$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0d62ff48-4eac-3a23-b2e9-be3bb6a4d0ae.roa File: 0d62ff48-4eac-3a23-b2e9-be3bb6a4d0ae.roa (raw, json) Hash identifier: o6jldVnmIyk8Gt90Y6tWpnDTqMh6X/Em/cGwVY1U6Is= Subject key identifier: DD:E2:45:8A:BC:B9:06:6B:0A:68:58:7B:79:14:21:26:AC:20:1E:BF Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584A522387E2ABE3B68F7E951680 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0d62ff48-4eac-3a23-b2e9-be3bb6a4d0ae.roa Signing time: Thu 26 Jun 2025 15:48:38 +0000 ROA not before: Thu 26 Jun 2025 15:48:38 +0000 ROA not after: Wed 24 Sep 2025 15:48:38 +0000 asID: 7029 IP address blocks: 152.232.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:23:87:e2:ab:e3:b6:8f:7e:95:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jun 26 15:48:38 2025 GMT Not After : Sep 24 15:48:38 2025 GMT Subject: CN=03b6f6ea-ff3d-412a-b1e3-bfc0902390c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:19:97:b0:bc:56:21:d0:76:74:63:24:d7:d7: 23:00:6b:f5:0b:9a:e7:5f:fb:eb:05:62:8e:a4:e2: 1a:dc:3a:c2:4e:68:13:d1:a8:4b:15:82:53:55:10: 89:a1:e8:c9:d1:d9:41:50:ec:f7:45:e1:ca:45:21: 6e:f5:c7:71:01:69:3d:a5:55:10:7e:b9:10:25:6d: 0c:0e:3d:b5:bf:74:a4:09:84:c3:7f:40:3d:6a:6c: 81:2e:20:23:5f:f1:f9:70:29:71:ee:fa:9e:95:e9: 11:b9:aa:4d:75:61:3e:85:ea:44:d5:3a:ac:08:0c: 29:79:7e:9c:78:af:dd:b1:07:1f:ce:df:6f:47:2b: 09:e9:c1:5d:b5:15:ed:5c:b0:1f:ca:57:9b:70:9f: 01:f0:7a:d4:0a:df:0b:a2:64:42:24:59:cf:80:1a: 6f:76:91:00:a0:21:d1:96:dd:cb:af:27:8a:37:fb: 1e:d4:97:7a:32:2a:89:af:fd:98:09:67:8f:e6:46: 86:ca:19:92:a4:8e:03:da:9a:9e:3e:22:9e:46:c5: 7c:fc:05:39:2b:0c:dd:49:d8:55:da:f5:31:6d:e0: 7b:df:b5:12:17:42:8b:ab:89:a0:33:4d:64:fe:c0: 9c:75:f8:0c:88:8d:a3:e1:24:6a:f3:71:9b:57:e6: a8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E2:45:8A:BC:B9:06:6B:0A:68:58:7B:79:14:21:26:AC:20:1E:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/0d62ff48-4eac-3a23-b2e9-be3bb6a4d0ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:e7:65:f1:8c:5c:f0:8e:16:18:f6:12:c2:a9:71:58:7a:ee: 76:cc:80:9c:1b:d1:b2:b0:a6:fd:9f:50:2a:cd:5f:00:1e:ae: 5e:20:94:68:e6:18:37:48:b3:bb:23:83:c3:47:0b:60:9d:36: 3b:6f:4d:6a:d2:29:02:27:ce:99:cd:7e:3b:73:dc:80:ce:6c: 2e:94:03:6a:94:11:7f:22:fb:86:57:97:17:d1:78:23:f0:85: 71:12:74:ea:ce:37:c5:7b:2c:d6:48:86:87:72:6b:3b:2a:f3: 50:e6:7e:ae:08:6f:89:6d:f7:7c:92:86:2b:56:21:85:51:64: ea:2b:ff:b2:a4:7c:67:d8:d8:a0:36:e3:45:2a:58:fb:1c:aa: 50:e0:9d:a8:c9:a7:a4:15:5d:e5:fd:18:fa:4f:e4:01:f3:32: cd:47:2f:ae:d5:d5:38:f5:88:4c:10:14:a3:9a:37:d1:ae:9e: a6:0b:dd:0f:a1:1e:92:55:88:06:3e:d7:c6:20:83:f7:02:fd: f6:eb:b0:bc:5d:d7:b3:83:55:50:5c:41:d7:f2:ba:67:73:3b: 5d:9f:af:c2:4b:6d:37:f3:7a:de:2a:bd:7a:48:63:44:c4:5e: dc:e8:0b:05:34:bf:d7:a6:63:aa:d9:1f:65:19:66:be:9d:8f: 63:ba:b8:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpSI4fiq+O2j36VFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDYyNjE1NDgzOFoXDTI1MDkyNDE1NDgzOFowLzEtMCsGA1UEAxMk MDNiNmY2ZWEtZmYzZC00MTJhLWIxZTMtYmZjMDkwMjM5MGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBmXsLxWIdB2dGMk19cjAGv1C5rnX/vrBWKO pOIa3DrCTmgT0ahLFYJTVRCJoejJ0dlBUOz3ReHKRSFu9cdxAWk9pVUQfrkQJW0M Dj21v3SkCYTDf0A9amyBLiAjX/H5cClx7vqelekRuapNdWE+hepE1TqsCAwpeX6c eK/dsQcfzt9vRysJ6cFdtRXtXLAfylebcJ8B8HrUCt8LomRCJFnPgBpvdpEAoCHR lt3LryeKN/se1Jd6MiqJr/2YCWeP5kaGyhmSpI4D2pqePiKeRsV8/AU5KwzdSdhV 2vUxbeB737USF0KLq4mgM01k/sCcdfgMiI2j4SRq83GbV+aoywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3iRYq8uQZrCmhYe3kUISasIB6/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMGQ2MmZmNDgtNGVhYy0z YTIzLWIyZTktYmUzYmI2YTRkMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvnZfGMXPCOFhj2EsKpcVh67nbMgJwb0bKwpv2fUCrNXwAerl4glGjm GDdIs7sjg8NHC2CdNjtvTWrSKQInzpnNfjtz3IDObC6UA2qUEX8i+4ZXlxfReCPw hXESdOrON8V7LNZIhodyazsq81Dmfq4Ib4lt93yShitWIYVRZOor/7KkfGfY2KA2 40UqWPscqlDgnajJp6QVXeX9GPpP5AHzMs1HL67V1Tj1iEwQFKOaN9GunqYL3Q+h HpJViAY+18Ygg/cC/fbrsLxd17ODVVBcQdfyumdzO12fr8JLbTfzet4qvXpIY0TE XtzoCwU0v9emY6rZH2UZZr6dj2O6uPM= -----END CERTIFICATE-----Generated at Sun Jun 29 01:07:47 2025 by rpki-client