$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/b6af9ed0-0b09-3078-88d8-6ee6485b9318.roa File: b6af9ed0-0b09-3078-88d8-6ee6485b9318.roa (raw, json) Hash identifier: HaBTKIBSW4baoKrjWPypAs3LfRQpLKox/lAkH97Q2rw= Subject key identifier: EC:29:84:BB:4C:62:F7:DF:A3:87:95:56:01:DB:E8:B7:D9:CB:DB:53 Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584A466AD454C5F9DAD31C2E8480 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/b6af9ed0-0b09-3078-88d8-6ee6485b9318.roa Signing time: Sun 22 Jun 2025 11:02:36 +0000 ROA not before: Sun 22 Jun 2025 11:02:36 +0000 ROA not after: Sat 20 Sep 2025 11:02:36 +0000 asID: 30313 IP address blocks: 152.216.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:6a:d4:54:c5:f9:da:d3:1c:2e:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: Jun 22 11:02:36 2025 GMT Not After : Sep 20 11:02:36 2025 GMT Subject: CN=10fbe0c2-bcf3-4897-b8c9-8aa9bba28688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:18:3b:cc:1e:6c:7c:d4:6a:63:54:f3:26:c6: c4:fe:00:6a:c5:ea:36:55:a2:07:b4:d2:19:6e:bd: e0:eb:90:7a:a1:f9:29:1d:af:8a:f8:76:c6:ac:c2: c2:52:1f:78:0a:77:6f:b9:4a:52:fe:b5:be:af:86: aa:53:ac:31:c6:fb:21:bc:9c:b6:21:75:c2:76:58: 2b:b1:d2:64:49:a3:c3:e7:1d:81:0b:4f:62:93:e1: 0d:bc:d4:10:75:41:9b:1b:0a:1a:2d:6f:b5:bc:ac: 94:db:20:91:cd:84:03:8b:02:49:c7:26:0d:7a:1e: 4d:63:fb:54:53:b6:4e:f0:cb:25:5e:fa:2f:4c:30: 9d:bb:6a:b8:48:dd:34:e3:97:ef:f0:04:6e:fc:ec: 0c:49:d2:ff:40:92:fe:1a:38:23:52:28:ab:94:11: da:4c:67:d7:59:de:a5:53:bc:17:f2:88:b8:ca:b6: 87:ad:5c:ac:e2:37:9d:1a:ff:87:b5:6a:2c:7c:ce: 35:e1:e3:21:c7:72:c5:48:65:dd:9c:60:ee:90:71: 4f:2d:5b:98:91:34:07:81:3a:58:d6:ea:08:f4:a2: 1b:6a:a4:31:54:2a:73:e9:41:0a:88:4c:5f:98:37: a8:d7:57:71:41:10:22:34:f3:d0:64:ec:d4:87:34: fc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:29:84:BB:4C:62:F7:DF:A3:87:95:56:01:DB:E8:B7:D9:CB:DB:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/b6af9ed0-0b09-3078-88d8-6ee6485b9318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d8:7c:ff:c8:1f:cb:fd:6b:58:fb:ef:17:a8:fd:30:2c:02: 59:c4:cb:1e:87:2b:66:92:48:bc:18:88:17:17:ac:13:99:4b: e4:ca:44:fa:6a:62:76:7c:f0:22:73:cb:69:d7:1b:c2:84:9c: 7d:2f:68:c7:4a:0a:fc:2c:ca:67:ec:e2:dc:15:2d:bd:33:b8: 0a:0f:5d:e0:3d:3b:2a:89:66:c8:09:c0:df:c9:b6:bb:51:6e: 4e:e7:f4:a1:b6:cd:1f:c0:e8:28:e8:27:40:c9:5c:88:53:1a: 7b:f7:81:28:68:29:7b:af:50:93:d9:40:f7:be:5f:54:44:71: 11:8d:45:c8:b1:a6:a0:c4:cf:75:ef:32:fe:62:b9:bd:33:ce: 9b:97:39:ae:0f:63:5a:15:36:54:fe:5a:46:ee:05:93:44:c6: 25:62:51:b0:50:b3:c9:58:63:5d:10:40:f8:54:26:4b:64:ff: 3d:64:72:46:cb:c5:c2:2c:da:12:17:57:19:7a:a5:9a:65:11: 93:62:b0:df:22:53:56:28:c8:dd:e3:8a:68:4d:05:0d:2d:50: a1:d4:85:eb:81:0f:c4:32:6f:a2:cb:9a:7c:a4:7d:17:0f:9f: d1:93:f9:05:51:4c:b8:5c:3a:a8:4a:5d:76:5e:aa:dd:1e:1b: 1f:cf:a9:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGatRUxfna0xwuhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI1MDYyMjExMDIzNloXDTI1MDkyMDExMDIzNlowLzEtMCsGA1UEAxMk MTBmYmUwYzItYmNmMy00ODk3LWI4YzktOGFhOWJiYTI4Njg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRg7zB5sfNRqY1TzJsbE/gBqxeo2VaIHtNIZ br3g65B6ofkpHa+K+HbGrMLCUh94CndvuUpS/rW+r4aqU6wxxvshvJy2IXXCdlgr sdJkSaPD5x2BC09ik+ENvNQQdUGbGwoaLW+1vKyU2yCRzYQDiwJJxyYNeh5NY/tU U7ZO8MslXvovTDCdu2q4SN0045fv8ARu/OwMSdL/QJL+GjgjUiirlBHaTGfXWd6l U7wX8oi4yraHrVys4jedGv+HtWosfM414eMhx3LFSGXdnGDukHFPLVuYkTQHgTpY 1uoI9KIbaqQxVCpz6UEKiExfmDeo11dxQRAiNPPQZOzUhzT8dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwphLtMYvffo4eVVgHb6LfZy9tTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvYjZhZjllZDAtMGIwOS0z MDc4LTg4ZDgtNmVlNjQ4NWI5MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmNgFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGHYfP/IH8v9a1j77xeo/TAsAlnEyx6HK2aSSLwYiBcXrBOZS+TKRPpq YnZ88CJzy2nXG8KEnH0vaMdKCvwsymfs4twVLb0zuAoPXeA9OyqJZsgJwN/JtrtR bk7n9KG2zR/A6CjoJ0DJXIhTGnv3gShoKXuvUJPZQPe+X1REcRGNRcixpqDEz3Xv Mv5iub0zzpuXOa4PY1oVNlT+WkbuBZNExiViUbBQs8lYY10QQPhUJktk/z1kckbL xcIs2hIXVxl6pZplEZNisN8iU1YoyN3jimhNBQ0tUKHUheuBD8Qyb6LLmnykfRcP n9GT+QVRTLhcOqhKXXZeqt0eGx/PqdM= -----END CERTIFICATE-----Generated at Tue Jul 1 15:42:31 2025 by rpki-client