$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5a9331c8-ec52-375b-aae0-15fd8cb553ac.roa File: 5a9331c8-ec52-375b-aae0-15fd8cb553ac.roa (raw, json) Hash identifier: jE7glMi/QT+XhFdeTQJP4O5ly5v5Wa5+/n30dES9y2s= Subject key identifier: 39:51:BF:74:75:0B:3C:74:96:35:B7:4A:4D:55:C3:DA:3F:3F:7E:C7 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F093CD12391D31E77735DA580 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5a9331c8-ec52-375b-aae0-15fd8cb553ac.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 150.230.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d1:23:91:d3:1e:77:73:5d:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=89c29330-6d73-4209-850d-b0f9dd73f454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d5:5e:ee:8f:7b:c8:59:49:a2:14:07:8c:8a: 60:80:64:5d:20:e8:44:53:6b:8b:10:98:97:1a:5c: f5:7f:d5:ce:a8:3f:2f:e4:db:47:85:a0:cf:89:84: fb:8f:bb:dd:6e:80:54:6a:cd:d7:68:70:06:6c:2a: 14:77:26:13:05:8e:7e:98:8d:fd:d6:33:d8:05:ff: 76:75:25:b1:c8:a3:3d:bb:e9:de:07:dc:a0:c5:85: 5b:fd:94:cd:65:f7:d7:c1:1f:69:d5:b0:a3:96:0e: f0:5e:27:65:59:0b:85:05:28:3b:c5:13:ed:19:b8: eb:12:fc:d2:89:58:7c:e7:c8:e8:b3:40:64:2b:da: 46:60:eb:52:cd:1b:70:cc:79:3e:f9:e4:00:3f:7d: 56:c8:b4:9e:72:69:ff:d7:53:eb:c8:16:d2:b1:3d: df:bb:71:63:b8:02:3e:e0:02:e6:eb:b3:4e:cc:31: a7:11:eb:ec:b8:ef:da:71:de:93:e3:ac:2a:e5:92: 52:b3:29:60:c0:23:f4:05:58:f4:e4:a2:2d:06:be: a1:57:98:6a:4c:e6:a2:4a:ea:4d:77:39:98:c8:76: 3a:ec:6b:7d:47:a3:d1:90:61:29:52:5d:0f:2f:af: c7:5e:fd:3f:df:c7:3b:1f:70:e9:df:de:44:2f:f3: f2:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:51:BF:74:75:0B:3C:74:96:35:B7:4A:4D:55:C3:DA:3F:3F:7E:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5a9331c8-ec52-375b-aae0-15fd8cb553ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 150.230.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:fa:7d:04:45:7c:af:9b:5a:da:a8:5b:46:c9:78:53:19:ce: ac:6d:33:ef:21:3e:b1:78:4e:d6:61:ae:fb:57:66:2e:9e:1e: 67:8c:71:08:35:97:5a:ee:57:6f:11:bd:73:60:44:66:d1:fa: 41:ea:28:e6:24:61:c5:41:4d:12:c7:57:e6:c7:79:7a:90:60: ae:30:74:b1:2e:4a:a5:a0:98:ba:dc:97:45:1c:d8:59:7b:e1: df:18:3d:d2:f0:88:a8:3c:de:ef:20:b2:fb:cc:fb:d3:b8:0c: 12:3b:0d:56:8c:95:d0:cf:d4:af:80:e7:58:b4:7b:f2:16:96: 03:d0:ed:9f:8f:cc:36:c8:91:f0:77:fe:08:66:bf:a4:3c:34: 97:85:26:3f:e5:3a:50:65:ff:5c:19:e2:76:a0:4c:55:9c:18: ee:74:14:80:06:72:20:2c:cc:7b:c3:10:53:05:ad:9d:54:cf: ce:30:65:8c:57:01:4a:5a:f5:bd:52:c8:bd:e1:be:a3:d3:ce: 95:6e:cd:ef:4b:23:ce:89:9a:ea:2b:ee:47:5c:39:2a:16:a0: 78:9a:89:98:e2:f6:e1:2e:47:6c:4c:81:d4:be:c6:f3:57:c4: 48:bc:98:1e:8f:a4:81:7e:a3:f1:2c:49:08:17:1f:48:f4:2c: 34:0e:3e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNEjkdMed3NdpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk ODljMjkzMzAtNmQ3My00MjA5LTg1MGQtYjBmOWRkNzNmNDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tVe7o97yFlJohQHjIpggGRdIOhEU2uLEJiX Glz1f9XOqD8v5NtHhaDPiYT7j7vdboBUas3XaHAGbCoUdyYTBY5+mI391jPYBf92 dSWxyKM9u+neB9ygxYVb/ZTNZffXwR9p1bCjlg7wXidlWQuFBSg7xRPtGbjrEvzS iVh858jos0BkK9pGYOtSzRtwzHk++eQAP31WyLSecmn/11PryBbSsT3fu3FjuAI+ 4ALm67NOzDGnEevsuO/acd6T46wq5ZJSsylgwCP0BVj05KItBr6hV5hqTOaiSupN dzmYyHY67Gt9R6PRkGEpUl0PL6/HXv0/38c7H3Dp395EL/PyUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDlRv3R1Czx0ljW3Sk1Vw9o/P37HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvNWE5MzMxYzgtZWM1Mi0z NzViLWFhZTAtMTVmZDhjYjU1M2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDluY4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHn6fQRFfK+bWtqoW0bJeFMZzqxtM+8hPrF4TtZhrvtXZi6eHmeMcQg1 l1ruV28RvXNgRGbR+kHqKOYkYcVBTRLHV+bHeXqQYK4wdLEuSqWgmLrcl0Uc2Fl7 4d8YPdLwiKg83u8gsvvM+9O4DBI7DVaMldDP1K+A51i0e/IWlgPQ7Z+PzDbIkfB3 /ghmv6Q8NJeFJj/lOlBl/1wZ4nagTFWcGO50FIAGciAszHvDEFMFrZ1Uz84wZYxX AUpa9b1SyL3hvqPTzpVuze9LI86Jmuor7kdcOSoWoHiaiZji9uEuR2xMgdS+xvNX xEi8mB6PpIF+o/EsSQgXH0j0LDQOPgE= -----END CERTIFICATE-----Generated at Tue Sep 29 11:36:05 2026 by rpki-client