$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c23bfea2-4bf1-357a-a671-864041baa3b7.roa File: c23bfea2-4bf1-357a-a671-864041baa3b7.roa (raw, json) Hash identifier: xk4enpaBmnUt2ie1gPTfAIoiOzl94YRWt/Gh0F8xf40= Subject key identifier: CA:86:A0:1D:C8:D3:05:99:BB:53:87:41:58:AB:7D:D5:41:26:FF:AA Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584D8D8FFAD355CD863942E43000 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c23bfea2-4bf1-357a-a671-864041baa3b7.roa Signing time: Sun 19 Apr 2026 01:00:23 +0000 ROA not before: Sun 19 Apr 2026 01:00:23 +0000 ROA not after: Sat 18 Jul 2026 01:00:23 +0000 asID: 55286 IP address blocks: 152.232.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8d:8f:fa:d3:55:cd:86:39:42:e4:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Apr 19 01:00:23 2026 GMT Not After : Jul 18 01:00:23 2026 GMT Subject: CN=857eb96e-0cfc-4ebe-9d80-bb9f80bf751c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:50:a3:17:ed:ca:52:03:d4:86:ec:aa:11: df:08:7f:fb:73:b2:91:2d:6f:16:4b:56:52:ad:6d: c2:86:dd:ff:07:d2:e1:e0:28:62:77:4a:19:89:df: 77:46:61:95:a2:d0:0d:e0:e0:4b:68:58:98:97:51: 54:5f:bc:1a:45:9e:56:96:6e:7a:56:f1:79:9f:8e: a4:7b:d2:b0:a0:b2:50:70:92:c2:f2:59:6f:ca:b0: 50:31:b0:fb:b3:5f:05:04:26:ec:52:cb:de:bf:60: e7:21:7d:cd:ad:73:2f:86:e9:65:be:70:60:67:dd: 28:6b:b8:c4:0f:e2:31:b4:9f:25:31:68:a3:04:3d: 56:6e:71:08:38:c5:80:6c:b2:d1:88:44:1e:53:8b: ad:6e:62:f9:bf:71:e5:e7:69:0e:4b:3d:13:34:3f: 5e:87:72:6b:d2:8d:94:6a:e5:37:6c:0a:21:11:26: ef:fe:4c:65:b7:74:85:2f:42:1f:e2:80:df:c5:92: 6f:c5:67:14:5a:24:35:7a:8a:f2:5a:6f:e8:bd:67: 2a:68:98:e4:27:40:4b:3e:49:cf:7d:08:78:06:c5: 32:c0:44:07:47:74:8d:4d:57:03:90:61:25:e5:8b: 48:f3:e6:c3:59:0d:09:ef:50:cd:08:98:3a:41:26: 64:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:86:A0:1D:C8:D3:05:99:BB:53:87:41:58:AB:7D:D5:41:26:FF:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c23bfea2-4bf1-357a-a671-864041baa3b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:ed:d3:0e:f4:19:7d:a0:92:48:34:fe:52:fa:b0:f0:40:aa: 5e:e4:26:45:cb:04:36:7d:6b:60:f4:81:02:46:89:c9:5f:a3: 9d:a4:94:20:1a:70:9a:62:c0:f6:00:3f:42:b2:3d:80:06:15: c2:1a:19:22:25:61:6a:f5:c1:b8:52:53:ad:c3:56:9d:4f:85: 95:15:f8:0d:00:07:fe:1a:89:4b:db:8c:21:dd:2a:8d:ef:b1: 3b:26:87:aa:4f:8c:c5:76:cf:44:88:4b:30:da:db:9c:ff:7d: 26:19:be:79:78:78:c4:29:fd:0e:13:a7:46:e6:af:86:60:75: c7:3b:ea:dd:bc:11:93:f2:d6:31:21:fc:cc:f8:7c:17:9a:ed: 00:c7:a7:09:55:b7:4b:43:29:d8:60:da:e4:9b:8a:3d:66:97: a1:fc:cb:3b:0b:10:7d:93:88:cc:92:20:50:60:56:5e:1d:68: 52:e2:f8:53:b3:b9:5e:d0:98:26:85:65:a8:c6:4c:79:51:41: d4:c2:27:4b:4a:07:1a:d5:cd:53:19:fd:ee:73:23:fa:e5:02: 9d:96:bf:b8:48:7f:ce:69:5f:a5:8b:c7:a3:ef:88:cf:54:56: 4e:79:c7:e4:8f:f1:f0:9d:d7:80:fc:1c:e0:27:89:8c:5b:bb: bb:4d:6a:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Nj/rTVc2GOULkMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDQxOTAxMDAyM1oXDTI2MDcxODAxMDAyM1owLzEtMCsGA1UEAxMk ODU3ZWI5NmUtMGNmYy00ZWJlLTlkODAtYmI5ZjgwYmY3NTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5BQoxftylID1IbsqhHfCH/7c7KRLW8WS1ZS rW3Cht3/B9Lh4Chid0oZid93RmGVotAN4OBLaFiYl1FUX7waRZ5Wlm56VvF5n46k e9KwoLJQcJLC8llvyrBQMbD7s18FBCbsUsvev2DnIX3NrXMvhullvnBgZ90oa7jE D+IxtJ8lMWijBD1WbnEIOMWAbLLRiEQeU4utbmL5v3Hl52kOSz0TND9eh3Jr0o2U auU3bAohESbv/kxlt3SFL0If4oDfxZJvxWcUWiQ1eoryWm/ovWcqaJjkJ0BLPknP fQh4BsUywEQHR3SNTVcDkGEl5YtI8+bDWQ0J71DNCJg6QSZk4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqGoB3I0wWZu1OHQVirfdVBJv+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYzIzYmZlYTItNGJmMS0z NTdhLWE2NzEtODY0MDQxYmFhM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOgJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA7t0w70GX2gkkg0/lL6sPBAql7kJkXLBDZ9a2D0gQJGiclfo52klCAa cJpiwPYAP0KyPYAGFcIaGSIlYWr1wbhSU63DVp1PhZUV+A0AB/4aiUvbjCHdKo3v sTsmh6pPjMV2z0SISzDa25z/fSYZvnl4eMQp/Q4Tp0bmr4Zgdcc76t28EZPy1jEh /Mz4fBea7QDHpwlVt0tDKdhg2uSbij1ml6H8yzsLEH2TiMySIFBgVl4daFLi+FOz uV7QmCaFZajGTHlRQdTCJ0tKBxrVzVMZ/e5zI/rlAp2Wv7hIf85pX6WLx6PviM9U Vk55x+SP8fCd14D8HOAniYxbu7tNat0= -----END CERTIFICATE-----Generated at Wed May 13 09:02:25 2026 by rpki-client