$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/0efbfad4-8dcd-3a12-bcaa-c33fdb02bc62.roa File: 0efbfad4-8dcd-3a12-bcaa-c33fdb02bc62.roa (raw, json) Hash identifier: dCF5Kh7Mn4ABv2cetTzb0MKQnFkw4U419sSo+pzLW4Q= Subject key identifier: B4:97:FD:BD:AA:C5:8A:81:EC:FC:DA:AF:FB:5F:7B:62:D6:D6:A1:F2 Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584B25FC492EC9461C6B222E0800 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/0efbfad4-8dcd-3a12-bcaa-c33fdb02bc62.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 30313 IP address blocks: 152.216.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:49:2e:c9:46:1c:6b:22:2e:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=cb478935-9fc7-4e22-808c-d144c4a6471c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:38:1e:e3:82:7b:b7:cd:d8:cf:3f:0c:c2:2c: 3f:4c:20:b8:ba:0d:cd:1e:c8:52:68:2b:7b:23:02: 9a:0f:33:74:61:c5:74:5c:32:e0:5d:0f:12:33:9c: 19:88:eb:9a:b2:2e:a5:03:a6:6f:0f:33:2c:21:61: 8b:fd:68:e6:37:4e:17:95:e3:16:10:da:7d:12:fc: 82:f2:f6:c6:45:f2:ae:7a:29:23:2b:b6:bb:70:e6: 43:a6:d3:e9:82:62:9d:fe:e2:14:b6:85:06:22:41: bc:07:ff:1b:6a:d7:76:e0:04:1d:01:5e:fb:8b:fb: bd:c6:4f:58:9a:b2:b4:bc:95:b8:e0:98:28:14:29: c5:e0:17:07:9b:7f:ef:74:3e:4b:9e:a5:9d:a9:41: 0f:2b:f7:8b:23:38:d0:ee:2f:04:e9:31:53:fb:74: 76:4b:39:94:31:74:f4:e1:83:cd:f8:32:49:41:ed: 68:5e:ea:70:53:9d:c6:94:39:a1:5e:e8:bf:2b:20: c7:fb:19:d8:1d:9a:d2:26:48:63:e7:0d:1c:72:ab: 79:0d:65:b2:76:10:d9:bd:40:a4:f1:0c:1a:c4:da: 91:6d:bf:90:aa:f9:93:04:18:99:e5:58:c0:18:cf: 57:6a:50:2d:76:a3:dc:b1:a2:36:19:64:d5:61:5d: 66:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:97:FD:BD:AA:C5:8A:81:EC:FC:DA:AF:FB:5F:7B:62:D6:D6:A1:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/0efbfad4-8dcd-3a12-bcaa-c33fdb02bc62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:56:3e:32:84:7f:15:ec:23:82:d7:72:77:d9:fa:15:a7:03: 4e:b0:a6:ac:be:66:3d:86:ca:2e:94:8e:13:b9:e4:33:c4:42: fe:e1:91:88:a7:33:17:24:8a:d5:38:3a:83:84:19:e2:21:39: f8:d9:07:19:a5:da:41:86:09:38:cc:ec:a4:51:f7:86:26:45: 9a:bd:6c:56:16:44:70:fa:d8:9b:13:d4:52:97:be:ba:b3:40: 6d:7f:dd:af:0b:da:37:64:2d:ab:a5:45:8e:dd:99:b1:c9:d7: b6:04:29:de:23:03:8c:52:9a:f8:0c:63:16:91:65:49:0d:2c: 52:40:b0:83:51:7f:18:75:a6:c2:9a:f2:c0:f6:03:a7:a8:cf: 18:a7:e3:6e:da:0f:84:3c:a7:0a:f3:2f:3d:c5:1f:bc:cf:88: e2:bc:57:ab:26:db:cc:b6:c1:fd:20:45:fc:6e:65:6c:21:79: 07:fc:30:9c:20:15:cd:9c:37:7d:49:9b:34:94:2b:ef:72:d9: a9:6c:62:33:f9:a6:af:01:c2:a3:d7:d6:38:11:b0:d4:a8:ac: fd:43:35:ff:45:9f:b2:a1:6d:46:4d:ba:59:9d:b5:6f:82:2a: bd:8f:d2:9b:d9:65:bb:80:44:66:a2:5b:9b:f5:de:7f:08:a2: a0:85:87:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EkuyUYcayIuCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk Y2I0Nzg5MzUtOWZjNy00ZTIyLTgwOGMtZDE0NGM0YTY0NzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDge44J7t83Yzz8Mwiw/TCC4ug3NHshSaCt7 IwKaDzN0YcV0XDLgXQ8SM5wZiOuasi6lA6ZvDzMsIWGL/WjmN04XleMWENp9EvyC 8vbGRfKueikjK7a7cOZDptPpgmKd/uIUtoUGIkG8B/8batd24AQdAV77i/u9xk9Y mrK0vJW44JgoFCnF4BcHm3/vdD5LnqWdqUEPK/eLIzjQ7i8E6TFT+3R2SzmUMXT0 4YPN+DJJQe1oXupwU53GlDmhXui/KyDH+xnYHZrSJkhj5w0ccqt5DWWydhDZvUCk 8QwaxNqRbb+QqvmTBBiZ5VjAGM9XalAtdqPcsaI2GWTVYV1mjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSX/b2qxYqB7Pzar/tfe2LW1qHyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvMGVmYmZhZDQtOGRjZC0z YTEyLWJjYWEtYzMzZmRiMDJiYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmNgMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVWPjKEfxXsI4LXcnfZ+hWnA06wpqy+Zj2Gyi6UjhO55DPEQv7hkYin MxckitU4OoOEGeIhOfjZBxml2kGGCTjM7KRR94YmRZq9bFYWRHD62JsT1FKXvrqz QG1/3a8L2jdkLaulRY7dmbHJ17YEKd4jA4xSmvgMYxaRZUkNLFJAsINRfxh1psKa 8sD2A6eozxin427aD4Q8pwrzLz3FH7zPiOK8V6sm28y2wf0gRfxuZWwheQf8MJwg Fc2cN31JmzSUK+9y2alsYjP5pq8BwqPX1jgRsNSorP1DNf9Fn7KhbUZNulmdtW+C Kr2P0pvZZbuARGaiW5v13n8IoqCFh9E= -----END CERTIFICATE-----Generated at Tue Oct 21 12:01:04 2025 by rpki-client