$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/caa2d549-4016-330e-806a-a66db5f6ef79.roa File: caa2d549-4016-330e-806a-a66db5f6ef79.roa (raw, json) Hash identifier: n4Xa9QNxyOPc6VeyVuOwf6hOTwzUH4gmLJrct4RAcAI= Subject key identifier: ED:31:B1:A2:62:BE:C2:0A:38:EC:69:B0:30:2C:01:11:79:91:8F:A0 Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584DD35B0C0EFFA81EA8AFD86E80 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/caa2d549-4016-330e-806a-a66db5f6ef79.roa Signing time: Thu 14 May 2026 01:00:25 +0000 ROA not before: Thu 14 May 2026 01:00:25 +0000 ROA not after: Wed 12 Aug 2026 01:00:25 +0000 asID: 9304 IP address blocks: 152.232.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d3:5b:0c:0e:ff:a8:1e:a8:af:d8:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: May 14 01:00:25 2026 GMT Not After : Aug 12 01:00:25 2026 GMT Subject: CN=b73894e5-25ea-482c-a6cd-1bdfb56cb30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:f8:6c:76:d2:dc:db:24:08:a7:77:d3:36:22: a8:8b:41:1d:40:2a:c6:8c:29:a0:60:15:b7:ac:b3: ea:9d:74:4c:a5:53:15:02:dc:7d:91:04:af:7b:c2: 0c:7c:20:f5:b3:63:a3:11:f1:30:77:66:25:0a:f8: 93:d7:31:15:52:d0:d5:6b:74:5c:33:fe:db:34:ef: 57:cc:6a:34:ec:34:0d:d3:92:31:c4:7e:e5:c8:e2: ec:7e:5b:a4:8a:47:3a:96:86:a4:4a:8e:2d:68:86: ed:5e:64:f2:a6:f8:63:73:55:a0:0f:68:9a:33:83: 1c:54:0e:33:a0:13:15:f3:8e:e7:d4:42:ea:82:af: a8:85:41:a5:1a:0c:1c:f7:07:10:8a:6f:22:4a:50: 88:be:cb:4f:58:6c:44:18:76:0e:84:16:d4:99:79: e5:41:f5:90:fe:ad:44:24:4e:73:f4:a2:61:cd:48: 2f:cd:bc:29:71:55:1e:1c:19:ae:37:8a:0e:5c:bc: d1:55:6c:92:85:bc:f7:6d:54:80:65:59:ad:fe:30: b4:29:c6:df:92:57:29:27:b6:3e:cc:59:6e:91:71: a5:2d:bb:18:41:bb:2e:9a:a3:88:b5:5c:2f:1b:67: ba:17:3e:2d:82:73:b5:21:8b:4a:a1:10:f1:a5:0f: 59:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:31:B1:A2:62:BE:C2:0A:38:EC:69:B0:30:2C:01:11:79:91:8F:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/caa2d549-4016-330e-806a-a66db5f6ef79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:69:7b:18:77:82:e8:be:87:11:a0:d1:18:62:34:8e:a8:bc: 66:b4:5d:70:45:d0:db:63:3a:db:f6:82:74:c8:41:f7:5a:c4: e6:43:bc:56:63:63:f0:88:5c:b0:9b:d5:29:04:f7:a8:56:db: 57:86:42:82:1f:1a:9e:85:a1:7d:95:2a:72:16:41:4e:59:ec: a5:a7:cb:bb:0f:66:c5:11:2d:0e:c3:c3:3b:24:30:0e:b5:91: 9b:59:66:32:f5:b1:91:3b:31:d0:ea:4b:75:72:f5:a7:11:d7: f2:d2:fb:01:e3:13:92:35:19:65:73:ad:da:d4:67:3d:6b:a5: d6:23:65:02:85:38:2a:91:0c:87:65:a2:e3:fd:3a:37:81:71: 6a:37:a5:4e:b8:8d:15:02:28:e3:9c:b8:2b:2a:ef:16:21:ff: 68:0e:b0:a4:f1:56:75:04:d7:7c:e1:5d:10:00:b3:a5:60:fd: bc:fb:2e:4e:84:f2:d3:b5:47:2e:4e:d8:bc:ab:f5:10:56:a4: 83:ee:53:6f:ae:e3:dd:46:88:e2:a4:53:0f:af:f5:d4:1e:3f: 50:75:6c:50:27:2d:2e:39:6a:a4:2d:a9:64:01:de:a4:b9:75: 62:4d:a8:c0:28:f2:3d:02:ea:32:d2:2a:bd:50:4e:2a:7c:aa: 4d:82:b2:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3TWwwO/6geqK/YboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDUxNDAxMDAyNVoXDTI2MDgxMjAxMDAyNVowLzEtMCsGA1UEAxMk YjczODk0ZTUtMjVlYS00ODJjLWE2Y2QtMWJkZmI1NmNiMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfhsdtLc2yQIp3fTNiKoi0EdQCrGjCmgYBW3 rLPqnXRMpVMVAtx9kQSve8IMfCD1s2OjEfEwd2YlCviT1zEVUtDVa3RcM/7bNO9X zGo07DQN05IxxH7lyOLsflukikc6loakSo4taIbtXmTypvhjc1WgD2iaM4McVA4z oBMV847n1ELqgq+ohUGlGgwc9wcQim8iSlCIvstPWGxEGHYOhBbUmXnlQfWQ/q1E JE5z9KJhzUgvzbwpcVUeHBmuN4oOXLzRVWyShbz3bVSAZVmt/jC0KcbfklcpJ7Y+ zFlukXGlLbsYQbsumqOItVwvG2e6Fz4tgnO1IYtKoRDxpQ9ZqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0xsaJivsIKOOxpsDAsARF5kY+gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvY2FhMmQ1NDktNDAxNi0z MzBlLTgwNmEtYTY2ZGI1ZjZlZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBpexh3gui+hxGg0RhiNI6ovGa0XXBF0NtjOtv2gnTIQfdaxOZDvFZj Y/CIXLCb1SkE96hW21eGQoIfGp6FoX2VKnIWQU5Z7KWny7sPZsURLQ7DwzskMA61 kZtZZjL1sZE7MdDqS3Vy9acR1/LS+wHjE5I1GWVzrdrUZz1rpdYjZQKFOCqRDIdl ouP9OjeBcWo3pU64jRUCKOOcuCsq7xYh/2gOsKTxVnUE13zhXRAAs6Vg/bz7Lk6E 8tO1Ry5O2Lyr9RBWpIPuU2+u491GiOKkUw+v9dQeP1B1bFAnLS45aqQtqWQB3qS5 dWJNqMAo8j0C6jLSKr1QTip8qk2CssY= -----END CERTIFICATE-----Generated at Thu May 28 10:32:11 2026 by rpki-client