$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa File: a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa (raw, json) Hash identifier: n3JWmLYHbU9Wm3Xl1F/zm81gQUnRQCKNFPnczNEmC/4= Subject key identifier: 98:2D:EA:4E:42:86:6B:DC:94:99:BC:77:E5:4E:6F:4F:B5:CB:6C:3E Certificate issuer: /CN=5a154205-b480-44eb-8ce6-252aa97d28bd Certificate serial: 010D0C9F4328584F2C225D97B52FEE51ED1E1F80 Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa Signing time: Mon 14 Sep 2026 13:00:12 +0000 ROA not before: Mon 14 Sep 2026 13:00:12 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 138415 IP address blocks: 43.225.124.0/22 maxlen: 32 43.229.112.0/22 maxlen: 32 43.240.236.0/22 maxlen: 32 43.243.188.0/22 maxlen: 32 45.114.104.0/22 maxlen: 32 103.37.0.0/22 maxlen: 32 103.39.16.0/22 maxlen: 32 103.44.88.0/22 maxlen: 32 103.48.132.0/22 maxlen: 32 103.54.60.0/22 maxlen: 32 103.199.100.0/22 maxlen: 32 137.59.16.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:22:5d:97:b5:2f:ee:51:ed:1e:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd Validity Not Before: Sep 14 13:00:12 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=706fcdfb-1ad6-45c2-9c7d-f231c6d26f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:02:4f:47:e4:8e:bd:30:f5:e2:23:db:78:f2: 12:26:7a:d5:f0:fa:2e:23:98:cb:21:44:3d:cd:9a: b5:3b:88:a3:40:cd:75:e3:62:59:77:ff:a5:53:a1: 36:9f:ef:68:17:4a:6c:04:65:c4:d0:c8:b9:3c:c1: da:5d:bf:0e:84:0b:64:3c:34:7e:54:dd:db:58:2e: d0:b0:eb:1e:56:d6:0f:87:3c:0c:c7:3f:a5:af:f3: 9f:5c:78:7a:bf:bd:76:9d:a9:87:60:52:61:00:66: 38:3f:2a:7e:37:28:13:ed:91:7a:c8:b2:c3:85:6f: ef:11:25:2c:4f:b2:61:94:57:d4:2f:a3:8a:dc:bd: 1c:19:05:77:0c:70:ca:c5:df:35:d1:54:e8:14:9c: c6:f2:d9:1c:01:70:a9:6c:2a:d5:b4:e7:5a:f8:01: ad:7b:20:28:10:d9:d7:2c:59:32:1f:0c:1c:e8:1b: ad:e3:02:0b:e0:56:bf:7f:d9:b7:48:e4:c6:49:ce: 9c:62:c6:90:c8:c5:41:eb:c8:e7:f1:a6:0a:5f:38: 45:9e:3a:98:08:11:71:02:2e:9d:25:65:32:c2:90: 81:1e:ca:a7:16:a3:fa:46:44:4e:a0:32:c5:eb:f8: 3f:10:6c:03:d0:dd:1f:85:ae:cb:ae:b4:1d:f8:0b: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2D:EA:4E:42:86:6B:DC:94:99:BC:77:E5:4E:6F:4F:B5:CB:6C:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl X509v3 Authority Key Identifier: keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer sbgp-ipAddrBlock: critical IPv4: 43.225.124.0/22 43.229.112.0/22 43.240.236.0/22 43.243.188.0/22 45.114.104.0/22 103.37.0.0/22 103.39.16.0/22 103.44.88.0/22 103.48.132.0/22 103.54.60.0/22 103.199.100.0/22 137.59.