$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b01b11e-2e82-4a15-a2cd-a9a29e4bb035/c8d766af-65c1-3400-be69-0614e5efea6f.roa File: c8d766af-65c1-3400-be69-0614e5efea6f.roa (raw, json) Hash identifier: CwWh0OYKqOSsYq6MGeP13UlgE6hS7Vt8/9xj0C1n7Dk= Subject key identifier: 99:22:CE:AD:8E:52:62:38:32:50:94:12:A1:48:01:3E:E4:7E:9C:78 Certificate issuer: /CN=5b01b11e-2e82-4a15-a2cd-a9a29e4bb035 Certificate serial: 010D0C9F4328584F70881A9ACEE07D935DE6C580 Authority key identifier: C0:D0:2B:7B:80:1B:AD:0D:5B:E9:3F:6B:95:60:15:48:A0:DC:11:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b01b11e-2e82-4a15-a2cd-a9a29e4bb035.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b01b11e-2e82-4a15-a2cd-a9a29e4bb035/c8d766af-65c1-3400-be69-0614e5efea6f.roa Signing time: Fri 09 Oct 2026 01:00:12 +0000 ROA not before: Fri 09 Oct 2026 01:00:12 +0000 ROA not after: Thu 07 Jan 2027 02:00:12 +0000 asID: 27206 IP address blocks: 168.151.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b01b11e-2e82-4a15-a2cd-a9a29e4bb035/5b01b11e-2e82-4a15-a2cd-a9a29e4bb035.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b01b11e-2e82-4a15-a2cd-a9a29e4bb035/5b01b11e-2e82-4a15-a2cd-a9a29e4bb035.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b01b11e-2e82-4a15-a2cd-a9a29e4bb035.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:88:1a:9a:ce:e0:7d:93:5d:e6:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b01b11e-2e82-4a15-a2cd-a9a29e4bb035 Validity Not Before: Oct 9 01:00:12 2026 GMT Not After : Jan 7 02:00:12 2027 GMT Subject: CN=7f372756-0f47-401d-8448-94734c95e6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a3:88:cc:62:a3:1b:26:ff:cd:bb:ee:f9:70: 16:50:65:0a:a6:a4:3c:4c:02:7a:91:4f:11:c3:d2: e5:fc:c3:e4:a0:8b:ab:b5:8b:57:a8:0a:93:6a:80: 30:be:47:0e:c6:d8:34:f2:ab:c5:40:d8:71:8e:5f: 53:5b:54:31:84:b3:23:be:7c:0a:de:1b:a8:1c:6d: fa:94:44:3a:24:2b:be:5a:eb:8d:77:66:6d:b8:9a: 98:c6:55:56:ff:4a:75:1e:ac:f8:68:49:06:18:eb: 65:bc:57:03:cf:95:bb:92:03:03:c6:f0:ab:ba:ec: f2:ce:7b:a6:ce:fb:00:d8:26:ec:d9:88:3d:1a:57: 43:82:3f:d3:40:aa:96:a5:52:6e:ef:e7:d9:08:de: e3:e2:43:b1:a3:43:5b:37:7e:95:71:43:6d:e2:33: 1f:cd:e5:66:66:61:d5:fa:ec:2a:34:f7:40:31:ff: 62:56:d1:cd:65:4e:8a:3b:22:02:f5:98:70:fc:ce: c6:80:40:b3:80:6d:ae:c1:13:c7:d7:a7:50:61:3b: 09:c4:17:1a:4c:94:5b:fd:c0:78:84:b4:a0:7a:93: e7:b3:0f:88:1e:fc:65:18:42:a6:80:04:92:38:3c: 52:4c:d1:ef:39:f3:0b:15:ba:16:4f:fd:d5:aa:22: 08:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:22:CE:AD:8E:52:62:38:32:50:94:12:A1:48:01:3E:E4:7E:9C:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b01b11e-2e82-4a15-a2cd-a9a29e4bb035/c8d766af-65c1-3400-be69-0614e5efea6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b01b11e-2e82-4a15-a2cd-a9a29e4bb035/5b01b11e-2e82-4a15-a2cd-a9a29e4bb035.crl X509v3 Authority Key Identifier: keyid:C0:D0:2B:7B:80:1B:AD:0D:5B:E9:3F:6B:95:60:15:48:A0:DC:11:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5b01b11e-2e82-4a15-a2cd-a9a29e4bb035.cer sbgp-ipAddrBlock: critical IPv4: 168.151.