$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c75d991a-edc2-3d74-8efa-4da1a5550567.roa File: c75d991a-edc2-3d74-8efa-4da1a5550567.roa (raw, json) Hash identifier: ANAUAQSJb74aAEKWZCIMsMoS0zUkb3mqfQYsayMWwXc= Subject key identifier: FD:4E:2F:0A:05:8D:A7:D7:CE:1E:24:63:62:94:ED:2F:31:18:8B:71 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584A5297D9E08759C6772D60F640 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c75d991a-edc2-3d74-8efa-4da1a5550567.roa Signing time: Thu 26 Jun 2025 19:43:00 +0000 ROA not before: Thu 26 Jun 2025 19:43:00 +0000 ROA not after: Wed 24 Sep 2025 19:43:00 +0000 asID: 5650 IP address blocks: 152.232.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:97:d9:e0:87:59:c6:77:2d:60:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jun 26 19:43:00 2025 GMT Not After : Sep 24 19:43:00 2025 GMT Subject: CN=1940bf82-e902-4733-bac8-5dcbadbb5dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0b:03:7c:ab:85:0d:45:52:35:68:59:bf:33: 21:d3:3d:ac:3c:47:b4:7a:95:fc:12:09:22:c6:8f: ec:e1:62:bd:c2:51:32:c1:bd:50:72:93:24:c1:da: 57:2d:d4:5a:f8:ed:2b:06:1c:b6:67:e3:8c:23:e0: 32:c3:52:ba:02:c0:b1:01:4d:89:66:36:37:50:71: a6:4d:4b:9c:f1:c6:93:0a:85:4d:52:38:b1:80:2d: be:e8:4a:a7:fa:bb:c0:ef:66:f3:51:77:40:71:1c: 39:c2:a5:e1:a6:31:10:f6:e4:6f:2b:43:c0:1c:ca: 1e:9a:23:e5:41:b9:63:61:4c:16:ff:bd:b3:9e:98: eb:cc:62:f2:84:b4:72:48:70:fc:84:f9:ca:5b:d1: 07:9c:52:aa:c6:4a:85:bd:31:dc:7e:32:eb:b3:e1: 61:a2:4f:0b:82:cc:45:7f:c8:88:5e:2b:7d:84:bd: dd:a3:37:fd:46:b3:5a:fa:25:00:d8:37:6b:69:02: ce:6f:1f:da:a2:cc:c1:81:c1:a0:aa:11:61:85:4b: d8:a4:64:b3:14:72:38:1f:97:59:ef:04:59:18:23: ef:33:d5:40:77:e2:fb:b6:f4:21:31:47:87:f6:2d: 5e:63:cc:03:7e:dd:c1:f7:82:3c:45:1b:4c:0d:72: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4E:2F:0A:05:8D:A7:D7:CE:1E:24:63:62:94:ED:2F:31:18:8B:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c75d991a-edc2-3d74-8efa-4da1a5550567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:6c:53:b4:7d:45:84:8f:1c:23:d4:9a:de:84:8e:ea:94:ac: e0:bb:84:51:5b:7e:75:a3:92:b0:49:03:2b:62:ba:d5:e6:c6: 28:c5:27:ce:f4:57:10:d3:c7:2d:2a:02:a8:42:d0:1d:b4:2e: 22:a0:f8:fa:cc:7e:08:f3:f3:97:4f:df:5c:d3:d5:7d:37:b9: 6d:ff:84:4b:a1:9e:40:5f:1a:87:03:25:77:32:f7:ae:6a:04: f6:dc:fb:52:c3:0c:b8:d2:bc:a1:71:29:5e:46:fc:58:14:9e: 34:bf:14:bb:04:bf:1f:28:5f:8a:8f:26:e4:b1:4e:9b:4a:36: 18:60:cb:81:a2:b4:e5:92:fb:b4:68:52:c7:83:fb:06:38:e5: 41:e5:f9:c7:0a:60:f0:ec:0e:68:57:13:f9:94:b6:11:fc:a5: 29:52:5c:0e:ee:9e:53:0d:6d:b8:96:cb:97:b6:9f:62:3b:e4: 0b:bd:6d:c1:94:b2:c7:cb:0c:37:57:2a:78:98:ad:34:16:63: 9c:f2:47:32:95:e6:3e:f2:ea:36:04:0f:f0:7e:cf:d3:17:d2: 91:ce:5a:9a:1a:14:8e:06:47:5d:2d:09:31:11:2b:8b:85:16: 42:fe:e9:89:58:1d:df:59:b6:70:ca:84:59:30:e3:fb:1f:48: c9:a1:03:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpSl9ngh1nGdy1g9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDYyNjE5NDMwMFoXDTI1MDkyNDE5NDMwMFowLzEtMCsGA1UEAxMk MTk0MGJmODItZTkwMi00NzMzLWJhYzgtNWRjYmFkYmI1ZGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQsDfKuFDUVSNWhZvzMh0z2sPEe0epX8Egki xo/s4WK9wlEywb1QcpMkwdpXLdRa+O0rBhy2Z+OMI+Ayw1K6AsCxAU2JZjY3UHGm TUuc8caTCoVNUjixgC2+6Eqn+rvA72bzUXdAcRw5wqXhpjEQ9uRvK0PAHMoemiPl QbljYUwW/72znpjrzGLyhLRySHD8hPnKW9EHnFKqxkqFvTHcfjLrs+Fhok8LgsxF f8iIXit9hL3dozf9RrNa+iUA2DdraQLObx/aoszBgcGgqhFhhUvYpGSzFHI4H5dZ 7wRZGCPvM9VAd+L7tvQhMUeH9i1eY8wDft3B94I8RRtMDXIuLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1OLwoFjafXzh4kY2KU7S8xGItxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYzc1ZDk5MWEtZWRjMi0z ZDc0LThlZmEtNGRhMWE1NTUwNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM9sU7R9RYSPHCPUmt6EjuqUrOC7hFFbfnWjkrBJAytiutXmxijFJ870 VxDTxy0qAqhC0B20LiKg+PrMfgjz85dP31zT1X03uW3/hEuhnkBfGocDJXcy965q BPbc+1LDDLjSvKFxKV5G/FgUnjS/FLsEvx8oX4qPJuSxTptKNhhgy4GitOWS+7Ro UseD+wY45UHl+ccKYPDsDmhXE/mUthH8pSlSXA7unlMNbbiWy5e2n2I75Au9bcGU ssfLDDdXKniYrTQWY5zyRzKV5j7y6jYED/B+z9MX0pHOWpoaFI4GR10tCTERK4uF FkL+6YlYHd9ZtnDKhFkw4/sfSMmhA4k= -----END CERTIFICATE-----Generated at Sun Jun 29 10:39:25 2025 by rpki-client