$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa File: 8d665762-0465-323b-b950-c65d3069d14c.roa (raw, json) Hash identifier: yArQaEHjpyTPy61RVzHkU1nG61Cgl/QeEn+PzqcU9Zg= Subject key identifier: 41:2E:55:EB:CA:46:ED:E0:8D:8A:27:88:31:76:DA:B4:CA:3D:E5:CA Certificate issuer: /CN=fdf3df42-040e-4856-b3d6-7c2ebe1e1d94 Certificate serial: 010D0C9F4328584EC0A72CAFAE5E6042D8DEE040 Authority key identifier: 6C:0A:1B:00:BC:3F:09:2F:2D:15:05:C2:07:E5:2B:B9:E6:30:61:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa Signing time: Fri 07 Aug 2026 01:00:12 +0000 ROA not before: Fri 07 Aug 2026 01:00:12 +0000 ROA not after: Thu 05 Nov 2026 02:00:12 +0000 asID: 28959 IP address blocks: 158.51.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c0:a7:2c:af:ae:5e:60:42:d8:de:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdf3df42-040e-4856-b3d6-7c2ebe1e1d94 Validity Not Before: Aug 7 01:00:12 2026 GMT Not After : Nov 5 02:00:12 2026 GMT Subject: CN=b1766670-4412-4654-8cfa-8535fd8cb4f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:81:40:81:64:6f:f4:73:44:d6:90:08:c5:3d: 5f:e8:35:51:4b:00:18:fa:67:9c:fe:5f:f0:38:10: 85:6d:2e:dd:f1:f8:f6:b2:e1:38:74:25:c4:0b:65: f7:8d:bc:2d:87:00:da:68:60:bc:66:1f:0e:75:ff: 6d:ea:a9:63:f2:b6:45:3a:9d:f7:3e:1a:3c:ed:2c: 81:cc:14:97:cd:c4:25:ff:82:e1:34:d4:fc:af:d9: cf:8a:0c:7a:b9:15:b6:dd:15:50:ba:41:bb:03:25: 79:be:69:2f:ea:76:f7:a3:cf:24:f5:17:a8:03:89: df:bc:07:a9:1e:17:e3:4b:99:98:1f:da:52:23:e3: e1:86:92:20:13:c5:bf:7a:7b:25:97:14:54:be:05: ef:c6:9b:d5:6a:56:d1:ab:2f:55:17:2f:bf:ac:6c: fa:98:4d:e0:91:3c:97:f9:c8:13:ae:f2:e1:21:59: e0:4c:3a:05:53:f6:90:29:99:04:0c:00:53:07:af: 12:50:cd:6b:9b:25:7b:fc:cf:1f:2f:f6:90:a5:e5: 50:40:3e:31:9f:dc:7a:96:84:88:b9:54:3d:4e:d9: 3c:78:2d:b0:5c:35:ed:93:b8:3d:d3:55:12:3c:9a: d7:8a:2e:f4:88:a8:dc:82:8c:ee:8d:62:04:00:b4: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2E:55:EB:CA:46:ED:E0:8D:8A:27:88:31:76:DA:B4:CA:3D:E5:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/8d665762-0465-323b-b950-c65d3069d14c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.crl X509v3 Authority Key Identifier: keyid:6C:0A:1B:00:BC:3F:09:2F:2D:15:05:C2:07:E5:2B:B9:E6:30:61:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fdf3df42-040e-4856-b3d6-7c2ebe1e1d94.cer sbgp-ipAddrBlock: critical IPv4: 158.51.