$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa File: 0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa (raw, json) Hash identifier: h9A3kvyfpPoIaq7cCpS96aJAlPx8cABCVKM3HjoPh1g= Subject key identifier: 1D:B9:88:DB:94:0C:22:7A:1E:69:45:0F:67:82:9E:48:7E:41:8F:99 Certificate issuer: /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Certificate serial: 010D0C9F4328584F63F80FADE28F2EAEBE040180 Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 33442 IP address blocks: 157.235.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:0f:ad:e2:8f:2e:ae:be:04:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=3f761c79-55e6-4d76-905a-d64ae4e1f0b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:b4:4e:33:32:8b:8b:7e:03:3f:75:76:03: 62:c8:8b:21:60:a6:73:ff:b1:b7:5b:cf:15:48:3e: 00:bf:59:01:66:d3:41:a6:72:3e:80:9a:e1:b1:3b: 64:2e:31:2b:f7:f2:37:c0:7a:66:25:82:3f:9a:71: a1:f4:ab:d4:90:15:9d:bb:99:ee:91:f3:66:2c:72: 8c:9f:40:0d:84:cc:0a:3e:6a:2a:3c:b9:56:d1:3b: fb:30:40:99:9b:fb:4a:83:f4:91:32:b8:5a:b9:55: e6:1a:5b:45:a8:c9:4c:f9:45:1e:07:08:ac:34:5a: 9b:95:1b:ad:d1:c3:d7:66:f9:97:2f:a4:94:4e:cb: d3:5f:53:38:b7:28:6c:bb:8a:0b:b5:fa:05:75:23: 46:36:05:d5:c1:56:38:de:04:a0:9b:a5:02:24:58: 1f:cb:ab:1c:d0:fe:90:32:5c:40:ab:98:9f:d1:d9: 64:97:93:0c:2b:93:85:33:5f:9a:23:a1:1e:a7:3d: 31:12:7c:ea:3c:c1:3c:61:20:1d:34:cd:b8:f4:04: e5:1c:18:11:17:1a:e7:e5:99:a0:f2:44:0a:23:28: 20:45:5c:4d:03:b0:a1:4e:04:74:3c:c6:b4:1f:57: 80:2e:ef:3d:9f:24:e1:cf:a6:86:4b:be:24:6d:5f: 50:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:B9:88:DB:94:0C:22:7A:1E:69:45:0F:67:82:9E:48:7E:41:8F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/0b59eb2f-742f-3792-a865-a0be40f1e3ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl X509v3 Authority Key Identifier: keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer sbgp-ipAddrBlock: critical IPv4: 157.235.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b5:04:d3:22:35:73:df:18:11:ee:20:b1:57:d8:5e:a3:61: ed:db:84:c3:15:0f:7c:2c:ef:41:ef:37:b5:03:f1:86:24:0a: bc:e4:c9:6a:8a:9b:76:d4:7a:ef:10:fd:07:77:27:f7:22:ca: 74:65:2c:96:2a:ea:39:b3:ec:91:61:64:ed:a4:28:11:3d:f3: d7:51:61:d4:3d:24:06:0a:44:75:98:1d:c8:f1:09:02:0c:b6: 68:5d:e8:24:ca:f7:3b:5e:bb:64:d5:9a:95:a5:bd:eb:23:74: 40:48:f7:8d:1b:25:eb:6e:f8:88:c0:98:9e:e2:69:1f:39:00: 1d:9d:30:eb:74:56:88:99:1b:69:13:a7:0c:3c:93:72:c1:8a: eb:34:21:1e:63:10:01:eb:3a:f7:97:63:85:86:36:83:b3:2d: be:50:f0:f0:8b:a6:eb:a1:2f:45:8d:a2:db:e7:26:e0:eb:a9: f2:0a:d0:c2:5b:f1:3a:8a:d7:9b:0d:9d:43:73:fa:1e:74:75: a9:64:84:3a:20:fe:ab:9e:c5:bc:40:8b:56:91:09:64:81:8a: 4c:24:f1:01:98:49:7b:a7:d1:02:36:3e:fa:32:d4:58:a2:61: ff:ab:21:64:5f:f7:d9:e9:7c:79:cd:3e:e9:3d:06:7b:27:5a: 3a:9a:00:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+A+t4o8urr4EAYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy ZTA2MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk M2Y3NjFjNzktNTVlNi00ZDc2LTkwNWEtZDY0YWU0ZTFmMGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhW0TjMyi4t+Az91dgNiyIshYKZz/7G3W88V SD4Av1kBZtNBpnI+gJrhsTtkLjEr9/I3wHpmJYI/mnGh9KvUkBWdu5nukfNmLHKM n0ANhMwKPmoqPLlW0Tv7MECZm/tKg/SRMrhauVXmGltFqMlM+UUeBwisNFqblRut 0cPXZvmXL6SUTsvTX1M4tyhsu4oLtfoFdSNGNgXVwVY43gSgm6UCJFgfy6sc0P6Q MlxAq5if0dlkl5MMK5OFM1+aI6Eepz0xEnzqPME8YSAdNM249ATlHBgRFxrn5Zmg 8kQKIyggRVxNA7ChTgR0PMa0H1eALu89nyThz6aGS74kbV9QBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB25iNuUDCJ6HmlFD2eCnkh+QY+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvMGI1OWViMmYtNzQyZi0z NzkyLWE4NjUtYTBiZTQwZjFlM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0 YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0 OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnevzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy1BNMiNXPfGBHuILFX2F6jYe3bhMMVD3ws70HvN7UD8YYkCrzkyWqK m3bUeu8Q/Qd3J/ciynRlLJYq6jmz7JFhZO2kKBE989dRYdQ9JAYKRHWYHcjxCQIM tmhd6CTK9zteu2TVmpWlvesjdEBI940bJetu+IjAmJ7iaR85AB2dMOt0VoiZG2kT pww8k3LBius0IR5jEAHrOveXY4WGNoOzLb5Q8PCLpuuhL0WNotvnJuDrqfIK0MJb 8TqK15sNnUNz+h50dalkhDog/quexbxAi1aRCWSBikwk8QGYSXun0QI2Pvoy1Fii Yf+rIWRf99npfHnNPuk9BnsnWjqaAOg= -----END CERTIFICATE-----Generated at Mon Oct 5 06:46:58 2026 by rpki-client