$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c23bfea2-4bf1-357a-a671-864041baa3b7.roa File: c23bfea2-4bf1-357a-a671-864041baa3b7.roa (raw, json) Hash identifier: /TPQxfPrfI5LIoeoZ3bQIwVKevrU/GHP6TuKfKpCGV8= Subject key identifier: B5:B4:B7:A1:4B:9F:04:0F:6E:B5:01:8F:21:9F:D2:58:FC:43:ED:DC Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584CACF1D22584D19E2E14403780 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c23bfea2-4bf1-357a-a671-864041baa3b7.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 55286 IP address blocks: 152.232.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:d2:25:84:d1:9e:2e:14:40:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=551bae4e-022e-441e-ad91-d269211f4436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:dd:42:1d:02:8c:6c:a9:6d:d2:62:c2:d9:6b: 52:c9:47:95:84:63:17:ac:0d:1b:61:46:78:08:19: 43:19:e5:a0:51:9b:a1:86:dd:1b:7c:c3:4f:09:bf: 52:05:fb:99:55:f0:8c:22:ed:97:5a:94:bd:22:70: 0e:14:c3:77:4d:10:48:e4:00:4e:a6:da:8a:11:8c: 24:05:99:a6:59:ef:5c:fc:23:4c:1a:6d:6d:94:1a: 2a:b6:eb:97:55:19:b8:59:a2:b5:78:ba:dc:fe:b6: 1a:aa:4f:31:86:b2:03:32:bb:80:75:aa:36:5a:ce: 26:c4:7d:0c:64:57:4b:45:9c:bb:46:d9:f3:94:b3: 4b:12:c2:5c:b1:50:9f:9e:c5:49:92:ee:22:7b:49: 13:2a:53:8e:a0:a1:df:ea:ce:e9:9d:10:20:94:4c: 5f:b3:8a:11:ce:c8:a1:f5:ff:87:cb:bf:6a:42:bd: b0:5a:2b:e6:02:be:ce:09:02:68:ea:d5:49:93:b7: bb:a3:de:50:09:a3:c6:7c:f5:c4:e7:1f:06:39:91: 00:9b:5c:3f:37:74:4d:9b:26:b7:20:02:81:9c:f0: 31:31:c3:5b:cf:1f:03:39:56:2c:d0:4f:47:27:54: 94:da:8e:5f:af:ae:76:3a:b2:95:fb:0a:3e:b0:b6: 39:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B4:B7:A1:4B:9F:04:0F:6E:B5:01:8F:21:9F:D2:58:FC:43:ED:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c23bfea2-4bf1-357a-a671-864041baa3b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:91:ad:f9:8c:ab:93:d2:be:79:85:33:d3:17:39:5a:32:47: 87:86:40:2c:ce:32:ad:b8:ec:5b:9c:4d:8c:48:33:08:3e:26: fa:ed:c2:e7:74:0b:84:fd:2f:97:11:d0:5f:a3:94:c1:54:dd: 09:97:f6:9b:3e:1e:d7:c1:4c:ec:b3:fc:49:69:1c:f3:bd:f0: dd:ef:b1:35:d9:e9:bf:20:77:55:88:6f:f7:1a:95:fd:7f:ac: 91:40:28:79:ac:a4:0e:1e:f3:75:6d:e7:53:1f:31:5f:32:84: 32:bd:38:a7:72:73:f3:9e:a1:b9:8e:8b:51:7b:e4:d3:8c:fc: 04:4e:15:74:1e:46:fc:13:55:48:b3:73:de:ac:fd:fe:40:23: 1d:76:c3:3e:17:a0:72:fa:4b:c5:f1:5c:5f:a5:ec:1b:72:ee: 4d:0d:7b:78:5b:4e:66:60:02:cf:c7:fd:92:3c:66:1a:a7:68: 01:3d:ff:be:17:2d:61:96:7f:5c:43:58:5e:cc:bf:8d:ac:11: 3b:16:7e:2a:10:fb:c2:51:02:44:52:1e:b6:bf:cd:1f:f7:7c: fa:cd:8e:be:70:53:1c:7c:ac:a4:b8:70:cc:4c:55:cc:3e:6c: 3e:4b:08:78:dc:90:c8:86:b3:49:8e:de:40:eb:6b:8b:c9:7d: 58:de:d3:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8dIlhNGeLhRAN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk NTUxYmFlNGUtMDIyZS00NDFlLWFkOTEtZDI2OTIxMWY0NDM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8d1CHQKMbKlt0mLC2WtSyUeVhGMXrA0bYUZ4 CBlDGeWgUZuhht0bfMNPCb9SBfuZVfCMIu2XWpS9InAOFMN3TRBI5ABOptqKEYwk BZmmWe9c/CNMGm1tlBoqtuuXVRm4WaK1eLrc/rYaqk8xhrIDMruAdao2Ws4mxH0M ZFdLRZy7RtnzlLNLEsJcsVCfnsVJku4ie0kTKlOOoKHf6s7pnRAglExfs4oRzsih 9f+Hy79qQr2wWivmAr7OCQJo6tVJk7e7o95QCaPGfPXE5x8GOZEAm1w/N3RNmya3 IAKBnPAxMcNbzx8DOVYs0E9HJ1SU2o5fr652OrKV+wo+sLY5HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLW0t6FLnwQPbrUBjyGf0lj8Q+3cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYzIzYmZlYTItNGJmMS0z NTdhLWE2NzEtODY0MDQxYmFhM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmOgJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCRrfmMq5PSvnmFM9MXOVoyR4eGQCzOMq247FucTYxIMwg+Jvrtwud0 C4T9L5cR0F+jlMFU3QmX9ps+HtfBTOyz/ElpHPO98N3vsTXZ6b8gd1WIb/calf1/ rJFAKHmspA4e83Vt51MfMV8yhDK9OKdyc/OeobmOi1F75NOM/AROFXQeRvwTVUiz c96s/f5AIx12wz4XoHL6S8XxXF+l7Bty7k0Ne3hbTmZgAs/H/ZI8ZhqnaAE9/74X LWGWf1xDWF7Mv42sETsWfioQ+8JRAkRSHra/zR/3fPrNjr5wUxx8rKS4cMxMVcw+ bD5LCHjckMiGs0mO3kDra4vJfVje0wk= -----END CERTIFICATE-----Generated at Thu Feb 26 23:49:53 2026 by rpki-client