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:0d:da:c3:f1:47:83:43:55:e6:b3:b2:da:d2:37:1f:8e:bf: fd:36:4b:4d:ef:c4:a8:8e:35:b7:f1:39:48:1b:c9:ad:ac:68: 82:1a:a4:1a:f8:90:7e:16:08:31:d4:6d:be:2d:da:c1:b0:c3: ef:72:58:80:ef:36:1c:b6:55:8b:fa:e7:49:b6:e2:b5:aa:b9: e7:1f:90:4f:4e:be:de:24:b5:14:08:c4:a4:47:79:d0:6c:02: 27:a6:37:42:0e:26:f7:68:c3:b8:d8:d3:30:b1:44:26:dd:0c: 6a:0d:3f:40:80:0b:99:dd:b4:e2:46:42:e9:b2:57:28:81:0e: 02:24:b6:bb:67:1a:c2:1c:24:30:17:42:a9:19:96:d5:5b:81: c5:99:53:da:65:09:95:7f:01:ac:25:17:fa:f6:09:dd:d1:48: e9:1c:74:39:12:f0:dd:18:14:27:1c:18:82:b7:f3:88:86:ed: d9:2e:cc:63:d9:91:a8:7f:b3:c7:ca:20:d6:95:18:44:a5:72: 01:19:30:64:37:69:79:37:1c:65:bb:d7:62:8b:7b:a0:5a:c4: af:23:6f:63:14:72:57:bb:d6:b0:8e:ea:1b:42:b0:b6:e5:64: 23:27:6d:3a:0f:59:03:07:3e:3c:66:f3:39:80:8b:ba:41:4e: 22:eb:60:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7Apyyvrl5gQtje4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmRmM2RmNDItMDQwZS00ODU2LWIzZDYtN2MyZWJlMWUx ZDk0MB4XDTI2MDgwNzAxMDAxMloXDTI2MTEwNTAyMDAxMlowLzEtMCsGA1UEAxMk YjE3NjY2NzAtNDQxMi00NjU0LThjZmEtODUzNWZkOGNiNGYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIFAgWRv9HNE1pAIxT1f6DVRSwAY+mec/l/w OBCFbS7d8fj2suE4dCXEC2X3jbwthwDaaGC8Zh8Odf9t6qlj8rZFOp33Pho87SyB zBSXzcQl/4LhNNT8r9nPigx6uRW23RVQukG7AyV5vmkv6nb3o88k9ReoA4nfvAep HhfjS5mYH9pSI+PhhpIgE8W/ensllxRUvgXvxpvValbRqy9VFy+/rGz6mE3gkTyX +cgTrvLhIVngTDoFU/aQKZkEDABTB68SUM1rmyV7/M8fL/aQpeVQQD4xn9x6loSI uVQ9Ttk8eC2wXDXtk7g901USPJrXii70iKjcgozujWIEALTiYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEuVevKRu3gjYoniDF22rTKPeXKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZGYz ZGY0Mi0wNDBlLTQ4NTYtYjNkNi03YzJlYmUxZTFkOTQvOGQ2NjU3NjItMDQ2NS0z MjNiLWI5NTAtYzY1ZDMwNjlkMTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmRmM2RmNDItMDQwZS00ODU2LWIz ZDYtN2MyZWJlMWUxZDk0L2ZkZjNkZjQyLTA0MGUtNDg1Ni1iM2Q2LTdjMmViZTFl MWQ5NC5jcmwwHwYDVR0jBBgwFoAUbAobALw/CS8tFQXCB+UrueYwYTswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZGYzZGY0Mi0wNDBlLTQ4NTYtYjNkNi03YzJl YmUxZTFkOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjPIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIN2sPxR4NDVeazstrSNx+Ov/02S03vxKiONbfxOUgbya2saIIapBr4 kH4WCDHUbb4t2sGww+9yWIDvNhy2VYv650m24rWquecfkE9Ovt4ktRQIxKRHedBs AiemN0IOJvdow7jY0zCxRCbdDGoNP0CAC5ndtOJGQumyVyiBDgIktrtnGsIcJDAX QqkZltVbgcWZU9plCZV/AawlF/r2Cd3RSOkcdDkS8N0YFCccGIK384iG7dkuzGPZ kah/s8fKINaVGESlcgEZMGQ3aXk3HGW712KLe6BaxK8jb2MUcle71rCO6htCsLbl ZCMnbToPWQMHPjxm8zmAi7pBTiLrYBk= -----END CERTIFICATE-----Generated at Sat Sep 26 20:47:56 2026 by rpki-client