$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/074ba238-a293-3e5d-98f5-b3c2f0b3033d.roa File: 074ba238-a293-3e5d-98f5-b3c2f0b3033d.roa (raw, json) Hash identifier: 65Fdg3VlPEBeyFo0EDqZMcFrwDKq3itrTJ58RyOOpGc= Subject key identifier: E5:AE:99:4F:91:2E:58:85:C6:F8:C4:C0:6B:D7:78:85:94:62:8F:3B Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584A522367E272EA9FAC0F417F00 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/074ba238-a293-3e5d-98f5-b3c2f0b3033d.roa Signing time: Thu 26 Jun 2025 15:48:23 +0000 ROA not before: Thu 26 Jun 2025 15:48:23 +0000 ROA not after: Wed 24 Sep 2025 15:48:23 +0000 asID: 20115 IP address blocks: 152.232.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:23:67:e2:72:ea:9f:ac:0f:41:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jun 26 15:48:23 2025 GMT Not After : Sep 24 15:48:23 2025 GMT Subject: CN=432b46e1-41e6-4160-a296-5d24d8126093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:15:a6:da:d5:1b:4f:2e:82:84:46:1e:15:10: 51:44:5d:56:d2:4f:ef:90:30:e4:b9:9b:b4:25:ec: e2:da:19:69:85:21:51:18:db:37:ca:3f:e8:95:57: a9:3b:e4:e3:e5:cc:6e:e9:d1:d5:6e:ad:cc:01:52: 43:f9:34:dc:84:11:90:a7:32:9e:c2:15:42:80:a0: 48:ef:ba:93:81:67:f7:0a:7b:2e:16:7f:2c:e9:4a: 3f:67:69:5b:71:9e:1e:2b:d8:97:7c:7d:69:f2:f5: e4:3b:5b:98:c7:0c:5f:1f:77:85:f7:84:b5:85:a7: bb:4d:c3:93:23:a3:a0:90:95:e2:a3:30:ca:e0:88: f7:1c:38:02:cc:d6:ae:64:36:ac:a6:16:d6:71:65: b8:b6:f8:eb:1f:5d:25:6c:ff:1a:c2:25:48:08:ec: 19:10:46:6a:8c:10:47:9f:66:6a:ea:a0:4f:d4:4d: 1f:f8:11:67:f9:6e:03:f7:24:47:d6:ad:76:df:08: 23:69:28:bd:a4:ce:55:5f:52:7b:12:d4:2f:cc:45: 29:74:5f:30:29:47:15:ab:39:80:c6:f5:7f:55:b6: ae:f5:65:c4:8c:a6:33:79:e7:d8:17:41:3d:b2:97: 06:69:a1:2d:94:89:72:3d:2d:43:05:87:e4:e7:fe: 30:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AE:99:4F:91:2E:58:85:C6:F8:C4:C0:6B:D7:78:85:94:62:8F:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/074ba238-a293-3e5d-98f5-b3c2f0b3033d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8d:a3:4b:fa:15:70:fc:e2:b7:ed:61:f4:df:31:6b:7c:72: c6:cc:50:ca:f9:e5:5b:0c:ca:74:74:d8:b3:03:bc:8b:b6:75: 66:d4:de:de:cf:72:3a:2e:ae:10:70:f1:31:69:98:48:1b:25: 87:3e:ec:e2:62:b1:fd:0e:66:52:1d:8f:b0:b2:3a:96:ea:41: 1f:ec:c2:29:bf:9e:54:0d:d5:85:1b:cf:08:10:4f:c7:b0:10: 71:a6:e1:85:c1:78:6b:92:9d:d0:a5:f9:f3:07:40:71:31:0b: 78:cb:89:37:08:31:79:80:07:cf:fa:85:56:29:6f:3e:4f:a3: 73:b7:51:35:26:86:c6:a2:55:67:aa:2c:ea:9c:4d:0a:42:82: b3:3c:70:86:b6:29:18:8a:69:aa:6f:2a:61:22:bf:69:a9:f5: 9a:84:07:1a:98:d5:42:26:f0:ef:72:f3:f9:b6:f4:e8:b3:23: 22:10:d6:93:5f:4c:b0:b6:3c:66:eb:53:40:de:58:d4:02:cb: 8e:b6:ca:72:72:e1:bb:7b:2a:0b:77:c4:3a:f6:0a:3d:4b:b5: 92:ad:a5:6b:e4:ef:aa:78:c9:c3:cb:0f:02:f6:da:47:ca:b9: 42:13:7d:de:ea:0e:f0:d7:ac:a5:b0:f5:bb:e8:85:e6:15:7c: a0:c7:b7:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpSI2ficuqfrA9BfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDYyNjE1NDgyM1oXDTI1MDkyNDE1NDgyM1owLzEtMCsGA1UEAxMk NDMyYjQ2ZTEtNDFlNi00MTYwLWEyOTYtNWQyNGQ4MTI2MDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBWm2tUbTy6ChEYeFRBRRF1W0k/vkDDkuZu0 Jezi2hlphSFRGNs3yj/olVepO+Tj5cxu6dHVbq3MAVJD+TTchBGQpzKewhVCgKBI 77qTgWf3CnsuFn8s6Uo/Z2lbcZ4eK9iXfH1p8vXkO1uYxwxfH3eF94S1hae7TcOT I6OgkJXiozDK4Ij3HDgCzNauZDasphbWcWW4tvjrH10lbP8awiVICOwZEEZqjBBH n2Zq6qBP1E0f+BFn+W4D9yRH1q123wgjaSi9pM5VX1J7EtQvzEUpdF8wKUcVqzmA xvV/Vbau9WXEjKYzeefYF0E9spcGaaEtlIlyPS1DBYfk5/4wdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOWumU+RLliFxvjEwGvXeIWUYo87MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMDc0YmEyMzgtYTI5My0z ZTVkLTk4ZjUtYjNjMmYwYjMwMzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASNo0v6FXD84rftYfTfMWt8csbMUMr55VsMynR02LMDvIu2dWbU3t7P cjourhBw8TFpmEgbJYc+7OJisf0OZlIdj7CyOpbqQR/swim/nlQN1YUbzwgQT8ew EHGm4YXBeGuSndCl+fMHQHExC3jLiTcIMXmAB8/6hVYpbz5Po3O3UTUmhsaiVWeq LOqcTQpCgrM8cIa2KRiKaapvKmEiv2mp9ZqEBxqY1UIm8O9y8/m29OizIyIQ1pNf TLC2PGbrU0DeWNQCy462ynJy4bt7Kgt3xDr2Cj1LtZKtpWvk76p4ycPLDwL22kfK uUITfd7qDvDXrKWw9bvoheYVfKDHt8k= -----END CERTIFICATE-----Generated at Sun Jun 29 10:19:00 2025 by rpki-client