$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/f34c3e1a-14c0-3768-9eae-e50e4493ef86.roa File: f34c3e1a-14c0-3768-9eae-e50e4493ef86.roa (raw, json) Hash identifier: LFwq3b2sLvnnKrnsM5r0GreKD2TZpd2JCEa15W9FP3Q= Subject key identifier: C2:A6:6A:FA:16:22:00:75:F7:3A:78:67:73:28:37:5B:02:3D:C7:B3 Certificate issuer: /CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Certificate serial: 010D0C9F4328584B25FC48DFA2D89A5D51075000 Authority key identifier: 0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/f34c3e1a-14c0-3768-9eae-e50e4493ef86.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 30313 IP address blocks: 152.216.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:48:df:a2:d8:9a:5d:51:07:50:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddbca9a-960e-43a1-a865-f0c100d0fc7a Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=fe5d5f7c-848e-4bfc-9ccd-0801a33f42f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7d:bb:58:9f:c4:5a:72:76:ae:5b:85:3d:6d: 77:05:26:1b:4a:fd:93:4f:d4:77:73:0b:9e:8f:07: 89:78:61:6b:14:c0:eb:bc:c1:c4:b4:7f:9c:88:fa: 6e:3d:4d:40:ee:38:57:4f:77:90:b9:e6:c8:1a:ea: 65:2c:04:9a:14:6d:d5:28:c7:7c:bb:20:e5:1d:6c: c7:1c:f3:98:a8:d6:a5:74:d1:78:a3:e1:9d:b8:b3: 8c:1d:9f:3f:91:15:95:4f:b5:db:e8:26:90:41:80: 52:12:b7:d4:a1:3f:13:c6:bb:05:64:bf:c4:e0:0d: ae:af:bf:d0:fa:1e:82:3e:a9:32:f9:1a:7b:f9:e4: a6:46:44:89:46:82:86:9c:4e:f8:d3:d9:41:68:04: d0:bb:cf:e6:68:69:50:17:68:8a:63:0a:72:42:60: 5a:a3:fe:8d:4c:fe:ed:75:de:5a:d2:51:71:39:9d: 8b:c5:e5:18:ec:34:06:ac:bf:3a:87:ed:e7:d7:b0: b5:0c:6b:30:69:84:28:c1:09:6e:cd:e3:a1:eb:d6: ac:51:16:a7:bf:1f:ad:27:94:02:7e:bb:17:f1:20: e4:f2:73:bc:85:49:02:99:ce:a5:59:8f:b1:60:5a: 7e:81:53:d9:39:05:ee:99:7a:cd:67:00:53:6f:5b: 57:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A6:6A:FA:16:22:00:75:F7:3A:78:67:73:28:37:5B:02:3D:C7:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/f34c3e1a-14c0-3768-9eae-e50e4493ef86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.crl X509v3 Authority Key Identifier: keyid:0A:3B:70:84:88:05:6E:BB:E4:7F:9E:4C:EE:37:E2:8F:53:7C:BE:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5ddbca9a-960e-43a1-a865-f0c100d0fc7a.cer sbgp-ipAddrBlock: critical IPv4: 152.216.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:07:bb:a1:12:29:01:da:2f:48:8d:6d:58:52:cf:64:d7:44: 76:fc:aa:8b:c2:8b:1b:db:65:06:e8:11:3e:ea:36:20:5b:f1: 5d:87:7d:db:b1:a0:bb:bc:94:71:e7:91:2b:6e:63:0e:98:8c: 4c:31:fc:f8:38:93:bb:d0:2f:d5:d8:1f:46:13:92:de:be:ec: 51:ea:3f:93:3e:5f:7b:5c:2f:c7:ca:a3:a5:45:0f:dc:b5:ae: 98:a7:e2:10:c1:77:c1:af:12:f2:54:16:c8:02:04:5d:86:fd: 1c:1d:70:7b:f9:2e:b5:1d:d6:bf:ec:0f:c7:57:82:73:b0:5e: 1a:91:ba:df:42:c6:79:71:5f:c8:01:37:3b:e5:d0:f1:18:d7: 31:7d:35:8a:f6:00:55:60:09:ac:68:f0:09:a1:ec:af:ce:34: c3:d2:99:f0:7d:28:75:6b:26:7e:2e:55:3c:57:86:bc:92:56: f0:43:26:c8:74:b4:a5:ee:06:f5:2f:c8:ae:e7:78:14:b1:ca: dc:8d:29:00:d5:2a:94:0b:3a:f4:bd:ea:82:2f:5c:44:26:78: 67:49:6d:a8:86:af:b6:05:37:cf:b7:27:fd:21:c6:16:73:1e: 22:6c:cc:7e:2d:4f:66:2f:27:02:46:50:12:09:fb:50:cd:89: 45:9f:31:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EjfotiaXVEHUAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkYmNhOWEtOTYwZS00M2ExLWE4NjUtZjBjMTAwZDBm YzdhMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZmU1ZDVmN2MtODQ4ZS00YmZjLTljY2QtMDgwMWEzM2Y0MmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX27WJ/EWnJ2rluFPW13BSYbSv2TT9R3cwue jweJeGFrFMDrvMHEtH+ciPpuPU1A7jhXT3eQuebIGuplLASaFG3VKMd8uyDlHWzH HPOYqNaldNF4o+GduLOMHZ8/kRWVT7Xb6CaQQYBSErfUoT8TxrsFZL/E4A2ur7/Q +h6CPqky+Rp7+eSmRkSJRoKGnE7409lBaATQu8/maGlQF2iKYwpyQmBao/6NTP7t dd5a0lFxOZ2LxeUY7DQGrL86h+3n17C1DGswaYQowQluzeOh69asURanvx+tJ5QC frsX8SDk8nO8hUkCmc6lWY+xYFp+gVPZOQXumXrNZwBTb1tXawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKmavoWIgB19zp4Z3MoN1sCPcezMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRi Y2E5YS05NjBlLTQzYTEtYTg2NS1mMGMxMDBkMGZjN2EvZjM0YzNlMWEtMTRjMC0z NzY4LTllYWUtZTUwZTQ0OTNlZjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWRkYmNhOWEtOTYwZS00M2ExLWE4 NjUtZjBjMTAwZDBmYzdhLzVkZGJjYTlhLTk2MGUtNDNhMS1hODY1LWYwYzEwMGQw ZmM3YS5jcmwwHwYDVR0jBBgwFoAUCjtwhIgFbrvkf55M7jfij1N8voIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZGRiY2E5YS05NjBlLTQzYTEtYTg2NS1mMGMx MDBkMGZjN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmNgPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8Hu6ESKQHaL0iNbVhSz2TXRHb8qovCixvbZQboET7qNiBb8V2Hfdux oLu8lHHnkStuYw6YjEwx/Pg4k7vQL9XYH0YTkt6+7FHqP5M+X3tcL8fKo6VFD9y1 rpin4hDBd8GvEvJUFsgCBF2G/RwdcHv5LrUd1r/sD8dXgnOwXhqRut9CxnlxX8gB Nzvl0PEY1zF9NYr2AFVgCaxo8Amh7K/ONMPSmfB9KHVrJn4uVTxXhrySVvBDJsh0 tKXuBvUvyK7neBSxytyNKQDVKpQLOvS96oIvXEQmeGdJbaiGr7YFN8+3J/0hxhZz HiJszH4tT2YvJwJGUBIJ+1DNiUWfMZs= -----END CERTIFICATE-----Generated at Tue Oct 21 12:05:55 2025 by rpki-client