$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/54c56cb1-9fe7-3d7e-a6d4-4cbd2751f855.roa File: 54c56cb1-9fe7-3d7e-a6d4-4cbd2751f855.roa (raw, json) Hash identifier: nnFYwNGQ5+EriGfggVJhyL58s26qROyo0yTth7620zs= Subject key identifier: 44:AB:99:46:5B:F5:48:50:71:88:9B:23:B4:FC:67:A1:9C:D1:C6:BE Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B049C48088F2E1352E96F9E80 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/54c56cb1-9fe7-3d7e-a6d4-4cbd2751f855.roa Signing time: Fri 29 Aug 2025 14:05:49 +0000 ROA not before: Fri 29 Aug 2025 14:05:49 +0000 ROA not after: Thu 27 Nov 2025 15:05:49 +0000 asID: 55081 IP address blocks: 152.232.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:9c:48:08:8f:2e:13:52:e9:6f:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Aug 29 14:05:49 2025 GMT Not After : Nov 27 15:05:49 2025 GMT Subject: CN=7d9f5a77-7134-4560-89a3-4db36f946612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:04:45:3b:d6:2a:b6:ed:17:c9:01:bd:21:12: aa:48:db:c8:8d:93:fd:d9:4f:de:d0:46:42:87:9c: 58:18:e8:2e:d0:37:11:65:94:8a:0e:25:fc:4a:17: 64:e9:e9:3e:a9:2c:bc:66:60:84:86:5e:c5:0b:1b: eb:ea:17:0d:f3:7d:36:b2:12:1a:2f:65:6b:d5:c7: 5f:4d:49:70:15:5d:90:18:a1:2d:b4:0a:69:42:03: ec:9a:58:f6:5f:d4:7a:5d:e6:13:c0:55:e8:47:0f: b2:94:ba:5e:81:a5:6d:9e:c9:c3:92:ab:52:78:ff: 89:ed:7e:76:e2:17:94:f9:d5:f6:72:6a:f1:9d:86: 99:5d:ac:40:d1:4c:0b:f5:6a:a3:1a:16:0f:53:7e: d8:61:f3:e8:10:6a:22:e5:66:8c:36:3f:e8:95:4c: b8:cc:0c:f2:56:aa:f4:05:e2:28:84:ad:04:33:29: 8a:9d:d9:97:9c:ec:18:bf:ee:eb:46:16:5d:21:da: 6e:3d:ae:f0:01:e9:3f:d6:ab:44:36:c1:98:52:87: 6f:de:b8:f6:55:95:c6:65:4e:e1:b2:2e:3e:e0:e3: 24:9e:04:7f:97:41:2e:f2:05:47:2b:a6:b5:94:a8: 9c:cd:ea:70:24:90:1a:49:17:67:d0:2b:fd:47:50: ec:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:AB:99:46:5B:F5:48:50:71:88:9B:23:B4:FC:67:A1:9C:D1:C6:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/54c56cb1-9fe7-3d7e-a6d4-4cbd2751f855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:9e:00:35:9c:42:e4:57:5c:95:f9:d1:e6:e7:0b:9b:c5:4b: b3:22:e8:30:2f:1f:a0:90:c2:bc:e8:da:86:94:bb:c5:c2:7a: 86:78:1e:42:9b:ea:c5:59:a4:78:94:1a:c2:d6:4a:95:5f:6d: 59:37:fb:81:dd:a8:4f:17:8b:58:bf:6f:80:90:2e:28:1b:38: e1:bf:9c:09:98:66:a3:c3:e7:98:cc:78:7a:cb:7d:59:00:6b: 99:be:86:e1:26:5c:d0:24:7d:e2:e1:bd:fa:35:ac:b7:e7:de: ae:cc:9e:d8:f4:65:a8:33:e1:62:70:36:21:2e:26:7c:30:1b: 47:e1:96:52:66:1b:e9:44:2e:d5:83:0c:d5:dd:13:be:8f:47: 15:8f:ff:dd:18:cf:35:bf:a7:54:d2:b0:af:70:24:15:81:60: 82:a9:b4:4e:69:a3:9c:42:d5:df:c2:ac:e5:f7:79:28:1c:47: 4a:66:dc:21:6d:d3:82:eb:be:b6:22:a9:a2:b6:48:16:e1:3e: d1:22:98:0f:15:fc:f4:0a:4d:04:11:be:d9:59:f1:c5:9d:3a: 46:d7:8f:0a:82:fa:91:8c:a6:5e:6c:65:f6:e5:8a:5c:62:e6: 4e:a7:aa:8d:fc:74:78:c8:9f:a4:0d:bf:5e:3b:49:15:90:f2: 65:d1:07:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEnEgIjy4TUulvnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDgyOTE0MDU0OVoXDTI1MTEyNzE1MDU0OVowLzEtMCsGA1UEAxMk N2Q5ZjVhNzctNzEzNC00NTYwLTg5YTMtNGRiMzZmOTQ2NjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApARFO9Yqtu0XyQG9IRKqSNvIjZP92U/e0EZC h5xYGOgu0DcRZZSKDiX8Shdk6ek+qSy8ZmCEhl7FCxvr6hcN8302shIaL2Vr1cdf TUlwFV2QGKEttAppQgPsmlj2X9R6XeYTwFXoRw+ylLpegaVtnsnDkqtSeP+J7X52 4heU+dX2cmrxnYaZXaxA0UwL9WqjGhYPU37YYfPoEGoi5WaMNj/olUy4zAzyVqr0 BeIohK0EMymKndmXnOwYv+7rRhZdIdpuPa7wAek/1qtENsGYUodv3rj2VZXGZU7h si4+4OMkngR/l0Eu8gVHK6a1lKiczepwJJAaSRdn0Cv9R1DsFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESrmUZb9UhQcYibI7T8Z6Gc0ca+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNTRjNTZjYjEtOWZlNy0z ZDdlLWE2ZDQtNGNiZDI3NTFmODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6eADWcQuRXXJX50ebnC5vFS7Mi6DAvH6CQwrzo2oaUu8XCeoZ4HkKb 6sVZpHiUGsLWSpVfbVk3+4HdqE8Xi1i/b4CQLigbOOG/nAmYZqPD55jMeHrLfVkA a5m+huEmXNAkfeLhvfo1rLfn3q7Mntj0Zagz4WJwNiEuJnwwG0fhllJmG+lELtWD DNXdE76PRxWP/90YzzW/p1TSsK9wJBWBYIKptE5po5xC1d/CrOX3eSgcR0pm3CFt 04LrvrYiqaK2SBbhPtEimA8V/PQKTQQRvtlZ8cWdOkbXjwqC+pGMpl5sZfblilxi 5k6nqo38dHjIn6QNv147SRWQ8mXRByA= -----END CERTIFICATE-----Generated at Wed Nov 5 00:35:47 2025 by rpki-client