$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa File: bef358d3-0363-30e8-aa38-d97259f0f8bc.roa (raw, json) Hash identifier: PIud7p8ekiYw/NrpunaANOlw6KUymWrdN7+5LxqSX4c= Subject key identifier: 06:BC:9E:F8:11:9D:35:45:2B:57:DB:4B:1D:5C:F9:03:4C:9F:03:F4 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584F51D2AED01D3954BF6901D780 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 33442 IP address blocks: 157.235.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:ae:d0:1d:39:54:bf:69:01:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=754128b6-66e6-4f4d-b49d-b3c140df76e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d9:cb:44:51:3f:8d:39:e9:92:94:84:a9:db: a7:36:a4:b8:0e:66:6c:7b:4a:9c:e3:8c:50:16:c9: 99:37:c8:ec:7a:17:3f:3b:94:74:59:2e:ba:55:76: 6d:96:81:7b:3b:89:57:38:b5:6a:60:9c:91:01:ae: f3:25:c8:89:fd:d3:19:85:14:bf:f1:1a:30:00:e0: 0b:2c:27:13:35:8c:8a:fa:cf:7f:e2:38:f2:7f:5e: 53:bb:b0:65:be:4c:80:8a:73:fd:74:ff:6c:7c:da: d2:03:a0:56:0e:b7:c0:1f:18:7c:d9:39:ed:68:a5: 47:d9:36:a3:c6:96:62:28:32:d2:7b:7b:5d:79:c0: 45:e3:a7:df:38:5c:9b:d8:e9:27:e6:b3:02:e7:15: fb:45:3f:9b:ab:01:d5:89:dc:50:e7:71:9d:38:e4: 9f:98:16:90:51:68:5a:85:7c:81:f2:ba:75:37:f8: 0f:73:8f:6a:d4:ac:05:af:14:6a:a7:96:98:aa:03: fb:5c:32:b0:94:19:f8:e6:28:02:29:9f:8b:95:d0: 89:ba:21:1e:d1:e9:ce:2d:b2:17:39:25:59:bf:50: e4:5e:82:b0:9e:03:cf:b8:db:3e:01:e3:4f:e7:66: d0:dd:a5:ef:d5:e2:88:ff:db:c9:0f:59:d1:0b:03: f7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BC:9E:F8:11:9D:35:45:2B:57:DB:4B:1D:5C:F9:03:4C:9F:03:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/bef358d3-0363-30e8-aa38-d97259f0f8bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:f8:00:48:be:b6:b0:da:7b:12:21:43:45:01:07:96:e2:cf: ae:fa:51:1f:72:81:27:28:b8:79:43:0d:02:e2:8c:76:b8:c1: 9b:ee:d0:3a:bf:a4:79:0d:25:94:60:17:6c:28:c3:0f:75:76: ec:e9:61:19:26:d4:2f:1c:7d:54:22:68:44:df:9e:c0:ba:7e: b6:b9:d3:36:21:d5:ee:2f:00:d8:9a:34:68:a2:74:b6:19:8e: 02:e0:90:a6:17:36:80:16:7b:92:82:9d:a3:af:5c:72:0a:44: a9:ea:71:a7:f3:61:10:50:26:fc:b2:8f:cb:7b:bf:1b:a6:f0: ab:10:72:d5:c5:4d:93:b5:78:22:67:f2:b0:5d:d2:46:fc:bd: 17:88:86:04:8a:6c:aa:fc:8e:ac:d0:9c:37:d7:2b:c4:5b:8a: 26:2e:c5:d3:14:4b:41:43:b5:1c:9a:a7:3a:b3:ef:46:c1:00: f8:9c:d2:26:c6:2e:c6:37:20:2d:42:80:ae:50:26:55:34:1c: c1:33:9c:ac:c0:6d:96:81:0b:fa:d1:da:02:05:12:9d:f2:56: af:9c:05:29:a1:3f:c9:20:12:9f:70:60:fc:86:40:d5:a8:b8: 0f:79:76:53:90:d0:d3:ca:3c:8e:ab:a5:4b:29:57:ab:6c:92: 49:9a:65:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0q7QHTlUv2kB14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NzU0MTI4YjYtNjZlNi00ZjRkLWI0OWQtYjNjMTQwZGY3NmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9nLRFE/jTnpkpSEqdunNqS4DmZse0qc44xQ FsmZN8jsehc/O5R0WS66VXZtloF7O4lXOLVqYJyRAa7zJciJ/dMZhRS/8RowAOAL LCcTNYyK+s9/4jjyf15Tu7BlvkyAinP9dP9sfNrSA6BWDrfAHxh82TntaKVH2Taj xpZiKDLSe3tdecBF46ffOFyb2Okn5rMC5xX7RT+bqwHVidxQ53GdOOSfmBaQUWha hXyB8rp1N/gPc49q1KwFrxRqp5aYqgP7XDKwlBn45igCKZ+LldCJuiEe0enOLbIX OSVZv1DkXoKwngPPuNs+AeNP52bQ3aXv1eKI/9vJD1nRCwP3sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAa8nvgRnTVFK1fbSx1c+QNMnwP0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvYmVmMzU4ZDMtMDM2My0z MGU4LWFhMzgtZDk3MjU5ZjBmOGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAneuaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADf4AEi+trDaexIhQ0UBB5biz676UR9ygScouHlDDQLijHa4wZvu0Dq/ pHkNJZRgF2woww91duzpYRkm1C8cfVQiaETfnsC6fra50zYh1e4vANiaNGiidLYZ jgLgkKYXNoAWe5KCnaOvXHIKRKnqcafzYRBQJvyyj8t7vxum8KsQctXFTZO1eCJn 8rBd0kb8vReIhgSKbKr8jqzQnDfXK8RbiiYuxdMUS0FDtRyapzqz70bBAPic0ibG LsY3IC1CgK5QJlU0HMEznKzAbZaBC/rR2gIFEp3yVq+cBSmhP8kgEp9wYPyGQNWo uA95dlOQ0NPKPI6rpUspV6tskkmaZcw= -----END CERTIFICATE-----Generated at Sun Oct 4 21:35:17 2026 by rpki-client