$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/84a6a4d8-526f-3876-bb24-09259fd828de.roa File: 84a6a4d8-526f-3876-bb24-09259fd828de.roa (raw, json) Hash identifier: eHGvuYY5HZVWSmmedjIyDLsDAYE2d1768wYzV5Z2TnM= Subject key identifier: 78:48:09:6C:82:C3:C6:10:24:04:1E:2A:E2:96:15:38:37:05:49:C0 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584A5297F376C2E2F671F073BC00 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/84a6a4d8-526f-3876-bb24-09259fd828de.roa Signing time: Thu 26 Jun 2025 19:43:13 +0000 ROA not before: Thu 26 Jun 2025 19:43:13 +0000 ROA not after: Wed 24 Sep 2025 19:43:13 +0000 asID: 7029 IP address blocks: 152.232.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:97:f3:76:c2:e2:f6:71:f0:73:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jun 26 19:43:13 2025 GMT Not After : Sep 24 19:43:13 2025 GMT Subject: CN=f70e5cbe-3352-4eab-8204-404f6579916d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:1a:41:24:f9:39:3e:66:48:c9:b2:90:a1: d3:c0:6f:d1:b4:f4:99:2a:8c:90:df:77:3b:f0:28: 4e:28:c5:bd:cb:ae:23:76:6f:ab:da:2f:0b:fc:67: e5:69:8a:d7:dc:2c:a7:54:1e:b5:90:09:ba:84:c0: 78:a5:cb:9e:c6:1e:0b:98:97:16:9b:7a:f2:bc:61: ee:62:ca:0c:64:8a:ad:eb:8f:03:32:23:60:30:bc: f5:7e:5e:d9:31:bc:cd:2f:b0:e2:d4:b2:63:c4:03: f9:ad:a8:24:63:1a:86:27:cd:ea:49:53:13:27:f7: 89:c8:e3:cd:97:4c:46:4d:3f:6f:ce:4c:2f:55:61: ca:c4:83:fc:9c:8e:94:8a:e0:1c:8f:db:10:5c:ca: 0d:46:34:28:47:63:3e:2c:30:e3:92:d0:5b:cc:41: 6f:f1:8b:81:76:09:26:78:6f:dc:97:28:62:49:52: 74:53:9b:0d:73:d3:a7:cf:ef:8e:d5:9d:74:6b:3b: dc:48:37:29:f2:a9:e3:c3:42:d7:3c:34:6e:4a:db: 43:ff:09:0a:21:d4:be:b7:46:39:27:84:0a:94:86: 62:16:13:b4:22:36:5b:7e:36:5c:c9:6d:bd:63:17: 41:22:20:3c:5b:e3:c0:ad:4d:3f:e6:f5:c5:69:0a: 69:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:48:09:6C:82:C3:C6:10:24:04:1E:2A:E2:96:15:38:37:05:49:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/84a6a4d8-526f-3876-bb24-09259fd828de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:53:63:d8:26:bf:c1:08:a7:e1:39:fa:c6:51:65:b8:6a:13: 2f:5e:6b:98:51:fc:ed:1a:bd:ea:35:88:d9:c7:bf:1a:fd:91: e9:21:4c:39:d4:f0:ce:b4:0f:6c:ff:a7:d4:bb:55:87:db:de: 14:e4:ce:e7:65:c3:91:61:c5:b4:60:47:a7:b2:94:af:5d:46: ba:c7:db:39:2a:3c:c2:ab:f4:3e:44:42:af:7d:e4:57:2c:97: 79:91:02:cf:ef:57:49:4a:0b:d9:08:6b:85:ae:fb:f3:f8:6f: be:a3:52:90:9b:b1:03:1e:c4:04:db:ab:74:c9:ae:5c:2f:16: df:b6:bb:75:02:fc:75:cd:99:2d:43:45:37:f3:8b:a3:57:ab: 81:ac:7f:36:14:7c:c8:a5:dd:16:d2:28:6d:bd:52:5f:7f:fa: cb:4c:43:be:06:25:f8:f3:64:03:2d:e2:4a:e7:1f:a4:e0:a8: 48:61:c1:6d:4e:61:d6:c9:22:ce:4a:e2:66:aa:fa:78:3d:be: a5:5a:6a:b7:2d:9c:77:33:71:f6:45:ea:fa:1f:65:fc:dc:e3: 39:ab:57:20:c5:f4:7b:ab:8b:f0:cf:43:f5:70:5d:25:54:d1: 98:d7:f4:be:00:35:7b:bc:b4:05:57:f7:9d:cb:d4:98:17:63: ea:99:24:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpSl/N2wuL2cfBzvAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDYyNjE5NDMxM1oXDTI1MDkyNDE5NDMxM1owLzEtMCsGA1UEAxMk ZjcwZTVjYmUtMzM1Mi00ZWFiLTgyMDQtNDA0ZjY1Nzk5MTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PkaQST5OT5mSMmykKHTwG/RtPSZKoyQ33c7 8ChOKMW9y64jdm+r2i8L/GflaYrX3CynVB61kAm6hMB4pcuexh4LmJcWm3ryvGHu YsoMZIqt648DMiNgMLz1fl7ZMbzNL7Di1LJjxAP5ragkYxqGJ83qSVMTJ/eJyOPN l0xGTT9vzkwvVWHKxIP8nI6UiuAcj9sQXMoNRjQoR2M+LDDjktBbzEFv8YuBdgkm eG/clyhiSVJ0U5sNc9Onz++O1Z10azvcSDcp8qnjw0LXPDRuSttD/wkKIdS+t0Y5 J4QKlIZiFhO0IjZbfjZcyW29YxdBIiA8W+PArU0/5vXFaQppEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhICWyCw8YQJAQeKuKWFTg3BUnAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvODRhNmE0ZDgtNTI2Zi0z ODc2LWJiMjQtMDkyNTlmZDgyOGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdTY9gmv8EIp+E5+sZRZbhqEy9ea5hR/O0aveo1iNnHvxr9kekhTDnU 8M60D2z/p9S7VYfb3hTkzudlw5FhxbRgR6eylK9dRrrH2zkqPMKr9D5EQq995Fcs l3mRAs/vV0lKC9kIa4Wu+/P4b76jUpCbsQMexATbq3TJrlwvFt+2u3UC/HXNmS1D RTfzi6NXq4GsfzYUfMil3RbSKG29Ul9/+stMQ74GJfjzZAMt4krnH6TgqEhhwW1O YdbJIs5K4maq+ng9vqVaarctnHczcfZF6vofZfzc4zmrVyDF9Huri/DPQ/VwXSVU 0ZjX9L4ANXu8tAVX953L1JgXY+qZJIo= -----END CERTIFICATE-----Generated at Sun Jun 29 01:43:02 2025 by rpki-client