$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/8cf4b5af-c00f-3090-84e8-3a25f002a0f6.roa File: 8cf4b5af-c00f-3090-84e8-3a25f002a0f6.roa (raw, json) Hash identifier: 64sR0xNuY0FCmuRDKZRzi00T3vocF9o9IGNOrFOhM44= Subject key identifier: BF:F1:40:D7:BD:DE:DF:B3:ED:1A:D5:18:06:DF:52:C0:12:62:64:F0 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584DC995ABB493D530467CDAF780 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/8cf4b5af-c00f-3090-84e8-3a25f002a0f6.roa Signing time: Sun 10 May 2026 13:00:31 +0000 ROA not before: Sun 10 May 2026 13:00:31 +0000 ROA not after: Sat 08 Aug 2026 13:00:31 +0000 asID: 55286 IP address blocks: 152.232.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:c9:95:ab:b4:93:d5:30:46:7c:da:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: May 10 13:00:31 2026 GMT Not After : Aug 8 13:00:31 2026 GMT Subject: CN=3a8eeab9-0f9b-42a0-abb5-260a1ba491db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3c:03:73:26:41:49:54:38:dd:4e:9d:cb:83: 18:af:57:07:5f:bc:d9:47:ef:d7:25:b3:62:b8:16: 43:3f:eb:20:de:76:15:76:6a:a2:4a:e4:44:79:b7: 78:00:df:26:c1:31:f7:cb:ac:df:07:60:c6:c9:e4: 62:f8:6f:b2:d2:52:07:90:24:26:55:ad:ce:94:81: 3b:ff:db:05:7e:87:88:93:ee:3f:71:65:d3:6c:1f: 03:2f:d5:7f:1f:f0:21:9d:62:1c:1a:c4:5a:d8:6a: 05:06:3a:51:7c:b8:23:76:90:ee:9f:81:c1:eb:3e: e0:ed:3f:fe:0d:57:82:fe:39:31:3f:86:d8:1f:88: 7e:d9:6f:d9:9d:05:00:92:4e:91:01:ab:b1:a0:da: 24:1f:d7:f2:fe:57:44:1f:7c:ff:66:98:08:7c:59: f0:e3:9f:a7:b5:30:f2:3a:33:56:ac:2b:5b:4a:fb: 8e:55:c3:53:aa:2c:27:01:17:4d:7f:6b:80:39:90: 50:47:5d:55:f5:98:6f:ed:ee:cf:44:f8:a0:68:d2: 80:6f:b0:7e:47:c1:2f:f9:9b:b6:34:5b:bf:1a:8e: b6:44:95:19:f8:e6:96:1e:ff:0f:84:b2:e2:ef:b7: 7f:9c:f1:da:0f:3e:d2:b3:0b:d8:38:b9:6f:10:ac: 70:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F1:40:D7:BD:DE:DF:B3:ED:1A:D5:18:06:DF:52:C0:12:62:64:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/8cf4b5af-c00f-3090-84e8-3a25f002a0f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:49:a7:47:7e:3a:b0:d7:30:b0:96:04:87:19:bb:b9:08:d9: d7:12:99:a3:f0:af:65:4a:ac:bd:ce:51:2b:bb:07:db:8a:ff: 4f:50:e2:0b:74:d3:d0:43:7c:af:70:47:6e:b5:9f:6d:1d:2a: 6c:d2:b8:61:31:ba:ca:74:d7:a0:d8:20:f4:13:8c:52:d1:cb: 86:dc:7d:d9:9d:5f:16:0b:7e:f5:07:f7:5b:97:49:33:36:59: e6:cd:19:0a:e5:b4:2a:81:9b:8f:91:a6:97:20:cb:cb:c4:43: 93:c6:34:f3:0e:98:97:17:38:62:12:a7:2e:d4:0f:ac:28:39: ad:d0:95:61:fb:b3:49:07:fa:bb:a5:f0:ac:70:3f:c4:b2:6d: 4d:a3:70:5f:a3:ba:de:5c:bc:d9:a1:cb:27:27:e2:c7:4e:03: 45:d1:85:a3:bb:e4:a9:db:83:d3:60:7d:e9:48:3b:3e:2f:dd: 6d:2c:09:6e:bc:a7:1a:1c:a2:e2:6a:a5:ef:9b:46:61:99:9e: da:89:f5:bf:8d:fd:d5:ac:a1:55:63:3d:29:30:52:c7:c8:b5: 9f:4a:9c:a0:31:d3:37:97:c7:50:b7:34:48:c4:f2:37:51:a8: f7:3a:b9:32:89:59:be:be:ad:42:91:30:8e:b3:8e:61:e4:f8: 54:0e:9f:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Jlau0k9UwRnza94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDUxMDEzMDAzMVoXDTI2MDgwODEzMDAzMVowLzEtMCsGA1UEAxMk M2E4ZWVhYjktMGY5Yi00MmEwLWFiYjUtMjYwYTFiYTQ5MWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTwDcyZBSVQ43U6dy4MYr1cHX7zZR+/XJbNi uBZDP+sg3nYVdmqiSuREebd4AN8mwTH3y6zfB2DGyeRi+G+y0lIHkCQmVa3OlIE7 /9sFfoeIk+4/cWXTbB8DL9V/H/AhnWIcGsRa2GoFBjpRfLgjdpDun4HB6z7g7T/+ DVeC/jkxP4bYH4h+2W/ZnQUAkk6RAauxoNokH9fy/ldEH3z/ZpgIfFnw45+ntTDy OjNWrCtbSvuOVcNTqiwnARdNf2uAOZBQR11V9Zhv7e7PRPigaNKAb7B+R8Ev+Zu2 NFu/Go62RJUZ+OaWHv8PhLLi77d/nPHaDz7SswvYOLlvEKxw6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/xQNe93t+z7RrVGAbfUsASYmTwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvOGNmNGI1YWYtYzAwZi0z MDkwLTg0ZTgtM2EyNWYwMDJhMGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOiSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFJp0d+OrDXMLCWBIcZu7kI2dcSmaPwr2VKrL3OUSu7B9uK/09Q4gt0 09BDfK9wR261n20dKmzSuGExusp016DYIPQTjFLRy4bcfdmdXxYLfvUH91uXSTM2 WebNGQrltCqBm4+Rppcgy8vEQ5PGNPMOmJcXOGISpy7UD6woOa3QlWH7s0kH+rul 8KxwP8SybU2jcF+jut5cvNmhyycn4sdOA0XRhaO75Knbg9NgfelIOz4v3W0sCW68 pxocouJqpe+bRmGZntqJ9b+N/dWsoVVjPSkwUsfItZ9KnKAx0zeXx1C3NEjE8jdR qPc6uTKJWb6+rUKRMI6zjmHk+FQOn5w= -----END CERTIFICATE-----Generated at Wed May 13 09:30:20 2026 by rpki-client