$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/f4003792-538b-3e9b-b33b-440eecd706d4.roa File: f4003792-538b-3e9b-b33b-440eecd706d4.roa (raw, json) Hash identifier: XWhl1qiiZ34r3yeog3JcoM9Bs8ssUhsmGgGSLaeMeSE= Subject key identifier: EE:FB:AC:D4:ED:66:7C:DA:3E:5E:B9:18:A2:CA:6B:23:AB:23:F9:3C Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584A5223ABD789760CDC30514980 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/f4003792-538b-3e9b-b33b-440eecd706d4.roa Signing time: Thu 26 Jun 2025 15:48:55 +0000 ROA not before: Thu 26 Jun 2025 15:48:55 +0000 ROA not after: Wed 24 Sep 2025 15:48:55 +0000 asID: 7843 IP address blocks: 152.232.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:52:23:ab:d7:89:76:0c:dc:30:51:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jun 26 15:48:55 2025 GMT Not After : Sep 24 15:48:55 2025 GMT Subject: CN=7c0afdaa-ca4a-440a-830e-f775e210c96e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:65:b0:df:ff:fc:5f:ce:8a:00:36:4f:5a:2d: 8f:58:2e:f6:3d:e6:3e:a5:27:82:6a:2d:01:93:85: 12:28:4e:3b:84:d3:6f:3c:b4:d3:1b:da:16:99:6f: 00:79:80:5d:62:4e:68:d0:86:01:bf:6d:6d:3f:3f: 10:23:82:6a:7f:92:3c:2d:df:48:5e:45:5e:98:92: 7b:ac:93:06:f2:48:5d:e5:12:4c:83:44:76:b7:e9: 16:35:15:e6:9b:bb:4e:79:48:d1:0d:e8:40:06:d1: a6:be:05:a9:7c:91:2c:85:f7:78:39:43:3e:21:2d: 1b:18:50:d4:22:06:b8:3b:72:d0:56:a3:ee:56:f1: 47:6b:a8:ca:a1:00:66:e5:cc:99:4c:fc:0a:67:aa: 1f:b1:70:79:d6:7f:8a:23:15:8e:e1:67:b1:c1:5f: f6:24:c4:d5:50:c9:92:0e:f9:1b:96:a5:f8:60:e2: 77:a9:90:df:b2:d1:e9:19:12:14:28:c7:65:e5:24: 0d:0d:81:2f:24:a0:e2:09:ff:ce:a6:8a:45:87:17: 1a:17:1f:62:0e:ff:5a:b6:26:c4:34:e3:6f:59:f1: bd:9d:91:5f:05:4b:04:6c:ec:b1:c2:28:50:a3:fe: 25:16:91:ab:94:ff:fc:ae:10:16:32:bd:46:8f:25: e3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FB:AC:D4:ED:66:7C:DA:3E:5E:B9:18:A2:CA:6B:23:AB:23:F9:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/f4003792-538b-3e9b-b33b-440eecd706d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:71:c2:86:3b:70:ff:2b:f3:f0:2b:fd:64:a9:c9:03:9f:fe: f3:6d:1c:da:82:8b:4d:78:b9:13:3d:4d:99:26:98:18:3b:6c: 63:6f:8a:eb:d7:9a:60:46:c2:e5:3c:74:25:5e:a2:c3:1f:b8: 6e:bb:6b:86:bf:bb:28:e7:0b:bf:07:cb:24:f3:e3:36:80:63: 07:15:0d:75:b6:ea:15:e2:f2:cf:e6:9b:4f:ba:34:de:f2:d6: 65:6a:e7:7b:09:43:49:99:a8:bf:98:4b:6b:d1:93:0a:2d:e6: ad:a0:28:63:16:a0:06:a5:4a:9f:74:67:d7:d4:c9:08:ea:ae: 51:cf:fe:3e:40:e8:63:da:70:e9:5d:df:37:4c:e5:23:a5:60: 58:25:b4:43:22:f0:4c:d8:fc:ce:c1:99:4c:db:92:c0:c8:9e: b9:e5:dd:7a:bf:7c:b1:0d:d7:1b:da:e6:46:5e:8a:73:10:51: 8b:81:54:50:5d:ed:3a:11:16:29:79:fd:9a:7f:82:52:16:2e: 72:04:ad:89:32:b1:38:a9:28:c6:0a:92:56:a6:b6:ed:a4:fa: 32:48:2b:13:06:2f:d1:59:4b:e0:44:f2:f1:29:f4:89:d9:91: 0c:62:dc:81:3a:2d:06:3f:b5:e1:7c:61:34:8c:ad:c0:e2:d9: 79:04:0a:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpSI6vXiXYM3DBRSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDYyNjE1NDg1NVoXDTI1MDkyNDE1NDg1NVowLzEtMCsGA1UEAxMk N2MwYWZkYWEtY2E0YS00NDBhLTgzMGUtZjc3NWUyMTBjOTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmWw3//8X86KADZPWi2PWC72PeY+pSeCai0B k4USKE47hNNvPLTTG9oWmW8AeYBdYk5o0IYBv21tPz8QI4Jqf5I8Ld9IXkVemJJ7 rJMG8khd5RJMg0R2t+kWNRXmm7tOeUjRDehABtGmvgWpfJEshfd4OUM+IS0bGFDU Iga4O3LQVqPuVvFHa6jKoQBm5cyZTPwKZ6ofsXB51n+KIxWO4WexwV/2JMTVUMmS DvkblqX4YOJ3qZDfstHpGRIUKMdl5SQNDYEvJKDiCf/OpopFhxcaFx9iDv9atibE NONvWfG9nZFfBUsEbOyxwihQo/4lFpGrlP/8rhAWMr1GjyXjGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO77rNTtZnzaPl65GKLKayOrI/k8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvZjQwMDM3OTItNTM4Yi0z ZTliLWIzM2ItNDQwZWVjZDcwNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxxwoY7cP8r8/Ar/WSpyQOf/vNtHNqCi014uRM9TZkmmBg7bGNviuvX mmBGwuU8dCVeosMfuG67a4a/uyjnC78HyyTz4zaAYwcVDXW26hXi8s/mm0+6NN7y 1mVq53sJQ0mZqL+YS2vRkwot5q2gKGMWoAalSp90Z9fUyQjqrlHP/j5A6GPacOld 3zdM5SOlYFgltEMi8EzY/M7BmUzbksDInrnl3Xq/fLEN1xva5kZeinMQUYuBVFBd 7ToRFil5/Zp/glIWLnIErYkysTipKMYKklamtu2k+jJIKxMGL9FZS+BE8vEp9InZ kQxi3IE6LQY/teF8YTSMrcDi2XkECl0= -----END CERTIFICATE-----Generated at Sun Jun 29 10:48:10 2025 by rpki-client