$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/e82092c0-9cb1-37bd-b4dd-0968637d290e.roa File: e82092c0-9cb1-37bd-b4dd-0968637d290e.roa (raw, json) Hash identifier: NTqZZ9cKsXDX46H8yIv69XtYjTAyFMeBzT08ZyFasxA= Subject key identifier: BF:BA:DB:CF:8F:69:14:AF:63:E0:3B:10:88:E9:89:36:D7:93:0B:05 Certificate issuer: /CN=befc84f3-62e1-4148-9252-a5e35e1f9afc Certificate serial: 010D0C9F4328584F27F257951CFBE47BE91248A0 Authority key identifier: DD:01:73:23:06:8C:E9:3A:D3:27:EC:4D:D8:3C:F7:71:0E:9E:A5:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/e82092c0-9cb1-37bd-b4dd-0968637d290e.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 2732 IP address blocks: 107.152.48.0/20 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/befc84f3-62e1-4148-9252-a5e35e1f9afc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/befc84f3-62e1-4148-9252-a5e35e1f9afc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:57:95:1c:fb:e4:7b:e9:12:48:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=befc84f3-62e1-4148-9252-a5e35e1f9afc Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=3fe12566-f3d2-4d67-9334-cd11e5fcee6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:21:5e:67:38:48:5e:09:59:b5:21:f8:32:68: c1:55:90:e6:3f:27:9e:80:ff:bf:8d:14:e0:bc:97: d2:41:52:71:e4:ce:1f:06:34:f4:f4:ab:2e:15:12: a5:5e:f9:83:ad:61:e8:35:7a:ff:3d:7a:4d:74:09: ec:f0:d8:03:3f:d9:6d:76:33:94:32:7f:14:51:7d: 0b:41:72:05:87:a6:70:d1:f2:06:26:ea:d2:57:25: 75:e8:30:b4:2e:ec:80:38:b5:05:9c:4d:6e:e3:3c: 9f:a6:5d:a9:2c:55:06:99:23:47:7e:4d:54:df:46: da:90:eb:07:12:00:18:6c:8c:60:a1:b9:c7:be:8d: df:56:fc:5e:25:a7:30:b4:7c:1f:e8:5e:89:2d:d1: 95:ae:f4:48:be:e8:a7:21:b1:1f:ff:58:1b:87:4b: 6a:d2:42:97:ea:80:3f:c7:b4:74:48:d5:4b:86:eb: 8a:97:3a:b9:73:fb:7a:05:31:ba:05:d9:38:16:f4: e0:2e:0a:30:a9:ec:99:38:95:47:9d:75:b9:27:2e: 86:3a:c3:f0:34:e5:ff:f7:04:c2:a1:6e:09:2f:a2: 4a:b6:71:35:15:c4:ef:a5:49:4e:b3:78:f9:db:90: de:00:88:cc:f2:d2:0a:35:63:5b:56:a8:ec:cd:e8: 5a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BA:DB:CF:8F:69:14:AF:63:E0:3B:10:88:E9:89:36:D7:93:0B:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/e82092c0-9cb1-37bd-b4dd-0968637d290e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc/befc84f3-62e1-4148-9252-a5e35e1f9afc.crl X509v3 Authority Key Identifier: keyid:DD:01:73:23:06:8C:E9:3A:D3:27:EC:4D:D8:3C:F7:71:0E:9E:A5:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/befc84f3-62e1-4148-9252-a5e35e1f9afc.cer sbgp-ipAddrBlock: critical IPv4: 107.152.