$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a4354639-270a-3236-86a2-200c531c9a81.roa File: a4354639-270a-3236-86a2-200c531c9a81.roa (raw, json) Hash identifier: yXfTGxtgixK5hGVop0gLe3rwa1h4sW8AKPOjuv5YvIo= Subject key identifier: 96:4A:DD:8D:61:54:D0:D1:51:D3:F9:2A:BC:76:4E:50:AA:4A:C1:BD Certificate issuer: /CN=5a154205-b480-44eb-8ce6-252aa97d28bd Certificate serial: 010D0C9F4328584F1E2CFD007C90A2FF5D81E500 Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a4354639-270a-3236-86a2-200c531c9a81.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 216047 IP address blocks: 43.225.126.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:fd:00:7c:90:a2:ff:5d:81:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=203bee2e-57fc-4771-b9e0-2d7226bd3f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c9:c8:dd:dd:b9:a0:15:07:46:00:fa:a7:ee: a1:95:18:ea:3c:8c:53:37:37:2e:20:3b:d2:4b:7d: f3:88:15:49:5e:a1:eb:cc:0c:a7:bf:aa:45:70:c5: 79:c5:5a:c4:92:31:6b:42:3d:75:f4:fd:90:28:ef: 28:22:45:9e:c4:d6:5d:b5:97:57:bd:92:b2:4a:6e: fd:79:a0:8f:e4:ed:ed:3e:49:9e:8b:34:a7:d0:5f: 4d:d1:53:ea:73:0b:e0:3d:53:31:f4:54:7e:5a:bb: 98:1a:fa:fe:3d:3d:ac:84:e4:42:fc:31:de:cf:58: 30:41:36:ca:91:26:c1:71:2b:8b:99:82:54:8a:42: 77:bb:e2:5c:2c:d8:72:aa:bc:e4:80:b5:ea:38:37: 15:08:0e:bb:ce:ee:f0:36:fd:d6:3e:f4:67:64:47: f7:7c:a7:20:30:df:62:5b:05:43:c6:32:53:86:1e: 90:c2:2d:ce:7d:f8:3b:1b:47:fc:5d:e3:4e:1f:de: af:90:40:69:16:0d:2e:e8:69:5b:10:ca:c3:33:22: 0a:d7:f2:96:92:12:bc:b0:0a:36:d1:7c:8b:d8:40: 5b:15:d6:c4:17:47:95:08:21:70:34:b6:7c:a1:19: f7:ec:d3:8a:a1:25:8f:51:e9:12:ae:35:c1:c4:51: cc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4A:DD:8D:61:54:D0:D1:51:D3:F9:2A:BC:76:4E:50:AA:4A:C1:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a4354639-270a-3236-86a2-200c531c9a81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl X509v3 Authority Key Identifier: keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer sbgp-ipAddrBlock: critical IPv4: 43.225.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:ff:9c:1b:4a:18:84:79:3e:13:07:0f:38:2f:dc:4a:6e:4f: c3:97:07:d4:b6:08:9f:2d:6b:8a:18:56:09:b7:1e:15:4c:37: 12:32:84:3e:af:0d:f0:c5:80:5f:ea:ae:09:d1:d8:24:8f:1f: dd:a5:31:3f:7c:c3:13:4c:f9:2c:4c:f9:65:19:a9:39:ff:46: 81:d5:48:2c:cf:0e:44:95:a6:fa:7c:7a:81:2a:1d:5c:f8:8b: 5a:6e:c2:18:f2:fa:48:ef:07:ee:2c:19:91:38:6c:41:7e:da: 94:7b:9a:ec:16:81:fb:31:a9:93:cc:2b:bd:f8:f5:ba:0f:21: 76:3a:da:42:c5:a9:98:a8:e1:9d:a0:70:20:24:ea:77:a3:d2: e5:b9:65:0f:23:68:f2:a0:d8:e8:11:42:56:c4:83:a0:90:81: 7a:7f:37:d4:1d:5f:63:c1:81:9d:1f:7a:be:b0:42:70:c5:90: 84:1e:9b:65:33:79:0a:4b:84:e3:7a:09:c1:a5:be:7a:a0:4e: 81:60:f5:95:ee:75:89:b6:a6:ad:ee:23:b2:c4:88:6f:be:a6: cf:50:3d:43:62:5d:9a:e8:a5:b6:1c:43:2e:de:e2:72:6b:b9: eb:76:82:6e:bb:f2:5c:35:8d:3e:57:ec:e6:03:1e:8b:9f:60: 97:af:46:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLP0AfJCi/12B5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWExNTQyMDUtYjQ4MC00NGViLThjZTYtMjUyYWE5N2Qy OGJkMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk MjAzYmVlMmUtNTdmYy00NzcxLWI5ZTAtMmQ3MjI2YmQzZjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MnI3d25oBUHRgD6p+6hlRjqPIxTNzcuIDvS S33ziBVJXqHrzAynv6pFcMV5xVrEkjFrQj119P2QKO8oIkWexNZdtZdXvZKySm79 eaCP5O3tPkmeizSn0F9N0VPqcwvgPVMx9FR+WruYGvr+PT2shORC/DHez1gwQTbK kSbBcSuLmYJUikJ3u+JcLNhyqrzkgLXqODcVCA67zu7wNv3WPvRnZEf3fKcgMN9i WwVDxjJThh6Qwi3Offg7G0f8XeNOH96vkEBpFg0u6GlbEMrDMyIK1/KWkhK8sAo2 0XyL2EBbFdbEF0eVCCFwNLZ8oRn37NOKoSWPUekSrjXBxFHMGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZK3Y1hVNDRUdP5Krx2TlCqSsG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1 NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJhYTk3ZDI4YmQvYTQzNTQ2MzktMjcwYS0z MjM2LTg2YTItMjAwYzUzMWM5YTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWExNTQyMDUtYjQ4MC00NGViLThj ZTYtMjUyYWE5N2QyOGJkLzVhMTU0MjA1LWI0ODAtNDRlYi04Y2U2LTI1MmFhOTdk MjhiZC5jcmwwHwYDVR0jBBgwFoAUZ0jHwigOJcT/6bz7JSsbuo0vU8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJh YTk3ZDI4YmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK+F+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3/nBtKGIR5PhMHDzgv3EpuT8OXB9S2CJ8ta4oYVgm3HhVMNxIyhD6v DfDFgF/qrgnR2CSPH92lMT98wxNM+SxM+WUZqTn/RoHVSCzPDkSVpvp8eoEqHVz4 i1puwhjy+kjvB+4sGZE4bEF+2pR7muwWgfsxqZPMK7349boPIXY62kLFqZio4Z2g cCAk6nej0uW5ZQ8jaPKg2OgRQlbEg6CQgXp/N9QdX2PBgZ0fer6wQnDFkIQem2Uz eQpLhON6CcGlvnqgToFg9ZXudYm2pq3uI7LEiG++ps9QPUNiXZropbYcQy7e4nJr uet2gm678lw1jT5X7OYDHoufYJevRrQ= -----END CERTIFICATE-----Generated at Thu Sep 24 14:27:40 2026 by rpki-client