$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa File: 8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa (raw, json) Hash identifier: NeOlMmqxQ4cHjrXYh8P9B7f2ZsDfByEfeT+r7EmHDY8= Subject key identifier: E7:A3:B6:B0:52:88:81:DE:75:E7:E9:1A:FF:AA:BE:44:26:CC:91:9E Certificate issuer: /CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Certificate serial: 010D0C9F4328584F7BB2F98DC0CD8A0197A534C0 Authority key identifier: AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 26457 IP address blocks: 158.51.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:f9:8d:c0:cd:8a:01:97:a5:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=b15714fb-9e1b-4897-957f-38dcebbca286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d0:b7:26:43:e7:c8:2b:04:26:d5:27:f4:bc: c7:9e:7a:25:08:07:75:0a:3b:05:2e:3b:f4:d0:c6: 81:45:93:72:f2:08:72:a6:83:01:54:d0:da:5c:23: 90:45:c1:ba:82:21:f4:9b:ca:6c:ec:7a:10:13:d1: 7b:a7:11:8c:38:ff:31:c2:a4:aa:0f:ec:60:62:f2: a9:88:9d:af:d8:88:f9:c8:37:88:0b:0c:ff:23:93: 65:bf:e9:85:b5:f1:c9:53:06:72:33:3d:f6:0f:0c: bb:fa:45:d6:f7:ae:d4:a8:e4:0f:0b:d1:d4:3d:ca: c7:47:57:2e:47:e9:60:2f:10:30:b3:31:09:4f:f6: 33:05:2e:a2:d3:86:bc:e1:95:6c:d3:58:22:1c:ea: 7c:0c:42:34:63:56:4e:84:29:b1:16:99:c3:6c:0b: 74:d1:76:b4:56:99:a9:65:c9:b7:9c:cb:21:ae:36: fd:83:68:98:8b:66:71:68:cd:ed:c0:3c:19:c6:48: 8e:7b:0b:2f:39:cd:b7:73:76:97:99:be:87:13:e2: dc:a7:79:91:69:c7:2b:c3:3e:c8:f0:cc:85:bd:ab: ca:26:a3:03:d1:1d:35:d5:b0:74:5f:7a:8e:f2:7b: cb:e1:40:4b:35:04:5a:81:26:32:c6:9c:87:3a:5d: 2b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A3:B6:B0:52:88:81:DE:75:E7:E9:1A:FF:AA:BE:44:26:CC:91:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl X509v3 Authority Key Identifier: keyid:AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer sbgp-ipAddrBlock: critical IPv4: 158.51.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6e:90:10:94:2e:54:32:4d:76:cd:3a:ff:b4:ac:76:6b:9b: 89:18:f1:5a:26:28:82:b5:2e:c0:0a:e7:cb:99:89:76:6d:eb: d3:38:7a:50:43:c2:2c:ac:15:8c:b0:d8:25:4a:54:89:87:c9: 11:a2:6a:26:5a:e9:87:9d:0c:e0:e0:92:08:99:5a:66:d3:3b: 6f:40:9c:ff:e2:02:32:2f:67:4a:43:c1:78:7f:80:9e:22:3c: 76:da:8e:c6:da:92:7c:37:b8:08:4f:94:c4:62:90:c5:1f:e5: c0:79:9b:42:39:b9:48:bf:53:09:7e:16:6e:5f:bf:50:d4:7a: b6:45:64:c9:87:1b:d3:55:05:17:a2:b1:04:ba:9e:4c:a9:b7: 9c:6a:7b:e8:17:a8:e1:d6:9a:19:74:74:7a:79:8b:24:e2:1d: bb:23:d6:ca:72:76:39:f2:c8:de:df:75:71:52:95:95:d0:96: cc:7e:24:00:71:cd:8b:90:04:fb:93:d9:4c:66:d2:0a:2f:bc: af:0c:98:8a:b3:49:72:8b:80:8c:20:8d:30:fe:be:83:3c:d6: b9:72:f1:2c:cc:51:d2:62:ae:49:fa:45:0e:f4:d8:5e:8f:f1: 28:a8:d9:6c:73:e7:3b:53:7e:0f:8a:83:db:39:b5:d5:c9:98: d5:76:c4:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97svmNwM2KAZelNMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4ZGRmNGEtYjc2Mi00MGUwLWFkNTgtYzhiMWE2M2Y0 NjJmMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk YjE1NzE0ZmItOWUxYi00ODk3LTk1N2YtMzhkY2ViYmNhMjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntC3JkPnyCsEJtUn9LzHnnolCAd1CjsFLjv0 0MaBRZNy8ghypoMBVNDaXCOQRcG6giH0m8ps7HoQE9F7pxGMOP8xwqSqD+xgYvKp iJ2v2Ij5yDeICwz/I5Nlv+mFtfHJUwZyMz32Dwy7+kXW967UqOQPC9HUPcrHR1cu R+lgLxAwszEJT/YzBS6i04a84ZVs01giHOp8DEI0Y1ZOhCmxFpnDbAt00Xa0Vpmp Zcm3nMshrjb9g2iYi2ZxaM3twDwZxkiOewsvOc23c3aXmb6HE+Lcp3mRaccrwz7I 8MyFvavKJqMD0R011bB0X3qO8nvL4UBLNQRagSYyxpyHOl0rxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOejtrBSiIHedefpGv+qvkQmzJGeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhk ZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIxYTYzZjQ2MmYvOGNmZTg1MjAtNGYwNy0z ZjdmLWI4OTMtZmU5NDQ0Y2NiMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzg4ZGRmNGEtYjc2Mi00MGUwLWFk NTgtYzhiMWE2M2Y0NjJmL2M4OGRkZjRhLWI3NjItNDBlMC1hZDU4LWM4YjFhNjNm NDYyZi5jcmwwHwYDVR0jBBgwFoAUrjM9cNPHljH9gVsijdwOMQzpFOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhkZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIx YTYzZjQ2MmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9ukBCULlQyTXbNOv+0rHZrm4kY8VomKIK1LsAK58uZiXZt69M4elBD wiysFYyw2CVKVImHyRGiaiZa6YedDODgkgiZWmbTO29AnP/iAjIvZ0pDwXh/gJ4i PHbajsbaknw3uAhPlMRikMUf5cB5m0I5uUi/Uwl+Fm5fv1DUerZFZMmHG9NVBRei sQS6nkypt5xqe+gXqOHWmhl0dHp5iyTiHbsj1spydjnyyN7fdXFSlZXQlsx+JABx zYuQBPuT2Uxm0govvK8MmIqzSXKLgIwgjTD+voM81rly8SzMUdJirkn6RQ702F6P 8Sio2Wxz5ztTfg+Kg9s5tdXJmNV2xCA= -----END CERTIFICATE-----Generated at Wed Oct 14 09:09:10 2026 by rpki-client