$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/5148236d-6dcf-3d81-bb39-4975817cb970.roa File: 5148236d-6dcf-3d81-bb39-4975817cb970.roa (raw, json) Hash identifier: pyQx0hI7oNvVd0LH5Jy0TRa4tCtck9YSVLwRu1HFBsQ= Subject key identifier: F5:BC:13:83:A4:7D:04:2E:B5:ED:59:2A:93:9D:B8:9F:D8:87:23:45 Certificate issuer: /CN=b89f752a-b36c-4af5-938d-969edb017937 Certificate serial: 010D0C9F4328584CB981CC892BDC050064C1FA80 Authority key identifier: BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/5148236d-6dcf-3d81-bb39-4975817cb970.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 9025 IP address blocks: 153.46.28.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:cc:89:2b:dc:05:00:64:c1:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b89f752a-b36c-4af5-938d-969edb017937 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=848d1058-2716-4e87-a976-986bd1571c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a0:5d:44:12:10:2e:d2:50:4d:4a:de:2d:74: f3:f7:14:21:a6:6c:5a:e8:59:44:72:08:73:47:91: 2f:35:81:6a:e9:45:c3:12:d4:25:a5:76:6c:fd:d8: cf:a9:5c:55:1c:f3:90:f0:0a:fa:07:a5:bb:c4:fd: 1f:8d:8e:24:56:1c:67:d7:b7:74:6e:5c:b7:55:75: 09:51:53:46:42:30:d2:97:5f:75:0d:08:0d:dc:b2: 28:ea:98:54:05:7d:49:1d:95:db:df:d8:08:75:dd: 83:78:63:99:d1:62:1a:74:24:df:97:33:d6:58:64: 77:80:e0:5e:95:09:2c:1a:d1:f4:d0:9e:fb:66:93: 75:ac:d4:12:7c:de:5e:3e:4c:05:b5:06:90:16:71: bd:3c:ea:b1:02:77:6f:3e:33:51:b9:e4:d4:ed:ac: 0e:16:bb:cc:d2:ae:7b:58:84:fe:69:2b:c1:ec:e5: 3c:f8:9c:5b:51:fa:a7:eb:fa:24:8d:c7:83:7c:ff: 08:41:ef:49:d1:38:81:cf:fa:4d:b4:7b:c8:97:23: 3f:43:50:52:61:ef:92:24:07:cc:19:1d:cf:cf:a7: 7a:50:09:cf:1d:d8:39:dd:70:c3:dd:2c:fd:19:27: 27:48:82:d2:9c:37:b8:9e:3e:2d:93:be:fd:d8:ec: cd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:BC:13:83:A4:7D:04:2E:B5:ED:59:2A:93:9D:B8:9F:D8:87:23:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/5148236d-6dcf-3d81-bb39-4975817cb970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937/b89f752a-b36c-4af5-938d-969edb017937.crl X509v3 Authority Key Identifier: keyid:BA:89:D4:33:8F:86:4A:CE:88:47:57:49:F2:2B:84:6F:6B:2E:F9:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b89f752a-b36c-4af5-938d-969edb017937.cer sbgp-ipAddrBlock: critical IPv4: 153.46.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:1a:11:91:e3:b2:82:5f:b0:2e:ef:b5:60:91:33:34:93:25: af:64:f5:73:45:f6:5d:00:5e:4a:a4:cc:1e:26:17:ec:14:3a: 49:b8:9d:06:88:a3:78:f6:6c:ad:13:8b:53:ba:12:ef:7d:5c: eb:a2:40:f2:0d:61:ae:b4:f1:a1:75:d8:6f:7d:23:b0:fe:c8: 32:f2:92:57:0a:be:e2:1b:c1:b2:f3:17:04:6a:9b:3b:d9:11: d7:80:43:81:8a:38:2f:50:5b:1e:2e:1a:9f:b4:ca:f3:66:be: 5b:9f:b1:e0:32:e5:6c:a1:41:e5:c9:89:9b:b1:d6:0d:33:c1: 2a:f3:58:5a:87:54:fb:9f:16:5c:3c:6a:fb:ed:9e:69:03:7e: cd:b3:5f:36:18:3d:38:56:0b:bc:e9:ec:1d:1b:b7:f8:69:46: 1d:21:f6:2f:5b:63:e3:fc:4d:4f:48:12:ec:1c:02:41:0a:4a: 2c:11:14:7a:de:c6:e0:1e:4d:4b:29:8b:7a:19:20:76:7a:a4: 32:f7:33:ec:4d:df:53:3a:3a:01:a1:51:45:ab:93:4a:a4:cf: db:21:cb:9a:99:3f:d4:ce:a9:c4:61:2d:9a:92:b4:5b:07:87: 28:f7:88:9e:ec:53:6d:ad:ec:9a:ac:93:a5:1c:71:60:12:35: af:e7:ef:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gcyJK9wFAGTB+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg5Zjc1MmEtYjM2Yy00YWY1LTkzOGQtOTY5ZWRiMDE3 OTM3MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk ODQ4ZDEwNTgtMjcxNi00ZTg3LWE5NzYtOTg2YmQxNTcxYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKBdRBIQLtJQTUreLXTz9xQhpmxa6FlEcghz R5EvNYFq6UXDEtQlpXZs/djPqVxVHPOQ8Ar6B6W7xP0fjY4kVhxn17d0bly3VXUJ UVNGQjDSl191DQgN3LIo6phUBX1JHZXb39gIdd2DeGOZ0WIadCTflzPWWGR3gOBe lQksGtH00J77ZpN1rNQSfN5ePkwFtQaQFnG9POqxAndvPjNRueTU7awOFrvM0q57 WIT+aSvB7OU8+JxbUfqn6/okjceDfP8IQe9J0TiBz/pNtHvIlyM/Q1BSYe+SJAfM GR3Pz6d6UAnPHdg53XDD3Sz9GScnSILSnDe4nj4tk7792OzN3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPW8E4OkfQQute1ZKpOduJ/YhyNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iODlm NzUyYS1iMzZjLTRhZjUtOTM4ZC05NjllZGIwMTc5MzcvNTE0ODIzNmQtNmRjZi0z ZDgxLWJiMzktNDk3NTgxN2NiOTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjg5Zjc1MmEtYjM2Yy00YWY1LTkz OGQtOTY5ZWRiMDE3OTM3L2I4OWY3NTJhLWIzNmMtNGFmNS05MzhkLTk2OWVkYjAx NzkzNy5jcmwwHwYDVR0jBBgwFoAUuonUM4+GSs6IR1dJ8iuEb2su+c8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iODlmNzUyYS1iMzZjLTRhZjUtOTM4ZC05Njll ZGIwMTc5MzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCmS4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYaEZHjsoJfsC7vtWCRMzSTJa9k9XNF9l0AXkqkzB4mF+wUOkm4nQaI o3j2bK0Ti1O6Eu99XOuiQPINYa608aF12G99I7D+yDLyklcKvuIbwbLzFwRqmzvZ EdeAQ4GKOC9QWx4uGp+0yvNmvlufseAy5WyhQeXJiZux1g0zwSrzWFqHVPufFlw8 avvtnmkDfs2zXzYYPThWC7zp7B0bt/hpRh0h9i9bY+P8TU9IEuwcAkEKSiwRFHre xuAeTUspi3oZIHZ6pDL3M+xN31M6OgGhUUWrk0qkz9shy5qZP9TOqcRhLZqStFsH hyj3iJ7sU22t7Jqsk6UccWASNa/n71k= -----END CERTIFICATE-----Generated at Mon Mar 2 15:44:09 2026 by rpki-client