$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c75d991a-edc2-3d74-8efa-4da1a5550567.roa File: c75d991a-edc2-3d74-8efa-4da1a5550567.roa (raw, json) Hash identifier: wgkSWG0yE0nE0irY7OKrErw7l9K82JFXpxr9ngyZdPs= Subject key identifier: 01:17:78:2C:95:6C:4F:91:52:E3:5B:10:8A:C4:DC:42:F5:26:2C:04 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B328C637814B7DF93C874C500 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c75d991a-edc2-3d74-8efa-4da1a5550567.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 5650 IP address blocks: 152.232.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:63:78:14:b7:df:93:c8:74:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=7452dcac-eff3-4107-9c23-9bf79f87c327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:db:11:30:5b:a0:12:52:50:9d:00:bf:1f:d0: 97:fc:54:02:0b:be:3b:2e:4f:0a:cf:51:a7:86:85: 09:f1:51:b5:2b:03:4e:63:83:37:a3:7d:58:45:69: d5:14:bf:65:d6:5a:34:c8:2a:14:89:e7:7b:a2:00: 3d:29:e4:66:d0:46:4d:07:fe:4c:62:43:22:25:7c: ed:ef:03:7b:23:8d:04:d1:45:4c:68:8e:c9:83:a1: 09:c5:92:ff:c3:45:34:dd:54:54:1a:74:07:39:ed: 1f:09:a3:47:28:85:18:79:c7:06:e5:b7:8c:f0:3f: c2:0a:8c:a4:e2:82:0e:7b:13:28:70:9f:28:28:47: bb:8d:16:78:71:b3:07:fe:dd:69:99:7b:3f:aa:2f: 29:e5:3b:78:b5:1d:91:99:90:6c:96:4b:fc:fd:6e: fb:07:2a:69:6b:f7:14:f7:c2:6c:dd:e8:61:70:6e: d5:84:5e:4d:2f:b7:96:b6:52:9f:93:61:00:d8:51: 34:31:83:e3:d4:0f:ec:10:d9:7d:c1:1b:0a:07:a0: d7:e0:28:0e:fc:53:d6:97:08:a0:0b:99:e2:c6:05: cd:21:c2:67:65:e2:96:7d:c0:5b:89:b4:53:57:69: 3c:a6:28:67:84:3e:1d:08:bb:ca:00:b6:5e:fa:cd: ec:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:17:78:2C:95:6C:4F:91:52:E3:5B:10:8A:C4:DC:42:F5:26:2C:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c75d991a-edc2-3d74-8efa-4da1a5550567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:02:85:4c:e4:90:de:99:6b:00:02:30:bd:b8:08:ed:29:b6: 76:4f:16:c0:c0:69:94:ae:f1:e2:2b:9a:d1:05:be:f7:c8:41: 60:f3:15:90:92:32:7d:57:40:a1:98:9c:cf:e0:f7:82:ce:08: e6:a9:7c:91:a5:99:ef:d4:c8:55:d5:ec:e6:6b:a4:29:a8:e9: e3:84:c0:62:c7:fe:e8:3f:1d:3a:1e:61:c1:31:8a:0f:05:7b: 7f:4f:73:44:98:c8:34:b4:09:3f:45:78:de:de:51:db:1b:6e: e4:a1:b1:01:0e:21:31:34:8d:67:46:14:71:a7:96:dc:ac:02: 7d:42:b5:68:45:9a:e5:38:e6:6f:8e:20:04:8e:99:f2:92:1f: 1c:b9:12:c9:4f:e5:8f:0a:3a:09:e9:a2:5d:c4:db:d9:8b:6f: c6:bf:25:fe:b2:cf:2e:2c:bf:0a:2f:dd:07:35:29:02:33:ca: 26:b4:ee:43:e1:2c:63:08:52:1d:eb:94:50:94:0c:39:b6:0a: 93:b0:b8:5f:09:17:ad:85:b9:b6:c4:7d:8b:84:b9:63:7b:88: 2f:db:d6:e3:f6:ca:dd:1c:2e:f8:02:cc:69:75:71:52:e5:28: 41:f8:88:36:1c:6a:f5:b4:66:5e:5b:d4:00:3a:68:ca:2a:0f: db:ef:fd:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjGN4FLffk8h0xQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk NzQ1MmRjYWMtZWZmMy00MTA3LTljMjMtOWJmNzlmODdjMzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdsRMFugElJQnQC/H9CX/FQCC747Lk8Kz1Gn hoUJ8VG1KwNOY4M3o31YRWnVFL9l1lo0yCoUied7ogA9KeRm0EZNB/5MYkMiJXzt 7wN7I40E0UVMaI7Jg6EJxZL/w0U03VRUGnQHOe0fCaNHKIUYeccG5beM8D/CCoyk 4oIOexMocJ8oKEe7jRZ4cbMH/t1pmXs/qi8p5Tt4tR2RmZBslkv8/W77Byppa/cU 98Js3ehhcG7VhF5NL7eWtlKfk2EA2FE0MYPj1A/sENl9wRsKB6DX4CgO/FPWlwig C5nixgXNIcJnZeKWfcBbibRTV2k8pihnhD4dCLvKALZe+s3sYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEXeCyVbE+RUuNbEIrE3EL1JiwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYzc1ZDk5MWEtZWRjMi0z ZDc0LThlZmEtNGRhMWE1NTUwNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEChUzkkN6ZawACML24CO0ptnZPFsDAaZSu8eIrmtEFvvfIQWDzFZCS Mn1XQKGYnM/g94LOCOapfJGlme/UyFXV7OZrpCmo6eOEwGLH/ug/HToeYcExig8F e39Pc0SYyDS0CT9FeN7eUdsbbuShsQEOITE0jWdGFHGnltysAn1CtWhFmuU45m+O IASOmfKSHxy5EslP5Y8KOgnpol3E29mLb8a/Jf6yzy4svwov3Qc1KQIzyia07kPh LGMIUh3rlFCUDDm2CpOwuF8JF62FubbEfYuEuWN7iC/b1uP2yt0cLvgCzGl1cVLl KEH4iDYcavW0Zl5b1AA6aMoqD9vv/dg= -----END CERTIFICATE-----Generated at Thu Oct 9 07:38:38 2025 by rpki-client