$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7a8dc671-e8b6-38b7-a274-af2302744d27.roa File: 7a8dc671-e8b6-38b7-a274-af2302744d27.roa (raw, json) Hash identifier: tC2Rx3K3oGlL3kbsMUM6MOPIPqrwTlJUj2s3/V5k7kQ= Subject key identifier: EE:3C:6E:F0:15:07:13:63:38:71:A6:76:E5:29:DF:C1:39:49:FC:BB Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F11A14A17D185F7BC94D64E80 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7a8dc671-e8b6-38b7-a274-af2302744d27.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 144.25.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:a1:4a:17:d1:85:f7:bc:94:d6:4e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=002b214d-284e-4fed-9f46-c09677a1cc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9d:9b:e2:d7:3f:6a:a4:df:c6:18:b8:23:72: 71:36:7c:c4:00:09:16:12:9a:4e:f4:0e:bb:7d:a0: 5c:4e:7f:53:4c:99:df:3a:02:c6:15:5d:ec:5b:38: 77:9e:20:6f:fb:f5:98:f4:3a:b6:a0:f2:90:51:8e: a3:4f:36:27:f3:bc:c6:3c:96:2d:bb:2b:78:eb:d9: ea:fa:07:a4:d4:32:64:e8:73:c6:50:e2:f9:7f:94: b1:37:59:d4:e7:5d:97:79:1f:a4:47:05:5f:0f:15: 53:3a:34:b8:a6:5f:70:0c:83:15:0f:af:f5:c6:95: b7:fb:e0:7a:de:f8:15:bc:2f:84:45:e1:59:74:da: 3f:d6:de:93:7a:61:df:f3:4a:2b:6b:cb:66:fe:34: 6b:00:17:b4:ff:51:de:d2:1f:60:b2:f2:0f:b3:60: 66:98:9c:04:23:6d:08:24:ed:ea:4d:52:14:80:0c: 19:b5:c5:44:24:03:6f:db:ee:2a:be:81:25:22:5e: 27:d3:ac:b0:95:f5:9d:6e:85:92:90:48:af:79:c1: 2c:4e:65:53:a5:cb:3e:bf:44:c7:d9:87:13:05:a2: d7:40:dc:72:27:9c:6c:38:76:71:59:06:2f:93:ee: f3:55:94:45:e5:43:07:e0:d9:f0:84:13:50:ac:1b: 1f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:3C:6E:F0:15:07:13:63:38:71:A6:76:E5:29:DF:C1:39:49:FC:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/7a8dc671-e8b6-38b7-a274-af2302744d27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:65:72:ee:63:15:e0:88:ec:2a:64:3b:bb:51:10:af:ef:93: 4a:da:d9:6f:91:b4:f4:e5:c1:b6:f8:fb:44:95:9f:aa:69:ed: 78:31:1a:f3:d5:21:a4:9e:98:c2:41:d0:1c:ec:bd:fe:f8:63: e9:49:01:01:54:57:32:64:5a:ac:bc:36:45:90:51:6c:75:bc: 5a:43:4c:fc:43:3b:58:52:a6:69:5f:af:9e:1c:4e:31:ef:01: 7f:cd:11:85:59:a2:1d:f3:8d:4d:a8:ad:d1:45:a1:25:2d:9a: 22:f2:ae:6c:e0:d0:53:b4:ae:b3:ec:e0:b1:94:db:29:8b:30: 2c:9b:0f:3f:fc:8a:0e:4e:6a:13:48:ab:38:93:e9:f2:96:78: a5:ac:94:ee:44:3b:e9:5c:c0:91:6a:8c:fc:99:3a:4f:69:da: 39:7a:a8:ed:90:90:49:c2:69:9c:55:ff:a4:9b:b3:2d:3e:4d: 95:03:56:8c:ca:27:4f:9f:dd:39:e9:4d:78:4e:3c:9b:6e:31: cb:d1:23:ea:7e:e0:5c:c7:65:71:e1:7c:75:fd:6e:0d:39:85: 14:ab:88:f4:79:54:d5:da:23:92:f9:68:6f:73:74:bf:89:d2: 49:71:b9:13:63:39:7b:9f:62:71:c1:46:9e:53:dd:e7:b4:fb: 42:38:d1:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoUoX0YX3vJTWToAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MDAyYjIxNGQtMjg0ZS00ZmVkLTlmNDYtYzA5Njc3YTFjYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs52b4tc/aqTfxhi4I3JxNnzEAAkWEppO9A67 faBcTn9TTJnfOgLGFV3sWzh3niBv+/WY9Dq2oPKQUY6jTzYn87zGPJYtuyt469nq +gek1DJk6HPGUOL5f5SxN1nU512XeR+kRwVfDxVTOjS4pl9wDIMVD6/1xpW3++B6 3vgVvC+EReFZdNo/1t6TemHf80ora8tm/jRrABe0/1He0h9gsvIPs2BmmJwEI20I JO3qTVIUgAwZtcVEJANv2+4qvoElIl4n06ywlfWdboWSkEivecEsTmVTpcs+v0TH 2YcTBaLXQNxyJ5xsOHZxWQYvk+7zVZRF5UMH4NnwhBNQrBsfyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO48bvAVBxNjOHGmduUp38E5Sfy7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvN2E4ZGM2NzEtZThiNi0z OGI3LWEyNzQtYWYyMzAyNzQ0ZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBk0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRlcu5jFeCI7CpkO7tREK/vk0ra2W+RtPTlwbb4+0SVn6pp7XgxGvPV IaSemMJB0Bzsvf74Y+lJAQFUVzJkWqy8NkWQUWx1vFpDTPxDO1hSpmlfr54cTjHv AX/NEYVZoh3zjU2ordFFoSUtmiLyrmzg0FO0rrPs4LGU2ymLMCybDz/8ig5OahNI qziT6fKWeKWslO5EO+lcwJFqjPyZOk9p2jl6qO2QkEnCaZxV/6Sbsy0+TZUDVozK J0+f3TnpTXhOPJtuMcvRI+p+4FzHZXHhfHX9bg05hRSriPR5VNXaI5L5aG9zdL+J 0klxuRNjOXufYnHBRp5T3ee0+0I40cg= -----END CERTIFICATE-----Generated at Wed Sep 23 03:18:26 2026 by rpki-client