$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/caa2d549-4016-330e-806a-a66db5f6ef79.roa File: caa2d549-4016-330e-806a-a66db5f6ef79.roa (raw, json) Hash identifier: 6tGeoF/OVdRiG6LkcTa+oFvUXsXWDtYDTTmpP3+Ndlk= Subject key identifier: E1:82:D2:12:02:DA:25:F4:59:AB:FA:3B:2F:8C:EB:1B:D1:C5:B6:DB Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Certificate serial: 010D0C9F4328584CF2BCEF9E84CED5F068F7B370 Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/caa2d549-4016-330e-806a-a66db5f6ef79.roa Signing time: Sun 22 Feb 2026 14:00:41 +0000 ROA not before: Sun 22 Feb 2026 14:00:41 +0000 ROA not after: Sat 23 May 2026 13:00:41 +0000 asID: 9304 IP address blocks: 152.232.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f2:bc:ef:9e:84:ce:d5:f0:68:f7:b3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5 Validity Not Before: Feb 22 14:00:41 2026 GMT Not After : May 23 13:00:41 2026 GMT Subject: CN=8a73dc49-0341-4dc8-9ce8-f9fe51a79f7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3a:91:97:4b:cc:a9:8c:25:87:98:75:f8:48: a3:b4:ba:c7:04:45:6f:18:df:bb:9f:79:39:b1:73: 27:0a:9b:9f:bb:43:98:3b:9e:26:57:e3:48:fe:71: 94:f7:e9:2b:b5:eb:8c:c0:86:74:06:f9:75:28:27: d5:6d:98:8d:6d:b0:e1:64:de:45:5e:22:1a:11:49: 0b:3f:f7:bf:08:29:0d:35:20:c6:3f:36:c8:b9:e0: fc:7b:8c:21:03:c1:3f:66:73:ba:1b:02:b0:ff:42: dc:01:4f:14:76:9c:99:e7:a7:26:86:a1:8e:81:2e: 6b:35:da:13:08:49:72:3f:72:25:51:e5:87:22:71: 36:bb:d0:51:9a:bd:6f:bc:31:7c:00:12:3a:8a:5e: 49:ea:4a:f1:e6:99:75:32:85:b4:85:4f:1d:8c:ee: f1:a4:26:4d:3b:05:6a:03:e9:c2:62:de:a4:f9:eb: bd:96:de:b3:0a:4a:c6:f6:cf:a4:93:0f:95:e9:33: 5e:05:51:4a:d8:48:19:45:53:a3:de:cd:bf:69:f5: 31:ca:6a:a0:80:49:5b:ee:74:e9:ce:24:be:8d:1c: f8:1c:b0:bb:b9:fe:1c:4c:9d:6e:ea:0f:ad:59:00: 5d:e9:6a:6d:e0:93:fb:40:2d:68:de:c6:97:1f:92: 65:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:82:D2:12:02:DA:25:F4:59:AB:FA:3B:2F:8C:EB:1B:D1:C5:B6:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/caa2d549-4016-330e-806a-a66db5f6ef79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl X509v3 Authority Key Identifier: keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer sbgp-ipAddrBlock: critical IPv4: 152.232.