$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5e317453-9859-31ee-823a-5bd37d5d09e1.roa File: 5e317453-9859-31ee-823a-5bd37d5d09e1.roa (raw, json) Hash identifier: d3+IU+Hz3fFH/ZAzLXtMRJJgLkt/m60oamsaJZvR6s0= Subject key identifier: B0:AC:16:3A:0F:C5:2E:35:9E:92:99:2A:0E:B1:3E:07:C3:52:05:36 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584A8A7CE6584AF688E7174C6200 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5e317453-9859-31ee-823a-5bd37d5d09e1.roa Signing time: Wed 16 Jul 2025 20:13:58 +0000 ROA not before: Wed 16 Jul 2025 20:13:58 +0000 ROA not after: Tue 14 Oct 2025 20:13:58 +0000 asID: 32095 IP address blocks: 152.232.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8a:7c:e6:58:4a:f6:88:e7:17:4c:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jul 16 20:13:58 2025 GMT Not After : Oct 14 20:13:58 2025 GMT Subject: CN=1837a1ac-36c0-4969-a176-085050b86986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2e:5b:74:25:71:2a:79:22:b3:9b:0b:c3:57: 72:97:27:6c:70:a5:3a:de:1f:64:4c:0c:fe:15:6c: e1:74:15:74:b9:5b:40:6f:c3:0f:ca:71:78:92:7e: 98:30:7e:e0:a4:72:e9:39:12:80:57:4a:db:1c:ae: f9:5c:1a:02:b2:1f:64:cb:d3:08:70:b4:a2:3c:93: d3:02:f6:f9:0c:0f:1a:00:13:3d:32:ff:33:70:63: 30:47:5d:d5:9b:dc:1f:f0:a1:8c:c5:49:a7:3f:e3: 85:f9:62:0a:34:b6:76:4f:7c:15:17:26:f4:b8:a7: 28:96:60:0d:46:a0:fa:57:1a:5e:e2:c2:1a:d0:5a: 9a:d6:1d:d5:3a:b4:9f:2c:25:57:45:b9:34:9c:4b: 51:05:18:63:ea:3e:14:fd:c3:9a:20:70:c5:3e:47: 4f:23:84:55:2f:f9:f9:cd:6d:78:67:fc:b1:66:8d: 13:23:b8:1d:f0:75:61:99:09:d7:3d:fe:a3:84:03: 14:99:ca:7d:dd:82:62:02:91:fd:1a:ff:65:b1:1e: d3:a0:d9:15:77:11:30:b9:bb:fb:4d:de:5f:35:34: 39:59:9f:8f:b5:10:8c:29:8b:0e:e8:d5:b9:8f:65: 4b:74:e4:28:1a:73:e8:c4:5a:00:1f:73:57:46:9a: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:AC:16:3A:0F:C5:2E:35:9E:92:99:2A:0E:B1:3E:07:C3:52:05:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/5e317453-9859-31ee-823a-5bd37d5d09e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b0:b4:db:b6:60:7e:76:69:a7:87:13:c5:f9:8d:a5:14:33: 3e:86:25:74:fd:0c:cd:f3:cf:a9:00:44:c8:52:38:4f:fe:af: 38:4a:1a:9a:62:d7:73:4f:6e:09:54:c5:5d:35:d2:13:00:27: 51:74:73:53:cc:d1:30:09:da:51:f4:59:9c:69:ec:65:3a:8b: 33:55:6f:3e:2e:16:c8:cb:28:3d:2c:a2:90:f0:14:12:ef:1d: 3e:3e:4b:15:e0:36:24:bd:44:17:f8:c2:1e:d7:bb:26:bd:2d: b8:2f:83:6c:63:c2:f8:5e:d0:ef:9f:96:62:5a:31:bd:dc:ac: d1:ef:0c:d3:ba:d8:e9:68:d0:06:68:38:e8:7d:09:10:42:44: 44:4d:fb:ee:7b:99:0e:09:24:30:d4:49:c2:5c:45:3b:dd:7a: 9d:52:1c:38:1b:ca:44:88:35:86:58:90:1a:5d:86:27:af:4b: 3e:63:63:0d:55:7a:36:ba:6d:3f:5d:f3:18:c7:bc:4d:dc:a8: 29:90:bc:d5:e4:10:ca:00:7c:ca:62:71:87:07:f8:25:9c:cc: d7:f6:dd:3a:72:91:9d:65:7d:81:d1:8f:ad:50:4d:a9:2d:69: 93:88:44:48:73:a8:f1:29:59:01:db:b3:d3:00:e3:5a:c7:a1: 3d:29:b0:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqKfOZYSvaI5xdMYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MDcxNjIwMTM1OFoXDTI1MTAxNDIwMTM1OFowLzEtMCsGA1UEAxMk MTgzN2ExYWMtMzZjMC00OTY5LWExNzYtMDg1MDUwYjg2OTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS5bdCVxKnkis5sLw1dylydscKU63h9kTAz+ FWzhdBV0uVtAb8MPynF4kn6YMH7gpHLpORKAV0rbHK75XBoCsh9ky9MIcLSiPJPT Avb5DA8aABM9Mv8zcGMwR13Vm9wf8KGMxUmnP+OF+WIKNLZ2T3wVFyb0uKcolmAN RqD6Vxpe4sIa0Fqa1h3VOrSfLCVXRbk0nEtRBRhj6j4U/cOaIHDFPkdPI4RVL/n5 zW14Z/yxZo0TI7gd8HVhmQnXPf6jhAMUmcp93YJiApH9Gv9lsR7ToNkVdxEwubv7 Td5fNTQ5WZ+PtRCMKYsO6NW5j2VLdOQoGnPoxFoAH3NXRprq5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCsFjoPxS41npKZKg6xPgfDUgU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNWUzMTc0NTMtOTg1OS0z MWVlLTgyM2EtNWJkMzdkNWQwOWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOgJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmwtNu2YH52aaeHE8X5jaUUMz6GJXT9DM3zz6kARMhSOE/+rzhKGppi 13NPbglUxV010hMAJ1F0c1PM0TAJ2lH0WZxp7GU6izNVbz4uFsjLKD0sopDwFBLv HT4+SxXgNiS9RBf4wh7Xuya9Lbgvg2xjwvhe0O+flmJaMb3crNHvDNO62Olo0AZo OOh9CRBCRERN++57mQ4JJDDUScJcRTvdep1SHDgbykSINYZYkBpdhievSz5jYw1V eja6bT9d8xjHvE3cqCmQvNXkEMoAfMpicYcH+CWczNf23TpykZ1lfYHRj61QTakt aZOIREhzqPEpWQHbs9MA41rHoT0psJM= -----END CERTIFICATE-----Generated at Tue Aug 5 17:17:12 2025 by rpki-client