$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/1149676c-a485-3c2c-b6a1-95cb94244108.roa File: 1149676c-a485-3c2c-b6a1-95cb94244108.roa (raw, json) Hash identifier: 6S2A/KXIuO+0O8ZaveTmB8rurIbygPGbWRgo35xMbDA= Subject key identifier: 8E:E6:04:F0:F0:4D:16:CF:F2:84:1F:49:F0:9B:B7:34:05:2D:F4:A4 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F4986D89A837A9A691D7EB840 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/1149676c-a485-3c2c-b6a1-95cb94244108.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13347 IP address blocks: 152.232.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:d8:9a:83:7a:9a:69:1d:7e:b8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a39f0420-156a-47d3-91c9-8114f63e4cca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:1c:75:51:2d:fb:85:c7:85:a1:e2:30:1b: 0b:e5:3e:8e:f0:99:ba:b2:fd:40:e6:c4:27:5d:e9: c9:33:1c:cc:a5:e4:fc:72:eb:48:a9:e4:5f:aa:1a: e5:02:c7:b9:73:74:81:5a:60:bc:3a:93:38:56:17: 64:f1:3a:50:77:31:2b:a4:37:38:6b:b3:51:f1:bf: d8:f7:e6:a2:f4:f3:db:4c:8a:ad:c3:b8:1e:b7:46: 8c:19:b6:c9:4d:51:8c:a1:d8:7d:57:2a:00:53:11: eb:0f:21:fa:da:a9:8d:74:5e:c9:bd:52:08:8f:d5: 59:fb:08:d2:e2:c4:5f:9d:c7:b9:69:d0:f7:9c:d9: 92:f0:21:fd:fe:9b:4d:f4:e9:25:57:c7:8a:f5:1a: ae:90:89:36:2a:d6:63:4b:6e:d4:29:b5:ab:23:3b: e4:bf:ab:a9:ab:29:0a:79:e1:98:89:0c:b0:40:e6: cf:04:e4:ff:93:bd:53:f3:bb:26:e6:65:94:25:9e: e0:a3:35:f0:4f:f4:61:b5:e2:fd:2f:6c:13:e8:0f: 78:ed:7b:72:dc:f8:a0:ae:42:f3:f4:d0:61:35:8e: ac:3d:03:0f:9e:0e:ec:58:2a:b1:94:4c:1d:90:57: dd:b4:0e:fb:a0:1e:eb:0d:d7:c6:bc:63:16:25:ce: d2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E6:04:F0:F0:4D:16:CF:F2:84:1F:49:F0:9B:B7:34:05:2D:F4:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/1149676c-a485-3c2c-b6a1-95cb94244108.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:60:66:ca:88:91:50:72:bf:a1:22:6d:29:36:e7:16:38:8d: 8e:34:70:1b:f2:ad:db:dd:8e:ff:2b:15:6d:8f:ed:b4:f7:84: bc:03:e3:ab:e4:8d:1c:53:3c:a6:23:50:28:23:5e:69:f2:cc: 6c:14:df:20:e5:bd:96:4e:9f:da:cf:fc:a0:2a:06:37:4a:d0: 57:f3:fb:86:c3:f8:a2:8e:39:e8:7f:76:64:65:fb:78:8c:37: 1e:f6:d0:19:63:00:f2:a6:c3:7e:e6:57:a7:62:ca:65:79:90: 99:35:97:d5:3b:9b:d0:87:6a:4e:31:91:3f:ee:c5:a3:6f:9b: e5:2f:21:25:30:45:6b:86:f0:4c:c7:2f:a2:32:b5:68:c0:c0: 01:f4:1a:65:9f:12:36:2e:5d:7a:1f:df:b5:d2:50:3d:e7:0d: 83:18:65:84:9e:92:79:bf:47:48:f5:a7:23:9e:67:a8:c9:f9: 9e:73:41:8b:1c:8a:e8:77:e6:c0:44:87:f7:de:77:33:da:ff: d5:ce:86:72:9b:12:cf:33:5a:07:79:06:34:29:3d:aa:d8:d3: 91:dd:fa:71:80:e5:81:fe:f9:2c:9a:91:b7:2f:22:f4:5f:f7: 56:ea:8c:15:0f:10:a4:91:d9:2e:89:86:62:2a:18:44:3c:f0: ec:9d:5d:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jhtiag3qaaR1+uEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTM5ZjA0MjAtMTU2YS00N2QzLTkxYzktODExNGY2M2U0Y2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnQcdVEt+4XHhaHiMBsL5T6O8Jm6sv1A5sQn XenJMxzMpeT8cutIqeRfqhrlAse5c3SBWmC8OpM4Vhdk8TpQdzErpDc4a7NR8b/Y 9+ai9PPbTIqtw7get0aMGbbJTVGModh9VyoAUxHrDyH62qmNdF7JvVIIj9VZ+wjS 4sRfnce5adD3nNmS8CH9/ptN9OklV8eK9RqukIk2KtZjS27UKbWrIzvkv6upqykK eeGYiQywQObPBOT/k71T87sm5mWUJZ7gozXwT/RhteL9L2wT6A947Xty3PigrkLz 9NBhNY6sPQMPng7sWCqxlEwdkFfdtA77oB7rDdfGvGMWJc7SowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7mBPDwTRbP8oQfSfCbtzQFLfSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMTE0OTY3NmMtYTQ4NS0z YzJjLWI2YTEtOTVjYjk0MjQ0MTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1gZsqIkVByv6EibSk25xY4jY40cBvyrdvdjv8rFW2P7bT3hLwD46vk jRxTPKYjUCgjXmnyzGwU3yDlvZZOn9rP/KAqBjdK0Ffz+4bD+KKOOeh/dmRl+3iM Nx720BljAPKmw37mV6diymV5kJk1l9U7m9CHak4xkT/uxaNvm+UvISUwRWuG8EzH L6IytWjAwAH0GmWfEjYuXXof37XSUD3nDYMYZYSeknm/R0j1pyOeZ6jJ+Z5zQYsc iuh35sBEh/fedzPa/9XOhnKbEs8zWgd5BjQpParY05Hd+nGA5YH++SyakbcvIvRf 91bqjBUPEKSR2S6JhmIqGEQ88OydXTk= -----END CERTIFICATE-----Generated at Sun Oct 11 10:28:33 2026 by rpki-client