$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/b5ca30b5-ebfd-33ea-9d6a-6bbdadcec801.roa File: b5ca30b5-ebfd-33ea-9d6a-6bbdadcec801.roa (raw, json) Hash identifier: hHbsv6K9hQTXumWbwFFShGQvoFDpveF6/QU/CWM/9yU= Subject key identifier: 9D:45:18:2E:8D:71:9E:33:CD:D4:F3:C8:34:60:DC:C4:1B:BE:D8:7F Certificate issuer: /CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Certificate serial: 010D0C9F4328584F23CE78FC2FC7DE6140CDF200 Authority key identifier: 52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/b5ca30b5-ebfd-33ea-9d6a-6bbdadcec801.roa Signing time: Fri 11 Sep 2026 13:24:46 +0000 ROA not before: Fri 11 Sep 2026 13:24:46 +0000 ROA not after: Thu 10 Dec 2026 14:24:46 +0000 asID: 4983 IP address blocks: 146.152.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:ce:78:fc:2f:c7:de:61:40:cd:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=704a761f-b71a-4fa2-b0e7-db5278e23dc3 Validity Not Before: Sep 11 13:24:46 2026 GMT Not After : Dec 10 14:24:46 2026 GMT Subject: CN=b1bbb10d-14a5-407e-bb5c-196ee923f5de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f2:55:dc:17:07:8c:0d:30:5d:74:52:af:8f: 9c:64:b7:24:2d:8b:5f:76:ec:0b:55:0e:ec:89:a7: 25:03:63:3c:fb:d3:97:ce:40:fa:94:0d:1a:84:c6: 7f:f6:4d:6f:96:a6:12:cc:63:e1:01:58:b7:3e:98: a6:31:08:86:ea:9d:a5:f5:de:bd:eb:82:47:7c:54: 2a:6e:5f:d4:a9:de:6d:e8:35:e8:d9:73:4d:e7:3b: 77:eb:30:ae:98:6d:f0:b1:e5:9c:f7:c7:20:2d:0a: 2c:80:2d:5e:8c:9f:2a:a4:af:05:c7:24:c4:5e:d7: 99:b1:9f:3e:3d:d7:b5:b9:d0:e8:fc:b7:14:f1:37: 1b:83:15:83:99:ff:f0:81:27:c2:59:20:8e:bb:c4: ac:f0:75:2d:28:2d:f9:3b:e1:4c:14:43:8d:df:5a: 22:bd:fd:d2:46:41:29:8f:c6:c4:10:53:a3:e5:5c: 22:0f:b4:f8:cf:87:a8:5c:e8:84:b0:d9:32:04:2c: be:70:3d:22:10:54:28:35:cd:5d:17:65:c1:ac:76: f5:39:c7:1b:78:cd:07:07:2f:46:b5:c5:1e:d7:a5: 10:0e:77:99:e5:68:62:25:7d:95:bc:c1:63:37:7d: 78:7b:f3:56:a2:2c:c8:a0:3d:06:58:61:3d:72:3b: f7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:45:18:2E:8D:71:9E:33:CD:D4:F3:C8:34:60:DC:C4:1B:BE:D8:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/b5ca30b5-ebfd-33ea-9d6a-6bbdadcec801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3/704a761f-b71a-4fa2-b0e7-db5278e23dc3.crl X509v3 Authority Key Identifier: keyid:52:2D:D6:6B:87:05:06:9B:E2:44:3E:8D:41:CB:B5:37:CC:38:31:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/704a761f-b71a-4fa2-b0e7-db5278e23dc3.cer sbgp-ipAddrBlock: critical IPv4: 146.152.