$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa File: ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa (raw, json) Hash identifier: 4Y333Chido1GO9+KnyfyZaAaffFiRdhZ0pfwz6eOLcQ= Subject key identifier: 78:B8:D1:76:AB:08:15:59:86:19:9F:6D:54:C7:EC:83:A7:32:36:99 Certificate issuer: /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Certificate serial: 010D0C9F4328584D24E10CCB940FE05F705E6180 Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 17045 IP address blocks: 158.51.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e1:0c:cb:94:0f:e0:5f:70:5e:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=bd9fc513-7e4b-4024-80cd-9b2ac9c120db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:15:ae:ff:00:3a:31:fe:38:01:70:83:5c:c6: 24:0f:4d:1c:b0:c7:af:88:bf:d0:74:39:48:23:39: 82:db:1a:93:a1:19:6a:72:52:54:95:16:d2:50:4a: b4:f7:59:3a:e2:35:9b:8a:45:05:00:e9:3e:87:65: 11:6d:88:34:7d:91:32:5d:86:7d:d9:8e:b9:43:28: 5c:39:a8:a1:40:b9:fa:46:df:f9:76:f9:d9:87:b8: bb:0d:63:b8:db:61:4c:67:22:ec:13:6f:f1:23:51: be:85:00:5d:02:4b:77:4e:53:d5:92:ec:b4:96:6a: a9:96:80:88:62:a9:77:8f:5f:f1:52:25:12:4b:3b: af:d1:22:2f:f6:2c:28:22:f2:2d:c4:6d:a5:e2:0e: f2:1c:93:6e:2e:82:59:94:f9:31:f0:26:3c:bd:c6: c8:da:2c:55:7e:6a:ec:9d:87:61:5a:c9:91:97:19: 5f:6d:cf:9d:8d:4e:2b:57:af:65:b1:38:60:7d:5f: 6b:72:51:0a:b1:5b:76:25:85:f2:b2:37:1b:17:6b: 46:f6:b2:73:12:e4:9f:a0:a0:53:e5:a2:eb:71:7f: 3c:5f:0d:ef:14:e4:ff:84:39:62:38:48:56:08:87: 01:c3:be:c7:07:7d:f4:2e:51:15:3f:84:f7:2c:4c: fc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B8:D1:76:AB:08:15:59:86:19:9F:6D:54:C7:EC:83:A7:32:36:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/ca57343a-b2a2-37a7-baa1-0e7094b9f5dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl X509v3 Authority Key Identifier: keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer sbgp-ipAddrBlock: critical IPv4: 158.51.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:c0:b7:2c:e5:45:7b:fd:5a:dc:b3:43:e1:fc:a6:61:29:e3: 8f:8b:c0:28:b0:e7:42:7c:a9:cc:93:b2:1a:d5:f2:c0:1d:31: 4f:97:f3:19:5b:ee:f9:77:dc:ee:3e:d3:95:d6:01:e4:fb:c6: 5e:d3:2f:45:9f:7b:96:19:a1:e6:d3:26:a4:2b:24:69:b7:d2: 18:58:21:eb:cc:db:11:ae:88:c1:65:b1:7b:9f:8a:dd:f3:36: 51:6d:19:68:f3:d6:53:0d:41:36:79:c5:5d:18:c6:8b:85:9a: 97:a6:23:d5:c5:94:19:5d:bb:2e:fd:e3:7e:46:c0:1f:46:d6: f9:70:d0:9c:9d:32:5b:db:e7:e7:6d:f1:33:d0:8d:8b:21:fd: b4:c3:65:b9:92:57:8a:bc:99:a3:82:24:b9:9e:6b:55:51:9b: 53:6c:11:2e:e6:b5:14:42:a3:10:69:ea:e4:9f:ac:f9:e8:6d: c0:a8:6d:c3:24:ae:6e:e0:c0:c6:e8:2e:5f:e3:71:7f:14:81: f2:e5:a7:fe:10:4b:e2:68:f5:86:ee:bd:bc:9d:49:46:43:fe: 88:0d:88:21:20:7e:2c:53:0f:27:a4:d4:fd:27:66:be:cf:26: 65:0e:53:51:55:ec:5d:0c:29:95:56:84:b9:90:98:4b:11:a8: 3c:92:3a:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4QzLlA/gX3BeYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3 MDBjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk YmQ5ZmM1MTMtN2U0Yi00MDI0LTgwY2QtOWIyYWM5YzEyMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxWu/wA6Mf44AXCDXMYkD00csMeviL/QdDlI IzmC2xqToRlqclJUlRbSUEq091k64jWbikUFAOk+h2URbYg0fZEyXYZ92Y65Qyhc OaihQLn6Rt/5dvnZh7i7DWO422FMZyLsE2/xI1G+hQBdAkt3TlPVkuy0lmqploCI Yql3j1/xUiUSSzuv0SIv9iwoIvItxG2l4g7yHJNuLoJZlPkx8CY8vcbI2ixVfmrs nYdhWsmRlxlfbc+djU4rV69lsThgfV9rclEKsVt2JYXysjcbF2tG9rJzEuSfoKBT 5aLrcX88Xw3vFOT/hDliOEhWCIcBw77HB330LlEVP4T3LEz8XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHi40XarCBVZhhmfbVTH7IOnMjaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3 MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvY2E1NzM0M2EtYjJhMi0z N2E3LWJhYTEtMGU3MDk0YjlmNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0 MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2 NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy N2E5NjcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjPhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrAtyzlRXv9WtyzQ+H8pmEp44+LwCiw50J8qcyTshrV8sAdMU+X8xlb 7vl33O4+05XWAeT7xl7TL0Wfe5YZoebTJqQrJGm30hhYIevM2xGuiMFlsXufit3z NlFtGWjz1lMNQTZ5xV0YxouFmpemI9XFlBlduy79435GwB9G1vlw0JydMlvb5+dt 8TPQjYsh/bTDZbmSV4q8maOCJLmea1VRm1NsES7mtRRCoxBp6uSfrPnobcCobcMk rm7gwMboLl/jcX8UgfLlp/4QS+Jo9YbuvbydSUZD/ogNiCEgfixTDyek1P0nZr7P JmUOU1FV7F0MKZVWhLmQmEsRqDySOkw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:00:57 2026 by rpki-client