$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/8cf4b5af-c00f-3090-84e8-3a25f002a0f6.roa File: 8cf4b5af-c00f-3090-84e8-3a25f002a0f6.roa (raw, json) Hash identifier: LoesCobzty2qEJl11hwb0qZ2q6L0Q1+McAx3Fg7PoIk= Subject key identifier: 75:69:8A:C5:8E:0F:82:B7:65:41:C7:57:B7:45:ED:FF:49:05:ED:B8 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B2915801F4CC7BE89BA1E7040 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/8cf4b5af-c00f-3090-84e8-3a25f002a0f6.roa Signing time: Thu 11 Sep 2025 15:39:10 +0000 ROA not before: Thu 11 Sep 2025 15:39:10 +0000 ROA not after: Wed 10 Dec 2025 16:39:10 +0000 asID: 55286 IP address blocks: 152.232.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:29:15:80:1f:4c:c7:be:89:ba:1e:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 11 15:39:10 2025 GMT Not After : Dec 10 16:39:10 2025 GMT Subject: CN=1861c2a4-bd8b-43ca-b1a9-ef1aab105ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ba:93:8c:01:fa:21:c3:f8:6c:83:16:de:0e: ea:2a:84:e7:a6:91:69:8d:42:97:38:1e:c6:fa:c3: 26:3c:7d:b2:f3:2d:a9:f9:21:f4:79:08:f9:30:f7: b9:45:13:04:77:7a:ad:32:69:e5:b0:bc:64:c6:80: 51:99:e2:28:57:6d:20:2f:e9:b0:17:d5:25:be:c6: 95:ab:80:1b:4a:82:dd:11:cd:76:0e:a7:41:21:81: be:dd:d3:46:f6:f1:74:cf:b5:8f:06:c3:19:ee:a2: d8:3a:c3:6e:7e:36:ed:77:17:6f:a1:48:a2:11:88: 9e:87:78:b4:e7:84:a0:28:5b:cc:ec:48:ef:9e:52: 79:cc:4e:55:d0:d0:90:ad:ee:e8:91:6f:ea:12:cc: 4f:0f:48:e9:3d:53:db:3f:ec:4c:d0:46:54:46:f2: 29:bb:db:4b:7c:a2:20:61:a4:57:db:27:c1:fe:13: 3e:ff:db:21:bc:e7:86:5c:6d:75:15:65:79:a7:c7: aa:4f:e7:b6:b0:79:f5:44:c4:ce:7f:9c:26:25:a2: f9:27:ff:8e:6a:e4:ca:a3:45:8d:7d:2f:dc:ed:f3: 6a:28:9c:38:54:7b:4d:e3:4d:ae:7f:12:ae:f0:a5: 4c:aa:af:a3:16:eb:e7:26:a4:71:68:0f:64:05:72: 86:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:69:8A:C5:8E:0F:82:B7:65:41:C7:57:B7:45:ED:FF:49:05:ED:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/8cf4b5af-c00f-3090-84e8-3a25f002a0f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:f8:25:da:04:50:a5:71:70:8a:8b:34:1a:c4:f8:9f:8e:99: 6e:8f:8b:a5:ec:ff:c3:14:10:81:49:eb:89:41:4e:af:5d:a1: b8:4e:88:24:25:bc:ad:c6:05:71:ba:44:da:2f:d1:5b:28:58: bb:d1:7b:3f:8b:1a:6f:00:4e:6d:1b:93:eb:97:06:6a:9a:49: 1b:ca:9e:93:b6:38:89:1c:90:33:4e:92:c2:f1:b8:c8:c9:d1: 9d:fb:9a:e7:f0:bb:f1:ff:8b:bf:2a:28:05:53:fc:ee:15:20: 04:8d:96:bd:1c:14:09:59:19:83:d8:df:71:51:ae:09:ed:37: 6f:7e:31:ec:8a:7c:c7:47:29:11:9b:a7:ce:d1:17:71:56:60: 2c:38:2b:c8:63:32:0a:18:6c:f8:3e:54:f1:9b:9d:b8:74:6e: 0b:78:a6:30:2e:f5:b0:c0:2c:94:ec:6c:1c:a0:f0:3f:5c:cc: a1:02:08:1d:ab:38:5f:00:5d:91:49:27:8e:30:6e:04:cb:46: dc:54:dd:a2:cc:f0:27:cd:55:c5:45:3c:c7:88:34:82:30:a1: 3f:dd:45:85:11:98:8e:2f:5b:d0:37:1a:2b:cb:de:29:25:00: c6:25:c1:fa:0d:1a:fc:42:a4:53:31:f7:63:f4:c5:a5:55:28: 7b:c6:16:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEspFYAfTMe+iboecEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkxMTE1MzkxMFoXDTI1MTIxMDE2MzkxMFowLzEtMCsGA1UEAxMk MTg2MWMyYTQtYmQ4Yi00M2NhLWIxYTktZWYxYWFiMTA1YmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bqTjAH6IcP4bIMW3g7qKoTnppFpjUKXOB7G +sMmPH2y8y2p+SH0eQj5MPe5RRMEd3qtMmnlsLxkxoBRmeIoV20gL+mwF9UlvsaV q4AbSoLdEc12DqdBIYG+3dNG9vF0z7WPBsMZ7qLYOsNufjbtdxdvoUiiEYieh3i0 54SgKFvM7EjvnlJ5zE5V0NCQre7okW/qEsxPD0jpPVPbP+xM0EZURvIpu9tLfKIg YaRX2yfB/hM+/9shvOeGXG11FWV5p8eqT+e2sHn1RMTOf5wmJaL5J/+OauTKo0WN fS/c7fNqKJw4VHtN402ufxKu8KVMqq+jFuvnJqRxaA9kBXKGiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHVpisWOD4K3ZUHHV7dF7f9JBe24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvOGNmNGI1YWYtYzAwZi0z MDkwLTg0ZTgtM2EyNWYwMDJhMGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOiSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH4JdoEUKVxcIqLNBrE+J+OmW6Pi6Xs/8MUEIFJ64lBTq9dobhOiCQl vK3GBXG6RNov0VsoWLvRez+LGm8ATm0bk+uXBmqaSRvKnpO2OIkckDNOksLxuMjJ 0Z37mufwu/H/i78qKAVT/O4VIASNlr0cFAlZGYPY33FRrgntN29+MeyKfMdHKRGb p87RF3FWYCw4K8hjMgoYbPg+VPGbnbh0bgt4pjAu9bDALJTsbByg8D9czKECCB2r OF8AXZFJJ44wbgTLRtxU3aLM8CfNVcVFPMeINIIwoT/dRYURmI4vW9A3GivL3ikl AMYlwfoNGvxCpFMx92P0xaVVKHvGFkM= -----END CERTIFICATE-----Generated at Thu Oct 9 07:33:31 2025 by rpki-client