$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa File: 8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa (raw, json) Hash identifier: XhhltVYJnTdwtzKEN8wDNPxcAlNJo4kOH3HcVHsqLi0= Subject key identifier: 13:9D:DA:31:4E:76:F7:86:BC:33:02:F9:86:1A:C7:D4:2C:36:F3:1E Certificate issuer: /CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Certificate serial: 010D0C9F4328584D571FAE08276AEDA44A2AD100 Authority key identifier: AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa Signing time: Mon 30 Mar 2026 13:00:30 +0000 ROA not before: Mon 30 Mar 2026 13:00:30 +0000 ROA not after: Sun 28 Jun 2026 13:00:30 +0000 asID: 26457 IP address blocks: 158.51.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 09 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:57:1f:ae:08:27:6a:ed:a4:4a:2a:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Validity Not Before: Mar 30 13:00:30 2026 GMT Not After : Jun 28 13:00:30 2026 GMT Subject: CN=8b219865-1cba-4739-8fbf-ff2b7475dc94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f5:40:99:9d:8d:6a:b8:55:da:3b:3f:39:15: 6a:a6:f4:16:b9:c8:4e:64:22:45:e8:8b:3c:b6:7d: f7:65:f9:80:2c:5c:7b:47:d1:2e:3c:1a:e1:b0:3e: 60:00:b6:72:b9:93:1d:46:5e:ff:61:b1:d6:79:57: 9f:a1:02:75:f4:8d:a7:c1:8d:fc:57:de:b3:91:79: 50:e6:aa:38:40:b4:e2:cf:da:88:7c:e5:7a:77:8e: d2:b4:bd:a8:7a:ca:15:43:f5:06:01:74:89:44:d1: a0:53:25:b0:f2:07:03:93:ac:66:16:56:f0:07:40: 0a:50:f8:52:e5:49:52:49:7f:d1:09:86:6d:e9:8d: 00:6a:b5:39:e6:59:5f:80:52:9b:b5:85:62:96:38: 44:aa:82:a4:c9:32:5c:99:a2:12:af:ac:f3:50:5b: c9:4d:a5:00:09:1a:75:ec:1a:a2:04:5b:d3:8c:82: a9:b6:d3:d5:6e:7b:19:68:b6:39:d3:fb:b2:2b:16: 15:a1:46:6d:45:03:4d:eb:49:61:63:4e:ef:64:17: 13:77:79:3e:3b:14:25:71:88:e0:87:07:83:ea:1c: a2:9e:6d:5c:f4:33:7f:28:85:b9:0b:20:d3:29:1c: cf:4d:db:f7:31:c3:2b:7c:a0:68:10:2c:ea:bc:90: 87:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:9D:DA:31:4E:76:F7:86:BC:33:02:F9:86:1A:C7:D4:2C:36:F3:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl X509v3 Authority Key Identifier: keyid:AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer sbgp-ipAddrBlock: critical IPv4: 158.51.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:eb:9b:2c:07:e8:ba:ff:91:82:78:f9:21:7a:5e:d4:00:bf: d9:ab:8b:c0:79:cb:be:4c:11:ff:14:27:f1:db:34:20:a6:2b: 1a:8e:bc:a8:fd:a7:6a:df:a1:da:39:c8:75:b4:0a:f0:d1:f5: 5a:e6:4b:fc:88:b2:9a:e4:4d:33:72:14:a6:dc:50:4c:44:23: fc:11:6d:71:0a:b4:12:8c:1f:23:9f:ee:29:ac:fb:2f:7b:3d: ff:94:19:47:b6:bd:3e:c7:91:ad:d6:17:e1:63:a9:ef:cf:2c: c4:3a:1d:39:0d:6d:75:97:8f:94:d8:4f:83:89:59:c8:69:6b: d5:03:a6:55:85:5c:8c:6a:16:b5:48:42:3e:4b:d7:a2:da:35: 68:74:4a:80:37:68:5e:56:f6:c6:f4:d0:d0:94:d1:55:15:5c: 10:d3:ca:53:bf:b2:9b:71:36:b1:6e:3e:de:06:42:37:2b:f4: 5b:8b:a3:d8:14:0e:1a:e8:0b:45:14:51:97:92:17:4b:84:40: 7c:00:37:58:77:36:f8:0f:0c:0a:83:cc:cf:5c:79:7f:d9:3e: 30:08:df:23:15:3a:8f:d7:12:72:05:1f:3e:e0:30:75:1b:f9: 22:ac:86:6d:2f:6d:57:b4:ac:9f:65:f7:94:15:e4:ee:6e:40: 42:af:96:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1XH64IJ2rtpEoq0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4ZGRmNGEtYjc2Mi00MGUwLWFkNTgtYzhiMWE2M2Y0 NjJmMB4XDTI2MDMzMDEzMDAzMFoXDTI2MDYyODEzMDAzMFowLzEtMCsGA1UEAxMk OGIyMTk4NjUtMWNiYS00NzM5LThmYmYtZmYyYjc0NzVkYzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvVAmZ2NarhV2js/ORVqpvQWuchOZCJF6Is8 tn33ZfmALFx7R9EuPBrhsD5gALZyuZMdRl7/YbHWeVefoQJ19I2nwY38V96zkXlQ 5qo4QLTiz9qIfOV6d47StL2oesoVQ/UGAXSJRNGgUyWw8gcDk6xmFlbwB0AKUPhS 5UlSSX/RCYZt6Y0AarU55llfgFKbtYViljhEqoKkyTJcmaISr6zzUFvJTaUACRp1 7BqiBFvTjIKpttPVbnsZaLY50/uyKxYVoUZtRQNN60lhY07vZBcTd3k+OxQlcYjg hweD6hyinm1c9DN/KIW5CyDTKRzPTdv3McMrfKBoECzqvJCHLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOd2jFOdveGvDMC+YYax9QsNvMeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhk ZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIxYTYzZjQ2MmYvOGNmZTg1MjAtNGYwNy0z ZjdmLWI4OTMtZmU5NDQ0Y2NiMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzg4ZGRmNGEtYjc2Mi00MGUwLWFk NTgtYzhiMWE2M2Y0NjJmL2M4OGRkZjRhLWI3NjItNDBlMC1hZDU4LWM4YjFhNjNm NDYyZi5jcmwwHwYDVR0jBBgwFoAUrjM9cNPHljH9gVsijdwOMQzpFOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhkZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIx YTYzZjQ2MmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHrmywH6Lr/kYJ4+SF6XtQAv9mri8B5y75MEf8UJ/HbNCCmKxqOvKj9 p2rfodo5yHW0CvDR9VrmS/yIsprkTTNyFKbcUExEI/wRbXEKtBKMHyOf7ims+y97 Pf+UGUe2vT7Hka3WF+Fjqe/PLMQ6HTkNbXWXj5TYT4OJWchpa9UDplWFXIxqFrVI Qj5L16LaNWh0SoA3aF5W9sb00NCU0VUVXBDTylO/sptxNrFuPt4GQjcr9FuLo9gU DhroC0UUUZeSF0uEQHwAN1h3NvgPDAqDzM9ceX/ZPjAI3yMVOo/XEnIFHz7gMHUb +SKshm0vbVe0rJ9l95QV5O5uQEKvlpQ= -----END CERTIFICATE-----Generated at Wed Apr 8 14:35:28 2026 by rpki-client