$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/ed892fc0-259a-350e-883a-4579f8f9fddc.roa File: ed892fc0-259a-350e-883a-4579f8f9fddc.roa (raw, json) Hash identifier: H4MGHToDQz29KBZf9qsamkfxYIRzYKZhm+9nhEqrF68= Subject key identifier: CA:B1:9E:25:F9:4F:0D:05:F3:6A:8E:70:48:1E:AB:86:50:C3:15:BC Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584F1B6253DE954CF83DE21F7010 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/ed892fc0-259a-350e-883a-4579f8f9fddc.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 144.25.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:53:de:95:4c:f8:3d:e2:1f:70:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=32e37052-2d13-4f30-9927-f2e75b06b3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a6:35:02:de:00:bd:8d:a6:d3:e8:59:ef:45: 3b:19:6a:47:0c:6b:27:a1:f0:a9:33:a1:d6:e5:8b: 6f:50:f1:31:7b:51:2b:f2:64:a0:6d:0f:cc:c9:43: 6c:d7:38:13:89:1c:5b:68:62:64:01:32:dd:42:aa: 03:52:46:0d:67:03:df:56:d9:8b:3b:cb:1a:15:f4: 57:7f:d8:b5:2b:52:73:71:d9:c4:db:0b:3e:ae:d7: d1:51:4a:25:98:88:30:0d:f0:6e:f4:3c:4b:73:40: 34:2d:b5:dc:e2:39:57:41:f4:6a:7d:db:69:74:31: ad:db:42:05:a0:f9:26:0c:e5:e8:1d:de:e9:b4:3a: fe:4e:07:54:9a:12:6b:f3:17:a3:20:49:65:0b:84: 3a:22:ea:0d:91:1f:1a:8d:4a:df:c9:d9:23:00:63: 51:a5:e8:bf:36:77:43:d8:62:20:35:dc:1f:92:30: ed:2d:88:bc:2c:62:ad:29:8f:d3:07:2f:42:ac:8f: a0:0f:d6:cf:9c:3e:ee:d8:ee:a4:fa:a5:fa:d0:00: 78:c6:16:9c:ad:f5:85:18:a9:83:c1:cc:26:d9:49: 7a:63:14:9f:99:68:fd:f0:84:70:fe:3f:12:ae:fc: fa:33:6f:9f:f1:0c:d5:22:58:c3:d3:31:19:92:48: d3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B1:9E:25:F9:4F:0D:05:F3:6A:8E:70:48:1E:AB:86:50:C3:15:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/ed892fc0-259a-350e-883a-4579f8f9fddc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 144.25.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:da:7e:0e:0a:26:77:2f:90:33:bb:f4:ce:36:e9:86:5e:15: c7:92:95:f0:3c:57:00:7e:27:9c:15:29:e7:79:0e:bc:41:50: da:6d:df:c1:09:66:22:b0:fa:a7:8a:a5:ac:31:d3:82:b1:77: 45:77:c8:b0:f3:69:28:05:15:61:76:b2:55:0d:23:fc:10:2b: 9d:8a:3d:12:ab:81:82:7d:74:c0:a3:60:33:f7:70:56:68:46: 36:a3:c0:d2:96:48:e2:58:8a:29:c6:a8:95:9b:c1:14:8e:5c: 10:af:4e:d9:44:ec:84:d0:ef:12:f9:57:c4:b9:c6:2e:65:f9: 33:b0:9c:1f:40:ae:c0:f1:24:50:52:82:c5:8c:ae:25:76:ab: eb:5e:02:29:54:0a:87:7f:9f:e8:c3:77:81:de:e3:13:a2:d3: f5:0d:b3:28:f8:5a:24:99:c7:dc:41:f4:99:43:0f:46:a3:2c: 9a:3a:29:cf:3b:9b:0c:88:3b:66:eb:72:11:85:68:6a:90:6b: a0:2a:e5:a3:8d:58:ab:09:1f:23:f4:02:a8:e6:79:0d:4d:57: de:a5:6e:68:72:4e:df:20:cd:50:35:39:bd:97:29:db:88:74: 1a:d6:63:a4:cd:f9:d6:04:e6:77:c8:b1:c1:f7:30:6c:ff:20: bf:25:88:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlPelUz4PeIfcBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MzJlMzcwNTItMmQxMy00ZjMwLTk5MjctZjJlNzViMDZiM2FjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KY1At4AvY2m0+hZ70U7GWpHDGsnofCpM6HW 5YtvUPExe1Er8mSgbQ/MyUNs1zgTiRxbaGJkATLdQqoDUkYNZwPfVtmLO8saFfRX f9i1K1JzcdnE2ws+rtfRUUolmIgwDfBu9DxLc0A0LbXc4jlXQfRqfdtpdDGt20IF oPkmDOXoHd7ptDr+TgdUmhJr8xejIEllC4Q6IuoNkR8ajUrfydkjAGNRpei/NndD 2GIgNdwfkjDtLYi8LGKtKY/TBy9CrI+gD9bPnD7u2O6k+qX60AB4xhacrfWFGKmD wcwm2Ul6YxSfmWj98IRw/j8Srvz6M2+f8QzVIljD0zEZkkjT5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqxniX5Tw0F82qOcEgeq4ZQwxW8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvZWQ4OTJmYzAtMjU5YS0z NTBlLTg4M2EtNDU3OWY4ZjlmZGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkBkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfafg4KJncvkDO79M426YZeFceSlfA8VwB+J5wVKed5DrxBUNpt38EJ ZiKw+qeKpawx04Kxd0V3yLDzaSgFFWF2slUNI/wQK52KPRKrgYJ9dMCjYDP3cFZo RjajwNKWSOJYiinGqJWbwRSOXBCvTtlE7ITQ7xL5V8S5xi5l+TOwnB9ArsDxJFBS gsWMriV2q+teAilUCod/n+jDd4He4xOi0/UNsyj4WiSZx9xB9JlDD0ajLJo6Kc87 mwyIO2brchGFaGqQa6Aq5aONWKsJHyP0AqjmeQ1NV96lbmhyTt8gzVA1Ob2XKduI dBrWY6TN+dYE5nfIscH3MGz/IL8liHU= -----END CERTIFICATE-----Generated at Thu Sep 24 09:32:43 2026 by rpki-client