$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa File: a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa (raw, json) Hash identifier: nXxh1eSRTzU63WZ6LBbtMPMzM5xmoZwh2ES0WOseyio= Subject key identifier: 2A:97:29:92:26:47:B8:CE:D6:97:2E:93:80:97:98:84:91:3C:88:91 Certificate issuer: /CN=5a154205-b480-44eb-8ce6-252aa97d28bd Certificate serial: 010D0C9F4328584F8F830B7A46C1BAA2BED20280 Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa Signing time: Tue 20 Oct 2026 03:20:05 +0000 ROA not before: Tue 20 Oct 2026 03:20:05 +0000 ROA not after: Sun 13 Dec 2026 14:00:12 +0000 asID: 138415 IP address blocks: 43.225.124.0/22 maxlen: 32 43.229.112.0/22 maxlen: 32 43.240.236.0/22 maxlen: 32 43.243.188.0/22 maxlen: 32 43.249.172.0/22 maxlen: 32 45.114.104.0/22 maxlen: 32 103.37.0.0/22 maxlen: 32 103.39.16.0/22 maxlen: 32 103.41.4.0/22 maxlen: 32 103.44.88.0/22 maxlen: 32 103.48.132.0/22 maxlen: 32 103.54.60.0/22 maxlen: 32 103.199.100.0/22 maxlen: 32 137.59.16.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 12 Nov 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:83:0b:7a:46:c1:ba:a2:be:d2:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd Validity Not Before: Oct 20 03:20:05 2026 GMT Not After : Dec 13 14:00:12 2026 GMT Subject: CN=a94fd8e2-633b-455a-a79d-c213870682d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:90:fa:4c:a8:db:ff:a8:74:7b:b8:a5:3a:52: 41:dc:3c:d2:de:30:f1:17:7e:03:55:ed:02:81:5c: a3:0f:f8:ec:2d:8e:a7:69:c4:60:b5:35:77:e6:65: 28:cc:90:2b:91:e1:7c:ac:07:35:dd:0c:15:57:c5: 79:88:dd:39:35:c8:77:f0:fa:84:af:08:1d:0c:93: da:38:2a:5f:39:88:9f:1f:16:53:85:7c:84:f5:2c: 2e:77:40:4f:88:a9:4b:0f:de:7a:63:44:61:f2:1d: 17:87:69:0d:f8:8b:3b:1e:bc:b0:d9:38:d2:b0:1c: ef:97:77:c1:ec:e1:cd:43:56:ac:62:68:e2:e5:89: 6e:1b:e2:d5:ed:94:8b:21:51:26:32:96:42:7e:62: dc:af:0b:51:dd:0e:f6:04:82:d1:97:09:73:bd:15: 52:56:9b:1e:84:22:18:9f:73:b3:91:24:7d:7d:f5: 64:0e:82:95:a7:6b:94:18:5a:ae:30:84:af:f1:ed: 9d:cb:f0:0b:5d:0d:ee:f4:24:eb:ef:bb:59:08:29: 2c:4b:b5:5c:71:1d:df:44:85:b5:8a:aa:9d:4b:74: 81:58:7e:19:62:d1:54:32:45:7e:21:18:26:71:82: 97:48:dd:93:38:56:01:7f:12:10:8e:34:e0:2d:01: 0c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:97:29:92:26:47:B8:CE:D6:97:2E:93:80:97:98:84:91:3C:88:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl X509v3 Authority Key Identifier: keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer sbgp-ipAddrBlock: critical IPv4: 43.225.124.0/22 43.229.112.0/22 43.240.236.0/22 43.243.188.0/22 43.249.172.0/22 45.114.104.0/22 103.37.0.0/22 103.39.16.0/22 103.41.4.0/22 103.44.88.0/22 103.48.132.0/22 103.54.60.0/22 103.199.100.0/22 137.59.