$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a4354639-270a-3236-86a2-200c531c9a81.roa File: a4354639-270a-3236-86a2-200c531c9a81.roa (raw, json) Hash identifier: sfLDSjdsho6QScbqTQtyYz35fol/LcQpSL8oKzlr210= Subject key identifier: D0:07:3B:F4:AB:91:33:99:27:AE:54:DA:09:2B:7A:55:A2:74:05:AF Certificate issuer: /CN=5a154205-b480-44eb-8ce6-252aa97d28bd Certificate serial: 010D0C9F4328584D9B855AD716401161A3431900 Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a4354639-270a-3236-86a2-200c531c9a81.roa Signing time: Fri 24 Apr 2026 01:00:23 +0000 ROA not before: Fri 24 Apr 2026 01:00:23 +0000 ROA not after: Thu 23 Jul 2026 01:00:23 +0000 asID: 216047 IP address blocks: 43.225.126.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9b:85:5a:d7:16:40:11:61:a3:43:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd Validity Not Before: Apr 24 01:00:23 2026 GMT Not After : Jul 23 01:00:23 2026 GMT Subject: CN=37971308-7fe5-416a-bcd4-b305bd14b30d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cf:e6:3b:e3:38:a4:69:9f:e0:1a:5a:4d:83: 3a:36:e5:c9:1b:e0:06:cd:34:57:12:75:04:82:ab: 67:38:e2:f9:e5:8a:fc:94:14:00:e7:e6:d3:95:ff: 85:d1:24:71:a6:74:a0:d5:72:b9:14:2d:b7:7a:84: 0c:8e:b7:7e:1f:1c:f4:54:63:e1:35:e5:3f:c9:fc: b6:40:ff:70:d7:38:f5:3f:45:36:7d:10:54:56:d1: d4:0f:0b:47:98:d2:cc:ab:44:c7:c9:dd:e5:e1:05: e8:3e:b5:0f:05:79:7f:01:c9:d5:94:f4:ce:17:8c: 89:60:a7:c2:ae:5c:bb:42:03:ea:1b:6d:dd:0f:c1: 47:ee:19:30:cd:4a:e3:97:72:a8:51:08:c1:48:fb: 3a:66:09:fe:8d:1f:82:5f:7d:55:04:33:9b:7d:b0: 4c:0b:b7:7e:d7:f7:84:0f:21:4d:84:07:da:91:1e: a9:85:aa:2c:46:d6:3a:b4:24:db:79:1d:be:7d:4b: f0:e3:5c:42:63:9d:cb:58:f8:42:28:bd:b3:f5:db: 4a:73:fa:0e:c9:12:29:0a:2a:63:05:0b:98:be:8f: 19:51:d0:62:09:fb:d0:50:7d:c8:1e:66:65:13:35: a4:75:91:b0:02:91:25:ca:c3:51:5a:6a:92:56:dd: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:07:3B:F4:AB:91:33:99:27:AE:54:DA:09:2B:7A:55:A2:74:05:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a4354639-270a-3236-86a2-200c531c9a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl X509v3 Authority Key Identifier: keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer sbgp-ipAddrBlock: critical IPv4: 43.225.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:12:4d:ec:69:a8:7d:84:da:b6:e4:03:58:e6:db:a7:19:19: e6:f3:e1:f1:4d:4e:82:33:de:19:6e:3d:4c:ee:a1:e6:a8:e0: 68:0e:14:4e:b5:45:7d:05:16:f5:e1:62:e0:89:47:52:61:5c: 17:2b:ee:7a:12:92:67:9e:a0:d0:d5:37:43:ca:86:e4:42:5d: cf:68:4a:bf:10:bb:ad:42:a7:09:9e:3c:91:77:77:3a:0a:a9: 58:ea:17:a4:c0:97:a6:54:fc:10:dc:d9:e9:5b:97:38:6f:57: b3:29:00:d6:5a:bc:44:df:5a:04:4b:8d:4f:ae:0b:42:9c:e9: 4a:81:54:9c:d5:e9:75:97:71:5d:55:49:e9:c1:0a:b4:61:c0: 7a:0e:93:d0:05:6f:ad:69:82:6d:e0:12:35:d9:c4:b9:58:64: a6:b7:ab:9a:e4:ae:02:63:72:09:64:86:b9:13:20:d5:47:89: f6:a9:59:2d:d8:d9:9b:07:8f:d5:ec:0b:cc:6f:ab:7e:83:96: 2a:65:ec:35:22:9c:cc:71:4c:dc:08:70:f6:88:db:6b:c5:85: ae:d8:8c:8c:0d:ab:0c:c8:f5:a4:fd:a8:78:a5:6c:63:0a:e0: 11:94:ab:57:12:6f:54:a9:44:ba:45:35:2f:16:62:26:00:11: 29:11:ca:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2bhVrXFkARYaNDGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWExNTQyMDUtYjQ4MC00NGViLThjZTYtMjUyYWE5N2Qy OGJkMB4XDTI2MDQyNDAxMDAyM1oXDTI2MDcyMzAxMDAyM1owLzEtMCsGA1UEAxMk Mzc5NzEzMDgtN2ZlNS00MTZhLWJjZDQtYjMwNWJkMTRiMzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos/mO+M4pGmf4BpaTYM6NuXJG+AGzTRXEnUE gqtnOOL55Yr8lBQA5+bTlf+F0SRxpnSg1XK5FC23eoQMjrd+Hxz0VGPhNeU/yfy2 QP9w1zj1P0U2fRBUVtHUDwtHmNLMq0THyd3l4QXoPrUPBXl/AcnVlPTOF4yJYKfC rly7QgPqG23dD8FH7hkwzUrjl3KoUQjBSPs6Zgn+jR+CX31VBDObfbBMC7d+1/eE DyFNhAfakR6phaosRtY6tCTbeR2+fUvw41xCY53LWPhCKL2z9dtKc/oOyRIpCipj BQuYvo8ZUdBiCfvQUH3IHmZlEzWkdZGwApElysNRWmqSVt2odQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAHO/SrkTOZJ65U2gkrelWidAWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1 NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJhYTk3ZDI4YmQvYTQzNTQ2MzktMjcwYS0z MjM2LTg2YTItMjAwYzUzMWM5YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWExNTQyMDUtYjQ4MC00NGViLThj ZTYtMjUyYWE5N2QyOGJkLzVhMTU0MjA1LWI0ODAtNDRlYi04Y2U2LTI1MmFhOTdk MjhiZC5jcmwwHwYDVR0jBBgwFoAUZ0jHwigOJcT/6bz7JSsbuo0vU8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJh YTk3ZDI4YmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+F+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQSTexpqH2E2rbkA1jm26cZGebz4fFNToIz3hluPUzuoeao4GgOFE61 RX0FFvXhYuCJR1JhXBcr7noSkmeeoNDVN0PKhuRCXc9oSr8Qu61CpwmePJF3dzoK qVjqF6TAl6ZU/BDc2elblzhvV7MpANZavETfWgRLjU+uC0Kc6UqBVJzV6XWXcV1V SenBCrRhwHoOk9AFb61pgm3gEjXZxLlYZKa3q5rkrgJjcglkhrkTINVHifapWS3Y 2ZsHj9XsC8xvq36Dlipl7DUinMxxTNwIcPaI22vFha7YjIwNqwzI9aT9qHilbGMK 4BGUq1cSb1SpRLpFNS8WYiYAESkRypI= -----END CERTIFICATE-----Generated at Wed May 13 03:49:26 2026 by rpki-client