$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e441f044-6d32-3347-bf26-be9460c0e8b0.roa File: e441f044-6d32-3347-bf26-be9460c0e8b0.roa (raw, json) Hash identifier: z5TkJuBNbPwJYj4AurOby/uDSA/DUPpcorA0ShMurV0= Subject key identifier: 6C:7D:2A:F9:F1:B1:76:F3:56:F0:2A:BB:A5:62:23:F6:4E:2F:FE:BA Certificate issuer: /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Certificate serial: 010D0C9F4328584F9BCDE9483447927FFAA78F00 Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e441f044-6d32-3347-bf26-be9460c0e8b0.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 8075 IP address blocks: 165.125.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:e9:48:34:47:92:7f:fa:a7:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=96e6d05d-cc74-456e-9562-f4941a2ecb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1c:70:86:4d:ed:6b:00:b4:8e:b1:46:02:79: 63:e8:06:fd:93:0b:29:0d:69:12:3c:57:07:0e:53: 59:cd:16:45:af:1f:4a:f7:3b:4a:2c:7c:53:be:ef: 5b:89:4b:2b:80:2e:f4:bd:8d:3c:07:85:3f:7c:1b: 24:8e:b7:2e:45:d7:d8:ca:31:24:77:4d:59:05:5f: bd:69:a3:b8:f2:53:2f:4e:05:70:54:f3:5b:4c:fb: f8:73:51:17:57:5a:b3:c0:d8:1b:2c:aa:dd:58:0b: 29:c7:25:6f:e2:75:36:34:ad:a9:94:41:70:b9:11: 11:23:6d:e1:12:99:54:ba:62:e6:23:76:a4:74:8e: ac:16:f7:3f:98:06:48:f4:a1:1b:79:81:17:2b:9e: 4c:80:85:69:12:dd:cc:ef:c7:88:55:90:f0:52:27: 2a:0a:a1:56:31:87:6e:95:a6:48:95:76:2b:4b:6a: 8b:cc:19:fd:9f:b3:e9:6a:ec:cd:54:9c:1e:b5:70: 9f:9e:f9:e0:3f:d4:f9:15:78:75:47:21:52:c2:6a: af:8e:41:d4:91:9f:1f:35:cb:cd:ad:ab:48:54:eb: 96:04:11:01:e2:a2:e0:db:1a:d5:be:58:ff:4e:e4: e8:0b:6d:99:1e:0d:b1:4e:4c:5b:eb:77:63:80:eb: 4a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7D:2A:F9:F1:B1:76:F3:56:F0:2A:BB:A5:62:23:F6:4E:2F:FE:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e441f044-6d32-3347-bf26-be9460c0e8b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl X509v3 Authority Key Identifier: keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer sbgp-ipAddrBlock: critical IPv4: 165.125.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:c8:43:e8:a4:85:8c:2e:33:c6:00:df:5d:ae:aa:df:9e:ce: bd:18:19:04:8a:a8:b9:c4:e3:c9:f4:31:7c:d3:b4:c9:e3:7c: 1e:8e:64:59:f1:91:e4:17:26:86:b4:ed:28:08:68:f5:32:2d: 99:34:37:e9:6c:40:d9:65:bd:fd:3c:35:89:3e:2c:02:f9:0f: 3b:d8:34:b7:fd:5e:48:d9:fa:9d:63:07:af:ee:4b:50:02:76: 42:30:0d:a9:91:2b:d9:20:81:7c:c0:c0:af:a7:c8:94:a4:e7: 68:72:f1:df:bc:c0:d0:93:ce:33:a0:78:80:7d:f5:b2:76:07: 17:d4:a9:df:c5:56:ad:0b:59:c1:8f:70:74:f4:30:00:6c:aa: f2:f5:26:25:23:90:8a:44:29:8e:52:40:9e:3b:b0:a1:73:86: ac:05:6f:0b:e2:f3:b3:fc:2e:93:05:d0:74:d5:c6:14:88:bd: ad:5f:b4:19:4f:a1:4b:33:96:a3:9d:39:f7:69:df:d6:59:80: e4:c6:b6:c9:29:cf:4b:03:de:77:7f:b2:4b:23:e4:b5:0c:5c: f7:e7:0f:0a:c4:36:7c:f8:a7:23:0b:41:29:f8:6c:d6:00:7d: 86:47:ed:1e:59:04:a2:41:4b:0a:59:cd:cf:9f:cd:d9:dd:60: 3a:83:c6:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bzelINEeSf/qnjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg1OGIwN2YtNzc1ZS00YzA1LWFlNDgtZDQzYjVkOTM4 YjliMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk OTZlNmQwNWQtY2M3NC00NTZlLTk1NjItZjQ5NDFhMmVjYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBxwhk3tawC0jrFGAnlj6Ab9kwspDWkSPFcH DlNZzRZFrx9K9ztKLHxTvu9biUsrgC70vY08B4U/fBskjrcuRdfYyjEkd01ZBV+9 aaO48lMvTgVwVPNbTPv4c1EXV1qzwNgbLKrdWAspxyVv4nU2NK2plEFwuRERI23h EplUumLmI3akdI6sFvc/mAZI9KEbeYEXK55MgIVpEt3M78eIVZDwUicqCqFWMYdu laZIlXYrS2qLzBn9n7PpauzNVJwetXCfnvngP9T5FXh1RyFSwmqvjkHUkZ8fNcvN ratIVOuWBBEB4qLg2xrVvlj/TuToC22ZHg2xTkxb63djgOtK7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGx9KvnxsXbzVvAqu6ViI/ZOL/66MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wODU4 YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5MzhiOWIvZTQ0MWYwNDQtNmQzMi0z MzQ3LWJmMjYtYmU5NDYwYzBlOGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDg1OGIwN2YtNzc1ZS00YzA1LWFl NDgtZDQzYjVkOTM4YjliLzA4NThiMDdmLTc3NWUtNGMwNS1hZTQ4LWQ0M2I1ZDkz OGI5Yi5jcmwwHwYDVR0jBBgwFoAUzm+k9LgBLNbG78YySi2NeLwdDYswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNi NWQ5MzhiOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApX04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbIQ+ikhYwuM8YA312uqt+ezr0YGQSKqLnE48n0MXzTtMnjfB6OZFnx keQXJoa07SgIaPUyLZk0N+lsQNllvf08NYk+LAL5DzvYNLf9XkjZ+p1jB6/uS1AC dkIwDamRK9kggXzAwK+nyJSk52hy8d+8wNCTzjOgeIB99bJ2BxfUqd/FVq0LWcGP cHT0MABsqvL1JiUjkIpEKY5SQJ47sKFzhqwFbwvi87P8LpMF0HTVxhSIva1ftBlP oUszlqOdOfdp39ZZgOTGtskpz0sD3nd/sksj5LUMXPfnDwrENnz4pyMLQSn4bNYA fYZH7R5ZBKJBSwpZzc+fzdndYDqDxvg= -----END CERTIFICATE-----Generated at Sun Oct 25 06:09:24 2026 by rpki-client