$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa File: 3f19cad0-6ddd-35a7-877d-c343355be8b2.roa (raw, json) Hash identifier: h+e/WJaKvfXZhVsB8YI8Edvm0cnUQCDMRHCfzatTewg= Subject key identifier: 3A:B7:CB:E1:71:12:FD:43:0B:DC:A8:55:35:F8:76:53:42:D4:95:34 Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F4328584F497508D40B1D4AC4D14417C0 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 25697 IP address blocks: 152.44.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:08:d4:0b:1d:4a:c4:d1:44:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e28d4616-838d-4824-9542-ba0273bf8627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2e:a6:e5:24:9b:db:ce:7b:a3:3b:90:ab:1e: 42:37:b3:d4:b0:67:92:16:46:58:98:ff:9c:70:52: 75:ae:f2:58:fa:43:6d:d1:46:9c:a1:a7:dc:c9:83: cb:c8:2f:32:3e:da:cb:7f:e2:fb:8b:7b:61:43:9c: cc:95:6b:03:ed:6a:09:9f:18:9f:dd:da:df:6e:65: 95:70:c2:0a:70:25:70:f7:54:c9:e0:0d:a8:ce:32: b3:4e:53:27:f8:8c:94:9c:3d:c1:d6:8c:4d:14:f1: 12:d4:7d:66:b8:56:fb:93:f3:9e:69:b7:0f:5c:fe: f9:52:3e:c7:6a:f4:c4:b2:cb:67:2b:53:1a:cc:ad: e0:06:3d:23:51:55:96:22:07:80:37:2c:10:8b:29: 65:bd:91:c3:f6:7a:06:d9:48:0c:85:93:25:f2:da: c1:89:6f:27:b1:94:57:a8:53:d6:8d:7e:05:ae:6f: bb:18:12:84:24:de:74:0c:e2:c6:06:0b:d4:be:35: a6:56:87:56:a5:92:34:1c:e5:c5:f1:f6:53:f3:c8: 60:f1:4c:7a:59:37:f4:03:5a:dc:9b:cb:24:26:4a: ea:cc:e7:c9:ea:f7:76:62:b7:1d:9e:cf:c8:40:cf: 1b:f2:92:9b:12:db:7c:bf:90:07:eb:2e:93:18:8f: 27:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B7:CB:E1:71:12:FD:43:0B:DC:A8:55:35:F8:76:53:42:D4:95:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 152.44.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ac:b2:2c:61:de:ee:5d:1e:47:61:b4:a9:9c:a3:18:75:9a: 3b:40:4e:59:35:86:78:e7:82:58:7d:a4:3e:28:bd:f8:8e:39: 8c:7c:00:97:44:ea:5b:6a:de:80:37:a6:18:7a:00:37:80:8d: 61:e5:e8:0c:0c:52:1c:28:ff:65:4a:33:62:a3:e8:49:5f:9a: 2f:76:fe:96:43:4a:62:43:55:24:f2:15:f9:40:e7:72:2c:26: 33:bd:1a:92:6f:56:39:4a:8b:f3:83:96:7a:f5:2a:4d:3c:7e: ef:96:82:79:a6:ff:fe:91:34:47:dc:1d:ae:a9:00:64:ec:85: ff:5c:1c:79:48:e1:f2:4d:91:63:5c:46:89:6b:20:e5:01:b2: f1:d8:40:ef:81:64:df:20:bd:a2:19:23:b5:ed:c7:f4:9b:f7: ba:4c:dd:27:63:54:9c:39:ef:17:e8:82:3c:d1:3f:1e:2c:ff: fe:b6:0b:28:af:c8:82:1d:1f:ce:9d:a9:82:db:a1:1d:e7:b4: 7c:50:f7:41:b5:94:e5:55:d1:03:71:00:a5:d7:49:9e:56:f2: a6:68:58:2f:5f:65:e7:8f:1b:1a:d2:c5:4b:7c:cd:0b:35:39: ad:f3:0e:9f:ae:69:72:58:00:13:b9:ad:d9:2a:13:ce:60:85: ec:51:b0:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdQjUCx1KxNFEF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTI4ZDQ2MTYtODM4ZC00ODI0LTk1NDItYmEwMjczYmY4NjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhS6m5SSb2857ozuQqx5CN7PUsGeSFkZYmP+c cFJ1rvJY+kNt0UacoafcyYPLyC8yPtrLf+L7i3thQ5zMlWsD7WoJnxif3drfbmWV cMIKcCVw91TJ4A2ozjKzTlMn+IyUnD3B1oxNFPES1H1muFb7k/OeabcPXP75Uj7H avTEsstnK1MazK3gBj0jUVWWIgeANywQiyllvZHD9noG2UgMhZMl8trBiW8nsZRX qFPWjX4Frm+7GBKEJN50DOLGBgvUvjWmVodWpZI0HOXF8fZT88hg8Ux6WTf0A1rc m8skJkrqzOfJ6vd2Yrcdns/IQM8b8pKbEtt8v5AH6y6TGI8n2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDq3y+FxEv1DC9yoVTX4dlNC1JU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvM2YxOWNhZDAtNmRkZC0z NWE3LTg3N2QtYzM0MzM1NWJlOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2ssixh3u5dHkdhtKmcoxh1mjtATlk1hnjnglh9pD4ovfiOOYx8AJdE 6ltq3oA3phh6ADeAjWHl6AwMUhwo/2VKM2Kj6Elfmi92/pZDSmJDVSTyFflA53Is JjO9GpJvVjlKi/ODlnr1Kk08fu+Wgnmm//6RNEfcHa6pAGTshf9cHHlI4fJNkWNc RolrIOUBsvHYQO+BZN8gvaIZI7Xtx/Sb97pM3SdjVJw57xfogjzRPx4s//62Cyiv yIIdH86dqYLboR3ntHxQ90G1lOVV0QNxAKXXSZ5W8qZoWC9fZeePGxrSxUt8zQs1 Oa3zDp+uaXJYABO5rdkqE85ghexRsDc= -----END CERTIFICATE-----Generated at Tue Oct 27 23:04:18 2026 by rpki-client