$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4205bf2-e400-30c6-a941-dcb3dff03477.roa File: a4205bf2-e400-30c6-a941-dcb3dff03477.roa (raw, json) Hash identifier: elC1F8itkpL+YkKl9sesn2FUfr5gVRjUOOCIiR5Zb4E= Subject key identifier: F7:96:7E:A2:0B:B9:8B:69:21:5E:36:14:CA:A1:89:DC:CF:72:8B:32 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584B960ABFF63AA94F0B70DCC780 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4205bf2-e400-30c6-a941-dcb3dff03477.roa Signing time: Mon 20 Oct 2025 16:20:37 +0000 ROA not before: Mon 20 Oct 2025 16:20:37 +0000 ROA not after: Sun 18 Jan 2026 17:20:37 +0000 asID: 55286 IP address blocks: 152.232.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:96:0a:bf:f6:3a:a9:4f:0b:70:dc:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Oct 20 16:20:37 2025 GMT Not After : Jan 18 17:20:37 2026 GMT Subject: CN=b800d507-228a-49fc-82da-3e2e1e843163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f6:44:a7:ba:46:f2:b6:7b:a7:59:f4:a3:00: 50:95:e2:88:5c:48:ba:be:5b:01:ce:0c:fd:b1:48: 0c:38:3e:7a:b2:e9:57:ac:68:eb:25:f1:ec:1e:ee: 02:22:27:7d:b5:d8:4d:80:c0:b0:f8:37:70:06:dd: c0:65:6e:b1:b7:28:28:d4:92:97:64:ae:f3:1a:09: d2:47:60:87:0c:62:0a:93:80:cb:e4:8c:11:cf:12: ed:e2:f6:3a:4a:29:87:c9:98:5f:6d:72:68:0c:fd: 47:55:f9:11:c4:08:82:49:f6:a0:09:1a:85:bc:e9: fc:0e:e2:ba:ce:ed:0a:18:89:21:e7:d7:f6:39:cc: 49:93:58:0d:7f:63:b7:d5:36:7d:02:fd:57:cf:c3: 6f:09:68:55:f5:55:37:31:0f:38:f4:1a:42:e6:3e: 2b:e7:e3:29:1c:e3:d6:cf:28:f9:47:6b:35:ca:12: d3:c5:68:79:d9:e2:18:3e:60:37:9d:1f:d8:40:0c: 48:33:44:41:e5:20:87:e2:79:5e:63:80:3f:c6:70: 6e:5d:a9:d6:67:38:d8:f2:6b:05:46:a3:7f:e2:ea: 8a:e0:c7:a9:ec:8d:c4:00:b9:9f:70:e7:6e:ba:a7: d0:a7:d4:c5:e9:00:e0:12:7f:c9:21:9e:13:37:75: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:96:7E:A2:0B:B9:8B:69:21:5E:36:14:CA:A1:89:DC:CF:72:8B:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4205bf2-e400-30c6-a941-dcb3dff03477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:90:e4:b7:e3:20:ea:b4:01:54:c9:49:ae:83:3a:75:73:6e: 10:8b:8a:c2:2f:0b:90:29:a2:28:69:bc:a9:a8:52:9b:1e:81: 3d:8d:fe:09:13:85:a5:4a:2e:5d:23:43:11:43:23:af:26:23: 57:5f:48:8c:b0:43:52:58:6b:6d:ae:12:17:ce:3b:91:c0:93: ba:e0:cf:fa:51:64:91:bd:11:da:e1:8d:1c:f2:15:4d:9d:49: 51:14:da:f6:e8:ad:b6:e6:e5:4e:46:9e:58:14:c6:2d:5e:99: 21:eb:eb:61:94:5c:9d:ea:f5:fa:cc:62:6e:75:f2:7b:de:95: 4a:93:15:6e:99:cf:f9:88:18:e9:42:00:b5:6b:cb:8e:d9:bd: 6b:1e:59:b3:14:96:35:4a:a3:9e:3d:a4:32:5c:39:47:bc:fb: aa:f1:f0:ee:33:2d:95:13:4a:43:26:4e:48:be:f2:ef:d5:df: 09:c4:8b:b8:a0:b9:d2:94:ff:79:7b:cc:a9:6a:fc:72:23:f9: 1b:28:09:00:26:30:c3:08:c2:2f:b2:9d:7f:d5:7b:ac:01:42: 5a:7d:84:cc:1c:8c:a3:1e:b1:78:ae:9c:23:0f:de:44:61:c9: ec:fd:04:89:6f:b4:38:fe:2d:41:ca:30:a8:44:af:c4:43:13: 7a:8f:86:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuWCr/2OqlPC3Dcx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI1MTAyMDE2MjAzN1oXDTI2MDExODE3MjAzN1owLzEtMCsGA1UEAxMk YjgwMGQ1MDctMjI4YS00OWZjLTgyZGEtM2UyZTFlODQzMTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfZEp7pG8rZ7p1n0owBQleKIXEi6vlsBzgz9 sUgMOD56sulXrGjrJfHsHu4CIid9tdhNgMCw+DdwBt3AZW6xtygo1JKXZK7zGgnS R2CHDGIKk4DL5IwRzxLt4vY6SimHyZhfbXJoDP1HVfkRxAiCSfagCRqFvOn8DuK6 zu0KGIkh59f2OcxJk1gNf2O31TZ9Av1Xz8NvCWhV9VU3MQ849BpC5j4r5+MpHOPW zyj5R2s1yhLTxWh52eIYPmA3nR/YQAxIM0RB5SCH4nleY4A/xnBuXanWZzjY8msF RqN/4uqK4Mep7I3EALmfcOduuqfQp9TF6QDgEn/JIZ4TN3WEkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPeWfqILuYtpIV42FMqhidzPcosyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYTQyMDViZjItZTQwMC0z MGM2LWE5NDEtZGNiM2RmZjAzNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOivMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWQ5LfjIOq0AVTJSa6DOnVzbhCLisIvC5ApoihpvKmoUpsegT2N/gkT haVKLl0jQxFDI68mI1dfSIywQ1JYa22uEhfOO5HAk7rgz/pRZJG9EdrhjRzyFU2d SVEU2vborbbm5U5GnlgUxi1emSHr62GUXJ3q9frMYm518nvelUqTFW6Zz/mIGOlC ALVry47ZvWseWbMUljVKo549pDJcOUe8+6rx8O4zLZUTSkMmTki+8u/V3wnEi7ig udKU/3l7zKlq/HIj+RsoCQAmMMMIwi+ynX/Ve6wBQlp9hMwcjKMesXiunCMP3kRh yez9BIlvtDj+LUHKMKhEr8RDE3qPhpI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:14:17 2025 by rpki-client