$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/72b44df1-f82a-3aa2-bd57-add7053b0a7f.roa File: 72b44df1-f82a-3aa2-bd57-add7053b0a7f.roa (raw, json) Hash identifier: Eml3QbwxlVXrFKD3/wiVjutIkKvYX3expgEKmi5v8Ig= Subject key identifier: 4D:1A:07:F7:DC:F9:E4:27:D4:A1:50:6E:19:37:88:D4:5B:7B:81:8A Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B328C5E217472D837D9E89000 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/72b44df1-f82a-3aa2-bd57-add7053b0a7f.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 812 IP address blocks: 152.232.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:5e:21:74:72:d8:37:d9:e8:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=405ad7eb-5524-440e-bf1e-9e5c1edab916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1e:5f:34:a6:9c:8b:54:d3:f1:6c:0b:f7:5f: 8b:f5:94:ba:e4:ea:1e:d3:0a:de:d4:77:25:e5:31: 20:59:c8:6c:b9:98:fd:c4:a3:7f:84:8c:dd:6b:4c: 4b:a1:87:8a:1d:67:fd:84:2b:79:00:d1:3d:fd:69: 62:88:e2:46:72:a5:04:ad:9f:8a:7e:71:8d:bb:23: 4a:ab:ce:21:ee:6e:db:b9:14:23:93:20:f8:8c:81: b6:93:ca:de:4d:9a:f4:09:90:95:5e:99:57:0f:32: 6b:c1:11:fb:e6:68:6a:7f:43:f7:af:67:d1:67:42: 4b:ea:3f:ba:e1:f0:ec:8d:1c:70:8f:98:5f:97:5a: b7:d4:e0:5c:53:ea:f5:70:0f:43:d5:87:16:bc:74: 96:bc:cb:4f:d2:cc:86:d0:ab:30:98:bc:a5:06:fc: 27:e5:12:86:b3:de:32:7a:bc:63:62:53:e8:72:10: 0f:7e:1f:ab:a1:db:ee:c6:a4:49:22:14:e1:3a:31: ed:48:90:f9:9e:f6:74:6f:f7:5a:7f:f4:d4:fc:64: db:83:34:5e:6f:c3:91:73:5d:45:00:b3:95:1f:66: f3:ad:76:8c:6c:b8:2e:cc:59:02:a0:59:75:f4:6a: 12:71:2a:d7:19:12:cb:6e:a9:bc:79:95:95:7b:26: 75:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:1A:07:F7:DC:F9:E4:27:D4:A1:50:6E:19:37:88:D4:5B:7B:81:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/72b44df1-f82a-3aa2-bd57-add7053b0a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:0c:ab:a7:4c:dd:80:9f:cb:c4:c3:4b:53:d2:38:dd:9b:42: ab:5b:b7:51:93:a3:6f:06:44:63:a5:30:13:b5:07:b2:10:1b: bc:0d:cf:59:1f:bc:63:18:73:77:b1:01:42:5b:34:8a:80:19: 7e:d1:9c:aa:44:61:0a:05:b6:29:b8:5a:f7:52:5f:6c:ee:13: d5:3f:c0:41:9e:85:21:e4:d4:61:eb:24:15:9d:e7:4b:fd:27: b6:ae:b2:eb:bf:f4:00:13:05:4e:32:a3:ec:56:c0:f4:b7:c0: 3e:9b:de:ee:5a:1c:41:8a:0c:98:87:2f:0f:68:87:48:e4:48: 31:db:27:f0:97:4e:0a:d9:2a:e3:46:3d:a3:ce:04:17:48:e7: f2:06:e8:29:db:7f:76:01:11:72:03:9e:87:13:e5:e7:9a:63: 6e:08:79:85:23:e5:4a:e2:49:d3:21:47:b5:a2:dc:d4:f3:7b: a9:1e:ed:6e:65:4c:11:ff:c3:b1:cd:db:fb:da:29:52:2a:1b: 77:36:7a:70:79:c5:b5:6d:23:9f:98:38:5b:04:40:16:bd:8f: 2a:6f:23:df:40:b7:95:6b:eb:84:52:92:98:e3:69:72:5f:42: 7a:48:20:13:2e:66:0a:42:84:ad:31:63:cc:50:f5:a5:ef:36: 49:bd:7f:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjF4hdHLYN9nokAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NDA1YWQ3ZWItNTUyNC00NDBlLWJmMWUtOWU1YzFlZGFiOTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR5fNKaci1TT8WwL91+L9ZS65Ooe0wre1Hcl 5TEgWchsuZj9xKN/hIzda0xLoYeKHWf9hCt5ANE9/WliiOJGcqUErZ+KfnGNuyNK q84h7m7buRQjkyD4jIG2k8reTZr0CZCVXplXDzJrwRH75mhqf0P3r2fRZ0JL6j+6 4fDsjRxwj5hfl1q31OBcU+r1cA9D1YcWvHSWvMtP0syG0KswmLylBvwn5RKGs94y erxjYlPochAPfh+rodvuxqRJIhThOjHtSJD5nvZ0b/daf/TU/GTbgzReb8ORc11F ALOVH2bzrXaMbLguzFkCoFl19GoScSrXGRLLbqm8eZWVeyZ11wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE0aB/fc+eQn1KFQbhk3iNRbe4GKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNzJiNDRkZjEtZjgyYS0z YWEyLWJkNTctYWRkNzA1M2IwYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQMq6dM3YCfy8TDS1PSON2bQqtbt1GTo28GRGOlMBO1B7IQG7wNz1kf vGMYc3exAUJbNIqAGX7RnKpEYQoFtim4WvdSX2zuE9U/wEGehSHk1GHrJBWd50v9 J7ausuu/9AATBU4yo+xWwPS3wD6b3u5aHEGKDJiHLw9oh0jkSDHbJ/CXTgrZKuNG PaPOBBdI5/IG6Cnbf3YBEXIDnocT5eeaY24IeYUj5UriSdMhR7Wi3NTze6ke7W5l TBH/w7HN2/vaKVIqG3c2enB5xbVtI5+YOFsEQBa9jypvI99At5Vr64RSkpjjaXJf QnpIIBMuZgpChK0xY8xQ9aXvNkm9f3g= -----END CERTIFICATE-----Generated at Thu Oct 9 07:41:02 2025 by rpki-client