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:f5:ec:f1:84:a0:2f:4d:17:56:df:5c:3b:e0:02:70:ae:e1: b4:21:45:85:73:55:f8:87:da:51:68:5e:5a:95:db:17:70:33: 46:83:5b:09:a9:e0:a3:20:ac:cc:ca:1a:53:0e:6b:d7:76:10: 25:14:56:ec:ae:4b:4a:6f:dc:77:90:33:04:a0:3e:d2:64:59: a8:0b:8c:9b:5d:af:19:02:9f:5e:63:91:af:4b:4c:ef:ba:91: c7:27:37:bb:45:da:23:1b:55:77:3d:2b:94:ff:d6:c1:38:22: 7b:98:7f:5e:94:88:69:91:1c:34:0b:05:4d:f5:17:00:87:c4: 39:e7:fb:5f:21:13:32:44:94:79:33:aa:52:ac:41:c2:46:5b: e9:ad:89:62:73:d0:9b:89:cf:fa:65:c5:61:7d:bb:f0:8d:89: 10:b8:c3:ee:e6:91:ca:4b:ea:07:c3:ca:a1:88:0c:78:ab:da: 8f:d0:6f:4c:11:35:42:59:a5:a2:fd:64:00:30:b9:4d:68:b6: 03:7e:88:cf:de:fa:35:92:e4:c6:b6:ac:2d:18:46:63:4a:57: 39:c8:6d:98:4b:88:4d:8d:ae:46:e1:1c:0f:c4:c5:fa:c5:95: ea:bd:26:2e:7e:95:a0:52:72:f1:8f:cf:d0:69:43:17:f1:86: 5e:37:21:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jznj8L8feYUDN8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzA0YTc2MWYtYjcxYS00ZmEyLWIwZTctZGI1Mjc4ZTIz ZGMzMB4XDTI2MDkxMTEzMjQ0NloXDTI2MTIxMDE0MjQ0NlowLzEtMCsGA1UEAxMk YjFiYmIxMGQtMTRhNS00MDdlLWJiNWMtMTk2ZWU5MjNmNWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvJV3BcHjA0wXXRSr4+cZLckLYtfduwLVQ7s iaclA2M8+9OXzkD6lA0ahMZ/9k1vlqYSzGPhAVi3PpimMQiG6p2l9d6964JHfFQq bl/Uqd5t6DXo2XNN5zt36zCumG3wseWc98cgLQosgC1ejJ8qpK8FxyTEXteZsZ8+ Pde1udDo/LcU8TcbgxWDmf/wgSfCWSCOu8Ss8HUtKC35O+FMFEON31oivf3SRkEp j8bEEFOj5VwiD7T4z4eoXOiEsNkyBCy+cD0iEFQoNc1dF2XBrHb1OccbeM0HBy9G tcUe16UQDneZ5WhiJX2VvMFjN314e/NWoizIoD0GWGE9cjv3YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1FGC6NcZ4zzdTzyDRg3MQbvth/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDRh NzYxZi1iNzFhLTRmYTItYjBlNy1kYjUyNzhlMjNkYzMvYjVjYTMwYjUtZWJmZC0z M2VhLTlkNmEtNmJiZGFkY2VjODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzA0YTc2MWYtYjcxYS00ZmEyLWIw ZTctZGI1Mjc4ZTIzZGMzLzcwNGE3NjFmLWI3MWEtNGZhMi1iMGU3LWRiNTI3OGUy M2RjMy5jcmwwHwYDVR0jBBgwFoAUUi3Wa4cFBpviRD6NQcu1N8w4MZcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDRhNzYxZi1iNzFhLTRmYTItYjBlNy1kYjUy NzhlMjNkYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkpjQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB317PGEoC9NF1bfXDvgAnCu4bQhRYVzVfiH2lFoXlqV2xdwM0aDWwmp 4KMgrMzKGlMOa9d2ECUUVuyuS0pv3HeQMwSgPtJkWagLjJtdrxkCn15jka9LTO+6 kccnN7tF2iMbVXc9K5T/1sE4InuYf16UiGmRHDQLBU31FwCHxDnn+18hEzJElHkz qlKsQcJGW+mtiWJz0JuJz/plxWF9u/CNiRC4w+7mkcpL6gfDyqGIDHir2o/Qb0wR NUJZpaL9ZAAwuU1otgN+iM/e+jWS5Ma2rC0YRmNKVznIbZhLiE2NrkbhHA/ExfrF leq9Ji5+laBScvGPz9BpQxfxhl43Ifc= -----END CERTIFICATE-----Generated at Wed Sep 23 01:10:52 2026 by rpki-client