$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b8a1f009-d5ad-3fb7-a5bf-a8aa0515e3b2.roa File: b8a1f009-d5ad-3fb7-a5bf-a8aa0515e3b2.roa (raw, json) Hash identifier: OqOQ3A2bCLPlcZP185f0jdd8AAtJxeuOOMQCH5zgg0Y= Subject key identifier: 16:D9:3D:82:B6:F7:9D:04:09:F9:40:06:A9:82:3A:1D:8D:E6:2D:A2 Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Certificate serial: 010D0C9F4328584CEBC21DC9ED36CC24BD2CF064 Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b8a1f009-d5ad-3fb7-a5bf-a8aa0515e3b2.roa Signing time: Fri 20 Feb 2026 02:00:32 +0000 ROA not before: Fri 20 Feb 2026 02:00:32 +0000 ROA not after: Thu 21 May 2026 01:00:32 +0000 asID: 81 IP address blocks: 152.54.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:eb:c2:1d:c9:ed:36:cc:24:bd:2c:f0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a Validity Not Before: Feb 20 02:00:32 2026 GMT Not After : May 21 01:00:32 2026 GMT Subject: CN=497c7093-5edf-4aa2-90a0-cc03889bdfbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:df:86:67:15:0e:79:f8:6f:0f:2e:59:8f:ef: 35:af:c2:ab:e1:3d:41:60:be:27:f0:f6:16:ef:f4: 8b:78:0c:a5:cb:7d:d5:a1:b0:b9:26:33:f1:88:ae: aa:65:7f:57:1f:e9:b6:74:f5:89:43:0a:72:3d:a8: 04:3e:1d:e7:ea:07:0b:84:27:08:bf:98:f5:75:81: c8:e5:89:b0:81:16:f0:4c:07:15:0f:4f:90:d8:c6: 3f:0f:45:3a:74:7f:90:bc:c4:68:b9:ac:54:f5:f3: 20:c7:a2:5b:c9:52:89:75:9e:79:32:d5:4c:af:57: 1f:fb:59:2f:cb:b4:9b:5d:a3:09:dd:5e:5c:30:ec: 0a:06:f7:40:b3:f1:8c:cd:be:f5:96:b0:ca:f2:3f: f9:0c:06:1e:2b:7b:ba:f1:a2:27:a5:c1:c0:e5:85: ed:4f:3e:03:ea:2f:6b:c5:77:27:0b:21:53:f4:bf: eb:49:bb:9d:77:6e:d0:24:bf:46:9e:9a:04:d3:8d: f2:2f:5a:4b:cc:b4:cc:e6:9b:f2:83:e7:24:98:5d: f1:f8:6a:85:26:e1:98:05:81:a5:87:46:05:1a:f4: ad:f4:82:13:09:29:20:0d:c4:fc:5a:90:11:ed:f0: 1d:56:39:0f:1d:de:5d:20:1a:8f:0d:49:53:1c:8b: 3b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D9:3D:82:B6:F7:9D:04:09:F9:40:06:A9:82:3A:1D:8D:E6:2D:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b8a1f009-d5ad-3fb7-a5bf-a8aa0515e3b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl X509v3 Authority Key Identifier: keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer sbgp-ipAddrBlock: critical IPv4: 152.54.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:14:b5:53:6e:b1:1d:33:03:16:86:df:5a:3b:d0:6e:0f:de: 3c:ea:83:b9:c8:3e:23:51:40:88:72:45:96:f8:1f:dd:ea:12: ea:f2:48:ad:c9:18:35:1a:be:52:7d:7b:ed:27:ff:e0:c9:8c: d8:47:a8:47:2d:ff:b0:27:60:3b:9a:23:88:fd:98:c5:58:0d: 7c:0c:5e:a1:32:d4:6b:55:ff:d1:d7:c1:f9:a7:08:16:08:d9: c9:58:9b:97:10:86:15:50:2f:b4:47:28:50:f4:d4:f0:86:d0: 5c:fa:0d:73:12:c9:59:6a:4d:b6:c1:54:da:24:fb:6d:73:b9: b2:cc:3d:bc:77:fe:58:b9:c5:b0:95:7c:f7:33:da:4a:a9:21: 31:13:7c:e1:3c:62:a0:89:17:06:b3:c2:84:1c:ee:39:b2:a0: 11:19:92:71:78:9e:ca:c5:69:06:ad:45:24:39:05:00:85:28: 04:e6:37:3d:43:a5:a8:b6:17:e8:a6:af:46:08:1a:08:42:53: 13:3d:21:53:62:32:dd:41:32:b6:62:73:96:f4:dc:e8:47:0d: 01:a2:d5:a3:ad:22:75:98:26:aa:7d:05:54:f5:0a:04:3c:a6: e4:48:61:58:53:93:28:a6:e6:ac:ce:81:2b:05:20:d9:50:02: b5:df:d1:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzrwh3J7TbMJL0s8GQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh YTZhMB4XDTI2MDIyMDAyMDAzMloXDTI2MDUyMTAxMDAzMlowLzEtMCsGA1UEAxMk NDk3YzcwOTMtNWVkZi00YWEyLTkwYTAtY2MwMzg4OWJkZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN+GZxUOefhvDy5Zj+81r8Kr4T1BYL4n8PYW 7/SLeAyly33VobC5JjPxiK6qZX9XH+m2dPWJQwpyPagEPh3n6gcLhCcIv5j1dYHI 5YmwgRbwTAcVD0+Q2MY/D0U6dH+QvMRouaxU9fMgx6JbyVKJdZ55MtVMr1cf+1kv y7SbXaMJ3V5cMOwKBvdAs/GMzb71lrDK8j/5DAYeK3u68aInpcHA5YXtTz4D6i9r xXcnCyFT9L/rSbudd27QJL9GnpoE043yL1pLzLTM5pvyg+ckmF3x+GqFJuGYBYGl h0YFGvSt9IITCSkgDcT8WpAR7fAdVjkPHd5dIBqPDUlTHIs7VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBbZPYK2950ECflABqmCOh2N5i2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYjhhMWYwMDktZDVhZC0z ZmI3LWE1YmYtYThhYTA1MTVlM2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmDYAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsUtVNusR0zAxaG31o70G4P3jzqg7nIPiNRQIhyRZb4H93qEurySK3J GDUavlJ9e+0n/+DJjNhHqEct/7AnYDuaI4j9mMVYDXwMXqEy1GtV/9HXwfmnCBYI 2clYm5cQhhVQL7RHKFD01PCG0Fz6DXMSyVlqTbbBVNok+21zubLMPbx3/li5xbCV fPcz2kqpITETfOE8YqCJFwazwoQc7jmyoBEZknF4nsrFaQatRSQ5BQCFKATmNz1D pai2F+imr0YIGghCUxM9IVNiMt1BMrZic5b03OhHDQGi1aOtInWYJqp9BVT1CgQ8 puRIYVhTkyim5qzOgSsFINlQArXf0cA= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:45 2026 by rpki-client