$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/a68f1666-dd52-3783-9bcb-75feac650037.roa File: a68f1666-dd52-3783-9bcb-75feac650037.roa (raw, json) Hash identifier: C+wBt9j9u9r/1M4bDIqcf1X3CrBZf/pDWI4qB0PiFEE= Subject key identifier: 7A:65:6E:C1:B2:38:6C:07:B9:DA:1B:DB:60:94:FB:8B:5A:B6:23:AB Certificate issuer: /CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Certificate serial: 010D0C9F4328584C558193A16ED31C3B84868A80 Authority key identifier: 90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/a68f1666-dd52-3783-9bcb-75feac650037.roa Signing time: Sun 28 Dec 2025 06:19:26 +0000 ROA not before: Sun 28 Dec 2025 06:19:26 +0000 ROA not after: Sat 28 Mar 2026 05:19:26 +0000 asID: 27395 IP address blocks: 162.248.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 25 Feb 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:55:81:93:a1:6e:d3:1c:3b:84:86:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf Validity Not Before: Dec 28 06:19:26 2025 GMT Not After : Mar 28 05:19:26 2026 GMT Subject: CN=f8c5344b-dbfe-4e5a-80f6-cbff98ee2123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:78:3b:e2:10:91:74:c7:5e:64:c4:b3:d3:ac: a4:f8:08:91:c9:f7:33:73:6b:25:12:dd:04:3e:7a: 80:c9:85:7f:1d:e6:64:dd:4c:f8:87:2d:fd:80:60: 11:06:f9:7c:54:b9:41:23:fd:97:cf:0f:d5:cf:82: 61:91:2d:ed:cb:5d:fc:24:fb:2a:71:63:9f:38:93: 06:c7:16:f5:1d:eb:63:78:41:a0:54:fe:73:d5:bd: 17:1a:da:d7:df:b4:55:29:8f:51:ee:2b:ff:66:70: d8:d6:4a:9b:16:f0:35:d9:5c:1b:d7:59:ae:0f:84: 24:d1:22:28:30:15:d8:ab:a5:9f:e1:2b:02:b5:94: cf:5e:90:7d:78:c0:47:19:a5:d3:06:3c:f8:e4:ad: 60:b1:cc:da:f6:ef:d6:ad:39:c1:5e:44:87:5d:ab: 0d:39:e5:b6:6f:ee:b0:13:fc:56:7d:ec:de:0a:5e: 40:0a:b0:61:df:eb:d0:9d:cc:c9:a2:ab:0c:30:09: 5f:ce:bc:42:88:1f:6d:a3:83:c6:1a:8d:52:dd:18: dd:42:29:88:12:45:b5:c5:0b:d0:8c:2b:19:d0:fc: 94:35:8c:f8:61:49:fc:6d:51:05:9f:40:35:42:ba: 62:c0:c7:12:8d:39:d5:b2:7e:f2:18:1b:de:75:c7: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:65:6E:C1:B2:38:6C:07:B9:DA:1B:DB:60:94:FB:8B:5A:B6:23:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/a68f1666-dd52-3783-9bcb-75feac650037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.crl X509v3 Authority Key Identifier: keyid:90:25:00:D5:D4:81:50:60:54:00:7C:D6:30:FD:71:A6:4F:93:46:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7bed9d2c-5526-4d7e-be4f-c9b5ecc67eaf.cer sbgp-ipAddrBlock: critical IPv4: 162.248.