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:81:a7:e1:ad:01:03:35:d7:50:7f:e2:6c:1a:6e:24:2a:3b: 22:35:f1:26:34:3a:79:5e:71:ee:de:cd:40:15:fe:48:88:8a: 9c:7c:36:50:d8:60:4c:4c:9f:fd:b5:12:63:82:0a:6c:7d:d6: cd:56:91:b6:c9:4b:87:e8:da:a6:fb:4c:41:05:97:d9:ef:dc: 7c:a1:0a:96:6d:20:af:88:9e:05:24:73:ee:d3:0d:2f:2d:2e: aa:19:0a:bc:5a:ca:89:7b:84:ea:ec:e5:0f:15:d4:5d:71:a1: cd:b9:42:25:00:dd:b4:73:6a:a3:cb:df:32:24:77:d9:ec:e0: 5f:23:5e:11:12:07:34:ce:f8:2f:49:46:b0:87:61:6b:2d:74: 6a:ab:0b:21:c6:d4:e5:e5:59:a5:c0:14:66:ff:7b:69:da:3d: 45:45:66:09:d5:9a:5c:8d:65:79:e3:a3:67:9b:09:7c:ad:4c: bc:47:e8:08:3d:98:55:91:22:44:b0:52:27:83:27:2c:b9:ef: fa:0c:70:09:36:ae:1d:b6:72:a3:8e:0b:a6:1f:6d:4b:2f:6f: ef:30:13:38:70:a6:f7:f0:d9:b3:e0:d5:bf:4e:39:d3:97:da: 8c:4e:80:a5:34:08:46:4c:bf:9f:9f:1d:de:f0:ee:e1:76:63: 11:52:c5:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wiBqazuB9k13mxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWIwMWIxMWUtMmU4Mi00YTE1LWEyY2QtYTlhMjllNGJi MDM1MB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk N2YzNzI3NTYtMGY0Ny00MDFkLTg0NDgtOTQ3MzRjOTVlNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqOIzGKjGyb/zbvu+XAWUGUKpqQ8TAJ6kU8R w9Ll/MPkoIurtYtXqAqTaoAwvkcOxtg08qvFQNhxjl9TW1QxhLMjvnwK3huoHG36 lEQ6JCu+WuuNd2ZtuJqYxlVW/0p1Hqz4aEkGGOtlvFcDz5W7kgMDxvCruuzyznum zvsA2Cbs2Yg9GldDgj/TQKqWpVJu7+fZCN7j4kOxo0NbN36VcUNt4jMfzeVmZmHV +uwqNPdAMf9iVtHNZU6KOyIC9Zhw/M7GgECzgG2uwRPH16dQYTsJxBcaTJRb/cB4 hLSgepPnsw+IHvxlGEKmgASSODxSTNHvOfMLFboWT/3VqiIIqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJkizq2OUmI4MlCUEqFIAT7kfpx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81YjAx YjExZS0yZTgyLTRhMTUtYTJjZC1hOWEyOWU0YmIwMzUvYzhkNzY2YWYtNjVjMS0z NDAwLWJlNjktMDYxNGU1ZWZlYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWIwMWIxMWUtMmU4Mi00YTE1LWEy Y2QtYTlhMjllNGJiMDM1LzViMDFiMTFlLTJlODItNGExNS1hMmNkLWE5YTI5ZTRi YjAzNS5jcmwwHwYDVR0jBBgwFoAUwNAre4AbrQ1b6T9rlWAVSKDcEZMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS81YjAxYjExZS0yZTgyLTRhMTUtYTJjZC1hOWEy OWU0YmIwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJf+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeBp+GtAQM111B/4mwabiQqOyI18SY0Onlece7ezUAV/kiIipx8NlDY YExMn/21EmOCCmx91s1WkbbJS4fo2qb7TEEFl9nv3HyhCpZtIK+IngUkc+7TDS8t LqoZCrxayol7hOrs5Q8V1F1xoc25QiUA3bRzaqPL3zIkd9ns4F8jXhESBzTO+C9J RrCHYWstdGqrCyHG1OXlWaXAFGb/e2naPUVFZgnVmlyNZXnjo2ebCXytTLxH6Ag9 mFWRIkSwUieDJyy57/oMcAk2rh22cqOOC6YfbUsvb+8wEzhwpvfw2bPg1b9OOdOX 2oxOgKU0CEZMv5+fHd7w7uF2YxFSxQ4= -----END CERTIFICATE-----Generated at Sat Oct 10 13:17:06 2026 by rpki-client