$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/9c704b07-187e-39ac-b560-db3659b3dc4d.roa File: 9c704b07-187e-39ac-b560-db3659b3dc4d.roa (raw, json) Hash identifier: 1wREEK/7SoHfp6WWWbxh7nVc05Hdf0OzMgAQJd4E0Oc= Subject key identifier: 58:E1:EA:86:97:A2:B0:AC:6B:99:02:63:B5:C7:D5:1E:C5:68:BA:DA Certificate issuer: /CN=1d394508-6160-4e82-89e3-165fa2784b30 Certificate serial: 010D0C9F4328584F119CEB5D152232E0A30FC940 Authority key identifier: A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/9c704b07-187e-39ac-b560-db3659b3dc4d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 399214 IP address blocks: 158.51.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:eb:5d:15:22:32:e0:a3:0f:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d394508-6160-4e82-89e3-165fa2784b30 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=7611425c-0d8b-49e3-9a8e-588e10522a5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9f:e2:ca:48:3e:92:6f:cf:6e:ae:a3:3d:6e: b9:57:a9:98:13:e7:86:5e:0d:89:18:68:1e:3d:ca: 64:74:df:33:77:a2:56:c3:ef:e5:df:ab:36:80:38: af:df:ae:cb:95:07:79:6a:dc:81:a7:8e:12:a9:99: 25:1f:7c:e9:c6:69:82:3e:5d:4c:9d:40:9c:82:6e: ed:e2:66:c1:e8:04:c8:54:13:6e:b6:80:3b:ec:f1: 1d:ae:50:cc:bb:17:01:a5:86:9b:ff:4e:4d:d3:6a: 83:c3:80:30:f1:73:87:cb:54:51:5f:bb:ee:65:c4: 35:a6:ed:8e:fc:5a:cc:03:43:35:d0:22:63:83:cc: 2c:29:6e:bc:7c:e7:96:3e:2e:2c:09:4f:e9:61:06: 7e:c0:79:a8:c9:b3:84:f8:30:9a:84:b2:61:f6:a3: 32:d0:4c:8a:01:f8:80:48:87:eb:7e:ec:62:9e:df: 3d:d1:e4:02:1e:0a:98:e7:f7:d0:4f:18:1c:d4:b9: 50:e3:53:68:52:23:77:59:dd:fc:48:f2:1e:50:bc: ce:3e:b8:f9:94:bc:b5:9b:fa:9c:de:05:ab:6a:fc: 70:10:84:7a:18:fb:02:49:f8:51:f6:e3:28:a0:36: 2f:00:b1:e7:e2:63:56:87:ec:91:95:cc:ba:4d:e2: 10:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E1:EA:86:97:A2:B0:AC:6B:99:02:63:B5:C7:D5:1E:C5:68:BA:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/9c704b07-187e-39ac-b560-db3659b3dc4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl X509v3 Authority Key Identifier: keyid:A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer sbgp-ipAddrBlock: critical IPv4: 158.51.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:7c:b7:6c:56:ad:5b:96:07:92:f8:06:7a:b2:d3:6e:1d:de: 1b:a6:a4:e5:7b:11:b7:73:4a:0e:5e:c9:ea:ac:1e:cf:4d:f8: 08:3d:b4:45:f2:0e:31:4f:ab:1a:46:a8:4d:5e:b3:23:10:28: bf:ca:f3:40:58:29:90:d9:6b:55:e8:82:59:87:b8:a1:73:ae: b2:ce:5c:03:7d:d5:3f:47:1a:c0:f3:0d:5a:41:d8:c5:05:45: 32:86:75:c9:a9:97:f3:18:d6:47:26:59:56:f5:6c:a1:c7:a3: 66:83:5e:c8:68:9d:80:10:df:67:98:ae:cb:78:78:e0:45:67: a1:a0:c4:80:89:dc:58:9c:e8:54:a9:aa:c4:69:7e:4f:52:f6: 18:2a:cd:18:47:fe:2e:2e:46:3f:3e:f2:f3:99:90:9a:75:4c: 4a:41:bd:25:cd:9d:f0:2d:df:6b:60:bc:10:17:dc:e6:bc:6c: 6b:05:75:c1:5d:ab:61:bc:ee:95:9c:0e:b8:75:bb:08:42:b8: 9c:fd:1b:1c:e8:50:08:2f:43:c9:2e:59:9b:8f:93:d0:07:16: 33:82:b2:3a:d1:cf:2d:e4:39:c1:83:ae:49:2d:41:bf:bd:b7: ce:b1:c3:88:f1:fb:42:f2:f9:27:11:25:c4:2a:7c:cb:39:61: bf:43:e6:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOtdFSIy4KMPyUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQzOTQ1MDgtNjE2MC00ZTgyLTg5ZTMtMTY1ZmEyNzg0 YjMwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NzYxMTQyNWMtMGQ4Yi00OWUzLTlhOGUtNTg4ZTEwNTIyYTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ/iykg+km/Pbq6jPW65V6mYE+eGXg2JGGge PcpkdN8zd6JWw+/l36s2gDiv367LlQd5atyBp44SqZklH3zpxmmCPl1MnUCcgm7t 4mbB6ATIVBNutoA77PEdrlDMuxcBpYab/05N02qDw4Aw8XOHy1RRX7vuZcQ1pu2O /FrMA0M10CJjg8wsKW68fOeWPi4sCU/pYQZ+wHmoybOE+DCahLJh9qMy0EyKAfiA SIfrfuxint890eQCHgqY5/fQTxgc1LlQ41NoUiN3Wd38SPIeULzOPrj5lLy1m/qc 3gWravxwEIR6GPsCSfhR9uMooDYvALHn4mNWh+yRlcy6TeIQzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjh6oaXorCsa5kCY7XH1R7FaLraMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5 NDUwOC02MTYwLTRlODItODllMy0xNjVmYTI3ODRiMzAvOWM3MDRiMDctMTg3ZS0z OWFjLWI1NjAtZGIzNjU5YjNkYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQzOTQ1MDgtNjE2MC00ZTgyLTg5 ZTMtMTY1ZmEyNzg0YjMwLzFkMzk0NTA4LTYxNjAtNGU4Mi04OWUzLTE2NWZhMjc4 NGIzMC5jcmwwHwYDVR0jBBgwFoAUpwdXzXfTWfPTkKnrq8W2Hfi5KEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5NDUwOC02MTYwLTRlODItODllMy0xNjVm YTI3ODRiMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjMKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd8t2xWrVuWB5L4Bnqy024d3humpOV7EbdzSg5eyeqsHs9N+Ag9tEXy DjFPqxpGqE1esyMQKL/K80BYKZDZa1XoglmHuKFzrrLOXAN91T9HGsDzDVpB2MUF RTKGdcmpl/MY1kcmWVb1bKHHo2aDXshonYAQ32eYrst4eOBFZ6GgxICJ3Fic6FSp qsRpfk9S9hgqzRhH/i4uRj8+8vOZkJp1TEpBvSXNnfAt32tgvBAX3Oa8bGsFdcFd q2G87pWcDrh1uwhCuJz9GxzoUAgvQ8kuWZuPk9AHFjOCsjrRzy3kOcGDrkktQb+9 t86xw4jx+0Ly+ScRJcQqfMs5Yb9D5ts= -----END CERTIFICATE-----Generated at Sat Sep 26 07:35:27 2026 by rpki-client