$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/b8586f49-60f0-39d9-809e-d995119dcb3f.roa File: b8586f49-60f0-39d9-809e-d995119dcb3f.roa (raw, json) Hash identifier: 3Z81v4/NUrGrgREazk6lAam0NqhwRc2P4/DXfRgQPes= Subject key identifier: 19:3F:D8:B7:EA:2C:AF:64:23:F8:B9:C6:4D:F1:36:0E:0F:A9:11:7F Certificate issuer: /CN=37bb4ae7-3e12-43f1-85d4-823603a9c0f3 Certificate serial: 010D0C9F4328584F71D06413080C489A415D16C0 Authority key identifier: E8:23:3E:9B:35:2E:C5:1A:C5:7E:C0:C0:3C:64:7F:82:5C:91:96:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/b8586f49-60f0-39d9-809e-d995119dcb3f.roa Signing time: Fri 09 Oct 2026 12:01:41 +0000 ROA not before: Fri 09 Oct 2026 12:01:41 +0000 ROA not after: Thu 07 Jan 2027 13:01:41 +0000 asID: 33028 IP address blocks: 162.253.52.0/24 maxlen: 24 162.253.53.0/24 maxlen: 24 162.253.54.0/24 maxlen: 24 162.253.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:d0:64:13:08:0c:48:9a:41:5d:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37bb4ae7-3e12-43f1-85d4-823603a9c0f3 Validity Not Before: Oct 9 12:01:41 2026 GMT Not After : Jan 7 13:01:41 2027 GMT Subject: CN=e0778525-642a-4b55-bb93-f3d38a59680f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:32:58:90:82:55:4e:82:42:44:b7:21:db:cd: fe:9e:b1:bf:2f:32:e2:6f:36:7b:d6:59:3b:43:70: 66:78:68:91:f3:b2:84:f7:ed:05:41:6e:41:06:00: f2:b1:80:8a:5f:02:7b:3a:7e:cc:7c:18:b5:15:de: 92:83:ec:8c:1f:6d:be:96:f1:72:d3:29:65:53:7a: e3:68:67:bc:d7:a6:a2:61:c5:07:4a:ac:75:dc:ba: 25:aa:25:99:21:b9:d6:e0:91:08:19:a2:27:d7:e3: af:85:04:e9:ce:d7:fb:07:43:3f:a0:e0:36:ef:5e: 60:1a:37:0c:38:0e:01:8c:19:6c:ba:d0:0b:0c:78: ca:b5:7d:82:65:ff:e9:0b:d5:48:e9:db:96:d1:a3: 34:92:37:b7:24:93:03:31:f3:42:f7:c7:05:05:90: ea:55:52:db:58:5f:7f:8a:55:93:39:12:31:4d:3d: 17:92:e7:a1:d0:2a:0b:ed:60:c1:96:db:13:4e:93: 77:36:a5:42:f9:19:8c:c7:e8:ba:2f:d2:38:81:84: 80:c7:3f:ac:e0:19:2a:05:e3:36:38:b4:b6:c8:94: ba:6d:02:ef:a2:8e:e5:3a:e3:6b:f0:39:38:0b:ac: 5c:39:ed:13:30:5d:c8:b0:85:14:61:87:20:2b:45: e6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3F:D8:B7:EA:2C:AF:64:23:F8:B9:C6:4D:F1:36:0E:0F:A9:11:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/b8586f49-60f0-39d9-809e-d995119dcb3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.crl X509v3 Authority Key Identifier: keyid:E8:23:3E:9B:35:2E:C5:1A:C5:7E:C0:C0:3C:64:7F:82:5C:91:96:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/37bb4ae7-3e12-43f1-85d4-823603a9c0f3.cer sbgp-ipAddrBlock: critical IPv4: 162.253.