$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa File: a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa (raw, json) Hash identifier: jgHtE2u3XJnGQFik/d0UR2D/U2Ihrb9tDoX2WPyXhG0= Subject key identifier: 12:71:B1:9E:F5:3A:DD:A9:9D:DD:72:08:F2:AD:6B:CA:D4:13:A7:22 Certificate issuer: /CN=d886f3a2-7325-4b74-8802-19528a9f380c Certificate serial: 010D0C9F4328584F497684A6008BA67EDBFE7B80 Authority key identifier: 70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397735 IP address blocks: 158.51.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:84:a6:00:8b:a6:7e:db:fe:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d886f3a2-7325-4b74-8802-19528a9f380c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=323fbdab-4f44-4b26-b406-5aa8721d1fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:43:d4:3a:2d:01:e4:eb:a5:3f:9b:b5:b2:3e: e1:c5:5f:04:30:80:61:09:8e:0a:9f:51:70:20:ff: 49:90:99:ff:15:ff:d0:a7:f4:53:43:67:bc:4b:88: 09:a1:3e:55:00:98:69:c8:da:b8:b2:37:07:63:f1: db:ba:f5:44:64:0b:03:23:a5:21:74:74:5f:b8:f1: 6f:69:1a:b7:83:a6:44:9b:b7:82:68:6c:14:df:43: 27:9a:44:dd:41:63:e0:3b:08:0e:5d:73:10:51:3b: 57:b6:3f:9b:61:85:df:54:5e:22:1c:3c:28:b0:74: dc:29:6c:34:b3:90:89:14:94:85:7d:23:24:b2:0a: 29:80:66:f7:c9:f9:7c:82:87:f5:d8:62:0f:62:fa: 3c:05:40:86:01:7f:42:95:cf:c7:57:51:c6:67:8c: 9e:bf:6f:a8:23:91:1e:98:1d:c7:68:60:d4:f7:16: ba:08:a3:13:46:73:17:01:8a:ec:c0:0a:62:8f:f4: 51:c0:cb:e5:56:c9:f7:56:d3:ed:fc:eb:0c:65:43: d3:2a:e2:63:c0:d8:ad:99:f1:3d:a7:5d:6f:97:33: c4:80:64:09:0b:56:64:c6:01:9e:0e:bc:a9:02:38: 86:e7:91:05:7f:98:67:b3:45:92:0f:b1:77:63:fd: 90:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:71:B1:9E:F5:3A:DD:A9:9D:DD:72:08:F2:AD:6B:CA:D4:13:A7:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl X509v3 Authority Key Identifier: keyid:70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer sbgp-ipAddrBlock: critical IPv4: 158.51.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:36:20:71:87:02:e6:54:b9:57:35:83:63:32:c1:59:4b:0f: f2:11:a2:f0:4a:14:ab:b0:ee:78:ff:89:46:b8:c8:4a:75:b4: 22:d1:3f:c9:ba:c8:94:c5:c2:bb:8a:ca:af:8c:19:f1:f1:44: d7:eb:cb:ad:9e:73:32:7b:75:93:bd:4b:a1:6c:54:d1:25:98: 01:5e:1a:97:be:f1:81:af:2b:17:27:e4:4f:6d:c4:8c:41:70: 6d:9f:51:fe:9e:ad:45:a4:8a:3b:5c:34:7c:75:75:e4:8f:67: 82:00:ad:51:6a:da:81:a1:11:45:d9:2b:94:16:05:69:46:ef: 03:b0:83:40:94:10:a8:96:08:e9:88:2f:60:0a:04:03:e9:d8: 21:95:cb:29:0e:50:15:8c:6d:26:e7:e8:11:05:3a:05:de:66: cf:c9:72:ac:7a:46:1d:f6:01:67:a9:67:6e:ff:28:0e:3c:bd: 14:cb:13:08:b3:c4:05:41:f7:0d:c1:9c:3e:77:77:aa:84:51: 59:a5:b0:8a:03:86:30:11:49:08:f6:d9:69:b7:97:87:9d:ec: d6:dd:01:56:93:f1:72:c2:f0:a0:5b:81:86:72:7c:50:2a:3b: 4d:45:9e:30:c1:3e:fe:53:f6:44:d2:3d:3e:ce:15:95:8b:c4: 5b:4c:ff:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdoSmAIumftv+e4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NmYzYTItNzMyNS00Yjc0LTg4MDItMTk1MjhhOWYz ODBjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzIzZmJkYWItNGY0NC00YjI2LWI0MDYtNWFhODcyMWQxZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0PUOi0B5OulP5u1sj7hxV8EMIBhCY4Kn1Fw IP9JkJn/Ff/Qp/RTQ2e8S4gJoT5VAJhpyNq4sjcHY/HbuvVEZAsDI6UhdHRfuPFv aRq3g6ZEm7eCaGwU30MnmkTdQWPgOwgOXXMQUTtXtj+bYYXfVF4iHDwosHTcKWw0 s5CJFJSFfSMksgopgGb3yfl8gof12GIPYvo8BUCGAX9Clc/HV1HGZ4yev2+oI5Ee mB3HaGDU9xa6CKMTRnMXAYrswApij/RRwMvlVsn3VtPt/OsMZUPTKuJjwNitmfE9 p11vlzPEgGQJC1ZkxgGeDrypAjiG55EFf5hns0WSD7F3Y/2QSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJxsZ71Ot2pnd1yCPKta8rUE6ciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2 ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUyOGE5ZjM4MGMvYTRhZTFlYmUtOTg1Yy0z M2M4LWFlOTAtOGNhMzM4YTRlYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDg4NmYzYTItNzMyNS00Yjc0LTg4 MDItMTk1MjhhOWYzODBjL2Q4ODZmM2EyLTczMjUtNGI3NC04ODAyLTE5NTI4YTlm MzgwYy5jcmwwHwYDVR0jBBgwFoAUcJut8ULNEhBZHcn7NhsyGUoSs1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUy OGE5ZjM4MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjMsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE42IHGHAuZUuVc1g2MywVlLD/IRovBKFKuw7nj/iUa4yEp1tCLRP8m6 yJTFwruKyq+MGfHxRNfry62eczJ7dZO9S6FsVNElmAFeGpe+8YGvKxcn5E9txIxB cG2fUf6erUWkijtcNHx1deSPZ4IArVFq2oGhEUXZK5QWBWlG7wOwg0CUEKiWCOmI L2AKBAPp2CGVyykOUBWMbSbn6BEFOgXeZs/Jcqx6Rh32AWepZ27/KA48vRTLEwiz xAVB9w3BnD53d6qEUVmlsIoDhjARSQj22Wm3l4ed7NbdAVaT8XLC8KBbgYZyfFAq O01FnjDBPv5T9kTSPT7OFZWLxFtM/7Q= -----END CERTIFICATE-----Generated at Sat Sep 26 16:17:12 2026 by rpki-client