$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c75d991a-edc2-3d74-8efa-4da1a5550567.roa File: c75d991a-edc2-3d74-8efa-4da1a5550567.roa (raw, json) Hash identifier: cIx/uHkMzpUvDe2lydIG83EzlVSmgD95uvRBoSH9jtM= Subject key identifier: AF:36:8B:52:22:96:77:74:3B:99:78:99:66:0A:8C:42:99:AD:CB:F4 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584EA78800DE47E7BCAF5C816FF9 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c75d991a-edc2-3d74-8efa-4da1a5550567.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 5650 IP address blocks: 152.232.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 30 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:00:de:47:e7:bc:af:5c:81:6f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=571bd6ff-65d5-49b3-9bf7-15ebc6e31694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:56:54:18:05:01:ed:50:a2:5f:e1:a4:12:f1: 6c:cf:dd:29:f3:4c:53:4c:0d:35:1c:78:0c:9b:88: bf:70:68:ca:6d:cb:6e:60:40:83:27:57:0f:52:f5: e9:db:96:bc:a2:77:48:71:6f:16:a7:15:7f:cf:2f: 7d:ba:db:91:a3:cd:52:25:d8:93:3e:25:cb:d0:bd: 2c:5a:32:e4:5f:b1:3f:64:ae:4b:2a:e4:1f:58:39: af:81:fe:4d:b7:b4:07:e6:6d:c3:d3:f9:7a:c5:07: 81:d4:93:92:e7:13:80:91:fa:78:f8:2e:9d:c6:ba: 69:8c:86:55:dc:32:0c:80:b5:84:87:3b:71:98:c0: 63:b2:1c:f9:db:25:e8:0a:ee:80:e8:90:c6:2b:6c: 85:4c:48:39:05:1e:05:94:21:1e:de:80:5a:9c:91: c7:21:26:02:f4:fe:96:1c:81:c5:66:80:ad:1a:21: cf:92:7b:98:61:99:f7:39:71:26:90:f0:0a:64:77: c4:0d:1f:e2:4f:6b:b2:f4:5d:70:f0:ce:d4:ed:b5: ba:c8:bc:86:45:04:8a:15:20:e9:1a:60:9c:77:cf: 6d:c3:8d:12:86:35:91:bd:71:1f:d3:05:e1:37:c5: b4:72:a8:da:3a:7c:13:8f:58:21:0b:34:f3:2d:08: f4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:36:8B:52:22:96:77:74:3B:99:78:99:66:0A:8C:42:99:AD:CB:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/c75d991a-edc2-3d74-8efa-4da1a5550567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.248.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:45:e8:70:2c:ea:40:e8:d5:b0:7a:e0:40:86:9f:1e:b7:fe: bf:a0:f5:94:24:0f:d7:94:e1:82:a1:1a:6f:42:13:be:ba:c6: 14:9a:3b:98:0b:e5:13:b3:4e:d3:00:c8:ec:9e:44:9f:71:c9: b4:4c:be:33:6f:10:c2:61:68:b1:36:43:7f:bb:10:a4:cf:e4: f6:d9:c7:7c:f4:da:4f:7a:4f:b8:7f:96:9b:8a:aa:d5:40:70: d7:83:03:ad:7b:8f:22:1b:94:90:99:f0:7e:6b:bb:43:e7:a8: 60:41:b0:7f:10:7c:8d:59:eb:53:9e:f0:49:29:a2:2b:a6:6e: c9:da:24:62:50:4a:90:86:df:33:9b:48:c2:76:c6:f5:f2:49: c0:5c:de:60:e0:83:0b:d1:18:55:d0:60:8c:7b:48:58:91:52: 84:46:ad:05:aa:04:01:27:da:7f:d5:f3:ed:30:cd:27:25:12: 99:be:93:e3:56:4b:93:1f:d3:31:46:74:8d:04:7a:73:5a:df: 08:4a:40:07:8d:a7:c0:2c:0e:9e:59:f0:e3:d5:15:24:2a:a5: 3e:a1:4f:2a:77:e0:c6:2f:f0:e8:38:cf:67:83:66:77:10:55: 1a:0e:57:1d:da:8e:5b:8a:2a:b8:10:51:ea:56:d9:61:64:7a: 48:d6:c5:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niADeR+e8r1yBb/kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTcxYmQ2ZmYtNjVkNS00OWIzLTliZjctMTVlYmM2ZTMxNjk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylZUGAUB7VCiX+GkEvFsz90p80xTTA01HHgM m4i/cGjKbctuYECDJ1cPUvXp25a8ondIcW8WpxV/zy99utuRo81SJdiTPiXL0L0s WjLkX7E/ZK5LKuQfWDmvgf5Nt7QH5m3D0/l6xQeB1JOS5xOAkfp4+C6dxrppjIZV 3DIMgLWEhztxmMBjshz52yXoCu6A6JDGK2yFTEg5BR4FlCEe3oBanJHHISYC9P6W HIHFZoCtGiHPknuYYZn3OXEmkPAKZHfEDR/iT2uy9F1w8M7U7bW6yLyGRQSKFSDp GmCcd89tw40ShjWRvXEf0wXhN8W0cqjaOnwTj1ghCzTzLQj0qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK82i1Iilnd0O5l4mWYKjEKZrcv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvYzc1ZDk5MWEtZWRjMi0z ZDc0LThlZmEtNGRhMWE1NTUwNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA5F6HAs6kDo1bB64ECGnx63/r+g9ZQkD9eU4YKhGm9CE766xhSaO5gL 5ROzTtMAyOyeRJ9xybRMvjNvEMJhaLE2Q3+7EKTP5PbZx3z02k96T7h/lpuKqtVA cNeDA617jyIblJCZ8H5ru0PnqGBBsH8QfI1Z61Oe8EkpoiumbsnaJGJQSpCG3zOb SMJ2xvXyScBc3mDggwvRGFXQYIx7SFiRUoRGrQWqBAEn2n/V8+0wzSclEpm+k+NW S5Mf0zFGdI0EenNa3whKQAeNp8AsDp5Z8OPVFSQqpT6hTyp34MYv8Og4z2eDZncQ VRoOVx3ajluKKrgQUepW2WFkekjWxf8= -----END CERTIFICATE-----Generated at Fri Aug 28 17:56:13 2026 by rpki-client