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b2:39:8f:6a:d3:d6:2e:ef:a2:6a:db:5e:d8:ac:f2:1e:d9: 15:97:0c:0c:8c:7c:d1:40:8b:0c:34:2a:0b:90:b8:26:51:97: 6d:8b:6a:99:bc:55:e7:4c:d7:37:d7:7f:70:5a:d0:59:63:f1: 23:cf:b2:81:30:43:62:0a:c5:9b:96:7e:c8:69:dd:5e:d3:45: cc:be:49:20:d1:84:9c:b1:79:bb:dc:82:67:14:48:bd:6b:98: c2:f0:1c:16:0a:b8:70:c2:a0:b8:5d:85:d8:23:f9:a0:fa:68: 1e:27:a7:79:d7:c7:c6:64:b3:91:cb:47:75:53:19:c0:5f:a2: cb:0a:d9:89:c3:2e:19:11:a0:01:41:b7:bd:b8:25:7d:c6:81: 0f:73:43:4f:1b:de:24:f6:b9:10:71:45:95:13:d9:13:55:01: 9b:7f:d7:c3:ad:b0:db:bc:6d:92:c5:cd:a5:66:e6:ec:80:ad: 6e:1c:b7:a7:04:0b:63:33:88:93:42:b9:de:1e:76:c6:62:f6: ad:7a:d9:76:f0:ec:96:fc:08:e1:89:a7:f3:a5:8f:34:a5:6e: ec:20:0d:99:71:66:6d:47:0e:d2:61:ef:81:75:e2:8a:9d:49: 10:63:30:3d:0d:6b:13:bf:b2:fa:cd:4b:9d:73:ee:14:4d:45: 48:d9:62:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x0GQTCAxImkFdFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzdiYjRhZTctM2UxMi00M2YxLTg1ZDQtODIzNjAzYTlj MGYzMB4XDTI2MTAwOTEyMDE0MVoXDTI3MDEwNzEzMDE0MVowLzEtMCsGA1UEAxMk ZTA3Nzg1MjUtNjQyYS00YjU1LWJiOTMtZjNkMzhhNTk2ODBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjJYkIJVToJCRLch283+nrG/LzLibzZ71lk7 Q3BmeGiR87KE9+0FQW5BBgDysYCKXwJ7On7MfBi1Fd6Sg+yMH22+lvFy0yllU3rj aGe816aiYcUHSqx13LolqiWZIbnW4JEIGaIn1+OvhQTpztf7B0M/oOA2715gGjcM OA4BjBlsutALDHjKtX2CZf/pC9VI6duW0aM0kje3JJMDMfNC98cFBZDqVVLbWF9/ ilWTORIxTT0Xkueh0CoL7WDBltsTTpN3NqVC+RmMx+i6L9I4gYSAxz+s4BkqBeM2 OLS2yJS6bQLvoo7lOuNr8Dk4C6xcOe0TMF3IsIUUYYcgK0XmBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBk/2LfqLK9kI/i5xk3xNg4PqRF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8zN2Ji NGFlNy0zZTEyLTQzZjEtODVkNC04MjM2MDNhOWMwZjMvYjg1ODZmNDktNjBmMC0z OWQ5LTgwOWUtZDk5NTExOWRjYjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMzdiYjRhZTctM2UxMi00M2YxLTg1 ZDQtODIzNjAzYTljMGYzLzM3YmI0YWU3LTNlMTItNDNmMS04NWQ0LTgyMzYwM2E5 YzBmMy5jcmwwHwYDVR0jBBgwFoAU6CM+mzUuxRrFfsDAPGR/glyRlmcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8zN2JiNGFlNy0zZTEyLTQzZjEtODVkNC04MjM2 MDNhOWMwZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCov00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+yOY9q09Yu76Jq217YrPIe2RWXDAyMfNFAiww0KguQuCZRl22Lapm8 VedM1zfXf3Ba0Flj8SPPsoEwQ2IKxZuWfshp3V7TRcy+SSDRhJyxebvcgmcUSL1r mMLwHBYKuHDCoLhdhdgj+aD6aB4np3nXx8Zks5HLR3VTGcBfossK2YnDLhkRoAFB t724JX3GgQ9zQ08b3iT2uRBxRZUT2RNVAZt/18OtsNu8bZLFzaVm5uyArW4ct6cE C2MziJNCud4edsZi9q162Xbw7Jb8COGJp/OljzSlbuwgDZlxZm1HDtJh74F14oqd SRBjMD0NaxO/svrNS51z7hRNRUjZYhs= -----END CERTIFICATE-----Generated at Sun Nov 1 14:37:16 2026 by rpki-client