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:cd:62:81:d5:68:29:5a:9f:59:60:b7:4f:f9:be:d5:35:b9: 3c:54:e3:a5:24:ae:b9:3b:ce:53:92:6e:ab:10:6e:ab:16:eb: 28:28:b3:c4:ac:90:e2:92:c9:25:fa:53:68:72:ce:d2:e4:7b: e7:b3:a6:38:b4:45:98:b9:12:71:81:a8:d4:d8:86:7e:2e:07: e3:61:0f:9b:56:cd:84:4d:12:cd:6d:be:85:b1:64:d2:c1:f0: 6e:cd:db:2c:17:57:8f:af:6e:dc:5e:17:a7:24:08:37:66:c0: f3:1e:17:8d:ad:21:98:3b:f9:ed:40:91:f7:29:d6:83:db:32: 94:69:7b:bd:74:d4:58:d9:2a:d9:f8:b4:72:b5:92:ef:a4:d2: 4a:f5:b2:9e:bc:a5:93:c5:44:16:e0:e8:92:2c:fb:6e:38:99: a0:be:3e:a3:6a:83:2f:e4:b5:a3:63:07:29:42:2f:fb:dc:fe: 62:ee:50:f1:ad:fb:c1:52:85:72:2e:9c:6b:a2:ad:9e:2d:ee: 9d:d4:29:c0:9a:fd:65:6e:0c:2c:a6:7c:01:e0:91:c7:c1:0d: 2b:36:87:de:ce:ff:59:e5:a2:c4:26:f9:2d:02:9b:f6:5c:03: 28:04:fc:b9:e4:6f:bd:97:97:df:d8:e7:f9:2f:62:44:a5:75: 70:cf:b5:1c -----BEGIN CERTIFICATE----- MIIGkTCCBXmgAwIBAgIUAQ0Mn0MoWE+Pgwt6RsG6or7SAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWExNTQyMDUtYjQ4MC00NGViLThjZTYtMjUyYWE5N2Qy OGJkMB4XDTI2MTAyMDAzMjAwNVoXDTI2MTIxMzE0MDAxMlowLzEtMCsGA1UEAxMk YTk0ZmQ4ZTItNjMzYi00NTVhLWE3OWQtYzIxMzg3MDY4MmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5D6TKjb/6h0e7ilOlJB3DzS3jDxF34DVe0C gVyjD/jsLY6nacRgtTV35mUozJArkeF8rAc13QwVV8V5iN05Nch38PqErwgdDJPa OCpfOYifHxZThXyE9Swud0BPiKlLD956Y0Rh8h0Xh2kN+Is7Hryw2TjSsBzvl3fB 7OHNQ1asYmji5YluG+LV7ZSLIVEmMpZCfmLcrwtR3Q72BILRlwlzvRVSVpsehCIY n3OzkSR9ffVkDoKVp2uUGFquMISv8e2dy/ALXQ3u9CTr77tZCCksS7VccR3fRIW1 iqqdS3SBWH4ZYtFUMkV+IRgmcYKXSN2TOFYBfxIQjjTgLQEMIwIDAQABo4IDozCC A58wHQYDVR0OBBYEFCqXKZImR7jO1pcuk4CXmISRPIiRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1 NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJhYTk3ZDI4YmQvYTgzZjUwOGItMDFmMy0z YjZkLTg2YmYtNGJjNWE3YTcxY2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNWExNTQyMDUtYjQ4MC00NGViLThj ZTYtMjUyYWE5N2QyOGJkLzVhMTU0MjA1LWI0ODAtNDRlYi04Y2U2LTI1MmFhOTdk MjhiZC5jcmwwHwYDVR0jBBgwFoAUZ0jHwigOJcT/6bz7JSsbuo0vU8UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi81YTE1NDIwNS1iNDgwLTQ0ZWItOGNlNi0yNTJh YTk3ZDI4YmQuY2VyMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQCK+F8AwQC K+VwAwQCK/DsAwQCK/O8AwQCK/msAwQCLXJoAwQCZyUAAwQCZycQAwQCZykEAwQC ZyxYAwQCZzCEAwQCZzY8AwQCZ8dkAwQCiTsQMFQGA1UdIAEB/wRKMEgwRgYIKwYB BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKLNYoHVaClan1lg t0/5vtU1uTxU46Ukrrk7zlOSbqsQbqsW6ygos8SskOKSySX6U2hyztLke+ezpji0 RZi5EnGBqNTYhn4uB+NhD5tWzYRNEs1tvoWxZNLB8G7N2ywXV4+vbtxeF6ckCDdm wPMeF42tIZg7+e1Akfcp1oPbMpRpe7101FjZKtn4tHK1ku+k0kr1sp68pZPFRBbg 6JIs+244maC+PqNqgy/ktaNjBylCL/vc/mLuUPGt+8FShXIunGuirZ4t7p3UKcCa /WVuDCymfAHgkcfBDSs2h97O/1nlosQm+S0Cm/ZcAygE/Lnkb72Xl9/Y5/kvYkSl dXDPtRw= -----END CERTIFICATE-----Generated at Tue Nov 10 23:24:22 2026 by rpki-client