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:74:39:1f:1d:98:0f:98:a5:58:f5:77:da:80:44:ed:56:21: 15:32:d4:4b:b7:d6:fc:03:37:b7:32:e1:cc:d2:9d:3e:c1:3c: 28:a9:b7:8f:ee:74:2a:4f:c3:6e:ee:a8:c7:da:b0:ff:9f:fc: 0a:5a:99:da:12:92:b2:d7:1d:01:47:cd:f2:6f:92:e9:29:81: f1:73:19:e7:d8:56:20:fd:f2:eb:e9:a8:87:7f:dc:ae:c9:0f: f3:da:98:21:e6:f5:91:72:a5:1e:d2:4f:a7:9c:d1:8d:3f:d1: 30:cc:92:11:62:32:92:71:c8:da:47:ec:31:2f:a4:1f:00:cd: 44:dc:cf:d9:ca:f8:b5:58:79:f5:69:41:a1:7f:4f:29:1c:19: ad:cd:40:f5:03:b1:0b:50:b7:c8:25:38:90:1e:53:f7:a5:49: 04:af:da:68:aa:1a:19:6d:8f:73:95:21:32:9c:e7:e7:23:5e: c3:40:8b:81:59:ae:e1:13:31:ab:b6:1e:3c:25:2e:31:96:6b: 0a:ba:fc:c9:31:1a:36:5b:dd:c2:09:74:c8:ba:f1:22:64:fd: db:83:17:d8:6a:ce:ac:c6:96:24:ae:4c:dc:1a:53:a1:f1:60: 9f:4b:77:91:89:d7:0d:f2:43:a0:70:69:d0:9e:c5:06:8d:88: 47:fa:0d:6f -----BEGIN CERTIFICATE----- MIIGhTCCBW2gAwIBAgIUAQ0Mn0MoWE8sIl2XtS/uUe0eH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWExNTQyMDUtYjQ4MC00NGViLThjZTYtMjUyYWE5N2Qy OGJkMB4XDTI2MDkxNDEzMDAxMloXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk NzA2ZmNkZmItMWFkNi00NWMyLTljN2QtZjIzMWM2ZDI2ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAJPR+SOvTD14iPbePISJnrV8PouI5jLIUQ9 zZq1O4ijQM1142JZd/+lU6E2n+9oF0psBGXE0Mi5PMHaXb8OhAtkPDR+VN3bWC7Q sOseVtYPhzwMxz+lr/OfXHh6v712namHYFJhAGY4Pyp+NygT7ZF6yLLDhW/vESUs T7JhlFfUL6OK3L0cGQV3DHDKxd810VToFJzG8tkcAXCpbCrVtOda+AGteyAoENnX LFkyHwwc6But4wIL4Fa/f9m3SOTGSc6cYsaQyMVB68jn8aYKXzhFnjqYCBFxAi6d JWUywpCBHsqnFqP6RkROoDLF6/g/EGwD0N0fha7LrrQd+AvLAQIDAQABo4IDlzCC A5MwHQYDVR0OBBYEFJgt6k5ChmvclJm8d+VOb0+1y2w+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1 NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJhYTk3ZDI4YmQvYTgzZjUwOGItMDFmMy0z YjZkLTg2YmYtNGJjNWE3YTcxY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWExNTQyMDUtYjQ4MC00NGViLThj ZTYtMjUyYWE5N2QyOGJkLzVhMTU0MjA1LWI0ODAtNDRlYi04Y2U2LTI1MmFhOTdk MjhiZC5jcmwwHwYDVR0jBBgwFoAUZ0jHwigOJcT/6bz7JSsbuo0vU8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJh YTk3ZDI4YmQuY2VyMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQCK+F8AwQC K+VwAwQCK/DsAwQCK/O8AwQCLXJoAwQCZyUAAwQCZycQAwQCZyxYAwQCZzCEAwQC ZzY8AwQCZ8dkAwQCiTsQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAMB0OR8dmA+YpVj1d9qARO1WIRUy1Eu3 1vwDN7cy4czSnT7BPCipt4/udCpPw27uqMfasP+f/ApamdoSkrLXHQFHzfJvkukp gfFzGefYViD98uvpqId/3K7JD/PamCHm9ZFypR7ST6ec0Y0/0TDMkhFiMpJxyNpH 7DEvpB8AzUTcz9nK+LVYefVpQaF/TykcGa3NQPUDsQtQt8glOJAeU/elSQSv2miq Ghltj3OVITKc5+cjXsNAi4FZruETMau2HjwlLjGWawq6/MkxGjZb3cIJdMi68SJk /duDF9hqzqzGliSuTNwaU6HxYJ9Ld5GJ1w3yQ6BwadCexQaNiEf6DW8= -----END CERTIFICATE-----Generated at Mon Sep 21 17:59:46 2026 by rpki-client