$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa File: dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa (raw, json) Hash identifier: 3HjWOU08TFv19VPGQYmnmbJL19bZFmq1PW2aLe2NDhA= Subject key identifier: 41:60:2D:8E:72:37:0A:88:52:5E:71:5E:33:01:B1:BC:58:BC:FC:F3 Certificate issuer: /CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Certificate serial: 010D0C9F4328584F4976272EBD9BE3E757E34FC0 Authority key identifier: 0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 25697 IP address blocks: 209.151.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:27:2e:bd:9b:e3:e7:57:e3:4f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5ebadbb-b63c-4e95-8e76-fd22cc861311 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c8f6506a-852a-46d6-a061-cbd59ecd946e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:f3:63:e6:ec:c1:be:1b:cd:d4:dc:e5:36: c6:d7:f5:cd:9f:db:6b:a3:7a:9e:8c:f1:bf:37:9b: eb:37:c7:d1:94:a4:eb:ff:63:ac:ba:4b:86:48:ec: cf:ab:f6:cb:05:0e:52:e6:41:c7:62:d0:4b:85:e7: 68:9d:7c:8b:76:3c:5f:39:8f:37:df:e3:89:0f:53: 6b:83:7f:6f:05:3c:58:38:e7:33:90:9c:3f:57:3f: 10:7a:7d:5e:da:b1:d6:44:68:f2:35:ae:da:7c:6f: 3b:9c:e1:39:dc:ca:3f:e6:00:de:10:46:02:45:fe: 1e:21:8e:9e:83:01:c0:ba:b6:c6:c9:61:e9:0c:d6: 26:b6:f8:ba:ff:96:1e:64:76:de:53:ff:28:6d:43: ae:c4:ab:c6:ba:47:c4:61:12:bf:7b:4d:51:20:92: f7:1c:fb:e5:fa:d9:bc:e8:ab:2f:f4:b7:a4:2c:64: d4:c9:fe:3a:66:d6:d4:16:69:e8:37:d9:90:28:9a: b3:2e:9b:33:8c:b5:42:cb:a1:a4:6e:91:ee:39:2a: 2b:74:42:4e:08:b4:dd:e9:31:fb:57:1e:a5:94:22: f8:95:2a:66:e8:db:53:0d:96:72:cd:4b:06:23:76: 59:3c:6d:09:39:85:35:2f:a5:d1:15:7c:9f:5e:66: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:60:2D:8E:72:37:0A:88:52:5E:71:5E:33:01:B1:BC:58:BC:FC:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/dd6bcb4a-b00a-30d9-aee1-f1f87ebfcac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311/d5ebadbb-b63c-4e95-8e76-fd22cc861311.crl X509v3 Authority Key Identifier: keyid:0A:5D:E7:3A:9A:58:CA:C5:9D:F6:05:BC:E3:F2:1E:CC:23:F8:D7:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d5ebadbb-b63c-4e95-8e76-fd22cc861311.cer sbgp-ipAddrBlock: critical IPv4: 209.151.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:f0:4a:66:9b:8a:9f:16:8b:01:bb:b3:2f:46:e5:e6:b4:65: 2d:c4:d3:d2:4f:0f:0a:2e:9b:8f:31:92:5d:a7:1f:92:59:68: 34:66:eb:32:b7:8a:b8:8b:9a:d9:88:77:46:58:53:70:a4:ba: ef:d8:15:fc:af:99:25:ee:11:04:1c:e2:80:cc:df:d4:6b:3d: 58:e2:27:18:10:fb:44:e5:90:b4:f2:ee:ef:62:6a:27:47:d3: 0f:08:e9:f3:ac:ab:90:08:34:3c:34:2c:e8:14:3f:7a:a5:f0: 91:e6:31:13:67:4c:d2:19:0c:ae:5d:fb:df:af:8f:39:12:20: 6f:94:21:8d:58:e6:55:50:01:7d:b2:89:e2:b3:0b:e2:ee:7c: 87:c2:d3:c1:7c:a8:98:38:dc:f6:72:02:51:07:b2:e4:60:a8: af:90:7d:66:99:6b:ff:19:28:e0:b0:e9:ec:06:06:2a:7d:c3: cb:f6:b2:f5:0f:94:09:66:4d:ba:56:9c:a0:ef:8f:58:2b:4a: f5:40:1f:3a:f8:c4:d0:f1:7d:c2:ab:41:6b:95:5b:1f:83:88: 91:d7:35:86:f9:05:fc:db:06:c9:8a:62:a3:28:0b:ad:8f:20: 91:9f:09:37:dc:f7:2a:74:29:ad:52:74:55:03:f4:86:6c:36: 4d:b3:30:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdicuvZvj51fjT8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDVlYmFkYmItYjYzYy00ZTk1LThlNzYtZmQyMmNjODYx MzExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzhmNjUwNmEtODUyYS00NmQ2LWEwNjEtY2JkNTllY2Q5NDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMHzY+bswb4bzdTc5TbG1/XNn9tro3qejPG/ N5vrN8fRlKTr/2OsukuGSOzPq/bLBQ5S5kHHYtBLhedonXyLdjxfOY833+OJD1Nr g39vBTxYOOczkJw/Vz8Qen1e2rHWRGjyNa7afG87nOE53Mo/5gDeEEYCRf4eIY6e gwHAurbGyWHpDNYmtvi6/5YeZHbeU/8obUOuxKvGukfEYRK/e01RIJL3HPvl+tm8 6Ksv9LekLGTUyf46ZtbUFmnoN9mQKJqzLpszjLVCy6GkbpHuOSordEJOCLTd6TH7 Vx6llCL4lSpm6NtTDZZyzUsGI3ZZPG0JOYU1L6XRFXyfXmYgXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFgLY5yNwqIUl5xXjMBsbxYvPzzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kNWVi YWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIyY2M4NjEzMTEvZGQ2YmNiNGEtYjAwYS0z MGQ5LWFlZTEtZjFmODdlYmZjYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDVlYmFkYmItYjYzYy00ZTk1LThl NzYtZmQyMmNjODYxMzExL2Q1ZWJhZGJiLWI2M2MtNGU5NS04ZTc2LWZkMjJjYzg2 MTMxMS5jcmwwHwYDVR0jBBgwFoAUCl3nOppYysWd9gW84/IezCP415QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kNWViYWRiYi1iNjNjLTRlOTUtOGU3Ni1mZDIy Y2M4NjEzMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ZeeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLwSmabip8WiwG7sy9G5ea0ZS3E09JPDwoum48xkl2nH5JZaDRm6zK3 iriLmtmId0ZYU3Ckuu/YFfyvmSXuEQQc4oDM39RrPVjiJxgQ+0TlkLTy7u9iaidH 0w8I6fOsq5AINDw0LOgUP3ql8JHmMRNnTNIZDK5d+9+vjzkSIG+UIY1Y5lVQAX2y ieKzC+LufIfC08F8qJg43PZyAlEHsuRgqK+QfWaZa/8ZKOCw6ewGBip9w8v2svUP lAlmTbpWnKDvj1grSvVAHzr4xNDxfcKrQWuVWx+DiJHXNYb5BfzbBsmKYqMoC62P IJGfCTfc9yp0Ka1SdFUD9IZsNk2zMIc= -----END CERTIFICATE-----Generated at Fri Sep 25 17:31:39 2026 by rpki-client