$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/bf3f4925-7693-31d9-aecd-7f089a19efd2.roa File: bf3f4925-7693-31d9-aecd-7f089a19efd2.roa (raw, json) Hash identifier: fx+c9hv+uXRV+Apq3fI2l6qNjrtAePt46x0tKqK0R+4= Subject key identifier: 48:EE:1E:39:C1:6E:8F:4F:87:AE:8B:AF:C5:58:AD:DE:13:CA:6C:37 Certificate issuer: /CN=7894adcb-3be5-42b8-a76f-913809582611 Certificate serial: 010D0C9F4328584F4973963350B6847DBD39A560 Authority key identifier: 5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/bf3f4925-7693-31d9-aecd-7f089a19efd2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399449 IP address blocks: 158.88.0.0/24 maxlen: 24 158.88.8.0/24 maxlen: 24 158.88.15.0/24 maxlen: 24 158.88.16.0/24 maxlen: 24 158.88.24.0/24 maxlen: 24 158.88.48.0/24 maxlen: 24 158.88.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:96:33:50:b6:84:7d:bd:39:a5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7894adcb-3be5-42b8-a76f-913809582611 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5957dfe4-24a7-4e54-900a-aa1728247b5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d4:e7:6f:ff:52:ec:0e:52:21:94:f9:bf:87: 4a:b9:ec:ed:e0:38:07:f6:4a:93:58:c1:73:a6:84: 46:bf:b0:52:54:21:66:e9:64:09:e0:5a:17:14:29: 5a:07:da:a6:14:27:f6:03:48:98:67:eb:51:36:bc: 7b:9d:d5:6a:7b:72:de:9d:7e:4b:b0:b0:fc:f0:c1: 17:88:50:10:30:fa:24:71:94:3c:3f:cc:e2:4f:e1: 41:f1:7c:10:22:95:53:78:cf:41:9f:bf:68:07:14: 63:71:b9:a0:9b:ad:58:0f:cd:ab:5b:f1:a2:48:dd: 54:7e:42:95:87:dd:61:67:f4:0c:06:8b:b7:a0:a9: 1f:40:18:54:2a:b1:46:03:f1:1a:ba:41:71:a4:3d: 9d:72:8a:9f:0f:1b:50:a1:fe:e5:07:d3:52:bc:f1: ff:ea:67:1a:cc:75:36:3b:3c:67:f2:9a:05:4a:0d: 34:a8:66:99:05:7e:10:96:ad:ad:40:02:e5:d2:f6: 27:d9:72:7d:77:43:62:0e:5b:11:fb:1a:c3:34:7d: 29:94:3b:cd:7d:64:15:9b:99:be:39:bf:8f:11:45: 79:d5:45:58:48:f7:80:13:67:b5:de:de:48:77:18: 81:8b:02:e4:59:56:f3:a6:be:60:8c:c8:99:1e:35: 6d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EE:1E:39:C1:6E:8F:4F:87:AE:8B:AF:C5:58:AD:DE:13:CA:6C:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/bf3f4925-7693-31d9-aecd-7f089a19efd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611/7894adcb-3be5-42b8-a76f-913809582611.crl X509v3 Authority Key Identifier: keyid:5A:F7:62:9E:BF:84:43:86:83:3B:C5:BE:60:36:59:D6:76:BB:63:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7894adcb-3be5-42b8-a76f-913809582611.cer sbgp-ipAddrBlock: critical IPv4: 158.88.0.0/24 158.88.8.0/24 158.88.15.0-158.88.16.255 158.88.24.0/24 158.88.48.0/24 158.88.