$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa File: a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa (raw, json) Hash identifier: YxFReQ3yvH4TgFH8/urz9x1Iyv4QJSEfpfiCUY83wj4= Subject key identifier: BE:D5:D2:C9:26:D5:E8:D7:FC:3D:BA:6F:C5:6F:E7:2A:6F:93:1C:DB Certificate issuer: /CN=5a154205-b480-44eb-8ce6-252aa97d28bd Certificate serial: 010D0C9F4328584FCE2BD523D382031DD31A9580 Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa Signing time: Wed 11 Nov 2026 14:00:13 +0000 ROA not before: Wed 11 Nov 2026 14:00:13 +0000 ROA not after: Tue 09 Feb 2027 14:00:13 +0000 asID: 138415 IP address blocks: 43.225.124.0/22 maxlen: 32 43.229.112.0/22 maxlen: 32 43.240.236.0/22 maxlen: 32 43.243.188.0/22 maxlen: 32 43.249.172.0/22 maxlen: 32 45.114.104.0/22 maxlen: 32 103.37.0.0/22 maxlen: 32 103.39.16.0/22 maxlen: 32 103.41.4.0/22 maxlen: 32 103.44.88.0/22 maxlen: 32 103.48.132.0/22 maxlen: 32 103.54.60.0/22 maxlen: 32 103.199.100.0/22 maxlen: 32 137.59.16.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ce:2b:d5:23:d3:82:03:1d:d3:1a:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd Validity Not Before: Nov 11 14:00:13 2026 GMT Not After : Feb 9 14:00:13 2027 GMT Subject: CN=f8e1e04c-c1c9-4658-9139-5c179d0b2d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f7:df:4b:90:32:52:a7:a9:d3:15:30:19:b9: 81:3b:cd:bc:dd:61:4e:75:72:17:3a:90:98:f6:d0: fd:16:57:82:3d:44:6a:3a:3a:20:29:a9:84:76:fb: 79:36:bd:7b:06:98:34:0d:1a:2f:8f:f6:48:99:c0: c9:a6:50:4e:dd:60:83:77:ab:17:02:9b:2e:99:45: fc:24:df:3b:af:33:ea:3b:3a:50:48:f0:6d:f4:c7: fd:02:82:a3:34:6a:20:2d:18:f4:56:7b:17:14:dc: a8:3c:5c:3c:f1:e5:18:75:24:d4:99:a4:5c:ce:60: c9:a6:72:f4:a9:78:1f:23:5a:18:4c:91:6d:9b:eb: 6b:b7:60:f8:b9:be:8b:2a:f9:c1:d6:f0:99:37:dd: aa:d4:7c:b9:17:bb:ef:50:8a:ea:d4:94:b7:c3:44: 33:7e:38:f2:f8:7e:9b:72:07:6f:aa:73:c1:e6:8b: aa:97:94:e3:6a:f1:29:57:de:d1:e1:fa:14:32:aa: 6f:d6:a2:68:e6:eb:2d:c9:a1:4f:f4:4a:d4:2e:57: 74:0a:21:dc:fc:6d:c1:ab:52:28:58:97:34:a0:70: 8d:25:89:31:cf:ad:13:bd:70:44:e7:c0:92:48:ee: b3:96:ce:7c:f4:7a:a4:4e:db:f4:91:82:68:93:b5: a3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D5:D2:C9:26:D5:E8:D7:FC:3D:BA:6F:C5:6F:E7:2A:6F:93:1C:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl X509v3 Authority Key Identifier: keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer sbgp-ipAddrBlock: critical IPv4: 43.225.124.0/22 43.229.112.0/22 43.240.236.0/22 43.243.188.0/22 43.249.172.0/22 45.114.104.0/22 103.37.0.0/22 103.39.16.0/22 103.41.4.0/22 103.44.88.0/22 103.48.132.0/22 103.54.60.0/22 103.199.100.0/22 137.59.