$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b9a7ece-d702-44ce-acc6-7d80fdc86a50/9d7af678-b1ba-3079-8652-f4b16db16850.roa File: 9d7af678-b1ba-3079-8652-f4b16db16850.roa (raw, json) Hash identifier: r3yMoCKEjWMYrhoQf6i3kxE/ks5icIrWvsNZGs/CzKU= Subject key identifier: B1:68:B1:31:D1:E1:84:63:11:DB:58:73:15:38:79:D3:33:DE:11:DB Certificate issuer: /CN=5b9a7ece-d702-44ce-acc6-7d80fdc86a50 Certificate serial: 010D0C9F4328584EF01CA53E6C614127EF923E10 Authority key identifier: 7C:5A:E1:DC:6A:0B:56:C1:14:89:45:18:F7:1B:4C:F6:ED:FD:57:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b9a7ece-d702-44ce-acc6-7d80fdc86a50.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b9a7ece-d702-44ce-acc6-7d80fdc86a50/9d7af678-b1ba-3079-8652-f4b16db16850.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 402482 IP address blocks: 152.55.248.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b9a7ece-d702-44ce-acc6-7d80fdc86a50/5b9a7ece-d702-44ce-acc6-7d80fdc86a50.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b9a7ece-d702-44ce-acc6-7d80fdc86a50/5b9a7ece-d702-44ce-acc6-7d80fdc86a50.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b9a7ece-d702-44ce-acc6-7d80fdc86a50.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:a5:3e:6c:61:41:27:ef:92:3e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b9a7ece-d702-44ce-acc6-7d80fdc86a50 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=f889cd5c-3aad-40c1-a37e-92e3ea2b149a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:85:21:37:7d:1e:c6:06:dd:8f:81:4e:dc:7c: 79:fc:ac:77:70:52:56:4c:fa:6c:68:39:91:4c:0c: eb:4c:76:6d:2b:5a:50:65:3a:a8:96:a9:fb:5f:a0: a7:72:10:b2:e1:a7:8b:ae:41:8b:1c:d9:9a:77:8d: 8c:ea:4f:4f:8e:e3:1a:5e:a1:37:62:67:19:1c:2d: f5:3d:7f:36:a6:ba:d7:d2:79:ed:db:35:63:96:6f: ab:ad:b7:5a:94:26:bb:65:b0:65:3b:50:19:57:dd: 3c:e5:54:9e:34:c9:b7:7d:23:f2:66:18:b0:f7:be: 9e:32:4c:49:79:9a:fa:e5:70:2d:c5:50:12:c7:89: 2d:9c:50:55:17:b5:4b:d6:ac:56:5e:c5:b6:f3:97: 7a:97:8c:77:33:0f:ba:8c:05:9d:0a:d1:f3:0e:9f: bc:65:81:0f:3a:57:ac:82:e5:07:a6:95:ab:0e:1b: df:52:a7:09:6c:47:fa:37:16:1b:94:43:c9:f5:1b: 62:bf:d3:76:3a:e5:2f:ee:c9:c5:6d:cb:b2:47:4e: df:d6:6f:fb:db:89:ec:12:b1:3a:40:eb:ca:a2:e4: d7:06:e5:a7:38:57:62:f3:66:b6:ca:3b:20:5e:ca: c8:47:67:92:42:13:32:96:5a:e2:46:8a:e4:9a:1f: 2c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:68:B1:31:D1:E1:84:63:11:DB:58:73:15:38:79:D3:33:DE:11:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b9a7ece-d702-44ce-acc6-7d80fdc86a50/9d7af678-b1ba-3079-8652-f4b16db16850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b9a7ece-d702-44ce-acc6-7d80fdc86a50/5b9a7ece-d702-44ce-acc6-7d80fdc86a50.crl X509v3 Authority Key Identifier: keyid:7C:5A:E1:DC:6A:0B:56:C1:14:89:45:18:F7:1B:4C:F6:ED:FD:57:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5b9a7ece-d702-44ce-acc6-7d80fdc86a50.cer sbgp-ipAddrBlock: critical IPv4: 152.55.