$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2058e175-e84b-31ec-8f33-72886de9861a.roa File: 2058e175-e84b-31ec-8f33-72886de9861a.roa (raw, json) Hash identifier: 3l/H4yfJ9F2XmHR1ctZNfqK/mBQQgr2KEIkTFuF1YjQ= Subject key identifier: 73:B9:C7:40:D6:47:FB:13:7F:2F:2D:78:58:DA:C7:D7:E7:11:C9:AD Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584EF1822F98BEE78605D8F88E40 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2058e175-e84b-31ec-8f33-72886de9861a.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 6363 IP address blocks: 134.141.237.0/24 maxlen: 24 134.141.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:2f:98:be:e7:86:05:d8:f8:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=c00d6ed0-098f-4def-acbf-664bd2152875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:be:b5:37:ea:46:df:78:ef:a0:fa:85:5d: 2d:30:d5:7b:98:ed:6c:ce:9f:87:07:8b:de:d1:34: 6b:90:5d:a8:9c:82:05:9f:69:f4:9a:ec:3b:e1:5d: 6f:da:14:00:65:4e:aa:77:1d:5f:26:3c:14:72:8c: f1:9d:56:43:08:2f:b1:c8:af:d7:8a:cb:1b:a5:f1: 37:96:a9:9f:b7:d1:db:c8:60:ab:75:1c:5c:6a:c4: 01:e0:f3:e2:90:4f:fb:43:2f:e9:5a:df:7a:c7:48: f6:c6:6f:11:5c:20:a9:f7:de:70:dd:83:06:df:d3: 2c:a7:89:19:94:50:5c:9e:88:8c:52:4a:f0:0e:13: 54:22:73:5d:87:a9:ae:cd:51:50:a9:91:ea:f0:2d: 47:f0:21:6c:71:87:80:4c:3b:58:ef:bb:7d:0c:c5: 0f:e8:26:4d:e5:45:14:21:eb:44:c4:0a:fd:1e:cb: 90:63:78:ce:9a:de:f1:37:d9:1c:f2:0c:ac:08:7d: bb:6c:97:f7:ff:4e:88:78:62:22:d9:b7:12:4c:12: ca:86:13:3c:31:e6:0c:6b:24:98:a2:72:08:f5:91: 6a:22:af:9a:ea:69:10:b6:bc:27:a0:67:be:84:33: 70:1e:62:c5:95:6c:0e:4c:0b:04:ee:b3:5d:d1:12: 7f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B9:C7:40:D6:47:FB:13:7F:2F:2D:78:58:DA:C7:D7:E7:11:C9:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/2058e175-e84b-31ec-8f33-72886de9861a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv4: 134.141.237.0-134.141.238.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:f2:32:72:3a:76:93:b5:0d:1f:b0:68:8d:6b:9d:08:1b:11: 03:d4:63:72:ee:2e:71:88:11:c8:45:ac:99:08:31:63:19:63: cd:d2:52:8d:26:2d:ca:c4:aa:ee:6b:4b:99:d8:4d:f6:74:e4: d9:e6:f0:76:67:f7:94:2a:15:56:51:64:e6:18:2e:18:13:ed: 0e:0e:a9:c1:5c:45:48:fb:0f:61:50:68:b2:80:c1:77:73:07: d1:9f:f9:e7:8a:14:7c:e5:4e:be:de:b2:5a:f4:9a:be:be:6b: 89:23:fd:7b:e6:d4:96:81:25:d3:09:74:91:ee:b1:fd:77:3a: c3:72:d7:ee:c8:f6:e5:8a:20:6e:80:41:f0:14:1a:cd:23:ac: f9:43:dd:a0:2a:ee:f9:4b:10:3d:c8:a1:c3:ec:70:15:0b:55: 09:30:b3:dd:af:43:03:91:09:b3:5d:14:14:79:03:e8:02:2a: 9f:82:94:d8:34:43:46:f5:70:72:5b:90:75:01:21:34:0f:23: e9:50:1f:a1:26:45:44:e5:f7:cc:60:90:7f:1e:a7:2e:4d:29: 00:1e:63:34:d8:55:f5:85:18:5c:58:86:e1:07:55:0a:a1:15: de:50:ec:8b:d3:8a:e6:29:08:ff:2b:d6:cf:c8:26:ce:cf:5b: 8a:a1:92:fd -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7xgi+YvueGBdj4jkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk YzAwZDZlZDAtMDk4Zi00ZGVmLWFjYmYtNjY0YmQyMTUyODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvm+tTfqRt9476D6hV0tMNV7mO1szp+HB4ve 0TRrkF2onIIFn2n0muw74V1v2hQAZU6qdx1fJjwUcozxnVZDCC+xyK/XissbpfE3 lqmft9HbyGCrdRxcasQB4PPikE/7Qy/pWt96x0j2xm8RXCCp995w3YMG39Msp4kZ lFBcnoiMUkrwDhNUInNdh6muzVFQqZHq8C1H8CFscYeATDtY77t9DMUP6CZN5UUU IetExAr9HsuQY3jOmt7xN9kc8gysCH27bJf3/06IeGIi2bcSTBLKhhM8MeYMaySY onII9ZFqIq+a6mkQtrwnoGe+hDNwHmLFlWwOTAsE7rNd0RJ/HwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFHO5x0DWR/sTfy8teFjax9fnEcmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvMjA1OGUxNzUtZTg0Yi0z MWVjLThmMzMtNzI4ODZkZTk4NjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACGje0D BACGje4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAlfIycjp2k7UNH7BojWudCBsRA9Rjcu4ucYgRyEWsmQgx YxljzdJSjSYtysSq7mtLmdhN9nTk2ebwdmf3lCoVVlFk5hguGBPtDg6pwVxFSPsP YVBosoDBd3MH0Z/554oUfOVOvt6yWvSavr5riSP9e+bUloEl0wl0ke6x/Xc6w3LX 7sj25YogboBB8BQazSOs+UPdoCru+UsQPcihw+xwFQtVCTCz3a9DA5EJs10UFHkD 6AIqn4KU2DRDRvVwcluQdQEhNA8j6VAfoSZFROX3zGCQfx6nLk0pAB5jNNhV9YUY XFiG4QdVCqEV3lDsi9OK5ikI/yvWz8gmzs9biqGS/Q== -----END CERTIFICATE-----Generated at Sat Sep 26 12:01:37 2026 by rpki-client