$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b252baa0-5024-3a19-9a9b-c86ed4790812.roa File: b252baa0-5024-3a19-9a9b-c86ed4790812.roa (raw, json) Hash identifier: 17AjKry5vNwbo8uEqx6rjkE3PCIBDbT0O1+x0ecrj8E= Subject key identifier: 8B:0B:8D:77:16:B1:C9:B8:C4:94:CA:89:6F:D6:28:BB:BF:11:B0:FA Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F549D8C0CEFF825F2860FBB00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b252baa0-5024-3a19-9a9b-c86ed4790812.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 16625 IP address blocks: 23.58.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:8c:0c:ef:f8:25:f2:86:0f:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=a37991e1-064f-439d-b694-ffd3efc90e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b1:31:eb:3c:0b:87:e1:68:76:2c:e5:c8:0a: 16:2a:15:88:07:5a:5d:b2:c1:1b:f3:40:ae:50:80: 9b:8f:18:be:02:f3:ce:7f:00:9a:39:a6:83:cd:bd: ad:bc:94:f0:a6:3e:7b:d4:67:4d:c6:d0:c6:b5:63: 88:8f:86:32:2e:40:42:e4:b4:ae:3d:a6:5e:7a:6e: db:a4:5c:10:f4:5c:81:2e:62:d9:66:a3:d5:eb:ec: 98:80:8a:d2:33:6b:99:d4:00:d9:55:ed:39:21:02: 52:57:77:6b:60:d1:0a:6d:f8:11:5b:7e:50:39:9d: 30:69:d5:bd:07:15:16:ee:04:f9:35:5c:26:db:46: 9f:34:e3:10:a5:04:57:88:29:4c:06:17:86:e6:fc: f5:95:34:6d:ac:24:20:1e:dc:59:9c:f0:fb:20:60: 58:a8:1d:40:4f:9b:db:fa:ab:b7:ff:c4:06:4a:11: 7c:9f:cb:01:87:a2:39:00:55:0d:4b:3a:38:0e:ab: dc:5e:3f:c7:07:79:63:fa:9f:5b:59:fc:62:11:ce: 42:22:27:a5:26:54:92:d7:d9:f4:36:79:fd:8a:88: ce:99:80:20:69:3a:18:d7:8b:a1:7c:50:45:4a:af: 36:97:9b:7a:24:3d:6d:cd:bb:4d:d0:6e:b6:43:7f: 03:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0B:8D:77:16:B1:C9:B8:C4:94:CA:89:6F:D6:28:BB:BF:11:B0:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b252baa0-5024-3a19-9a9b-c86ed4790812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.58.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:0b:23:eb:cd:37:6c:8b:b8:39:9e:e4:f6:f0:62:7c:37:75: cd:96:1a:6b:89:ad:dd:6c:24:1d:a1:fe:44:8f:e7:87:8f:2d: a7:fe:66:8c:de:87:17:54:87:b1:0f:a8:1b:72:f7:ae:a9:26: c2:1b:51:98:b5:c2:52:c0:8f:bf:8f:27:5d:c4:16:b0:99:b7: 83:ce:a3:9d:9d:b7:50:cc:3e:83:70:10:e3:f5:06:f4:39:c7: ba:47:2b:0d:ce:c6:f1:0c:37:36:9f:af:e9:df:77:48:ea:04: 48:ba:3a:97:90:4d:19:2f:3f:db:93:9c:ad:c2:96:2e:50:11: 35:22:30:4b:c3:89:c4:13:7a:a7:37:af:cd:26:2c:59:8c:0b: 0b:9d:45:bb:3a:76:52:e8:55:2d:c1:c5:dd:f9:05:ac:40:ad: d9:f6:90:87:ea:40:ab:44:fb:0f:73:10:f7:e2:5c:a5:9e:8a: 62:bd:2f:4d:18:ba:af:d6:b7:53:66:d2:06:75:d5:a9:c4:c7: a6:fb:16:ff:77:08:20:e5:14:d0:38:d2:16:ff:75:6e:a2:f3: 4d:b5:8c:7e:1f:5b:a3:6a:18:bc:7e:15:4d:00:c7:18:a6:05: 10:c8:9b:25:27:60:4a:29:38:05:0e:2f:a0:85:84:9c:63:46: 9f:7d:33:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnYwM7/gl8oYPuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk YTM3OTkxZTEtMDY0Zi00MzlkLWI2OTQtZmZkM2VmYzkwZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbEx6zwLh+FodizlyAoWKhWIB1pdssEb80Cu UICbjxi+AvPOfwCaOaaDzb2tvJTwpj571GdNxtDGtWOIj4YyLkBC5LSuPaZeem7b pFwQ9FyBLmLZZqPV6+yYgIrSM2uZ1ADZVe05IQJSV3drYNEKbfgRW35QOZ0wadW9 BxUW7gT5NVwm20afNOMQpQRXiClMBheG5vz1lTRtrCQgHtxZnPD7IGBYqB1AT5vb +qu3/8QGShF8n8sBh6I5AFUNSzo4DqvcXj/HB3lj+p9bWfxiEc5CIielJlSS19n0 Nnn9iojOmYAgaToY14uhfFBFSq82l5t6JD1tzbtN0G62Q38DswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsLjXcWscm4xJTKiW/WKLu/EbD6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjI1MmJhYTAtNTAyNC0z YTE5LTlhOWItYzg2ZWQ0NzkwODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFzqYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFULI+vNN2yLuDme5PbwYnw3dc2WGmuJrd1sJB2h/kSP54ePLaf+Zoze hxdUh7EPqBty966pJsIbUZi1wlLAj7+PJ13EFrCZt4POo52dt1DMPoNwEOP1BvQ5 x7pHKw3OxvEMNzafr+nfd0jqBEi6OpeQTRkvP9uTnK3Cli5QETUiMEvDicQTeqc3 r80mLFmMCwudRbs6dlLoVS3Bxd35BaxArdn2kIfqQKtE+w9zEPfiXKWeimK9L00Y uq/Wt1Nm0gZ11anEx6b7Fv93CCDlFNA40hb/dW6i8021jH4fW6NqGLx+FU0Axxim BRDImyUnYEopOAUOL6CFhJxjRp99Mzw= -----END CERTIFICATE-----Generated at Thu Oct 8 10:41:00 2026 by rpki-client