$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4205bf2-e400-30c6-a941-dcb3dff03477.roa File: a4205bf2-e400-30c6-a941-dcb3dff03477.roa (raw, json) Hash identifier: FRw6Wib4iI6aGYgGLyzotEKj3XJZNBKaBEIVzd2RwSA= Subject key identifier: 16:9C:61:47:CE:CE:52:FB:0A:FF:52:D5:D4:74:E1:B8:BA:A6:70:82 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584F7BB30AA515254251B59C9E80 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4205bf2-e400-30c6-a941-dcb3dff03477.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 55286 IP address blocks: 152.232.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b3:0a:a5:15:25:42:51:b5:9c:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=5a3d474a-069f-43c9-a5bc-c76ebd3890f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:89:67:8e:0c:78:67:76:ca:15:75:8f:cf: af:00:4c:e3:a0:4c:83:17:cd:48:81:8e:d8:c9:a2: 89:46:4f:65:5b:04:0e:c5:e4:48:af:24:a9:d4:b7: 0f:89:35:76:fe:1d:25:88:76:1c:f1:7f:a9:3e:83: 79:2c:2a:70:9b:f3:cc:06:f2:e7:72:17:d4:6a:87: 2d:88:af:a6:3d:fa:88:54:53:d2:40:01:1a:b0:0f: 98:42:69:16:81:f3:21:ab:83:71:75:ab:f4:f3:00: b5:61:26:f9:6e:f5:06:51:07:1f:18:ce:e9:1c:5b: 24:a3:cf:95:e4:da:fd:44:d1:de:26:f3:61:9c:c7: 77:e6:03:d9:6f:77:b6:ed:be:ee:12:31:4e:f1:96: ac:39:78:05:9f:1b:9a:65:88:f3:f7:67:75:de:c2: 2a:f0:c2:27:53:7a:28:52:d7:56:68:e1:3e:43:6f: 7d:d3:b7:2c:8f:74:e8:f8:d0:e3:ea:5f:69:0d:37: a2:fb:bf:23:de:e2:06:8a:ac:0b:3b:d5:26:f3:a2: f8:27:f3:d9:6f:dc:77:73:4e:6a:0b:8b:21:79:88: c1:e9:58:23:12:84:3d:4a:28:14:ac:eb:a6:e8:c8: 3d:d2:a1:89:3a:83:18:d6:b3:04:4e:65:1d:95:22: 29:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9C:61:47:CE:CE:52:FB:0A:FF:52:D5:D4:74:E1:B8:BA:A6:70:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/a4205bf2-e400-30c6-a941-dcb3dff03477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:44:ac:6c:78:ed:b6:38:16:9e:03:dd:22:93:b1:06:e0:07: 18:34:22:0d:c1:c0:20:5f:96:69:0b:51:1a:93:24:93:5e:b4: bf:53:cb:9c:7d:51:af:93:77:43:14:5e:44:38:76:56:aa:8a: 5e:98:08:b2:63:a8:e3:86:3b:40:22:24:8c:67:5a:61:d3:08: 5d:3a:f7:d9:d0:5a:c0:03:3a:e1:57:06:23:5f:a6:05:50:fd: 8a:70:66:e3:ad:b0:b1:99:58:85:3b:67:0e:aa:b5:81:09:69: 2a:b5:1f:e3:dd:ff:3e:4b:7f:a2:d5:9b:07:9d:ca:f7:cf:65: 18:01:c5:d5:4b:d9:1f:f8:f0:9c:12:14:44:57:44:79:ed:a6: b6:25:4d:a7:50:53:f5:ea:01:fb:22:ed:58:21:44:bd:27:88: 74:7f:7b:5f:5e:9d:36:e0:f6:3d:3c:23:98:2f:ce:ee:f4:3b: 37:46:09:8f:61:69:f3:91:eb:43:3b:12:bc:10:c2:79:61:0c: 4a:b3:04:b9:7e:d9:e8:c1:55:33:25:68:13:f7:03:62:ae:07: 80:42:0b:92:b5:ad:e9:95:1b:ed:0f:c5:02:48:75:2f:ee:bf: d7:79:fc:17:96:58:e1:02:8f:9b:94:8e:4b:8e:fa:19:07:34: 77:71:e1:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97swqlFSVCUbWcnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NWEzZDQ3NGEtMDY5Zi00M2M5LWE1YmMtYzc2ZWJkMzg5MGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFqJZ44MeGd2yhV1j8+vAEzjoEyDF81IgY7Y yaKJRk9lWwQOxeRIrySp1LcPiTV2/h0liHYc8X+pPoN5LCpwm/PMBvLnchfUaoct iK+mPfqIVFPSQAEasA+YQmkWgfMhq4Nxdav08wC1YSb5bvUGUQcfGM7pHFsko8+V 5Nr9RNHeJvNhnMd35gPZb3e27b7uEjFO8ZasOXgFnxuaZYjz92d13sIq8MInU3oo UtdWaOE+Q29907csj3To+NDj6l9pDTei+78j3uIGiqwLO9Um86L4J/PZb9x3c05q C4sheYjB6VgjEoQ9SigUrOum6Mg90qGJOoMY1rMETmUdlSIpqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBacYUfOzlL7Cv9S1dR04bi6pnCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYTQyMDViZjItZTQwMC0z MGM2LWE5NDEtZGNiM2RmZjAzNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOivMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZErGx47bY4Fp4D3SKTsQbgBxg0Ig3BwCBflmkLURqTJJNetL9Ty5x9 Ua+Td0MUXkQ4dlaqil6YCLJjqOOGO0AiJIxnWmHTCF0699nQWsADOuFXBiNfpgVQ /YpwZuOtsLGZWIU7Zw6qtYEJaSq1H+Pd/z5Lf6LVmwedyvfPZRgBxdVL2R/48JwS FERXRHntprYlTadQU/XqAfsi7VghRL0niHR/e19enTbg9j08I5gvzu70OzdGCY9h afOR60M7ErwQwnlhDEqzBLl+2ejBVTMlaBP3A2KuB4BCC5K1remVG+0PxQJIdS/u v9d5/BeWWOECj5uUjkuO+hkHNHdx4T0= -----END CERTIFICATE-----Generated at Wed Oct 14 10:06:51 2026 by rpki-client