$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/074ba238-a293-3e5d-98f5-b3c2f0b3033d.roa File: 074ba238-a293-3e5d-98f5-b3c2f0b3033d.roa (raw, json) Hash identifier: GbreqNqPQ6HCoE4/zJ4Xm8BlxWTukvFCfujC9rS9g5I= Subject key identifier: 74:8C:24:44:77:FE:CD:8B:FF:23:19:96:7F:6A:0B:91:86:81:5A:E4 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B328C5DE99674B6D3C3751F58 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/074ba238-a293-3e5d-98f5-b3c2f0b3033d.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 20115 IP address blocks: 152.232.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:5d:e9:96:74:b6:d3:c3:75:1f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=2e60f827-8f90-4649-8d58-056d74253ce9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3e:2b:da:18:45:62:79:e0:7e:cc:bf:c0:ac: 4e:92:07:f5:27:64:eb:fc:dc:e2:3c:2f:60:45:83: 4d:3e:22:03:72:05:96:09:16:1e:30:60:c0:af:01: eb:35:bb:36:16:85:64:26:e1:2a:98:da:f3:bb:fe: 1b:2a:8d:a6:b2:13:0b:2a:f9:51:7f:fc:ac:86:06: 1b:91:65:63:98:bd:31:b8:23:37:6f:be:83:50:c0: c8:c0:b5:11:1a:b0:25:0c:81:ff:2f:9c:74:e5:fd: 28:fe:83:0f:07:bf:58:42:5f:af:b1:45:51:2d:35: 7d:57:61:25:d4:27:9b:a1:74:0e:6e:5a:b1:6d:fb: fc:03:0a:11:98:cf:99:8e:ee:e4:b9:8a:b3:fb:78: de:50:3d:60:c7:76:99:1c:bc:aa:48:2b:f7:95:36: 03:46:87:45:f3:e2:1d:23:d8:43:f4:bd:ef:09:ad: 0e:89:0c:63:81:e3:46:87:2c:d9:f7:41:1f:00:f9: f4:b5:88:67:d3:0b:46:82:c6:13:65:91:0b:eb:f7: 25:78:26:be:ba:91:2d:f4:e9:d5:d1:a5:0e:b6:20: 85:41:4b:68:16:a3:f4:3f:94:27:54:83:7f:e5:a3: a5:3f:b6:d4:6c:0c:44:4a:ec:af:46:05:1d:6d:46: 3c:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8C:24:44:77:FE:CD:8B:FF:23:19:96:7F:6A:0B:91:86:81:5A:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/074ba238-a293-3e5d-98f5-b3c2f0b3033d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:b0:c7:87:ba:46:1b:51:67:be:84:04:6a:16:5a:b3:19:7d: 0f:79:e2:e3:95:c2:a5:eb:c1:8b:1b:0a:b1:10:c2:5c:2a:55: 6f:99:4e:4b:3a:be:b3:7b:e7:5d:86:a9:c6:6e:b7:b8:36:4a: a2:88:dd:24:be:9b:43:49:a1:e8:65:db:f9:45:35:7d:5d:dd: af:73:11:88:08:da:c4:a7:b7:12:e4:6a:41:55:b2:94:54:b2: 1e:7a:fe:03:a6:d3:3f:4c:14:e7:bd:0f:e3:67:0c:7f:d5:6c: b0:d6:89:2a:c6:c7:12:a7:e5:43:4c:03:bf:e8:c8:15:4a:2d: 65:1f:37:fa:c4:71:46:a3:7e:7b:07:2e:58:66:4d:25:a0:2b: 72:fb:7e:0b:a2:32:e6:e8:48:d1:1e:63:fa:5d:d7:86:5d:48: 8f:aa:8d:5d:69:50:50:c2:b5:67:49:03:8a:4b:d9:1c:6e:fd: aa:23:b7:58:38:6a:df:0d:b9:d4:2c:fe:55:ea:6f:dc:4a:b8: cf:dd:bc:f9:d4:9a:ef:f9:c9:d3:40:30:22:10:80:69:44:66: 89:f5:c4:c0:81:7a:01:0e:3c:00:46:86:3f:31:a0:64:29:bc: 40:67:92:c5:24:4b:f3:e1:6e:4f:54:26:ff:32:50:eb:b9:8e: 15:10:89:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjF3plnS208N1H1gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk MmU2MGY4MjctOGY5MC00NjQ5LThkNTgtMDU2ZDc0MjUzY2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj4r2hhFYnngfsy/wKxOkgf1J2Tr/NziPC9g RYNNPiIDcgWWCRYeMGDArwHrNbs2FoVkJuEqmNrzu/4bKo2mshMLKvlRf/yshgYb kWVjmL0xuCM3b76DUMDIwLURGrAlDIH/L5x05f0o/oMPB79YQl+vsUVRLTV9V2El 1CeboXQOblqxbfv8AwoRmM+Zju7kuYqz+3jeUD1gx3aZHLyqSCv3lTYDRodF8+Id I9hD9L3vCa0OiQxjgeNGhyzZ90EfAPn0tYhn0wtGgsYTZZEL6/cleCa+upEt9OnV 0aUOtiCFQUtoFqP0P5QnVIN/5aOlP7bUbAxESuyvRgUdbUY8qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSMJER3/s2L/yMZln9qC5GGgVrkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMDc0YmEyMzgtYTI5My0z ZTVkLTk4ZjUtYjNjMmYwYjMwMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqwx4e6RhtRZ76EBGoWWrMZfQ954uOVwqXrwYsbCrEQwlwqVW+ZTks6 vrN7512GqcZut7g2SqKI3SS+m0NJoehl2/lFNX1d3a9zEYgI2sSntxLkakFVspRU sh56/gOm0z9MFOe9D+NnDH/VbLDWiSrGxxKn5UNMA7/oyBVKLWUfN/rEcUajfnsH LlhmTSWgK3L7fguiMuboSNEeY/pd14ZdSI+qjV1pUFDCtWdJA4pL2Rxu/aojt1g4 at8NudQs/lXqb9xKuM/dvPnUmu/5ydNAMCIQgGlEZon1xMCBegEOPABGhj8xoGQp vEBnksUkS/Phbk9UJv8yUOu5jhUQieo= -----END CERTIFICATE-----Generated at Thu Oct 9 07:41:02 2025 by rpki-client