$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8f9c3495-df4e-3ff3-a77c-d4547f173f89.roa File: 8f9c3495-df4e-3ff3-a77c-d4547f173f89.roa (raw, json) Hash identifier: g/9IShFi1nnKgJftbCBifU5ymtwrO+QcAE3xZvs4GEE= Subject key identifier: B4:58:82:2D:9D:20:E8:B5:1C:B5:B8:01:34:D7:61:82:92:02:3B:87 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F4328584A82AB4663DB01A3C3641B0640 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8f9c3495-df4e-3ff3-a77c-d4547f173f89.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 10384 IP address blocks: 152.85.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:46:63:db:01:a3:c3:64:1b:06:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=e5697450-b6ef-43b7-9c59-f8fe8b79bf1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:74:40:5b:66:35:45:aa:bf:4b:56:ab:2e:83: 00:5f:0f:04:30:23:8c:72:b3:41:94:a1:12:71:37: e5:58:5f:08:da:7a:a2:90:92:35:ca:2e:fc:78:d3: 0e:06:d0:58:44:3d:cb:1a:11:8a:33:c2:57:1f:9f: 01:51:84:6d:04:60:e4:8c:d3:1f:a8:5b:20:93:4e: d7:4e:3a:75:dd:df:92:84:6a:9f:74:25:17:6b:05: a4:30:90:42:39:77:0c:a8:e4:32:e2:b9:72:37:d4: f0:e3:74:ea:ce:34:4b:0f:af:b9:b9:cb:3c:9e:45: d0:96:b4:86:8d:dc:7d:2c:ea:a3:fc:7b:a3:cb:f0: 3b:ee:b4:0a:cc:3b:a9:95:2f:13:cd:1d:24:7a:92: 0a:39:31:8d:32:d7:68:1e:6f:a2:44:8a:cc:34:00: de:61:64:89:50:71:18:d2:5f:65:f1:3c:ed:6a:37: b7:ae:88:a0:08:4f:3d:96:1a:ae:5c:62:39:75:ec: f4:52:a5:18:2c:f4:79:58:49:db:16:0a:42:86:53: 79:00:b3:d2:58:84:f0:83:10:bf:cb:5a:49:ef:80: 99:58:29:49:82:1f:eb:f6:a2:a9:02:d0:0f:fa:77: 7e:15:9f:f6:93:e4:05:de:2d:cf:e9:43:eb:69:95: b1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:58:82:2D:9D:20:E8:B5:1C:B5:B8:01:34:D7:61:82:92:02:3B:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/8f9c3495-df4e-3ff3-a77c-d4547f173f89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.85.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8b:fa:91:6d:f3:46:c8:8d:2e:18:48:53:c6:6b:a4:cd:77: 34:16:b1:3c:af:ed:1b:a8:50:4f:da:55:48:1d:25:df:e7:ee: cc:97:92:b2:3d:bf:fc:ae:fb:60:3c:3c:a6:f9:07:eb:8f:f9: 96:bc:90:7b:1c:02:e0:12:e4:7e:1b:c1:87:eb:02:f5:d3:43: 30:e8:59:a3:ed:38:e3:b7:a2:30:ed:6f:fe:c6:fa:6c:9e:f9: 21:48:12:9d:09:cc:ce:38:2c:0a:e4:5b:e3:ad:15:05:59:61: 0e:96:f2:22:cf:07:a5:6e:6e:86:a5:6d:d5:f4:30:85:53:af: 9a:0d:56:b3:ca:f5:66:e9:12:0f:90:20:00:05:01:3b:fa:19: d3:93:37:9e:b3:2e:82:b0:cb:0e:9f:a0:1e:f0:70:a6:70:7d: 24:37:be:9d:b1:e2:a1:63:26:d5:ce:6f:d5:24:2d:94:00:05: ab:8b:de:98:50:e7:67:07:9f:8d:97:a9:ea:89:38:d5:82:58: 79:42:2b:b6:19:28:61:d1:90:2d:82:4c:d8:14:92:67:96:d4: 36:8f:4b:7c:91:2e:d3:93:5c:46:52:9d:7f:de:26:b8:01:cc: 93:56:51:41:41:d9:d9:74:f5:12:6f:8d:fd:13:4b:bf:6a:47: 31:29:7b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0Zj2wGjw2QbBkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk ZTU2OTc0NTAtYjZlZi00M2I3LTljNTktZjhmZThiNzliZjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HRAW2Y1Raq/S1arLoMAXw8EMCOMcrNBlKES cTflWF8I2nqikJI1yi78eNMOBtBYRD3LGhGKM8JXH58BUYRtBGDkjNMfqFsgk07X Tjp13d+ShGqfdCUXawWkMJBCOXcMqOQy4rlyN9Tw43TqzjRLD6+5ucs8nkXQlrSG jdx9LOqj/Hujy/A77rQKzDuplS8TzR0kepIKOTGNMtdoHm+iRIrMNADeYWSJUHEY 0l9l8Tztaje3roigCE89lhquXGI5dez0UqUYLPR5WEnbFgpChlN5ALPSWITwgxC/ y1pJ74CZWClJgh/r9qKpAtAP+nd+FZ/2k+QF3i3P6UPraZWxgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLRYgi2dIOi1HLW4ATTXYYKSAjuHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvOGY5YzM0OTUtZGY0ZS0z ZmYzLWE3N2MtZDQ1NDdmMTczZjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFUFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWL+pFt80bIjS4YSFPGa6TNdzQWsTyv7RuoUE/aVUgdJd/n7syXkrI9 v/yu+2A8PKb5B+uP+Za8kHscAuAS5H4bwYfrAvXTQzDoWaPtOOO3ojDtb/7G+mye +SFIEp0JzM44LArkW+OtFQVZYQ6W8iLPB6VuboalbdX0MIVTr5oNVrPK9WbpEg+Q IAAFATv6GdOTN56zLoKwyw6foB7wcKZwfSQ3vp2x4qFjJtXOb9UkLZQABauL3phQ 52cHn42XqeqJONWCWHlCK7YZKGHRkC2CTNgUkmeW1DaPS3yRLtOTXEZSnX/eJrgB zJNWUUFB2dl09RJvjf0TS79qRzEpezA= -----END CERTIFICATE-----Generated at Wed Aug 13 09:44:48 2025 by rpki-client