$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/54f88245-6690-3ed5-9b10-1152adc861df.roa File: 54f88245-6690-3ed5-9b10-1152adc861df.roa (raw, json) Hash identifier: btDt1WmvrfsTuxOPwHSV4+mf0/Biuu8qfedJU/CtTU8= Subject key identifier: 4E:3C:42:22:96:D6:4A:84:FA:0C:AA:94:45:DE:F8:5C:F8:30:57:0D Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B328C5E7FC4D9EEE53908E680 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/54f88245-6690-3ed5-9b10-1152adc861df.roa Signing time: Mon 15 Sep 2025 01:00:33 +0000 ROA not before: Mon 15 Sep 2025 01:00:33 +0000 ROA not after: Sun 14 Dec 2025 02:00:33 +0000 asID: 9304 IP address blocks: 152.232.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:32:8c:5e:7f:c4:d9:ee:e5:39:08:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 15 01:00:33 2025 GMT Not After : Dec 14 02:00:33 2025 GMT Subject: CN=aaa84796-c6cf-4de6-8cfc-e8b6456479cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ef:9e:bd:bd:9d:dc:5c:dd:18:64:ac:03:b3: ee:ed:9b:c5:48:2d:64:ca:b9:44:a3:c3:de:df:e0: e6:47:27:8a:a0:84:c5:2d:d2:94:a0:98:17:8b:8b: e7:ee:af:e0:08:a9:89:e3:14:61:29:c0:f4:7c:24: 5c:55:f7:f0:f1:84:b9:b9:4b:63:cd:21:eb:9b:ec: 8d:2b:71:0e:51:9a:5c:26:e6:59:34:ca:8b:d2:15: af:a1:71:0c:44:c2:ce:6d:4d:98:87:06:09:f9:fb: 1a:87:df:98:91:ba:51:77:55:c9:4f:63:94:af:21: 22:02:67:f7:44:77:ec:e3:93:f6:33:09:b2:49:5b: 74:78:39:a7:10:62:d2:9c:40:bc:8a:12:9c:fd:31: 27:fc:45:d5:10:ac:bf:d6:1e:2a:bb:ac:42:bd:74: 70:00:fa:2c:af:95:52:c9:e1:f0:d3:6b:f2:b6:0d: bc:72:0b:27:bb:1a:5b:13:82:5a:c7:9f:d0:ee:f5: 47:e7:b5:6d:2d:1f:7a:c5:75:89:87:55:2b:6a:ef: ad:11:35:9e:b9:21:b6:45:3e:17:3f:b2:94:ca:fb: 71:15:57:b7:97:f1:ce:fd:67:32:f6:b5:f5:83:3d: 5e:34:e8:06:b8:33:d1:fd:2d:a5:99:3f:26:75:c8: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:3C:42:22:96:D6:4A:84:FA:0C:AA:94:45:DE:F8:5C:F8:30:57:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/54f88245-6690-3ed5-9b10-1152adc861df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:af:b4:35:8f:d1:89:1b:65:2d:ec:8b:6f:21:9b:4f:68:c1: 18:d9:5b:6b:8b:bf:a1:99:02:b4:07:a8:7c:99:62:b9:85:0a: 7c:99:b7:27:0b:87:d8:3f:3f:69:46:f3:87:13:d3:1c:cc:4e: f5:52:5d:1a:05:76:ad:e5:c7:8e:3c:fc:ce:c9:18:5a:f0:bf: 67:3a:4a:2a:be:a0:db:27:a1:ad:d2:12:d9:db:9a:fa:51:c2: 2a:61:6c:15:71:6e:aa:6a:74:33:6c:b9:7f:1c:26:35:2d:53: d7:c2:f4:6e:a0:96:70:59:f8:4c:3e:a5:f3:7b:62:a2:fb:32: 7a:15:9e:b9:aa:d5:76:5a:25:32:95:82:d9:21:d7:6d:fd:32: a6:c7:f7:4d:94:ff:0b:18:11:77:ef:bf:c4:e7:62:5e:48:62: 0c:cb:5e:f5:a0:35:e5:54:eb:bd:13:8f:4a:0c:d5:48:e1:6b: f6:aa:a1:d2:d3:42:13:91:ba:79:ba:3a:34:bb:78:27:61:b4: d6:9d:86:64:f8:e3:d6:99:d1:e0:79:76:11:67:f3:6a:31:e7: 82:f5:e1:dc:7a:b5:f3:25:60:85:7d:4c:85:67:aa:4a:27:34: a2:32:48:53:2a:1f:44:55:09:97:5d:34:be:c3:61:87:90:99: f4:89:b5:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsyjF5/xNnu5TkI5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDkxNTAxMDAzM1oXDTI1MTIxNDAyMDAzM1owLzEtMCsGA1UEAxMk YWFhODQ3OTYtYzZjZi00ZGU2LThjZmMtZThiNjQ1NjQ3OWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu+evb2d3FzdGGSsA7Pu7ZvFSC1kyrlEo8Pe 3+DmRyeKoITFLdKUoJgXi4vn7q/gCKmJ4xRhKcD0fCRcVffw8YS5uUtjzSHrm+yN K3EOUZpcJuZZNMqL0hWvoXEMRMLObU2YhwYJ+fsah9+YkbpRd1XJT2OUryEiAmf3 RHfs45P2MwmySVt0eDmnEGLSnEC8ihKc/TEn/EXVEKy/1h4qu6xCvXRwAPosr5VS yeHw02vytg28cgsnuxpbE4Jax5/Q7vVH57VtLR96xXWJh1Urau+tETWeuSG2RT4X P7KUyvtxFVe3l/HO/Wcy9rX1gz1eNOgGuDPR/S2lmT8mdchqAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE48QiKW1kqE+gyqlEXe+Fz4MFcNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNTRmODgyNDUtNjY5MC0z ZWQ1LTliMTAtMTE1MmFkYzg2MWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmOi4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWvtDWP0YkbZS3si28hm09owRjZW2uLv6GZArQHqHyZYrmFCnyZtycL h9g/P2lG84cT0xzMTvVSXRoFdq3lx448/M7JGFrwv2c6Siq+oNsnoa3SEtnbmvpR wiphbBVxbqpqdDNsuX8cJjUtU9fC9G6glnBZ+Ew+pfN7YqL7MnoVnrmq1XZaJTKV gtkh1239MqbH902U/wsYEXfvv8TnYl5IYgzLXvWgNeVU670Tj0oM1Ujha/aqodLT QhORunm6OjS7eCdhtNadhmT449aZ0eB5dhFn82ox54L14dx6tfMlYIV9TIVnqkon NKIySFMqH0RVCZddNL7DYYeQmfSJtWQ= -----END CERTIFICATE-----Generated at Tue Nov 4 22:42:50 2025 by rpki-client