$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa File: 3f19cad0-6ddd-35a7-877d-c343355be8b2.roa (raw, json) Hash identifier: dmgmClP+zbFxSZ4TYAcBswDmZRj0w59uB4tYkZcus20= Subject key identifier: ED:67:B0:D4:BB:2C:43:97:C4:8A:10:7B:29:89:01:00:6B:E2:E7:C7 Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F4328584EA787382CACF32695673F68C0 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 25697 IP address blocks: 152.44.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:38:2c:ac:f3:26:95:67:3f:68:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=84c32b6c-ff1a-4a82-b566-cc9ab52c821f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:76:3f:f8:ac:2b:10:5d:26:00:6d:7a:cd:da: 60:11:8f:2a:96:25:df:cc:39:26:64:9d:1e:19:1d: 60:7d:11:df:9e:8a:d6:58:4e:79:f6:8c:41:55:5b: 7e:81:d6:02:34:7b:bc:e2:ce:aa:11:69:8f:00:68: 1d:77:9d:8c:c4:e6:aa:f0:24:d0:48:40:1f:fb:6e: 96:66:73:bf:18:6b:2a:0e:10:f2:12:d7:0f:1e:20: 02:e8:9d:b0:f0:d2:32:68:d1:40:ef:e0:9b:c2:5a: b4:04:67:65:2e:9f:60:22:9d:10:27:1d:57:ff:05: 47:08:72:69:b6:16:c0:ed:40:49:d1:bb:d9:b4:2d: 8a:28:45:47:41:79:e7:c5:4f:6b:9e:8b:1b:de:84: a5:08:f1:0e:82:d5:e4:01:9c:8b:08:a7:7a:77:b4: 34:80:a1:93:3e:11:b9:5e:f8:96:4d:a6:33:ea:8f: 18:e8:69:c0:a0:e2:2d:bf:c4:ba:eb:fa:f4:da:89: 28:e4:6b:c4:28:89:6b:d7:2a:ba:96:08:4e:a7:a7: 7c:7a:ae:d0:02:66:4b:a4:f0:53:01:72:1a:1e:ee: fa:6c:68:86:c8:8c:c2:5d:12:49:24:04:1b:c5:f3: 9a:23:c2:3b:01:84:b0:49:11:71:60:68:ca:53:75: 3d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:67:B0:D4:BB:2C:43:97:C4:8A:10:7B:29:89:01:00:6B:E2:E7:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/3f19cad0-6ddd-35a7-877d-c343355be8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 152.44.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:2e:f9:1e:b0:5d:db:3a:d9:c6:08:cc:c6:b3:9d:a8:b3:50: ec:c2:82:1c:6d:f3:b3:7c:ac:53:24:77:5c:33:ea:22:f7:a8: b0:81:f0:91:46:89:ad:46:25:3e:76:b6:60:20:07:a7:62:65: ba:95:dd:e8:c1:1d:1d:4e:4e:01:5e:48:7e:58:d6:73:16:1d: 96:9e:07:1d:7d:6c:29:a4:d7:30:ab:be:83:5b:b7:a8:e1:d8: 66:dc:84:d6:cd:09:9d:24:6b:4c:56:b4:6f:01:d9:44:12:04: b4:ed:88:c2:e2:ee:6c:57:2c:d1:6d:bb:da:ee:62:12:1b:78: bf:90:70:5f:04:90:a1:02:b3:5c:26:19:d1:5d:c3:a3:7d:24: 88:8b:78:3f:c2:e9:f6:02:26:45:ce:84:9c:16:73:0d:93:d9: 9b:00:f8:f6:b9:0e:c8:db:28:ce:73:13:04:30:91:21:77:4e: fa:a5:cb:69:12:f2:4f:4d:d8:16:a8:69:35:19:b8:a0:0f:1d: f2:d7:61:41:f7:d8:df:a9:6e:bf:e1:84:13:bd:a5:59:a4:8d: ed:1a:d1:33:56:44:20:fe:8a:f4:af:70:d3:00:91:64:cb:55: 67:31:36:33:02:d3:3c:b5:d0:e6:40:fd:8c:a0:51:f0:17:72: fa:c4:51:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhzgsrPMmlWc/aMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODRjMzJiNmMtZmYxYS00YTgyLWI1NjYtY2M5YWI1MmM4MjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXY/+KwrEF0mAG16zdpgEY8qliXfzDkmZJ0e GR1gfRHfnorWWE559oxBVVt+gdYCNHu84s6qEWmPAGgdd52MxOaq8CTQSEAf+26W ZnO/GGsqDhDyEtcPHiAC6J2w8NIyaNFA7+Cbwlq0BGdlLp9gIp0QJx1X/wVHCHJp thbA7UBJ0bvZtC2KKEVHQXnnxU9rnosb3oSlCPEOgtXkAZyLCKd6d7Q0gKGTPhG5 XviWTaYz6o8Y6GnAoOItv8S66/r02oko5GvEKIlr1yq6lghOp6d8eq7QAmZLpPBT AXIaHu76bGiGyIzCXRJJJAQbxfOaI8I7AYSwSRFxYGjKU3U9WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO1nsNS7LEOXxIoQeymJAQBr4ufHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvM2YxOWNhZDAtNmRkZC0z NWE3LTg3N2QtYzM0MzM1NWJlOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDmCwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8u+R6wXds62cYIzMaznaizUOzCghxt87N8rFMkd1wz6iL3qLCB8JFG ia1GJT52tmAgB6diZbqV3ejBHR1OTgFeSH5Y1nMWHZaeBx19bCmk1zCrvoNbt6jh 2GbchNbNCZ0ka0xWtG8B2UQSBLTtiMLi7mxXLNFtu9ruYhIbeL+QcF8EkKECs1wm GdFdw6N9JIiLeD/C6fYCJkXOhJwWcw2T2ZsA+Pa5DsjbKM5zEwQwkSF3Tvqly2kS 8k9N2BaoaTUZuKAPHfLXYUH32N+pbr/hhBO9pVmkje0a0TNWRCD+ivSvcNMAkWTL VWcxNjMC0zy10OZA/YygUfAXcvrEUSw= -----END CERTIFICATE-----Generated at Thu Sep 10 20:17:54 2026 by rpki-client