$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/72b44df1-f82a-3aa2-bd57-add7053b0a7f.roa File: 72b44df1-f82a-3aa2-bd57-add7053b0a7f.roa (raw, json) Hash identifier: X87BmdIHkwufjbZejct04H3wFHrNEv9Xoy9+l2lNVAc= Subject key identifier: 33:F9:35:32:19:5E:01:2A:3D:F4:DB:AF:CE:A7:55:1D:81:35:46:87 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584A52240D178753CC09FA6A8B80 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/72b44df1-f82a-3aa2-bd57-add7053b0a7f.roa Signing time: Thu 26 Jun 2025 15:49:41 +0000 ROA not before: Thu 26 Jun 2025 15:49:41 +0000 ROA not after: Wed 24 Sep 2025 15:49:41 +0000 asID: 812 IP address blocks: 152.232.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:24:0d:17:87:53:cc:09:fa:6a:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jun 26 15:49:41 2025 GMT Not After : Sep 24 15:49:41 2025 GMT Subject: CN=09ec1766-2f91-44be-a84a-c0e5396e17ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f3:3e:46:9b:13:a6:70:54:e2:bb:9b:fd:09: 02:5c:c0:65:e1:66:38:be:24:00:57:d7:53:32:8e: 10:45:ed:34:60:90:74:a5:10:59:36:99:8b:5e:65: d6:fe:71:10:33:30:f4:f9:fb:b8:8f:13:5f:58:3c: 26:d2:ea:dd:5a:71:90:2f:d7:f2:4e:56:49:9e:a9: 5e:76:63:9e:85:c3:4f:f2:d5:af:f4:2c:3e:f6:44: a0:96:4c:c1:79:74:28:60:6b:8c:40:b6:7b:40:f9: ca:7b:8f:c8:0c:b9:73:0d:86:ac:cd:63:87:e6:1b: bb:e8:1e:26:2a:83:82:71:9e:b1:47:33:f7:ad:7f: 9f:f3:df:bd:71:75:b3:9c:16:27:b8:d2:24:2a:c8: fd:e4:4e:49:00:d6:8a:9f:b6:55:1d:72:fa:bd:8c: 0b:67:78:c5:61:8d:2d:ee:90:ee:e2:68:5c:18:f0: df:b3:97:ae:23:30:83:12:41:f5:c9:ba:52:38:cc: 44:f4:3d:13:db:4f:8a:52:de:f2:56:76:29:6b:36: 56:8a:c7:28:06:8e:d5:74:db:f2:2d:7a:cf:09:b8: f8:b3:14:60:95:25:ff:2d:bb:fa:57:4e:09:2c:ab: 18:1d:ce:c7:e0:94:f6:94:0a:25:4a:cd:d2:65:20: b4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F9:35:32:19:5E:01:2A:3D:F4:DB:AF:CE:A7:55:1D:81:35:46:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/72b44df1-f82a-3aa2-bd57-add7053b0a7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9c:bb:c2:b3:f6:74:de:33:fc:7d:e5:00:82:c2:ab:a7:ff: a3:2d:51:da:0e:58:ee:b3:59:e0:70:a6:ef:b9:5e:48:d9:ce: 9a:75:63:99:38:50:f9:34:02:66:da:a1:09:3c:90:36:d9:ab: 2a:59:90:ce:6d:8c:0c:20:5c:5b:14:a9:68:37:04:6e:cf:22: e0:c4:f6:e0:e1:d8:f1:ee:e4:d7:3e:45:88:7a:ca:b3:51:48: 39:69:b2:7a:e9:b7:c4:2b:a4:e2:1a:d9:b8:ba:e5:c6:f2:7c: d2:d0:26:62:7f:3b:ae:8e:eb:48:28:4d:f2:4a:e1:c0:27:68: cd:2a:00:c9:83:a2:2b:b7:e1:98:60:a7:37:77:95:d4:c6:67: 01:6f:2e:bc:a2:f0:4c:b7:a6:53:83:af:a5:28:a5:18:0b:46: e8:2e:b0:6d:b4:ae:8c:d0:b7:6f:c1:04:f6:4e:67:9c:f3:15: a0:08:53:e0:e5:f1:a2:75:b8:17:85:0f:f1:91:3b:f7:16:12: 13:9c:a1:cd:03:1b:39:92:79:ad:4f:b3:2b:90:2a:90:dd:ca: e6:c1:81:0d:da:5a:e3:c3:f7:c7:a4:75:e6:37:69:4a:18:37: 20:f8:92:b1:33:ef:ec:a4:d8:64:a9:ff:63:f6:5d:3c:57:b4: 98:af:8c:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpSJA0Xh1PMCfpqi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDYyNjE1NDk0MVoXDTI1MDkyNDE1NDk0MVowLzEtMCsGA1UEAxMk MDllYzE3NjYtMmY5MS00NGJlLWE4NGEtYzBlNTM5NmUxN2VlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/M+RpsTpnBU4rub/QkCXMBl4WY4viQAV9dT Mo4QRe00YJB0pRBZNpmLXmXW/nEQMzD0+fu4jxNfWDwm0urdWnGQL9fyTlZJnqle dmOehcNP8tWv9Cw+9kSglkzBeXQoYGuMQLZ7QPnKe4/IDLlzDYaszWOH5hu76B4m KoOCcZ6xRzP3rX+f89+9cXWznBYnuNIkKsj95E5JANaKn7ZVHXL6vYwLZ3jFYY0t 7pDu4mhcGPDfs5euIzCDEkH1ybpSOMxE9D0T20+KUt7yVnYpazZWiscoBo7VdNvy LXrPCbj4sxRglSX/Lbv6V04JLKsYHc7H4JT2lAolSs3SZSC0gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDP5NTIZXgEqPfTbr86nVR2BNUaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNzJiNDRkZjEtZjgyYS0z YWEyLWJkNTctYWRkNzA1M2IwYTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWcu8Kz9nTeM/x95QCCwqun/6MtUdoOWO6zWeBwpu+5XkjZzpp1Y5k4 UPk0AmbaoQk8kDbZqypZkM5tjAwgXFsUqWg3BG7PIuDE9uDh2PHu5Nc+RYh6yrNR SDlpsnrpt8QrpOIa2bi65cbyfNLQJmJ/O66O60goTfJK4cAnaM0qAMmDoiu34Zhg pzd3ldTGZwFvLryi8Ey3plODr6UopRgLRugusG20rozQt2/BBPZOZ5zzFaAIU+Dl 8aJ1uBeFD/GRO/cWEhOcoc0DGzmSea1PsyuQKpDdyubBgQ3aWuPD98ekdeY3aUoY NyD4krEz7+yk2GSp/2P2XTxXtJivjH4= -----END CERTIFICATE-----Generated at Sun Jun 29 00:25:12 2025 by rpki-client