:86:74:ea:c2:1d:3f:0e:dc:a0: 29:10:5f:2a:f3:83:c6:2a:eb:c5:96:70:12:6a:87: 4b:85:18:f8:a0:06:78:40:81:0c:eb:32:e7:08:c7: e1:7a:c6:d8:ee:07:60:1f:6f:09:0a:f2:1d:80:48: 34:40:94:f0:1c:ee:da:5b:ea:eb:1d:00:5f:f5:82: 8b:ed:0b:8d:32:60:4b:83:cd:f2:45:67:25:7d:69: 97:b0:5c:0a:49:3f:3e:f3:04:e1:73:58:3f:93:57: 0c:e2:e6:0d:6e:86:46:80:24:10:d4:8a:b4:23:f1: bd:a1:1f:02:42:5a:5b:3d:4d:ab:2b:ba:c2:6d:17: de:3e:0a:f7:de:e5:34:e1:54:a4:a0:5a:3f:dc:3e: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1C:0E:0C:5F:97:3F:72:16:72:8C:84:C2:5D:92:00:9A:CF:7B:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b3d2addc-e6ff-3ebd-8a00-9d8ec93cd2a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.60.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:5a:2a:28:04:b6:77:73:52:5f:de:05:61:23:32:bf:b4:d4: 6e:e1:59:e1:0d:65:93:c5:4c:05:9a:c4:61:7b:ef:47:6b:b0: cc:db:78:ab:dd:8d:12:e2:d2:76:db:85:81:f3:8b:2c:34:53: 6a:ef:ea:aa:74:34:c6:0c:d5:41:50:a4:22:33:30:6b:15:ca: f5:62:35:3d:2a:89:1a:60:84:94:a6:4a:31:81:32:d0:08:2c: 3b:b1:60:8f:de:82:d5:e6:f6:21:9c:32:0f:cf:d4:3a:54:b9: 37:ea:79:04:65:e9:38:68:f8:da:42:e1:e6:11:17:dd:63:1f: fa:83:93:2d:fd:7a:97:c0:a2:07:05:8c:50:40:cb:9c:f3:fb: 9c:97:68:ec:1a:75:83:eb:23:6c:df:4a:72:66:27:41:16:d2: df:02:79:d6:5c:0e:18:d2:57:ac:15:dd:d7:89:ed:83:07:d4: b9:d3:8c:b0:fa:92:33:c6:4c:6b:4d:42:20:6d:00:2f:4b:ac: 75:e6:2a:c4:8d:75:31:08:c9:9e:b0:d5:f1:f6:83:6c:23:b4: b5:ce:b4:0b:ec:cf:e6:ec:35:98:ca:ff:8d:48:e2:4a:8c:db: 40:3a:2f:16:37:9b:1c:2c:37:c3:b4:30:af:17:5e:41:92:6e: 45:c2:ab:09 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEzrwhWIUfCNqrVVRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk ODhmZDAyY2YtNDFlNS00MDBkLTg3NmItMGM1MzIyNTk2ZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9jeRzE88/BCCFUcBpSaqAiwS7Mdz9K1z7Jj d8EHaFgu7v7eI3cBe/HLPcpj3hfpvzqYkLRSaZ5QHq3ZRt6UbdDB7wwazUGpSZ38 vlzSImkgZ4+vLzUHQtWrsirOkQT5apRA5skfcQhcuQvuAk2GdOrCHT8O3KApEF8q 84PGKuvFlnASaodLhRj4oAZ4QIEM6zLnCMfhesbY7gdgH28JCvIdgEg0QJTwHO7a W+rrHQBf9YKL7QuNMmBLg83yRWclfWmXsFwKST8+8wThc1g/k1cM4uYNboZGgCQQ 1Iq0I/G9oR8CQlpbPU2rK7rCbRfePgr33uU04VSkoFo/3D7pYwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMscDgxflz9yFnKMhMJdkgCaz3vpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYjNkMmFkZGMtZTZmZi0z ZWJkLThhMDAtOWQ4ZWM5M2NkMmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmDwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAEloqKAS2d3NSX94FYSMyv7TUbuFZ4Q1lk8VMBZrEYXvvR2uwzNt4q92N EuLSdtuFgfOLLDRTau/qqnQ0xgzVQVCkIjMwaxXK9WI1PSqJGmCElKZKMYEy0Ags O7Fgj96C1eb2IZwyD8/UOlS5N+p5BGXpOGj42kLh5hEX3WMf+oOTLf16l8CiBwWM UEDLnPP7nJdo7Bp1g+sjbN9KcmYnQRbS3wJ51lwOGNJXrBXd14ntgwfUudOMsPqS M8ZMa01CIG0AL0usdeYqxI11MQjJnrDV8faDbCO0tc60C+zP5uw1mMr/jUjiSozb QDovFjebHCw3w7QwrxdeQZJuRcKrCQ== -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:23 2026 by rpki-client