$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa File: ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa (raw, json) Hash identifier: qvvA98/O63ovCaBYPwd+YJAtp41MUFxSOmvJMGnCsjM= Subject key identifier: B2:7A:00:CA:27:C1:57:EA:3D:B0:FD:F4:76:81:77:36:B7:9A:ED:AA Certificate issuer: /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Certificate serial: 010D0C9F4328584F4986DD3D279EB6C9B24DF8A0 Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 17045 IP address blocks: 158.51.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:dd:3d:27:9e:b6:c9:b2:4d:f8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ea0eb83f-546a-41c5-9dc2-2658ef6a2c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:90:f9:c8:8f:83:2a:1d:58:25:8c:2f:62:fb: 4b:2c:d8:84:0c:b1:31:02:2e:be:b5:85:05:54:31: 05:a7:c6:d3:02:27:f7:20:27:ea:33:e2:50:0a:d8: 2e:b9:9c:15:59:02:d1:36:4e:88:9d:b6:d2:02:ca: 66:18:10:77:3d:f8:e9:47:ce:b2:8f:ae:7c:0f:b3: d3:bc:84:00:ee:53:4c:0f:88:99:db:c5:f4:f9:5b: c1:83:8f:46:f1:63:4d:ef:5e:a3:3a:dd:28:7a:e3: c4:17:88:fc:ce:cb:7c:c1:1f:b6:17:fd:08:ef:b0: f2:46:e4:35:e4:38:01:f9:bb:6d:48:40:01:e2:fb: 7f:18:65:47:dd:f4:0f:84:d9:79:8d:de:88:93:87: 88:e8:f3:cb:04:da:c3:60:68:32:90:ce:f5:20:7e: 17:92:1a:ec:2b:cf:54:0b:a4:f5:dd:69:57:44:9e: fd:63:a5:7a:b7:46:07:9e:29:08:50:2b:f8:11:0c: 0c:70:17:70:02:e5:c4:10:65:66:26:7b:85:25:12: 38:6e:67:01:aa:3a:12:96:8e:2d:1f:18:ff:f1:81: 88:c0:cd:5b:6f:26:b8:31:17:6a:b2:00:12:52:93: 2f:11:d8:e0:f2:0a:b0:5f:2a:b5:a1:aa:4f:5c:56: 0f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:7A:00:CA:27:C1:57:EA:3D:B0:FD:F4:76:81:77:36:B7:9A:ED:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl X509v3 Authority Key Identifier: keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer sbgp-ipAddrBlock: critical IPv4: 158.51.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:b6:a5:35:67:c9:7f:76:e6:7f:a5:8b:d8:65:fb:e8:4d:34: a9:f2:0d:39:72:b9:eb:7e:43:7b:bc:3a:ce:6b:07:eb:b0:50: be:11:11:84:25:1d:8a:1d:53:a0:3c:1f:34:bd:34:19:d9:14: c8:71:3e:fc:11:0e:d6:ba:b8:00:4e:79:1a:74:ad:ce:0e:43: d1:c5:7f:80:a4:2c:0b:71:ef:56:06:20:5e:4a:5d:e6:2e:76: 9d:ec:13:2b:ac:06:69:08:64:dc:39:4a:66:6a:2f:b4:d7:2d: 22:c3:25:cc:62:e4:a9:d2:be:2a:a8:23:d8:38:b0:01:96:2f: bc:6e:66:34:e3:25:04:b8:34:00:6b:20:48:db:c1:d9:11:70: db:a9:cf:1b:21:e2:df:d4:21:4b:d6:f7:cf:67:5a:e6:0e:9f: 49:f1:4a:c1:44:32:2c:ec:1c:5d:1d:57:b9:95:d0:27:ea:ba: 3f:35:9d:0b:26:28:76:80:d6:44:96:57:3f:11:d8:59:74:ef: 26:ac:c8:4f:72:31:c4:e2:43:2d:8c:5d:c2:61:bf:08:be:c9: 6c:f7:27:68:55:90:ff:1f:bd:e7:12:6a:8f:bf:83:d3:c4:bd: c2:6f:f2:e3:27:f7:fa:b3:3e:88:9a:65:e6:03:d0:5b:7b:71: f5:5b:43:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jht09J562ybJN+KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3 MDBjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWEwZWI4M2YtNTQ2YS00MWM1LTlkYzItMjY1OGVmNmEyYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJD5yI+DKh1YJYwvYvtLLNiEDLExAi6+tYUF VDEFp8bTAif3ICfqM+JQCtguuZwVWQLRNk6InbbSAspmGBB3PfjpR86yj658D7PT vIQA7lNMD4iZ28X0+VvBg49G8WNN716jOt0oeuPEF4j8zst8wR+2F/0I77DyRuQ1 5DgB+bttSEAB4vt/GGVH3fQPhNl5jd6Ik4eI6PPLBNrDYGgykM71IH4XkhrsK89U C6T13WlXRJ79Y6V6t0YHnikIUCv4EQwMcBdwAuXEEGVmJnuFJRI4bmcBqjoSlo4t Hxj/8YGIwM1bbya4MRdqsgASUpMvEdjg8gqwXyq1oapPXFYPiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJ6AMonwVfqPbD99HaBdza3mu2qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3 MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvY2E1NzM0M2EtYjJhMi0z N2E3LWJhYTEtMGU3MDk0YjlmNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0 MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2 NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy N2E5NjcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjPhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG2pTVnyX925n+li9hl++hNNKnyDTlyuet+Q3u8Os5rB+uwUL4REYQl HYodU6A8HzS9NBnZFMhxPvwRDta6uABOeRp0rc4OQ9HFf4CkLAtx71YGIF5KXeYu dp3sEyusBmkIZNw5SmZqL7TXLSLDJcxi5KnSviqoI9g4sAGWL7xuZjTjJQS4NABr IEjbwdkRcNupzxsh4t/UIUvW989nWuYOn0nxSsFEMizsHF0dV7mV0Cfquj81nQsm KHaA1kSWVz8R2Fl07yasyE9yMcTiQy2MXcJhvwi+yWz3J2hVkP8fvecSao+/g9PE vcJv8uMn9/qzPoiaZeYD0Ft7cfVbQwg= -----END CERTIFICATE-----Generated at Sun Sep 27 10:29:02 2026 by rpki-client