$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3ee1098d-298c-3632-b4c1-a8a6fc3ccac9.roa File: 3ee1098d-298c-3632-b4c1-a8a6fc3ccac9.roa (raw, json) Hash identifier: KhsurWAbxfhfbbPLejeQNa049J058yQxGJBuBr8ZN/Q= Subject key identifier: CE:47:95:17:C0:74:CE:36:F2:FE:72:F5:49:A7:70:99:9D:63:EB:96 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B049B3BE470835AD539D6F0B0 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3ee1098d-298c-3632-b4c1-a8a6fc3ccac9.roa Signing time: Fri 29 Aug 2025 14:03:43 +0000 ROA not before: Fri 29 Aug 2025 14:03:43 +0000 ROA not after: Thu 27 Nov 2025 15:03:43 +0000 asID: 55081 IP address blocks: 152.232.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:9b:3b:e4:70:83:5a:d5:39:d6:f0:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Aug 29 14:03:43 2025 GMT Not After : Nov 27 15:03:43 2025 GMT Subject: CN=5496a18c-3a61-43c5-9691-c182b779a25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:c8:dd:4e:d6:aa:f6:bb:45:51:40:99:68: ac:ff:43:bc:64:fd:99:87:3e:9c:71:c9:4d:be:82: 06:e7:d1:b1:db:04:89:4e:d8:e1:78:6a:25:b2:58: 2d:5e:3a:0c:65:7e:53:7b:68:d9:4f:a9:15:35:99: 2f:9e:db:d5:bc:27:8b:94:43:91:60:58:54:ef:25: 8c:12:74:1c:31:05:9a:21:b9:56:0a:f7:74:3e:a7: 37:59:d2:64:00:f6:1d:2a:23:a3:61:51:39:6e:4e: 88:ca:b5:d1:49:23:4a:5d:4f:b8:c3:b5:50:09:59: 91:73:69:bd:e2:76:50:bb:83:fa:23:a8:9f:3e:a3: 67:75:d5:b0:cd:3f:95:7b:12:eb:3e:0c:e4:d3:a8: 7d:d1:91:be:0b:6f:09:76:ab:a3:6d:22:93:65:ca: d7:83:e0:7e:f4:43:f5:8e:e3:69:59:45:f8:7e:9c: 2a:07:54:93:14:4b:54:61:81:2b:41:73:26:72:d0: 3e:18:47:97:93:9e:ee:c5:f9:9f:f8:54:cb:a1:80: 2f:92:ce:b8:03:e6:be:76:b1:18:74:74:ff:8d:a9: 6d:4e:8f:cc:b9:16:08:d1:09:bb:98:d8:a2:a4:c2: bb:35:98:95:e7:73:13:00:57:c7:68:90:40:53:22: 29:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:47:95:17:C0:74:CE:36:F2:FE:72:F5:49:A7:70:99:9D:63:EB:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3ee1098d-298c-3632-b4c1-a8a6fc3ccac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:82:26:5b:a3:37:b9:07:a6:44:e9:fc:ea:e8:08:77:ed:3c: 7c:7e:8a:e1:36:fb:fe:d5:50:d4:89:8c:8b:de:7f:ee:f9:2f: e8:12:4b:b2:f4:6f:e5:2a:a3:8b:d5:c7:b8:0b:39:6a:33:3d: 95:e6:b2:b1:35:05:26:ea:26:7d:72:3d:7f:1b:86:a6:f8:c4: e3:57:c8:5d:c4:1d:33:31:ba:20:c3:b9:25:88:66:70:e9:75: eb:3f:57:2d:1f:fe:36:80:ba:a0:1b:4b:d8:8c:d7:4b:37:9f: 13:23:9d:94:84:ae:2b:4e:f9:24:bd:3c:12:da:6e:2e:5f:8b: 2d:66:17:98:13:1f:a0:37:fd:b9:78:81:c9:52:b0:ac:40:85: 5c:b0:2d:f8:68:d9:30:20:ba:60:8e:f2:49:a1:a9:42:af:f1: 49:12:07:ee:dc:7a:0f:6c:3e:9b:e2:7a:de:ac:78:53:f4:b7: 29:a3:e6:c6:4f:09:d1:99:f5:5e:e3:0a:91:7e:8f:8f:d0:23: 5d:7e:8f:49:9b:65:5e:12:e3:ee:af:59:a6:23:f2:1c:ae:6d: fb:37:24:a9:1d:f6:7a:c5:3d:dd:da:0e:74:d8:99:08:57:52: 9c:85:13:b6:c1:5b:91:93:1a:82:ab:f8:7f:a9:7d:86:01:d1: 33:b2:1c:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEmzvkcINa1TnW8LAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDgyOTE0MDM0M1oXDTI1MTEyNzE1MDM0M1owLzEtMCsGA1UEAxMk NTQ5NmExOGMtM2E2MS00M2M1LTk2OTEtYzE4MmI3NzlhMjVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvjI3U7Wqva7RVFAmWis/0O8ZP2Zhz6ccclN voIG59Gx2wSJTtjheGolslgtXjoMZX5Te2jZT6kVNZkvntvVvCeLlEORYFhU7yWM EnQcMQWaIblWCvd0Pqc3WdJkAPYdKiOjYVE5bk6IyrXRSSNKXU+4w7VQCVmRc2m9 4nZQu4P6I6ifPqNnddWwzT+VexLrPgzk06h90ZG+C28JdqujbSKTZcrXg+B+9EP1 juNpWUX4fpwqB1STFEtUYYErQXMmctA+GEeXk57uxfmf+FTLoYAvks64A+a+drEY dHT/jaltTo/MuRYI0Qm7mNiipMK7NZiV53MTAFfHaJBAUyIpfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5HlRfAdM428v5y9UmncJmdY+uWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvM2VlMTA5OGQtMjk4Yy0z NjMyLWI0YzEtYThhNmZjM2NjYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmOiIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuCJlujN7kHpkTp/OroCHftPHx+iuE2+/7VUNSJjIvef+75L+gSS7L0 b+Uqo4vVx7gLOWozPZXmsrE1BSbqJn1yPX8bhqb4xONXyF3EHTMxuiDDuSWIZnDp des/Vy0f/jaAuqAbS9iM10s3nxMjnZSEritO+SS9PBLabi5fiy1mF5gTH6A3/bl4 gclSsKxAhVywLfho2TAgumCO8kmhqUKv8UkSB+7ceg9sPpviet6seFP0tymj5sZP CdGZ9V7jCpF+j4/QI11+j0mbZV4S4+6vWaYj8hyubfs3JKkd9nrFPd3aDnTYmQhX UpyFE7bBW5GTGoKr+H+pfYYB0TOyHHs= -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:35 2025 by rpki-client