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:21:7c:97:75:53:6c:8b:77:94:93:69:78:cc:a3:e3:4a:46: ad:e8:f0:81:c4:36:6d:38:8a:3c:7c:1e:4e:f9:2e:44:bf:3c: 88:95:b3:1b:ad:00:5b:b3:db:0b:34:a4:e2:ea:37:32:17:fc: 14:59:1e:9b:0c:ac:b9:bc:01:7e:33:65:c2:e3:26:22:22:a5: cd:22:14:11:5f:dc:f9:6e:3a:cf:80:54:ab:78:bf:6a:1d:1a: 72:34:8a:bf:15:8b:a1:a4:fb:12:06:35:22:e4:94:b7:fb:f5: c8:8d:3e:f5:dd:c4:89:dd:ff:38:2f:9a:0f:ad:a6:7a:97:b9: 04:b2:f3:1f:37:e0:cd:b5:40:b3:b0:7a:c0:e0:db:09:df:ca: ea:56:30:df:83:a8:65:05:25:0f:d6:02:9b:07:6d:dd:3a:12: 6c:5b:42:b5:e6:48:01:02:b2:cb:21:1d:35:f6:4d:a2:22:49: 6b:0a:3e:09:87:1e:ba:ae:97:56:1b:31:b6:23:93:52:28:70: bb:b1:59:08:28:61:50:62:ac:5b:33:dc:1d:b9:2c:2d:01:9f: f5:9b:22:56:56:ac:95:6c:2c:6f:bd:ed:54:d6:11:60:13:80: 83:98:d5:37:1d:1c:c2:e9:2d:7b:52:87:ed:ae:90:61:66:5f: e4:da:4c:4a -----BEGIN CERTIFICATE----- MIIGkTCCBXmgAwIBAgIUAQ0Mn0MoWE/OK9Uj04IDHdMalYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWExNTQyMDUtYjQ4MC00NGViLThjZTYtMjUyYWE5N2Qy OGJkMB4XDTI2MTExMTE0MDAxM1oXDTI3MDIwOTE0MDAxM1owLzEtMCsGA1UEAxMk ZjhlMWUwNGMtYzFjOS00NjU4LTkxMzktNWMxNzlkMGIyZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPffS5AyUqep0xUwGbmBO8283WFOdXIXOpCY 9tD9FleCPURqOjogKamEdvt5Nr17Bpg0DRovj/ZImcDJplBO3WCDd6sXApsumUX8 JN87rzPqOzpQSPBt9Mf9AoKjNGogLRj0VnsXFNyoPFw88eUYdSTUmaRczmDJpnL0 qXgfI1oYTJFtm+trt2D4ub6LKvnB1vCZN92q1Hy5F7vvUIrq1JS3w0Qzfjjy+H6b cgdvqnPB5ouql5TjavEpV97R4foUMqpv1qJo5ustyaFP9ErULld0CiHc/G3Bq1Io WJc0oHCNJYkxz60TvXBE58CSSO6zls589HqkTtv0kYJok7WjAQIDAQABo4IDozCC A58wHQYDVR0OBBYEFL7V0skm1ejX/D26b8Vv5ypvkxzbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1 NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJhYTk3ZDI4YmQvYTgzZjUwOGItMDFmMy0z YjZkLTg2YmYtNGJjNWE3YTcxY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWExNTQyMDUtYjQ4MC00NGViLThj ZTYtMjUyYWE5N2QyOGJkLzVhMTU0MjA1LWI0ODAtNDRlYi04Y2U2LTI1MmFhOTdk MjhiZC5jcmwwHwYDVR0jBBgwFoAUZ0jHwigOJcT/6bz7JSsbuo0vU8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJh YTk3ZDI4YmQuY2VyMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCK+F8AwQC K+VwAwQCK/DsAwQCK/O8AwQCK/msAwQCLXJoAwQCZyUAAwQCZycQAwQCZykEAwQC ZyxYAwQCZzCEAwQCZzY8AwQCZ8dkAwQCiTsQMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHUhfJd1U2yLd5ST aXjMo+NKRq3o8IHENm04ijx8Hk75LkS/PIiVsxutAFuz2ws0pOLqNzIX/BRZHpsM rLm8AX4zZcLjJiIipc0iFBFf3PluOs+AVKt4v2odGnI0ir8Vi6Gk+xIGNSLklLf7 9ciNPvXdxInd/zgvmg+tpnqXuQSy8x834M21QLOwesDg2wnfyupWMN+DqGUFJQ/W ApsHbd06EmxbQrXmSAECssshHTX2TaIiSWsKPgmHHrqul1YbMbYjk1IocLuxWQgo YVBirFsz3B25LC0Bn/WbIlZWrJVsLG+97VTWEWATgIOY1TcdHMLpLXtSh+2ukGFm X+TaTEo= -----END CERTIFICATE-----Generated at Sun Nov 15 16:24:48 2026 by rpki-client