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a2:e3:19:ed:a8:09:ea:28:d7:00:12:4f:35:4f:2c:92:52: a2:8a:63:9c:7b:b0:c0:57:eb:78:39:2e:96:69:dd:e8:7a:3f: 05:1d:14:e6:d8:e7:c0:71:eb:aa:8a:50:cd:b7:41:93:e4:a7: b7:01:24:4a:38:23:1e:a5:37:04:84:41:19:61:76:5a:7d:ad: 0a:f8:4f:dd:2b:eb:c1:17:7e:90:a6:a3:0f:bd:a1:dc:f6:c6: f5:9b:a1:53:e7:8a:67:bf:be:62:2e:57:19:4d:07:ce:ca:75: a6:33:25:89:f7:42:89:bf:60:89:5e:f8:6b:71:c4:a6:c0:3a: ba:28:dd:c3:34:e3:9d:55:32:4d:37:b9:ac:f9:1f:98:12:b1: 90:8b:53:39:63:76:5b:7f:df:4f:57:eb:6e:fc:c3:aa:00:67: f0:a4:f2:89:92:a2:00:f3:2f:24:0b:de:f7:b5:d6:25:ab:67: 66:68:5d:ee:89:8b:c4:11:46:1e:4a:44:20:23:b7:ac:c8:bf: 1a:65:62:50:5a:d3:d7:86:0f:e7:00:72:a1:31:3b:46:45:94: f1:59:dc:d8:78:88:3c:0c:fa:13:1d:1e:b0:ff:3d:8e:f5:05: f3:fc:0d:ec:a4:36:d9:02:41:c5:ed:1a:14:95:15:57:ca:4a: aa:4d:e0:32 -----BEGIN CERTIFICATE----- MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWE9Jc5YzULaEfb05pWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzg5NGFkY2ItM2JlNS00MmI4LWE3NmYtOTEzODA5NTgy NjExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTk1N2RmZTQtMjRhNy00ZTU0LTkwMGEtYWExNzI4MjQ3YjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9Tnb/9S7A5SIZT5v4dKuezt4DgH9kqTWMFz poRGv7BSVCFm6WQJ4FoXFClaB9qmFCf2A0iYZ+tRNrx7ndVqe3LenX5LsLD88MEX iFAQMPokcZQ8P8ziT+FB8XwQIpVTeM9Bn79oBxRjcbmgm61YD82rW/GiSN1UfkKV h91hZ/QMBou3oKkfQBhUKrFGA/EaukFxpD2dcoqfDxtQof7lB9NSvPH/6mcazHU2 Ozxn8poFSg00qGaZBX4Qlq2tQALl0vYn2XJ9d0NiDlsR+xrDNH0plDvNfWQVm5m+ Ob+PEUV51UVYSPeAE2e13t5IdxiBiwLkWVbzpr5gjMiZHjVteQIDAQABo4IDezCC A3cwHQYDVR0OBBYEFEjuHjnBbo9Ph66Lr8VYrd4Tymw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS83ODk0 YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4MDk1ODI2MTEvYmYzZjQ5MjUtNzY5My0z MWQ5LWFlY2QtN2YwODlhMTllZmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNzg5NGFkY2ItM2JlNS00MmI4LWE3 NmYtOTEzODA5NTgyNjExLzc4OTRhZGNiLTNiZTUtNDJiOC1hNzZmLTkxMzgwOTU4 MjYxMS5jcmwwHwYDVR0jBBgwFoAUWvdinr+EQ4aDO8W+YDZZ1na7Y8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS83ODk0YWRjYi0zYmU1LTQyYjgtYTc2Zi05MTM4 MDk1ODI2MTEuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAnlgAAwQA nlgIMAwDBACeWA8DBACeWBADBACeWBgDBACeWDADBACeWDgwVAYDVR0gAQH/BEow SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOqLj Ge2oCeoo1wASTzVPLJJSoopjnHuwwFfreDkulmnd6Ho/BR0U5tjnwHHrqopQzbdB k+SntwEkSjgjHqU3BIRBGWF2Wn2tCvhP3SvrwRd+kKajD72h3PbG9ZuhU+eKZ7++ Yi5XGU0Hzsp1pjMlifdCib9giV74a3HEpsA6uijdwzTjnVUyTTe5rPkfmBKxkItT OWN2W3/fT1frbvzDqgBn8KTyiZKiAPMvJAve97XWJatnZmhd7omLxBFGHkpEICO3 rMi/GmViUFrT14YP5wByoTE7RkWU8Vnc2HiIPAz6Ex0esP89jvUF8/wN7KQ22QJB xe0aFJUVV8pKqk3gMg== -----END CERTIFICATE-----Generated at Thu Oct 8 21:03:21 2026 by rpki-client