$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/1704835c-e4bf-312d-83e7-72077560a29b.roa File: 1704835c-e4bf-312d-83e7-72077560a29b.roa (raw, json) Hash identifier: WXSHJtuXn1XTDG0M8tO/WS0TptnjPTNCKf+5pcq5Ceg= Subject key identifier: 3D:BA:4A:87:52:1C:2C:2F:0A:8D:38:2E:0F:75:6F:56:83:96:31:E2 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B3821B2257F91A518066D30C0 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/1704835c-e4bf-312d-83e7-72077560a29b.roa Signing time: Wed 17 Sep 2025 01:00:33 +0000 ROA not before: Wed 17 Sep 2025 01:00:33 +0000 ROA not after: Tue 16 Dec 2025 02:00:33 +0000 asID: 9304 IP address blocks: 152.232.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:38:21:b2:25:7f:91:a5:18:06:6d:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 17 01:00:33 2025 GMT Not After : Dec 16 02:00:33 2025 GMT Subject: CN=22c23f2d-60d2-4593-89cc-7959c2feb82e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:46:92:8f:bc:95:1e:f9:0a:f2:39:21:0c:14: ab:d7:f7:13:9c:44:62:fe:bb:96:ea:f7:15:40:5d: e1:d1:1c:2a:d7:99:61:dc:8f:12:ff:3d:95:0e:1a: 53:1f:83:0e:a2:b5:73:42:f5:9a:9d:be:03:29:e1: ee:ac:a8:b4:b2:77:88:f9:76:e2:5e:69:ed:fa:bc: a2:4e:3d:84:fc:9f:05:c6:38:57:4e:41:89:f3:29: 17:b2:3c:3c:b0:fa:6b:3c:81:58:19:1b:dc:77:3e: c7:33:b7:a6:0c:eb:aa:dc:e2:41:6f:0f:f7:3a:8b: f2:bb:8b:78:17:8f:ed:40:80:8c:55:5e:26:36:cd: 82:85:c5:13:fa:a8:b5:66:8d:39:6e:e7:f3:dc:12: 4b:48:00:93:5d:53:89:d2:19:0a:79:a0:e8:09:b1: ec:bb:bd:3f:88:b1:e3:27:b1:34:74:b6:53:6d:d0: b0:96:46:13:8e:a9:8d:83:b8:30:4c:3c:0c:e6:4d: e2:28:5d:0a:89:71:57:ad:9b:74:79:ca:19:34:5c: ae:22:da:db:51:1c:e7:9e:0a:4b:ac:ca:e7:3c:13: 66:ff:1c:de:ac:1c:80:ca:26:26:a3:67:b4:7a:cb: 42:9e:07:23:a0:35:a1:74:7f:ce:b8:07:08:aa:5e: 5b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:BA:4A:87:52:1C:2C:2F:0A:8D:38:2E:0F:75:6F:56:83:96:31:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/1704835c-e4bf-312d-83e7-72077560a29b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:6b:f4:54:7b:04:7c:3a:29:b3:2b:2a:84:fd:17:1f:71:90: c7:dc:1f:40:4b:7a:9a:95:37:88:0d:35:fe:2a:8f:e9:c0:b7: 26:e3:e3:01:72:85:62:6b:a4:91:5e:f5:25:62:aa:4d:83:0a: 17:e3:fd:48:72:70:25:26:da:3c:96:66:f1:88:f0:59:97:f3: a6:30:e5:ea:b8:0f:52:c0:8a:ae:d0:eb:34:4a:a3:40:fb:34: 5a:e5:6c:50:ac:26:a7:f1:55:e3:59:4c:ea:43:cf:68:04:d5: 68:c8:9e:3a:db:4b:5b:bf:48:cd:aa:48:b1:61:48:1a:51:dc: 66:2d:0a:3e:2c:8c:ca:ad:92:6c:35:e4:34:af:aa:aa:db:2e: a5:3a:51:ef:58:3a:ac:d4:e7:b4:01:a9:fb:c7:e9:cc:6d:a2: 33:f9:fd:e3:5c:d6:e1:bf:27:ad:61:93:67:36:41:56:7d:94: ff:3f:71:7d:8e:be:37:3c:12:60:eb:0d:f2:29:a2:0e:80:63: 2d:9a:9e:f0:11:8b:e7:e9:a8:25:c7:fc:ab:2f:1e:62:d3:01: a5:74:11:8e:13:b6:62:15:fa:8e:5a:1e:62:c9:e1:f7:8e:1b: c6:31:73:26:12:f9:fc:d2:df:da:fc:2e:87:15:78:12:2d:3a: 1c:cb:e9:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs4IbIlf5GlGAZtMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkxNzAxMDAzM1oXDTI1MTIxNjAyMDAzM1owLzEtMCsGA1UEAxMk MjJjMjNmMmQtNjBkMi00NTkzLTg5Y2MtNzk1OWMyZmViODJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0aSj7yVHvkK8jkhDBSr1/cTnERi/ruW6vcV QF3h0Rwq15lh3I8S/z2VDhpTH4MOorVzQvWanb4DKeHurKi0sneI+XbiXmnt+ryi Tj2E/J8FxjhXTkGJ8ykXsjw8sPprPIFYGRvcdz7HM7emDOuq3OJBbw/3Oovyu4t4 F4/tQICMVV4mNs2ChcUT+qi1Zo05bufz3BJLSACTXVOJ0hkKeaDoCbHsu70/iLHj J7E0dLZTbdCwlkYTjqmNg7gwTDwM5k3iKF0KiXFXrZt0ecoZNFyuItrbURznngpL rMrnPBNm/xzerByAyiYmo2e0estCngcjoDWhdH/OuAcIql5brwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD26SodSHCwvCo04Lg91b1aDljHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMTcwNDgzNWMtZTRiZi0z MTJkLTgzZTctNzIwNzc1NjBhMjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmOiuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIlr9FR7BHw6KbMrKoT9Fx9xkMfcH0BLepqVN4gNNf4qj+nAtybj4wFy hWJrpJFe9SViqk2DChfj/UhycCUm2jyWZvGI8FmX86Yw5eq4D1LAiq7Q6zRKo0D7 NFrlbFCsJqfxVeNZTOpDz2gE1WjInjrbS1u/SM2qSLFhSBpR3GYtCj4sjMqtkmw1 5DSvqqrbLqU6Ue9YOqzU57QBqfvH6cxtojP5/eNc1uG/J61hk2c2QVZ9lP8/cX2O vjc8EmDrDfIpog6AYy2anvARi+fpqCXH/KsvHmLTAaV0EY4TtmIV+o5aHmLJ4feO G8YxcyYS+fzS39r8LocVeBItOhzL6fk= -----END CERTIFICATE-----Generated at Thu Oct 9 07:39:29 2025 by rpki-client