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:1f:dd:e1:f2:7c:b3:91:c7:cf:b2:22:d8:f7:8a:e3:c2:cd: a1:cc:1b:1b:69:4c:51:60:93:3c:8e:03:a8:0c:b2:56:d6:9c: be:e7:69:fa:9d:1c:5a:4a:9a:5c:18:9d:44:6d:d7:13:8c:4c: 47:3d:22:33:ad:17:22:a5:1b:79:df:78:9d:97:c0:40:1d:cc: fc:17:4f:46:57:0d:98:9f:74:e5:6f:79:54:63:03:99:46:de: 30:23:44:f9:87:89:8b:76:34:9a:e0:c8:28:ea:98:2f:a5:a7: 03:26:8c:c9:58:a7:83:f8:ab:a8:a9:44:83:01:70:73:58:c5: 86:d7:a9:e7:ca:98:ff:5f:26:26:99:26:ce:18:13:47:8f:b9: b4:42:5c:23:e3:fe:e2:bb:c5:91:e6:88:56:b7:e8:e9:e4:e1: 74:dd:1b:de:cb:e4:c4:c7:84:a6:30:59:9b:d1:83:01:63:24: 06:4d:11:6f:70:9a:de:63:0c:8b:17:22:28:78:9d:da:30:02: dd:9b:bb:79:6f:63:36:32:0b:43:2f:ba:f3:1a:e0:7d:32:ca: 33:ae:73:04:46:2a:70:51:31:8b:8e:47:5a:48:e9:a6:01:0d: f8:cf:8e:96:6a:81:b9:d7:a5:62:98:19:5c:26:c5:bd:4d:e3: fa:9d:32:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExVgZOhbtMcO4SGioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2JlZDlkMmMtNTUyNi00ZDdlLWJlNGYtYzliNWVjYzY3 ZWFmMB4XDTI1MTIyODA2MTkyNloXDTI2MDMyODA1MTkyNlowLzEtMCsGA1UEAxMk ZjhjNTM0NGItZGJmZS00ZTVhLTgwZjYtY2JmZjk4ZWUyMTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHg74hCRdMdeZMSz06yk+AiRyfczc2slEt0E PnqAyYV/HeZk3Uz4hy39gGARBvl8VLlBI/2Xzw/Vz4JhkS3ty138JPsqcWOfOJMG xxb1HetjeEGgVP5z1b0XGtrX37RVKY9R7iv/ZnDY1kqbFvA12Vwb11muD4Qk0SIo MBXYq6Wf4SsCtZTPXpB9eMBHGaXTBjz45K1gscza9u/WrTnBXkSHXasNOeW2b+6w E/xWfezeCl5ACrBh3+vQnczJoqsMMAlfzrxCiB9to4PGGo1S3RjdQimIEkW1xQvQ jCsZ0PyUNYz4YUn8bVEFn0A1QrpiwMcSjTnVsn7yGBvedcd1QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHplbsGyOGwHudob22CU+4tatiOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmVk OWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1ZWNjNjdlYWYvYTY4ZjE2NjYtZGQ1Mi0z NzgzLTliY2ItNzVmZWFjNjUwMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JlZDlkMmMtNTUyNi00ZDdlLWJl NGYtYzliNWVjYzY3ZWFmLzdiZWQ5ZDJjLTU1MjYtNGQ3ZS1iZTRmLWM5YjVlY2M2 N2VhZi5jcmwwHwYDVR0jBBgwFoAUkCUA1dSBUGBUAHzWMP1xpk+TRq8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83YmVkOWQyYy01NTI2LTRkN2UtYmU0Zi1jOWI1 ZWNjNjdlYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoviFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIf3eHyfLORx8+yItj3iuPCzaHMGxtpTFFgkzyOA6gMslbWnL7nafqd HFpKmlwYnURt1xOMTEc9IjOtFyKlG3nfeJ2XwEAdzPwXT0ZXDZifdOVveVRjA5lG 3jAjRPmHiYt2NJrgyCjqmC+lpwMmjMlYp4P4q6ipRIMBcHNYxYbXqefKmP9fJiaZ Js4YE0ePubRCXCPj/uK7xZHmiFa36Onk4XTdG97L5MTHhKYwWZvRgwFjJAZNEW9w mt5jDIsXIih4ndowAt2bu3lvYzYyC0MvuvMa4H0yyjOucwRGKnBRMYuOR1pI6aYB DfjPjpZqgbnXpWKYGVwmxb1N4/qdMjs= -----END CERTIFICATE-----Generated at Mon Feb 23 17:15:07 2026 by rpki-client