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b9:32:5b:08:db:37:1b:29:67:a2:d1:5e:db:06:fe:a6:42: 34:2e:62:fb:e8:82:ac:6e:ef:3b:14:b9:79:0c:f5:39:5c:e2: ea:a7:6d:1b:88:23:f0:c5:72:06:3e:23:1b:27:01:bf:67:c1: 00:26:9e:03:49:45:6c:65:8e:21:42:04:bd:7c:c5:44:67:e1: c2:14:dd:63:cf:de:2b:41:b7:ed:cb:d4:c4:d4:4f:30:b8:44: b4:d0:64:cf:bb:63:09:ca:bb:91:19:8a:ee:aa:76:8e:35:3a: 94:2b:44:d2:9e:35:6c:0e:ed:ca:e5:13:b3:f1:05:43:2b:8c: 9a:c4:c1:64:b8:db:6c:c9:ac:8f:51:2a:07:3d:22:08:e8:c4: 9c:ff:79:15:a5:d1:12:9c:dd:7a:57:b6:e4:32:19:8e:3c:f7: ed:2a:70:6d:73:b3:5f:dd:4c:e4:10:a5:b2:a0:21:20:bb:57: 8c:e2:1e:56:11:c7:35:3b:e7:cd:de:17:96:6a:b9:3d:fa:29: 1d:7f:f2:25:27:6d:2b:f4:2b:22:54:68:57:60:27:8a:16:1e: 67:d9:97:c5:80:7e:36:1c:c1:f2:82:18:e7:58:7e:02:a3:7b: 35:9e:d8:b7:fc:5b:bf:7f:ea:c2:dd:31:2a:0f:ba:40:ea:b0: 88:5c:d2:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8leVHPvke+kSSKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmVmYzg0ZjMtNjJlMS00MTQ4LTkyNTItYTVlMzVlMWY5 YWZjMB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk M2ZlMTI1NjYtZjNkMi00ZDY3LTkzMzQtY2QxMWU1ZmNlZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyFeZzhIXglZtSH4MmjBVZDmPyeegP+/jRTg vJfSQVJx5M4fBjT09KsuFRKlXvmDrWHoNXr/PXpNdAns8NgDP9ltdjOUMn8UUX0L QXIFh6Zw0fIGJurSVyV16DC0LuyAOLUFnE1u4zyfpl2pLFUGmSNHfk1U30bakOsH EgAYbIxgobnHvo3fVvxeJacwtHwf6F6JLdGVrvRIvuinIbEf/1gbh0tq0kKX6oA/ x7R0SNVLhuuKlzq5c/t6BTG6Bdk4FvTgLgowqeyZOJVHnXW5Jy6GOsPwNOX/9wTC oW4JL6JKtnE1FcTvpUlOs3j525DeAIjM8tIKNWNbVqjszehajQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+628+PaRSvY+A7EIjpiTbXkwsFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9iZWZj ODRmMy02MmUxLTQxNDgtOTI1Mi1hNWUzNWUxZjlhZmMvZTgyMDkyYzAtOWNiMS0z N2JkLWI0ZGQtMDk2ODYzN2QyOTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYmVmYzg0ZjMtNjJlMS00MTQ4LTky NTItYTVlMzVlMWY5YWZjL2JlZmM4NGYzLTYyZTEtNDE0OC05MjUyLWE1ZTM1ZTFm OWFmYy5jcmwwHwYDVR0jBBgwFoAU3QFzIwaM6TrTJ+xN2Dz3cQ6epVYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9iZWZjODRmMy02MmUxLTQxNDgtOTI1Mi1hNWUz NWUxZjlhZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEa5gwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG5MlsI2zcbKWei0V7bBv6mQjQuYvvogqxu7zsUuXkM9Tlc4uqnbRuI I/DFcgY+IxsnAb9nwQAmngNJRWxljiFCBL18xURn4cIU3WPP3itBt+3L1MTUTzC4 RLTQZM+7YwnKu5EZiu6qdo41OpQrRNKeNWwO7crlE7PxBUMrjJrEwWS422zJrI9R Kgc9IgjoxJz/eRWl0RKc3XpXtuQyGY489+0qcG1zs1/dTOQQpbKgISC7V4ziHlYR xzU7583eF5ZquT36KR1/8iUnbSv0KyJUaFdgJ4oWHmfZl8WAfjYcwfKCGOdYfgKj ezWe2Lf8W79/6sLdMSoPukDqsIhc0uc= -----END CERTIFICATE-----Generated at Tue Sep 22 09:18:58 2026 by rpki-client