$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/25234e4e-856f-3548-b59c-67a6e8d3c9f6.roa File: 25234e4e-856f-3548-b59c-67a6e8d3c9f6.roa (raw, json) Hash identifier: c8yA73Bgxdryyd11hUa4eO316WB4jPKM0+1n+3wzVOQ= Subject key identifier: 8F:48:98:CE:74:F8:37:6E:01:45:79:2C:8A:D2:B4:A6:54:8F:B1:5D Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584A7BEAF5DA7629ACD2B9DC3E40 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/25234e4e-856f-3548-b59c-67a6e8d3c9f6.roa Signing time: Fri 11 Jul 2025 14:58:36 +0000 ROA not before: Fri 11 Jul 2025 14:58:36 +0000 ROA not after: Thu 09 Oct 2025 14:58:36 +0000 asID: 401776 IP address blocks: 152.232.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:ea:f5:da:76:29:ac:d2:b9:dc:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jul 11 14:58:36 2025 GMT Not After : Oct 9 14:58:36 2025 GMT Subject: CN=3f74cccf-26bb-4327-8c42-ca91866b7918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ed:a4:39:3d:aa:34:8e:89:9d:32:31:6d:0e: fe:c9:f4:2b:15:cd:45:63:14:d0:6f:c4:1a:9a:84: bd:26:c6:63:b9:be:29:e2:29:06:59:06:5a:f7:e0: ff:b5:2b:46:9a:2d:e7:6d:fb:41:f9:c1:9e:31:00: 72:10:19:47:57:b5:38:22:f6:c9:57:a5:ea:43:a9: 26:b3:e4:5d:da:47:79:6e:79:71:f4:f5:ee:70:7e: 48:d7:5a:09:bf:82:9b:32:a7:4b:09:d0:c4:60:ba: 5d:cc:b2:ca:9b:68:b4:43:b2:6c:2b:bf:66:99:d5: 70:03:7c:27:09:2f:f5:a0:a9:ca:dd:8e:06:b2:e9: 6d:8c:29:12:1c:ac:89:92:ae:9b:3c:cf:d8:f9:d8: 22:13:cd:83:33:c4:f1:84:94:8d:bf:1d:4e:05:73: 82:47:66:35:8f:cd:8e:dc:fa:64:92:bd:d9:cd:62: 84:4e:50:e4:26:d2:fc:8c:73:c5:dd:0b:e5:ce:0c: b9:5f:74:f1:ce:14:42:fd:59:b2:af:7b:61:0e:e7: d8:0e:fe:75:ab:8b:5b:51:20:1e:81:8e:ef:7c:ff: bf:03:03:bc:ab:a0:7e:e3:d2:c7:f0:66:bc:69:b3: 62:f1:97:cc:b0:ad:d3:27:b1:21:85:6c:1d:05:ee: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:48:98:CE:74:F8:37:6E:01:45:79:2C:8A:D2:B4:A6:54:8F:B1:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/25234e4e-856f-3548-b59c-67a6e8d3c9f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b7:b1:7d:d8:8b:6d:8c:ec:39:eb:1b:71:3a:91:e3:0c:84: 86:74:4f:4f:44:0a:63:d7:ee:35:52:1d:54:45:9e:75:2b:09: b6:50:e9:90:da:a5:9e:11:c9:63:b1:0e:2a:8b:a1:c8:04:b4: f6:ba:e0:4a:fd:ff:44:cf:67:25:2d:29:1c:20:4d:94:4e:75: 76:5c:08:e9:86:43:64:a4:df:94:73:99:d6:9e:a9:e6:8e:87: 0a:37:f2:93:2d:0d:81:85:a0:68:82:63:07:02:51:2e:b1:31: 91:2e:5d:c5:d4:2a:53:a9:fc:0d:31:c5:2b:49:cc:67:95:b8: d0:18:fd:d2:f7:15:da:84:d5:78:28:a5:fc:62:a1:5e:77:83: b0:66:25:4e:e0:06:fe:09:f5:f3:53:d2:8c:6f:be:9b:09:d5: f7:93:1c:a2:e7:44:e4:bb:f6:06:9c:01:c2:8a:75:af:ce:99: 68:f5:70:a3:20:9b:64:81:93:05:e4:f6:af:d5:45:5f:de:50: 22:c3:7b:18:c3:dc:c9:bf:db:1b:a1:9d:77:ca:c8:2c:6a:a0: 8a:ba:34:50:f0:e8:0e:e7:47:40:91:c3:c1:05:9f:ae:e2:74: e4:3e:48:05:1c:0c:b5:59:12:2a:c8:57:49:b1:60:2e:35:25: e6:8f:da:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp76vXadims0rncPkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDcxMTE0NTgzNloXDTI1MTAwOTE0NTgzNlowLzEtMCsGA1UEAxMk M2Y3NGNjY2YtMjZiYi00MzI3LThjNDItY2E5MTg2NmI3OTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+2kOT2qNI6JnTIxbQ7+yfQrFc1FYxTQb8Qa moS9JsZjub4p4ikGWQZa9+D/tStGmi3nbftB+cGeMQByEBlHV7U4IvbJV6XqQ6km s+Rd2kd5bnlx9PXucH5I11oJv4KbMqdLCdDEYLpdzLLKm2i0Q7JsK79mmdVwA3wn CS/1oKnK3Y4GsultjCkSHKyJkq6bPM/Y+dgiE82DM8TxhJSNvx1OBXOCR2Y1j82O 3Ppkkr3ZzWKETlDkJtL8jHPF3Qvlzgy5X3TxzhRC/Vmyr3thDufYDv51q4tbUSAe gY7vfP+/AwO8q6B+49LH8Ga8abNi8ZfMsK3TJ7EhhWwdBe4ckQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9ImM50+DduAUV5LIrStKZUj7FdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMjUyMzRlNGUtODU2Zi0z NTQ4LWI1OWMtNjdhNmU4ZDNjOWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmOjyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi3sX3Yi22M7DnrG3E6keMMhIZ0T09ECmPX7jVSHVRFnnUrCbZQ6ZDa pZ4RyWOxDiqLocgEtPa64Er9/0TPZyUtKRwgTZROdXZcCOmGQ2Sk35RzmdaeqeaO hwo38pMtDYGFoGiCYwcCUS6xMZEuXcXUKlOp/A0xxStJzGeVuNAY/dL3FdqE1Xgo pfxioV53g7BmJU7gBv4J9fNT0oxvvpsJ1feTHKLnROS79gacAcKKda/OmWj1cKMg m2SBkwXk9q/VRV/eUCLDexjD3Mm/2xuhnXfKyCxqoIq6NFDw6A7nR0CRw8EFn67i dOQ+SAUcDLVZEirIV0mxYC41JeaP2is= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:07 2025 by rpki-client