$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c694b582-4abf-3f02-8621-356771f0f4a7.roa File: c694b582-4abf-3f02-8621-356771f0f4a7.roa (raw, json) Hash identifier: +3wu2odukeU64Jfimxz+rKVKVdFclCnChvrNi6lMQec= Subject key identifier: BC:7D:F8:81:AD:BE:54:15:9E:51:51:A9:66:36:24:92:32:BE:FA:E9 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584A522472CB86F687B2156A7FDF Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c694b582-4abf-3f02-8621-356771f0f4a7.roa Signing time: Thu 26 Jun 2025 15:50:29 +0000 ROA not before: Thu 26 Jun 2025 15:50:29 +0000 ROA not after: Wed 24 Sep 2025 15:50:29 +0000 asID: 9304 IP address blocks: 152.232.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:24:72:cb:86:f6:87:b2:15:6a:7f:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jun 26 15:50:29 2025 GMT Not After : Sep 24 15:50:29 2025 GMT Subject: CN=77d64cd5-e90c-4162-9496-80245311b5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:72:18:6d:c6:87:51:03:e8:de:b1:f5:9b:95: 71:e0:a9:67:2f:e6:ec:de:84:04:92:b9:9c:59:dd: c6:93:43:e2:6b:e9:29:05:76:a3:b8:e8:75:8b:43: b1:7a:61:ec:51:8f:93:95:b1:4e:f9:07:a2:57:c2: f9:bb:0f:40:97:a9:ee:41:94:dd:d3:c8:4c:ba:60: fe:7a:77:4d:3b:a7:fa:8a:9c:1b:a4:f2:62:9b:45: 73:2e:b9:22:f8:d3:3a:6a:9a:07:7e:b5:bf:2b:15: ff:66:2d:10:b1:50:2c:34:49:7f:77:d8:63:cd:5b: 51:92:09:b2:40:e7:f0:d3:f2:12:8f:47:d5:e8:55: 6e:a3:4e:4d:a5:f5:86:a6:9f:d2:8f:88:1f:4c:61: 21:1b:a2:e4:17:fb:c4:c8:72:8a:a0:8c:7a:3d:9b: cc:d1:73:a9:f6:ca:a9:02:d2:08:51:c4:68:f6:66: 73:0c:d1:95:f4:d8:fc:c7:f4:77:1c:ee:9b:81:b7: 33:54:21:7e:d9:d6:6d:11:94:ef:bf:79:d9:52:1b: 5d:b2:8f:6e:7d:d9:1c:5b:93:ab:92:2f:b9:f6:d8: ba:57:d0:46:84:ea:52:a8:7e:d4:63:f7:37:69:75: fe:6f:9b:e4:27:b1:ed:d9:8d:58:07:e6:ea:f2:f9: 0c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:7D:F8:81:AD:BE:54:15:9E:51:51:A9:66:36:24:92:32:BE:FA:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c694b582-4abf-3f02-8621-356771f0f4a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:dd:6a:4d:5e:fa:66:16:d0:f8:a9:62:f7:a7:22:e0:84:3a: b5:04:b4:5d:e7:dc:07:a4:0e:3e:58:3c:2b:1f:d3:12:72:c0: 9d:c8:73:bf:be:98:ea:98:2b:2d:9b:0b:00:c4:1e:5d:3b:ab: d0:a3:34:66:91:39:11:f4:f4:56:1e:8d:e1:d8:a7:79:78:b0: 0d:0e:44:6e:c5:3b:f4:0f:69:23:1c:ef:5c:6e:2b:2e:4f:91: 58:06:cf:c2:cf:0a:48:5f:0d:fa:db:b3:c5:2d:96:75:33:69: b5:92:75:d0:ba:b4:7d:a2:9c:6f:ed:b3:86:ab:79:0d:ec:44: 31:97:e5:38:c4:24:55:e9:04:8b:21:61:77:1e:c8:75:3b:bf: d9:21:c1:b0:11:9b:51:72:c5:f3:f9:9b:81:ae:69:93:be:ad: 6d:a6:79:14:b0:1b:92:48:c0:14:76:01:d5:5b:2d:d7:dd:54: 45:ec:61:8b:11:0e:c0:b5:31:c7:dd:ee:3c:a2:e1:77:de:d9: 07:0b:29:f6:79:2b:c8:86:6d:45:de:28:ee:81:20:a4:8b:ba: 32:fa:cd:c0:cf:26:54:73:55:df:a2:27:24:26:60:28:68:6d: 2e:d3:39:bb:49:7e:17:4c:b2:21:bd:0b:6b:4b:70:10:c2:fe: 39:7e:71:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpSJHLLhvaHshVqf98wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDYyNjE1NTAyOVoXDTI1MDkyNDE1NTAyOVowLzEtMCsGA1UEAxMk NzdkNjRjZDUtZTkwYy00MTYyLTk0OTYtODAyNDUzMTFiNWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3IYbcaHUQPo3rH1m5Vx4KlnL+bs3oQEkrmc Wd3Gk0Pia+kpBXajuOh1i0OxemHsUY+TlbFO+QeiV8L5uw9Al6nuQZTd08hMumD+ endNO6f6ipwbpPJim0VzLrki+NM6apoHfrW/KxX/Zi0QsVAsNEl/d9hjzVtRkgmy QOfw0/ISj0fV6FVuo05NpfWGpp/Sj4gfTGEhG6LkF/vEyHKKoIx6PZvM0XOp9sqp AtIIUcRo9mZzDNGV9Nj8x/R3HO6bgbczVCF+2dZtEZTvv3nZUhtdso9ufdkcW5Or ki+59ti6V9BGhOpSqH7UY/c3aXX+b5vkJ7Ht2Y1YB+bq8vkMgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLx9+IGtvlQVnlFRqWY2JJIyvvrpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYzY5NGI1ODItNGFiZi0z ZjAyLTg2MjEtMzU2NzcxZjBmNGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmOiAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/dak1e+mYW0PipYvenIuCEOrUEtF3n3AekDj5YPCsf0xJywJ3Ic7++ mOqYKy2bCwDEHl07q9CjNGaRORH09FYejeHYp3l4sA0ORG7FO/QPaSMc71xuKy5P kVgGz8LPCkhfDfrbs8UtlnUzabWSddC6tH2inG/ts4areQ3sRDGX5TjEJFXpBIsh YXceyHU7v9khwbARm1FyxfP5m4GuaZO+rW2meRSwG5JIwBR2AdVbLdfdVEXsYYsR DsC1Mcfd7jyi4Xfe2QcLKfZ5K8iGbUXeKO6BIKSLujL6zcDPJlRzVd+iJyQmYCho bS7TObtJfhdMsiG9C2tLcBDC/jl+cbA= -----END CERTIFICATE-----Generated at Sun Jun 29 03:52:51 2025 by rpki-client