$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa File: e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa (raw, json) Hash identifier: xChS4W4pb7mPWrQTQBovac5YmvxvKNRHr5NfV0NXdTs= Subject key identifier: 93:C1:A6:36:BC:9A:5E:EE:B0:26:CF:15:BC:F9:D6:DB:BE:02:1A:43 Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584EA7966754E57B6E55A8206D00 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 8075 IP address blocks: 161.58.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:96:67:54:e5:7b:6e:55:a8:20:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d1da0460-f143-4341-a905-348024b2d01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:93:66:ca:a3:c1:8d:0a:a9:83:1d:84:45: 6e:d8:71:6a:25:bf:08:7e:90:78:41:96:4f:c0:f7: f8:5a:6a:ff:7d:6c:e4:a1:32:d2:c1:8f:16:d1:e8: 32:3f:d7:be:79:72:7f:b1:88:08:90:95:56:9a:7a: 2b:7e:dc:44:70:bb:86:b7:1f:6f:e5:ee:0c:fa:38: 01:f1:f2:30:7d:80:d8:90:e1:8d:e3:55:95:b3:a6: 2a:cc:e9:3f:8e:d4:ad:06:51:09:8a:92:6d:44:89: a2:76:3f:34:a6:66:b4:1b:63:3a:76:68:7b:3e:04: 87:6a:25:d0:ea:4d:35:77:8f:80:35:d3:0c:a9:31: 5c:c2:24:cf:1e:af:a9:bb:98:b3:c9:fa:44:72:9c: da:ed:4b:5b:bd:8e:39:f1:fa:9f:30:b6:69:23:61: 03:42:81:6f:d9:9d:83:d7:b2:b2:2a:56:77:4b:5b: 3a:ab:6e:c5:33:df:91:e0:56:6a:71:72:d1:d6:37: e1:38:d1:c1:b3:36:2f:78:56:42:44:17:ec:cb:d4: 44:04:d1:6a:ab:fb:47:13:4d:ce:04:4b:19:df:b0: 62:ce:75:05:21:12:36:89:f6:14:44:f6:b8:9e:85: f2:e8:37:db:90:f5:59:67:c5:cd:41:b8:54:27:21: 52:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C1:A6:36:BC:9A:5E:EE:B0:26:CF:15:BC:F9:D6:DB:BE:02:1A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/e5c691f4-22aa-3d5d-81bd-e4d8a90d9a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 161.58.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:17:5d:0e:b4:f5:19:5e:06:d6:ac:30:79:4b:aa:bb:cc:42: e1:59:dd:85:b4:c9:db:f5:d1:88:fe:b1:9f:26:99:e9:2d:b2: 13:cd:b2:89:3b:78:ea:33:86:1c:71:1b:c0:04:4a:c3:a8:6e: b3:6b:07:22:71:f9:0a:5a:b7:77:80:81:40:d7:4d:93:54:4e: d6:e8:8c:40:01:13:6f:2c:1e:4e:4e:66:ba:a5:5b:d7:ca:c4: 64:b8:07:71:3c:c8:1c:49:3a:0d:b2:13:a5:29:98:4f:fe:65: 4e:f4:46:0b:7e:75:5f:02:f9:86:34:b3:c7:46:3a:85:f8:0c: 94:2e:b5:71:01:fa:b0:b3:27:8f:25:75:e0:3c:c8:26:b7:9e: 47:bd:f0:7e:cc:18:d0:a0:03:50:d1:6e:30:f5:2b:86:16:f0: 50:44:1b:3c:2f:2d:28:4a:b7:80:a2:5f:b8:9b:dd:b6:bf:62: c9:f1:56:04:49:fc:d6:85:ee:c1:7b:94:fa:ae:db:27:98:f0: d3:b1:c6:91:7d:7c:9c:ba:4e:a1:c5:f2:01:83:3e:95:c3:8b: f6:38:2d:38:27:48:88:4c:e0:44:ac:54:0e:70:fa:83:5b:56: 2d:98:cd:9c:25:f0:97:90:92:13:b6:29:c0:f9:78:4d:e7:09: 2b:e2:61:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlmdU5XtuVaggbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDFkYTA0NjAtZjE0My00MzQxLWE5MDUtMzQ4MDI0YjJkMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBuTZsqjwY0KqYMdhEVu2HFqJb8IfpB4QZZP wPf4Wmr/fWzkoTLSwY8W0egyP9e+eXJ/sYgIkJVWmnorftxEcLuGtx9v5e4M+jgB 8fIwfYDYkOGN41WVs6YqzOk/jtStBlEJipJtRImidj80pma0G2M6dmh7PgSHaiXQ 6k01d4+ANdMMqTFcwiTPHq+pu5izyfpEcpza7UtbvY458fqfMLZpI2EDQoFv2Z2D 17KyKlZ3S1s6q27FM9+R4FZqcXLR1jfhONHBszYveFZCRBfsy9REBNFqq/tHE03O BEsZ37BiznUFIRI2ifYURPa4noXy6DfbkPVZZ8XNQbhUJyFSPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJPBpja8ml7usCbPFbz51tu+AhpDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvZTVjNjkxZjQtMjJhYS0z ZDVkLTgxYmQtZTRkOGE5MGQ5YTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoTqeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsXXQ609RleBtasMHlLqrvMQuFZ3YW0ydv10Yj+sZ8mmektshPNsok7 eOozhhxxG8AESsOobrNrByJx+Qpat3eAgUDXTZNUTtbojEABE28sHk5OZrqlW9fK xGS4B3E8yBxJOg2yE6UpmE/+ZU70Rgt+dV8C+YY0s8dGOoX4DJQutXEB+rCzJ48l deA8yCa3nke98H7MGNCgA1DRbjD1K4YW8FBEGzwvLShKt4CiX7ib3ba/YsnxVgRJ /NaF7sF7lPqu2yeY8NOxxpF9fJy6TqHF8gGDPpXDi/Y4LTgnSIhM4ESsVA5w+oNb Vi2YzZwl8JeQkhO2KcD5eE3nCSviYdQ= -----END CERTIFICATE-----Generated at Fri Sep 4 23:07:38 2026 by rpki-client