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:08:85:b9:d2:ea:03:04:ec:b7:6e:8f:85:36:88:db:c3:65: 65:33:df:3d:c2:37:7b:84:25:11:17:bb:56:85:44:77:61:22: 3c:4c:85:d9:61:c9:05:05:ef:79:29:c3:35:19:60:ff:3b:7c: a4:c8:1d:30:75:68:ba:97:32:db:55:07:5f:e3:5b:fe:d5:79: f6:ac:59:5e:c6:e4:6a:7e:d5:46:e5:3b:db:4c:86:e5:54:f2: 8f:1f:f3:43:5e:13:7a:b9:49:0e:ba:0a:39:a2:11:d1:3c:44: 20:4d:70:15:10:82:97:d6:a4:16:95:04:91:4a:0b:85:fd:23: 00:b9:9d:bb:df:53:b6:9c:60:c4:9e:8f:3c:3b:93:67:37:06: 1a:aa:64:2a:b1:62:3c:05:36:bc:dc:9a:a0:a7:b8:5c:f5:ae: 88:3f:9d:2b:16:04:24:f2:ed:0b:3e:f8:a1:80:c7:93:1c:99: 2b:db:d7:76:da:36:f8:df:15:2d:1b:4f:ff:7a:b9:95:82:f5: f7:a1:c9:d5:51:1e:ba:64:19:9b:df:14:eb:11:85:f4:58:a4: 0f:67:4c:7d:f3:5f:3e:77:06:17:27:04:da:2e:2b:fc:df:1b: 58:37:7a:06:41:f6:5f:56:1a:78:e7:62:a4:d9:df:c8:59:d4: ed:a7:1b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHKU+bGFBJ++SPhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWI5YTdlY2UtZDcwMi00NGNlLWFjYzYtN2Q4MGZkYzg2 YTUwMB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk Zjg4OWNkNWMtM2FhZC00MGMxLWEzN2UtOTJlM2VhMmIxNDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYUhN30exgbdj4FO3Hx5/Kx3cFJWTPpsaDmR TAzrTHZtK1pQZTqolqn7X6CnchCy4aeLrkGLHNmad42M6k9PjuMaXqE3YmcZHC31 PX82prrX0nnt2zVjlm+rrbdalCa7ZbBlO1AZV9085VSeNMm3fSPyZhiw976eMkxJ eZr65XAtxVASx4ktnFBVF7VL1qxWXsW285d6l4x3Mw+6jAWdCtHzDp+8ZYEPOles guUHppWrDhvfUqcJbEf6NxYblEPJ9Rtiv9N2OuUv7snFbcuyR07f1m/724nsErE6 QOvKouTXBuWnOFdi82a2yjsgXsrIR2eSQhMyllriRorkmh8snwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLFosTHR4YRjEdtYcxU4edMz3hHbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81Yjlh N2VjZS1kNzAyLTQ0Y2UtYWNjNi03ZDgwZmRjODZhNTAvOWQ3YWY2NzgtYjFiYS0z MDc5LTg2NTItZjRiMTZkYjE2ODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWI5YTdlY2UtZDcwMi00NGNlLWFj YzYtN2Q4MGZkYzg2YTUwLzViOWE3ZWNlLWQ3MDItNDRjZS1hY2M2LTdkODBmZGM4 NmE1MC5jcmwwHwYDVR0jBBgwFoAUfFrh3GoLVsEUiUUY9xtM9u39V68wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YjlhN2VjZS1kNzAyLTQ0Y2UtYWNjNi03ZDgw ZmRjODZhNTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmDf4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8IhbnS6gME7Lduj4U2iNvDZWUz3z3CN3uEJREXu1aFRHdhIjxMhdlh yQUF73kpwzUZYP87fKTIHTB1aLqXMttVB1/jW/7VefasWV7G5Gp+1UblO9tMhuVU 8o8f80NeE3q5SQ66CjmiEdE8RCBNcBUQgpfWpBaVBJFKC4X9IwC5nbvfU7acYMSe jzw7k2c3BhqqZCqxYjwFNrzcmqCnuFz1rog/nSsWBCTy7Qs++KGAx5McmSvb13ba NvjfFS0bT/96uZWC9fehydVRHrpkGZvfFOsRhfRYpA9nTH3zXz53BhcnBNouK/zf G1g3egZB9l9WGnjnYqTZ38hZ1O2nG5A= -----END CERTIFICATE-----Generated at Sat Sep 19 06:58:53 2026 by rpki-client