$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/54c56cb1-9fe7-3d7e-a6d4-4cbd2751f855.roa File: 54c56cb1-9fe7-3d7e-a6d4-4cbd2751f855.roa (raw, json) Hash identifier: BQeYdlypJ1ko3ZuM/9TvUPBLd1RDNIJeLkZgUA3jfew= Subject key identifier: 6A:F6:2C:64:63:DB:DF:D4:0F:BB:DD:48:0C:33:FC:74:9E:1F:57:93 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584DA6B00B8C2D5AFA3A121CA820 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/54c56cb1-9fe7-3d7e-a6d4-4cbd2751f855.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 55081 IP address blocks: 152.232.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:0b:8c:2d:5a:fa:3a:12:1c:a8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=e8c6f182-53a0-4301-9d3e-39dde66b7ad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b3:d8:2e:73:a7:f9:3c:30:f5:c8:a9:6e:6f: f7:5a:56:d9:12:2b:89:69:3e:7e:43:20:d2:b5:47: 5a:62:72:ab:77:7f:61:2e:70:10:cf:af:0c:a6:87: 51:64:0f:f9:e6:1a:df:0c:b0:91:e1:17:53:d3:84: 40:0e:ba:45:de:da:fd:ac:fe:9f:8c:13:1b:aa:f2: 98:94:15:b5:e1:8d:77:1b:e7:8a:0a:45:3f:1b:31: 41:d2:6c:ca:ba:d6:e2:c6:ee:47:d0:ef:af:66:33: 50:bd:51:d5:a5:c3:6b:b4:ed:a2:34:b0:f3:01:28: 37:12:96:fd:c0:bd:a9:13:f1:52:36:ac:c3:cb:bd: cb:4f:f0:12:35:f1:64:9f:92:84:51:39:41:6f:54: 7f:50:f4:05:5a:e7:6b:81:a4:f9:4b:11:8a:0e:79: 41:d7:de:37:d7:1c:61:07:da:13:d6:62:34:3a:d4: 89:92:45:7b:c8:16:6c:56:95:15:d6:02:c9:f8:89: dc:43:15:70:c5:dc:a1:5c:71:52:50:20:3d:73:c4: 2d:c0:5d:fe:e0:f5:15:0c:0e:0c:96:b9:b5:b8:72: 0e:99:07:92:f2:4c:73:ab:30:5b:11:7e:92:57:b2: 10:bf:09:e6:9a:93:d3:60:85:60:bc:56:12:d8:d4: 03:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F6:2C:64:63:DB:DF:D4:0F:BB:DD:48:0C:33:FC:74:9E:1F:57:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/54c56cb1-9fe7-3d7e-a6d4-4cbd2751f855.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:f2:be:0f:50:39:79:6f:0e:92:e7:d6:2b:ae:9a:37:2f:73: 61:6a:bd:81:96:74:0b:e2:99:cd:dc:1e:a3:a5:c8:3a:81:ef: 1e:6e:46:82:9e:dc:1a:f4:6c:76:f8:23:ce:a6:a4:89:dc:77: 60:12:6f:ae:af:81:65:63:f8:21:02:c4:39:04:1a:fc:9d:ce: ea:5e:c7:b7:df:58:e3:71:57:c0:a7:60:e5:30:67:6c:55:5b: ce:0c:53:54:00:56:2c:a2:6f:9f:91:c9:28:d4:de:9c:fc:39: 10:ce:3d:ff:52:8d:00:0d:e3:40:d2:f8:79:ad:1a:92:ad:18: 33:98:e7:0f:74:1d:c5:f2:06:c7:b8:c7:57:0e:64:ad:a8:0f: 59:8e:99:98:e2:c9:45:6e:cd:87:1a:a1:76:d6:68:3a:eb:3c: 3f:46:d8:90:20:db:ee:f7:10:be:8f:19:60:c3:74:68:3a:ee: 88:82:fe:a4:f3:55:ae:8a:1e:90:b8:b5:fe:88:51:82:79:f5: d0:7f:d5:cc:19:3b:d1:e6:a4:8c:1f:07:0e:12:ec:3d:60:82: 1d:1d:6b:62:93:87:5f:46:64:6b:c1:97:9b:72:80:93:66:b1: 4b:07:54:a9:c6:fc:1f:e6:a0:28:52:f8:3b:38:4d:07:ae:3a: 1a:b6:83:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msAuMLVr6OhIcqCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ZThjNmYxODItNTNhMC00MzAxLTlkM2UtMzlkZGU2NmI3YWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbPYLnOn+Tww9cipbm/3WlbZEiuJaT5+QyDS tUdaYnKrd39hLnAQz68MpodRZA/55hrfDLCR4RdT04RADrpF3tr9rP6fjBMbqvKY lBW14Y13G+eKCkU/GzFB0mzKutbixu5H0O+vZjNQvVHVpcNrtO2iNLDzASg3Epb9 wL2pE/FSNqzDy73LT/ASNfFkn5KEUTlBb1R/UPQFWudrgaT5SxGKDnlB19431xxh B9oT1mI0OtSJkkV7yBZsVpUV1gLJ+IncQxVwxdyhXHFSUCA9c8QtwF3+4PUVDA4M lrm1uHIOmQeS8kxzqzBbEX6SV7IQvwnmmpPTYIVgvFYS2NQDiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGr2LGRj29/UD7vdSAwz/HSeH1eTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvNTRjNTZjYjEtOWZlNy0z ZDdlLWE2ZDQtNGNiZDI3NTFmODU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOiKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInyvg9QOXlvDpLn1iuumjcvc2FqvYGWdAvimc3cHqOlyDqB7x5uRoKe 3Br0bHb4I86mpIncd2ASb66vgWVj+CECxDkEGvydzupex7ffWONxV8CnYOUwZ2xV W84MU1QAViyib5+RySjU3pz8ORDOPf9SjQAN40DS+HmtGpKtGDOY5w90HcXyBse4 x1cOZK2oD1mOmZjiyUVuzYcaoXbWaDrrPD9G2JAg2+73EL6PGWDDdGg67oiC/qTz Va6KHpC4tf6IUYJ59dB/1cwZO9HmpIwfBw4S7D1ggh0da2KTh19GZGvBl5tygJNm sUsHVKnG/B/moChS+Ds4TQeuOhq2g2g= -----END CERTIFICATE-----Generated at Wed May 13 07:58:24 2026 by rpki-client