$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/3a8d7047-06e1-3f48-baff-88605b7babbd.roa File: 3a8d7047-06e1-3f48-baff-88605b7babbd.roa (raw, json) Hash identifier: QbTuyD2vzW0q5N+bh37HTa1SpUjt/Cij1tXkNd7A17s= Subject key identifier: A0:2C:85:EC:FF:CD:3D:44:78:E3:2E:3B:A9:B1:D5:67:3A:6B:7C:BF Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584C4BC3FDFF6144003DE7253F40 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/3a8d7047-06e1-3f48-baff-88605b7babbd.roa Signing time: Wed 24 Dec 2025 18:35:10 +0000 ROA not before: Wed 24 Dec 2025 18:35:10 +0000 ROA not after: Tue 24 Mar 2026 17:35:10 +0000 asID: 27395 IP address blocks: 162.248.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Feb 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:4b:c3:fd:ff:61:44:00:3d:e7:25:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Dec 24 18:35:10 2025 GMT Not After : Mar 24 17:35:10 2026 GMT Subject: CN=7117df57-f05a-4303-b286-bd57df4aa5ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ee:fa:a2:f2:93:62:bc:84:a9:9d:52:09:69: e4:37:70:6b:92:0c:48:e8:e3:ae:0b:31:cd:0e:60: a5:3b:f8:8a:ba:c7:71:36:44:f0:d3:59:fb:48:aa: 82:56:56:af:c5:9a:ab:a4:65:ff:db:1a:71:b9:b3: 9e:e6:03:ea:2a:39:9e:0a:db:0d:b4:23:13:af:8e: 97:bb:d0:04:13:c1:78:53:13:ed:b2:4c:de:44:c6: e6:fe:88:1e:a6:4d:29:1f:b0:43:0a:08:75:a5:63: e4:93:53:8d:81:8b:29:a6:f0:06:d9:cd:b9:98:3b: 47:54:71:40:d7:81:fa:d7:7e:cc:b1:c6:a8:b9:bb: b0:8b:12:4c:03:a5:39:b0:59:38:45:b6:c5:25:b6: 7f:56:49:bd:65:4f:5e:9b:28:0d:f1:8d:19:a1:63: 75:d0:b5:f7:74:79:b7:1e:6b:58:54:50:29:0b:77: 3f:a9:db:71:5c:e1:a5:17:7b:4f:ef:c6:c6:4b:18: c0:bc:8b:79:2d:a9:33:a9:15:a4:69:72:fa:16:0b: 96:d4:7f:57:a7:b7:bc:bb:7c:fe:c4:54:bc:4f:7d: 6f:fc:15:2b:d7:10:28:f7:9b:46:6b:d7:b1:57:d4: ae:f6:1d:c7:ea:e4:bd:a2:44:ee:ba:95:c8:d8:64: a1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2C:85:EC:FF:CD:3D:44:78:E3:2E:3B:A9:B1:D5:67:3A:6B:7C:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/3a8d7047-06e1-3f48-baff-88605b7babbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 162.248.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c8:4c:94:53:80:73:d8:27:07:8e:c5:8f:3c:08:37:b7:82: e1:8d:af:1d:36:e5:5f:66:bf:f2:a4:40:77:ff:c2:86:0b:3c: 1a:34:a9:70:93:04:de:e7:dc:c3:12:ca:38:8a:e3:1a:37:81: 50:70:7e:75:3d:d5:af:5f:a1:62:a5:ac:95:cb:4e:0e:c5:ed: 0c:e7:92:0a:1e:b7:14:a0:da:f9:51:55:52:a1:e7:84:ec:ba: ab:9f:f3:83:2f:cc:c2:10:22:26:60:53:21:f9:d9:52:92:19: 90:69:a0:d2:04:8d:af:08:83:53:fe:75:04:b4:92:09:8c:52: ee:44:cf:0d:7d:bf:30:89:a3:07:b4:9b:66:ca:52:c9:9c:5b: 1b:df:d0:d2:df:da:4c:74:68:f9:b8:99:4f:84:8c:71:6a:45: 57:48:17:f1:16:52:0a:a3:3d:9a:eb:39:3a:b4:ff:5d:d9:79: ed:ad:de:ce:68:7a:b3:76:10:b5:f9:1c:4f:7e:54:a5:cf:eb: 18:3e:c1:49:18:2a:47:ff:9e:7d:cc:aa:e9:cd:87:65:5d:8e: e5:0c:87:dd:4a:b6:e3:2c:0e:15:2d:04:5b:40:aa:04:61:d0: 09:15:1c:52:b6:8c:c1:10:f8:a2:47:81:45:f2:8d:f1:ca:46: be:19:99:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExLw/3/YUQAPeclP0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MTIyNDE4MzUxMFoXDTI2MDMyNDE3MzUxMFowLzEtMCsGA1UEAxMk NzExN2RmNTctZjA1YS00MzAzLWIyODYtYmQ1N2RmNGFhNWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO76ovKTYryEqZ1SCWnkN3BrkgxI6OOuCzHN DmClO/iKusdxNkTw01n7SKqCVlavxZqrpGX/2xpxubOe5gPqKjmeCtsNtCMTr46X u9AEE8F4UxPtskzeRMbm/ogepk0pH7BDCgh1pWPkk1ONgYsppvAG2c25mDtHVHFA 14H6137MscaoubuwixJMA6U5sFk4RbbFJbZ/Vkm9ZU9emygN8Y0ZoWN10LX3dHm3 HmtYVFApC3c/qdtxXOGlF3tP78bGSxjAvIt5LakzqRWkaXL6FguW1H9Xp7e8u3z+ xFS8T31v/BUr1xAo95tGa9exV9Su9h3H6uS9okTuupXI2GShQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAshez/zT1EeOMuO6mx1Wc6a3y/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvM2E4ZDcwNDctMDZlMS0z ZjQ4LWJhZmYtODg2MDViN2JhYmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoviEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzITJRTgHPYJweOxY88CDe3guGNrx025V9mv/KkQHf/woYLPBo0qXCT BN7n3MMSyjiK4xo3gVBwfnU91a9foWKlrJXLTg7F7QznkgoetxSg2vlRVVKh54Ts uquf84MvzMIQIiZgUyH52VKSGZBpoNIEja8Ig1P+dQS0kgmMUu5Ezw19vzCJowe0 m2bKUsmcWxvf0NLf2kx0aPm4mU+EjHFqRVdIF/EWUgqjPZrrOTq0/13Zee2t3s5o erN2ELX5HE9+VKXP6xg+wUkYKkf/nn3MqunNh2VdjuUMh91KtuMsDhUtBFtAqgRh 0AkVHFK2jMEQ+KJHgUXyjfHKRr4ZmXs= -----END CERTIFICATE-----Generated at Mon Feb 23 17:13:35 2026 by rpki-client