$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/84a6a4d8-526f-3876-bb24-09259fd828de.roa File: 84a6a4d8-526f-3876-bb24-09259fd828de.roa (raw, json) Hash identifier: eEE6HncSn+JXpGrHMF9d/lQRK46HXJ+MrTRQMSdF6iI= Subject key identifier: CD:95:91:05:3B:BE:85:EE:23:D4:6F:63:AF:A0:3A:D7:9E:13:93:E0 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B328C638B13E73A51487F2E80 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/84a6a4d8-526f-3876-bb24-09259fd828de.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 7029 IP address blocks: 152.232.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:63:8b:13:e7:3a:51:48:7f:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=8f1b56ab-9350-4f0f-b926-3e514b8f444a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a7:62:fd:8c:1e:d6:4a:b8:1e:32:42:24:fa: 0c:38:73:2a:8f:26:7c:7e:5f:ab:cd:26:59:69:f8: 86:88:9c:78:6a:18:e6:f0:dc:c7:da:5a:f3:fd:40: bc:18:85:e1:9e:50:d1:f8:3f:2d:65:31:70:48:da: 15:c1:17:a5:1c:6c:56:81:7a:26:e6:a8:ad:b4:7a: 07:0f:dd:45:00:77:33:1d:89:a4:d2:e5:ea:e3:74: f9:99:f3:ce:56:26:eb:37:22:c3:92:46:82:7e:19: e1:85:20:ce:c3:7d:b2:5e:46:74:47:2e:43:e4:b3: 00:de:49:23:d0:69:f4:6a:48:04:21:7b:47:fe:50: 46:d0:0a:a4:6a:d4:32:e2:89:cc:c7:67:0e:2c:b3: 9d:91:73:1f:41:10:73:26:26:4a:48:29:1c:bb:2a: df:aa:68:3d:ae:c7:fd:9f:50:1e:f0:b2:4b:d2:9b: 3c:21:c1:c7:2a:ca:40:59:8c:20:69:4b:cc:1d:be: c4:fc:f9:8a:68:4a:d8:5c:97:08:28:26:fb:b0:17: ed:c4:63:1b:af:bc:57:e9:a1:73:f9:5d:9d:2b:62: 4b:dc:8a:7d:a6:cc:14:fa:07:5d:bb:ac:3f:d5:94: aa:82:00:e3:7c:44:ba:3b:0f:bb:26:40:0a:62:d6: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:95:91:05:3B:BE:85:EE:23:D4:6F:63:AF:A0:3A:D7:9E:13:93:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/84a6a4d8-526f-3876-bb24-09259fd828de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:63:90:8e:54:17:7c:6c:9f:81:6c:72:ea:9f:e3:e7:1a:5a: 8d:8d:00:93:c3:bf:86:0e:37:87:2c:e5:7d:1a:2b:35:f1:4d: c7:81:bc:8f:15:96:e5:3b:25:a5:1e:fb:3c:e1:1e:19:9b:b7: 48:ff:c1:73:53:70:4e:00:00:fe:4d:d7:dc:6f:96:06:19:26: eb:7d:0e:74:98:ce:7c:8a:2c:61:1f:ae:2b:3a:3b:5b:33:60: 3d:ba:ec:1e:bb:ee:a6:f8:f8:78:9e:ed:58:6b:db:93:4d:ee: 39:4c:fe:c6:a8:8c:20:58:d7:bf:f8:72:3c:fe:b3:3a:3b:03: 4b:ae:3a:45:71:97:8f:d1:bb:86:74:86:48:8c:12:11:95:32: cf:08:b3:7b:86:ce:a4:12:b3:a0:bf:96:5a:41:5c:2e:35:eb: 57:6e:dc:f2:81:73:a1:ac:48:90:5f:7f:6a:2c:7e:4d:0b:6c: ac:22:91:65:66:62:3b:c3:be:67:f7:7d:fd:58:1a:c1:e2:cc: b6:b0:d5:6b:c1:47:a6:18:74:8f:6e:ce:d3:7b:a2:23:f2:46: 67:00:bf:bd:3c:4e:b4:99:2d:79:26:e4:9e:00:5a:52:1b:90: 31:0a:08:41:2c:63:d8:5c:38:00:b1:00:25:f9:f5:59:81:b9: 85:a0:3d:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjGOLE+c6UUh/LoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk OGYxYjU2YWItOTM1MC00ZjBmLWI5MjYtM2U1MTRiOGY0NDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgadi/Ywe1kq4HjJCJPoMOHMqjyZ8fl+rzSZZ afiGiJx4ahjm8NzH2lrz/UC8GIXhnlDR+D8tZTFwSNoVwRelHGxWgXom5qittHoH D91FAHczHYmk0uXq43T5mfPOVibrNyLDkkaCfhnhhSDOw32yXkZ0Ry5D5LMA3kkj 0Gn0akgEIXtH/lBG0AqkatQy4onMx2cOLLOdkXMfQRBzJiZKSCkcuyrfqmg9rsf9 n1Ae8LJL0ps8IcHHKspAWYwgaUvMHb7E/PmKaErYXJcIKCb7sBftxGMbr7xX6aFz +V2dK2JL3Ip9pswU+gddu6w/1ZSqggDjfES6Ow+7JkAKYtYiHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2VkQU7voXuI9RvY6+gOteeE5PgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvODRhNmE0ZDgtNTI2Zi0z ODc2LWJiMjQtMDkyNTlmZDgyOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1jkI5UF3xsn4Fscuqf4+caWo2NAJPDv4YON4cs5X0aKzXxTceBvI8V luU7JaUe+zzhHhmbt0j/wXNTcE4AAP5N19xvlgYZJut9DnSYznyKLGEfris6O1sz YD267B677qb4+Hie7Vhr25NN7jlM/saojCBY17/4cjz+szo7A0uuOkVxl4/Ru4Z0 hkiMEhGVMs8Is3uGzqQSs6C/llpBXC4161du3PKBc6GsSJBff2osfk0LbKwikWVm YjvDvmf3ff1YGsHizLaw1WvBR6YYdI9uztN7oiPyRmcAv708TrSZLXkm5J4AWlIb kDEKCEEsY9hcOACxACX59VmBuYWgPaU= -----END CERTIFICATE-----Generated at Thu Oct 9 07:44:43 2025 by rpki-client