$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3165335f-f1e8-3162-9a7d-c4e36bc929c8.roa File: 3165335f-f1e8-3162-9a7d-c4e36bc929c8.roa (raw, json) Hash identifier: tuw4MmAoD/1O7u47b3twPMzI4N4470y1pUAsZbN8Y7E= Subject key identifier: DD:0E:6D:22:AA:53:29:BB:75:D7:7D:2E:0C:C8:E2:93:CB:77:2D:38 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F268D01C5F6032E05EC8E1A20 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3165335f-f1e8-3162-9a7d-c4e36bc929c8.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 55286 IP address blocks: 152.232.88.0/24 maxlen: 24 152.232.89.0/24 maxlen: 24 152.232.90.0/24 maxlen: 24 152.232.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:01:c5:f6:03:2e:05:ec:8e:1a:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=f1769b38-6a79-4d0a-a608-94289f69e5bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cb:ae:21:57:76:8f:b8:0c:05:f0:43:94:75: 1b:d2:d4:1f:d2:e5:e3:01:ce:50:29:37:c7:f9:76: b1:60:2b:cc:e8:5a:08:df:e6:9d:c9:9c:34:25:fd: 7e:da:6d:fb:65:d0:4d:2c:ca:77:3a:ff:c2:16:3c: 83:13:0f:46:88:05:a4:e8:c1:b2:d1:ef:d7:df:c7: a5:7b:19:6b:09:76:f3:e7:d0:d6:c6:cb:fd:f1:3b: 07:49:81:6c:bd:c3:8a:5d:05:f4:ad:e6:93:39:a9: d6:de:f1:1d:8f:c4:cb:57:d7:98:20:3f:0d:b0:1a: f0:a9:0e:02:08:bb:7f:fb:7f:7f:03:61:b1:0b:f2: fb:19:1f:f8:85:f0:6d:88:41:bb:9e:88:d5:87:b4: c7:56:31:e4:56:db:fe:a6:21:5c:86:d3:2f:77:fc: ba:73:c0:2b:39:4d:0d:ba:b8:65:d3:60:63:95:0a: 82:8e:63:29:51:d8:af:cd:1b:16:60:bf:10:7c:43: ee:74:16:a5:10:35:89:91:5c:45:f9:8e:9e:9c:bf: 2a:4d:af:08:e5:ee:36:09:57:58:07:b2:5b:fb:ca: 93:9f:24:be:95:a2:e0:90:d3:b8:7b:3d:88:45:c7: eb:29:f2:b9:0b:08:ba:19:62:8f:49:44:0c:7b:f9: 5b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:0E:6D:22:AA:53:29:BB:75:D7:7D:2E:0C:C8:E2:93:CB:77:2D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/3165335f-f1e8-3162-9a7d-c4e36bc929c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:00:32:ae:9d:7a:5e:be:2b:53:c7:50:b6:7e:0b:b5:13:fe: a3:2d:06:32:12:f0:00:4c:a6:03:ff:a6:1f:4c:d8:4f:9c:98: 26:0b:1c:55:37:b8:8f:0b:62:9a:ba:66:e1:dc:78:46:64:20: a9:1f:50:a4:c3:7b:bd:17:45:e0:77:0c:23:66:af:55:ef:22: e5:e8:3a:3f:17:a2:dd:da:95:74:81:c8:68:dc:f1:82:51:6e: 43:4d:9b:16:d1:1c:15:3a:16:de:86:9f:c3:d2:c2:99:79:b1: 9e:9c:79:29:b1:18:04:ff:64:c6:e3:ae:b8:c6:24:71:c3:e9: a5:f3:c3:a0:e9:64:25:67:9f:62:7a:ff:b6:88:ca:6c:03:34: 73:11:bd:f3:74:3a:b0:c4:a9:44:84:24:86:2a:3a:81:0b:b8: 83:5c:e9:6a:41:8d:6e:cc:e8:4c:61:7a:e3:24:2e:39:39:30: f3:58:63:42:80:8c:33:f0:71:1c:9e:fa:24:ed:4c:c3:e3:9d: 30:13:f1:92:ba:66:2e:9f:1b:53:fe:10:0f:e7:0b:71:fc:40: 64:5f:28:f6:2d:5b:3f:16:f9:7c:58:09:fa:fb:26:0a:ee:cf: 75:fb:25:9f:39:a0:4c:53:50:0f:66:97:44:fc:18:4b:19:fe: ec:72:a0:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQHF9gMuBeyOGiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk ZjE3NjliMzgtNmE3OS00ZDBhLWE2MDgtOTQyODlmNjllNWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8uuIVd2j7gMBfBDlHUb0tQf0uXjAc5QKTfH +XaxYCvM6FoI3+adyZw0Jf1+2m37ZdBNLMp3Ov/CFjyDEw9GiAWk6MGy0e/X38el exlrCXbz59DWxsv98TsHSYFsvcOKXQX0reaTOanW3vEdj8TLV9eYID8NsBrwqQ4C CLt/+39/A2GxC/L7GR/4hfBtiEG7nojVh7THVjHkVtv+piFchtMvd/y6c8ArOU0N urhl02BjlQqCjmMpUdivzRsWYL8QfEPudBalEDWJkVxF+Y6enL8qTa8I5e42CVdY B7Jb+8qTnyS+laLgkNO4ez2IRcfrKfK5Cwi6GWKPSUQMe/lb/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0ObSKqUym7ddd9LgzI4pPLdy04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvMzE2NTMzNWYtZjFlOC0z MTYyLTlhN2QtYzRlMzZiYzkyOWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUAMq6del6+K1PHULZ+C7UT/qMtBjIS8ABMpgP/ph9M2E+cmCYLHFU3 uI8LYpq6ZuHceEZkIKkfUKTDe70XReB3DCNmr1XvIuXoOj8Xot3alXSByGjc8YJR bkNNmxbRHBU6Ft6Gn8PSwpl5sZ6ceSmxGAT/ZMbjrrjGJHHD6aXzw6DpZCVnn2J6 /7aIymwDNHMRvfN0OrDEqUSEJIYqOoELuINc6WpBjW7M6ExheuMkLjk5MPNYY0KA jDPwcRye+iTtTMPjnTAT8ZK6Zi6fG1P+EA/nC3H8QGRfKPYtWz8W+XxYCfr7Jgru z3X7JZ85oExTUA9ml0T8GEsZ/uxyoGY= -----END CERTIFICATE-----Generated at Mon Sep 28 17:14:02 2026 by rpki-client