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:68:00:59:e7:1c:89:d4:7e:15:42:ef:89:3f:b0:a1:bf:94: 41:4d:98:52:e2:41:0c:00:6e:48:e3:9e:55:a8:0f:09:e6:a9: 4f:13:af:68:a5:aa:c2:72:da:80:26:cc:ca:9d:c2:8a:7b:e8: cf:50:01:ad:34:bb:3b:6c:71:1c:2a:64:0f:44:e7:b9:69:f7: df:0d:62:f7:30:08:cd:43:a0:a9:a9:d3:86:71:65:97:ff:7a: 9b:40:4b:e9:20:64:a2:07:6a:d8:6f:f7:c0:74:78:be:8c:34: 7e:2b:2a:bd:39:a4:33:94:02:b7:ec:9e:53:ba:0b:62:a2:41: 7b:a5:85:07:3d:23:c4:bb:a0:d2:da:e0:af:8b:b2:7e:b7:1e: 57:02:76:36:a9:7f:63:ad:48:fd:3a:8c:14:11:c7:f6:da:c6: 88:f0:38:f5:c8:79:a7:8b:8a:c8:90:f5:f9:6d:64:eb:50:5d: c0:f1:15:c0:b5:5f:c1:00:fc:6e:7d:38:b7:ad:de:2d:eb:5f: 00:69:bc:08:77:dc:66:62:02:f8:84:46:2f:44:0b:ab:ef:cb: 76:cb:ec:90:4d:39:05:12:b5:c7:a0:b9:fa:61:b9:85:07:f4: c8:e6:d6:bb:52:41:e6:8f:ef:98:a7:2c:82:44:0f:8a:84:97: 22:b7:1a:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzyvO+ehM7V8Gj3s3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVlZGYwMjEtMDI5OC00YTgxLTk3ZDUtMWM4NWEyZWI0 NWY1MB4XDTI2MDIyMjE0MDA0MVoXDTI2MDUyMzEzMDA0MVowLzEtMCsGA1UEAxMk OGE3M2RjNDktMDM0MS00ZGM4LTljZTgtZjlmZTUxYTc5ZjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzqRl0vMqYwlh5h1+EijtLrHBEVvGN+7n3k5 sXMnCpufu0OYO54mV+NI/nGU9+krteuMwIZ0Bvl1KCfVbZiNbbDhZN5FXiIaEUkL P/e/CCkNNSDGPzbIueD8e4whA8E/ZnO6GwKw/0LcAU8UdpyZ56cmhqGOgS5rNdoT CElyP3IlUeWHInE2u9BRmr1vvDF8ABI6il5J6krx5pl1MoW0hU8djO7xpCZNOwVq A+nCYt6k+eu9lt6zCkrG9s+kkw+V6TNeBVFK2EgZRVOj3s2/afUxymqggElb7nTp ziS+jRz4HLC7uf4cTJ1u6g+tWQBd6Wpt4JP7QC1o3saXH5Jl9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGC0hIC2iX0Wav6Oy+M6xvRxbbbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVk ZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1YTJlYjQ1ZjUvY2FhMmQ1NDktNDAxNi0z MzBlLTgwNmEtYTY2ZGI1ZjZlZjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjVlZGYwMjEtMDI5OC00YTgxLTk3 ZDUtMWM4NWEyZWI0NWY1L2I1ZWRmMDIxLTAyOTgtNGE4MS05N2Q1LTFjODVhMmVi NDVmNS5jcmwwHwYDVR0jBBgwFoAUhAkMQqDZn+raqP3DbTOl+IviID0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iNWVkZjAyMS0wMjk4LTRhODEtOTdkNS0xYzg1 YTJlYjQ1ZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmOj8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhoAFnnHInUfhVC74k/sKG/lEFNmFLiQQwAbkjjnlWoDwnmqU8Tr2il qsJy2oAmzMqdwop76M9QAa00uztscRwqZA9E57lp998NYvcwCM1DoKmp04ZxZZf/ eptAS+kgZKIHathv98B0eL6MNH4rKr05pDOUArfsnlO6C2KiQXulhQc9I8S7oNLa 4K+Lsn63HlcCdjapf2OtSP06jBQRx/baxojwOPXIeaeLisiQ9fltZOtQXcDxFcC1 X8EA/G59OLet3i3rXwBpvAh33GZiAviERi9EC6vvy3bL7JBNOQUStcegufphuYUH 9Mjm1rtSQeaP75inLIJED4qElyK3Gp4= -----END CERTIFICATE-----Generated at Thu Feb 26 23:50:15 2026 by rpki-client