$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/b6af9ed0-0b09-3078-88d8-6ee6485b9318.roa File: b6af9ed0-0b09-3078-88d8-6ee6485b9318.roa (raw, json) Hash identifier: TZ5nqlsF3PfTiMqVR/P+F2yK50FRnWR9Qi5t7hnzSgc= Subject key identifier: C0:5B:C7:CD:B2:18:43:C2:F0:98:35:9D:2F:60:B3:36:3D:13:1E:43 Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584B25FC484635A6168AF001BA80 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/b6af9ed0-0b09-3078-88d8-6ee6485b9318.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 30313 IP address blocks: 152.216.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:48:46:35:a6:16:8a:f0:01:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=5db4d798-512d-4db7-8542-33fcfd3c7e89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:33:f3:46:42:e4:bc:cb:21:11:dc:d2:3e: e4:40:8b:cf:06:6f:86:20:eb:b6:a2:a5:5c:6c:82: e2:26:b9:c0:18:91:bb:4e:74:ae:97:e6:e0:c7:9b: 73:7b:99:b7:2d:44:87:29:20:1f:06:eb:87:8b:18: cf:2b:ba:a7:72:2d:b3:65:ca:ed:1d:84:6a:50:86: 78:95:4f:30:00:76:b9:1e:43:3a:4f:4a:8c:66:82: 45:71:29:ec:8f:76:14:c7:b7:56:2d:d2:8a:56:f0: 41:96:46:ec:91:54:0b:59:c2:8d:44:d3:6e:cf:14: 17:13:2c:72:03:c4:70:2d:31:f9:88:27:ef:e3:5f: b7:7e:53:7b:38:4a:94:46:ea:a0:04:de:53:7c:d7: 29:ab:11:c8:ea:64:bd:18:b9:07:30:54:04:7f:b7: e7:ed:cb:4d:cc:5e:f4:05:7f:67:a2:c5:5c:61:4e: e4:4b:af:0d:97:71:4b:53:c2:62:d4:9d:6a:4e:f0: a0:ee:5f:8b:b5:b3:46:b9:45:ff:76:d2:05:b6:9a: 0c:81:e6:62:62:36:ae:b7:86:f1:12:1f:dd:5e:64: 49:5f:e8:71:bc:74:88:16:96:d6:5b:19:39:de:18: 25:87:98:23:ad:9d:fd:60:af:bd:73:2e:83:81:d7: 1d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5B:C7:CD:B2:18:43:C2:F0:98:35:9D:2F:60:B3:36:3D:13:1E:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/b6af9ed0-0b09-3078-88d8-6ee6485b9318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:2c:ed:33:c4:73:43:5b:5c:c9:ab:20:0f:e7:fb:d7:92:fa: bb:78:4e:c9:4f:a2:d3:57:1b:56:b7:20:47:3d:4d:62:d4:40: e6:f7:54:e2:db:6f:0d:1f:7b:29:c6:41:eb:30:f0:7b:5f:d2: b5:22:a1:f2:83:f8:8f:20:84:39:c0:9f:5c:7d:b4:75:f7:84: 0f:e0:3a:9f:79:b8:bc:80:f4:4a:bd:c8:a2:97:93:3e:36:72: a9:1d:86:fa:82:0e:fa:18:36:23:8a:36:63:e8:4d:67:52:84: 3b:bf:da:ee:e5:58:ad:8e:e9:9b:f4:83:6e:13:9d:6e:9c:39: 38:de:8b:01:34:00:0a:3e:87:c5:f7:7e:eb:b9:24:56:40:f2: c8:9f:42:81:ea:6a:f3:6b:ae:91:3b:33:8d:84:a0:59:e9:3c: 63:ab:d8:17:2a:4d:08:ae:34:fb:0f:5c:cd:5f:45:bc:e9:46: 49:02:5c:fc:cd:1c:fc:bb:17:7d:41:b6:0b:89:9d:a9:bc:2b: fd:49:f5:da:0e:85:8b:20:57:5c:ff:80:06:8e:61:af:cc:1b: ba:20:51:cd:64:4c:c9:c8:f4:c5:26:8e:dd:f7:46:00:f5:8a: 81:d9:09:d5:79:a2:9b:31:3f:05:48:34:ec:9d:29:54:0b:ed: 82:6b:f5:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EhGNaYWivABuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk NWRiNGQ3OTgtNTEyZC00ZGI3LTg1NDItMzNmY2ZkM2M3ZTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6Yz80ZC5LzLIRHc0j7kQIvPBm+GIOu2oqVc bILiJrnAGJG7TnSul+bgx5tze5m3LUSHKSAfBuuHixjPK7qnci2zZcrtHYRqUIZ4 lU8wAHa5HkM6T0qMZoJFcSnsj3YUx7dWLdKKVvBBlkbskVQLWcKNRNNuzxQXEyxy A8RwLTH5iCfv41+3flN7OEqURuqgBN5TfNcpqxHI6mS9GLkHMFQEf7fn7ctNzF70 BX9nosVcYU7kS68Nl3FLU8Ji1J1qTvCg7l+LtbNGuUX/dtIFtpoMgeZiYjaut4bx Eh/dXmRJX+hxvHSIFpbWWxk53hglh5gjrZ39YK+9cy6DgdcdBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMBbx82yGEPC8Jg1nS9gszY9Ex5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvYjZhZjllZDAtMGIwOS0z MDc4LTg4ZDgtNmVlNjQ4NWI5MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmNgFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAs7TPEc0NbXMmrIA/n+9eS+rt4TslPotNXG1a3IEc9TWLUQOb3VOLb bw0feynGQesw8Htf0rUiofKD+I8ghDnAn1x9tHX3hA/gOp95uLyA9Eq9yKKXkz42 cqkdhvqCDvoYNiOKNmPoTWdShDu/2u7lWK2O6Zv0g24TnW6cOTjeiwE0AAo+h8X3 fuu5JFZA8sifQoHqavNrrpE7M42EoFnpPGOr2BcqTQiuNPsPXM1fRbzpRkkCXPzN HPy7F31BtguJnam8K/1J9doOhYsgV1z/gAaOYa/MG7ogUc1kTMnI9MUmjt33RgD1 ioHZCdV5opsxPwVINOydKVQL7YJr9b4= -----END CERTIFICATE-----Generated at Tue Oct 21 12:01:03 2025 by rpki-client