$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/caa2d549-4016-330e-806a-a66db5f6ef79.roa File: caa2d549-4016-330e-806a-a66db5f6ef79.roa (raw, json) Hash identifier: /OUhRa4wUXAEZElK1MpPE7npfpjOnou3E/zmLPJaC44= Subject key identifier: D9:CB:4B:2F:96:9D:71:4D:9F:2D:01:40:3B:74:56:D3:76:95:5F:13 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584A5224321C839F17703C145E70 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/caa2d549-4016-330e-806a-a66db5f6ef79.roa Signing time: Thu 26 Jun 2025 15:49:59 +0000 ROA not before: Thu 26 Jun 2025 15:49:59 +0000 ROA not after: Wed 24 Sep 2025 15:49:59 +0000 asID: 9304 IP address blocks: 152.232.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:24:32:1c:83:9f:17:70:3c:14:5e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jun 26 15:49:59 2025 GMT Not After : Sep 24 15:49:59 2025 GMT Subject: CN=0f3a116a-fdd4-4449-887d-10e3b4349d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5e:6e:0f:f7:d2:ee:71:42:2a:5f:a2:82:60: 2d:45:86:95:0d:85:71:ff:33:a7:ae:1b:75:d7:a5: e0:26:f1:9f:ed:bf:9b:4e:5b:a2:95:64:f2:ef:2c: e3:29:da:9e:af:1d:6c:a8:96:97:85:3b:d9:d3:96: 39:0e:d0:22:31:8d:4e:0b:0e:b5:2a:e7:1a:34:70: 7d:c1:47:d6:ba:78:c1:e3:36:2c:5d:e8:42:70:53: 0f:31:0c:66:bc:f6:70:09:89:2c:8a:04:7a:be:26: cc:86:a7:64:8c:5e:f8:58:05:a4:55:cc:e7:4b:52: 2a:70:3b:b2:b5:01:21:7e:f3:93:5a:11:5d:87:12: f1:15:c1:91:94:dc:2a:26:23:45:84:21:89:d3:49: 2c:71:16:fa:8a:7a:28:37:6e:6b:ab:ec:66:f1:9c: 84:37:35:4c:f4:49:ec:1f:eb:3f:7e:8d:e5:e6:6e: f0:45:e6:ff:5d:85:de:b6:b0:87:cf:73:8c:fe:30: 4a:b7:ef:3e:9f:6d:29:cb:95:a3:d3:c8:53:3f:a5: 70:bf:00:07:35:59:13:92:e5:78:17:99:bd:c3:89: 86:fd:65:28:67:f0:06:04:ce:f2:58:4c:f4:f3:8f: 38:2e:58:2d:85:87:77:c6:13:33:c5:0b:5e:cf:a2: c3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:CB:4B:2F:96:9D:71:4D:9F:2D:01:40:3B:74:56:D3:76:95:5F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/caa2d549-4016-330e-806a-a66db5f6ef79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:c1:bc:79:27:ad:55:81:21:b6:dc:ec:e5:bd:ad:d2:5e:b7: ee:3c:6d:b5:01:2d:88:67:a8:61:5d:bd:bf:36:35:e4:34:fa: e4:f7:78:62:98:c6:d1:58:2b:1f:c4:d5:a9:a0:79:b7:1e:5d: 3d:41:70:d6:58:ff:25:46:c4:27:37:57:29:1f:b1:db:9b:5f: 99:da:d7:11:66:2b:7a:24:21:e3:fd:04:c7:8c:64:f9:e3:13: 2d:c6:56:92:e5:48:a3:e0:04:ae:be:ed:42:30:02:2c:75:36: 69:8f:53:8f:db:75:63:c9:4f:eb:b2:cb:c1:72:ef:9c:b3:97: 3d:4d:7b:8b:e0:72:b6:aa:eb:79:90:c7:93:99:96:06:d0:e1: 96:3a:2f:9b:1f:ef:9d:18:42:b8:a8:11:34:50:c0:3c:bb:02: d7:90:cd:62:ef:49:99:28:f3:ca:d5:65:47:ce:ae:61:d7:28: be:6e:f9:d8:1c:d0:90:39:be:08:f9:7f:44:ac:a0:c2:f0:56: 90:30:29:85:9d:fe:5c:99:fc:cb:b1:f8:78:e8:3e:e9:8d:32: b0:8c:69:01:96:a3:b8:9d:c1:a2:e4:26:77:bf:a7:fb:1f:15: 79:48:26:c9:3f:b9:dc:b8:9e:cc:34:62:31:8d:2f:6d:e3:99: b0:a3:c6:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpSJDIcg58XcDwUXnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDYyNjE1NDk1OVoXDTI1MDkyNDE1NDk1OVowLzEtMCsGA1UEAxMk MGYzYTExNmEtZmRkNC00NDQ5LTg4N2QtMTBlM2I0MzQ5ZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA115uD/fS7nFCKl+igmAtRYaVDYVx/zOnrht1 16XgJvGf7b+bTluilWTy7yzjKdqerx1sqJaXhTvZ05Y5DtAiMY1OCw61KucaNHB9 wUfWunjB4zYsXehCcFMPMQxmvPZwCYksigR6vibMhqdkjF74WAWkVcznS1IqcDuy tQEhfvOTWhFdhxLxFcGRlNwqJiNFhCGJ00kscRb6inooN25rq+xm8ZyENzVM9Ens H+s/fo3l5m7wReb/XYXetrCHz3OM/jBKt+8+n20py5Wj08hTP6VwvwAHNVkTkuV4 F5m9w4mG/WUoZ/AGBM7yWEz08484LlgthYd3xhMzxQtez6LDCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnLSy+WnXFNny0BQDt0VtN2lV8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvY2FhMmQ1NDktNDAxNi0z MzBlLTgwNmEtYTY2ZGI1ZjZlZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPBvHknrVWBIbbc7OW9rdJet+48bbUBLYhnqGFdvb82NeQ0+uT3eGKY xtFYKx/E1amgebceXT1BcNZY/yVGxCc3VykfsdubX5na1xFmK3okIeP9BMeMZPnj Ey3GVpLlSKPgBK6+7UIwAix1NmmPU4/bdWPJT+uyy8Fy75yzlz1Ne4vgcraq63mQ x5OZlgbQ4ZY6L5sf750YQrioETRQwDy7AteQzWLvSZko88rVZUfOrmHXKL5u+dgc 0JA5vgj5f0SsoMLwVpAwKYWd/lyZ/Mux+HjoPumNMrCMaQGWo7idwaLkJne/p/sf FXlIJsk/udy4nsw0YjGNL23jmbCjxmE= -----END CERTIFICATE-----Generated at Sun Jun 29 04:29:32 2025 by rpki-client