$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c694b582-4abf-3f02-8621-356771f0f4a7.roa File: c694b582-4abf-3f02-8621-356771f0f4a7.roa (raw, json) Hash identifier: jdJT4+NxvC0cK23m3VP5g7VTFlSTkRA7qD45mPMWaGQ= Subject key identifier: 15:14:40:7F:50:A8:8F:E1:A8:96:AE:5E:1D:8E:06:20:59:DB:F9:61 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B328C5E59D0B7081881742F20 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c694b582-4abf-3f02-8621-356771f0f4a7.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 9304 IP address blocks: 152.232.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:5e:59:d0:b7:08:18:81:74:2f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=f20343f9-f141-4a4b-987d-d05eb89c7371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9e:6c:94:a2:f2:58:e1:2b:b8:16:38:6b:ce: bd:92:12:fb:d1:2b:46:1e:fd:e5:56:36:2a:c1:61: 15:2d:44:64:5b:70:17:97:2f:51:dc:65:4f:4b:68: f9:ee:c3:1d:0e:ec:6f:73:37:fc:51:17:16:18:b4: 09:8f:b8:5f:64:29:d8:1e:01:98:a3:4a:39:ee:5c: b5:db:91:1a:aa:c0:88:b9:17:0d:03:8a:15:bb:6c: d5:59:ca:0c:81:7c:18:3a:1f:a1:e7:be:5b:e4:42: 95:2c:ab:f5:7c:0d:ad:de:6f:c0:f4:85:6f:cb:be: 29:ea:8f:f0:89:ac:73:51:47:65:33:d9:9f:8c:e6: 78:ed:45:df:46:66:9b:73:73:c3:aa:4c:27:dc:23: 5a:3f:cd:cc:d6:1d:e4:34:a0:1c:46:c8:33:0e:33: 8c:c1:a8:2d:27:58:01:75:4b:90:fe:61:d1:da:ee: e4:87:96:12:ed:92:91:ef:41:d0:24:a2:43:1e:66: f4:43:98:95:af:6f:0f:9f:0a:4f:7d:f5:1b:fa:62: 4a:c3:ac:dc:9a:07:0f:d8:9b:ea:d0:4d:86:dd:1e: 2c:10:7f:5c:8b:99:30:5e:22:58:0d:e6:18:7d:35: ec:db:2f:4c:03:14:27:9b:cb:7e:10:8f:ce:b0:6d: f8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:14:40:7F:50:A8:8F:E1:A8:96:AE:5E:1D:8E:06:20:59:DB:F9:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c694b582-4abf-3f02-8621-356771f0f4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5e:00:ad:8c:ee:30:f9:97:33:d4:91:f5:92:96:d2:01:64: e1:b1:87:13:04:a8:68:82:ce:22:1d:39:67:64:69:68:a2:7f: f4:81:cd:1c:5b:e9:44:43:c5:e7:09:d8:30:6d:fd:3e:b9:7a: c0:48:2a:15:9a:ed:39:64:14:33:a2:80:e9:fd:53:db:4d:ba: 1e:b5:22:af:c1:79:ac:6a:2c:93:74:23:ef:c5:88:31:4f:69: 06:cc:2a:04:12:ef:55:16:65:c8:9d:13:ea:3c:bf:59:99:aa: 30:17:ba:a4:71:d2:3a:a6:20:54:c7:0a:55:79:4a:b0:91:bb: 5c:a2:b7:4e:31:6a:1b:9d:80:36:70:a7:14:28:af:ce:9c:62: 8b:02:70:82:50:8b:a9:26:4d:f8:d1:08:93:09:88:99:d8:84: 90:1f:28:5d:6f:13:13:29:f2:b8:22:40:7e:95:11:ed:7b:96: 6d:6c:bd:6c:ad:e6:23:bc:b1:19:ae:1f:0b:fc:3d:f2:b0:c2: 36:27:70:7d:aa:f5:50:76:9b:60:c2:21:06:d0:64:28:e7:90: b6:12:d7:a7:e2:8f:ba:c6:e5:d5:a6:07:19:80:bb:6a:d3:30: d4:75:d1:3c:00:b2:d8:0c:a9:9e:a4:dc:b8:11:38:9a:cf:7d: 38:38:cf:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjF5Z0LcIGIF0LyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk ZjIwMzQzZjktZjE0MS00YTRiLTk4N2QtZDA1ZWI4OWM3MzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ5slKLyWOEruBY4a869khL70StGHv3lVjYq wWEVLURkW3AXly9R3GVPS2j57sMdDuxvczf8URcWGLQJj7hfZCnYHgGYo0o57ly1 25EaqsCIuRcNA4oVu2zVWcoMgXwYOh+h575b5EKVLKv1fA2t3m/A9IVvy74p6o/w iaxzUUdlM9mfjOZ47UXfRmabc3PDqkwn3CNaP83M1h3kNKAcRsgzDjOMwagtJ1gB dUuQ/mHR2u7kh5YS7ZKR70HQJKJDHmb0Q5iVr28PnwpPffUb+mJKw6zcmgcP2Jvq 0E2G3R4sEH9ci5kwXiJYDeYYfTXs2y9MAxQnm8t+EI/OsG34dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUUQH9QqI/hqJauXh2OBiBZ2/lhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYzY5NGI1ODItNGFiZi0z ZjAyLTg2MjEtMzU2NzcxZjBmNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmOiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJeAK2M7jD5lzPUkfWSltIBZOGxhxMEqGiCziIdOWdkaWiif/SBzRxb 6URDxecJ2DBt/T65esBIKhWa7TlkFDOigOn9U9tNuh61Iq/BeaxqLJN0I+/FiDFP aQbMKgQS71UWZcidE+o8v1mZqjAXuqRx0jqmIFTHClV5SrCRu1yit04xahudgDZw pxQor86cYosCcIJQi6kmTfjRCJMJiJnYhJAfKF1vExMp8rgiQH6VEe17lm1svWyt 5iO8sRmuHwv8PfKwwjYncH2q9VB2m2DCIQbQZCjnkLYS16fij7rG5dWmBxmAu2rT MNR10TwAstgMqZ6k3LgROJrPfTg4zws= -----END CERTIFICATE-----Generated at Thu Oct 9 07:38:39 2025 by rpki-client