$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/9c704b07-187e-39ac-b560-db3659b3dc4d.roa File: 9c704b07-187e-39ac-b560-db3659b3dc4d.roa (raw, json) Hash identifier: 5qLglg1tyKCStohDByw44jx/v9lX8Jju3FQsiJ+gT3g= Subject key identifier: 84:BD:14:4B:16:CB:81:62:CC:EE:DB:0E:C5:6F:46:B4:BF:D5:65:3D Certificate issuer: /CN=1d394508-6160-4e82-89e3-165fa2784b30 Certificate serial: 010D0C9F4328584FB3A663CA2DCB2B1016D96900 Authority key identifier: A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/9c704b07-187e-39ac-b560-db3659b3dc4d.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 399214 IP address blocks: 158.51.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:63:ca:2d:cb:2b:10:16:d9:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d394508-6160-4e82-89e3-165fa2784b30 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=2ab02543-c5b6-4064-8f82-f94f74bf872d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:20:8c:45:06:52:30:ca:1e:5c:62:54:08:e6: f7:da:c2:be:9c:08:3f:6f:bc:74:91:51:36:29:a4: 7f:aa:a7:2f:ad:13:d8:13:96:2b:cf:4f:c3:bc:e3: fe:83:4c:fc:af:eb:5e:3c:f9:57:2e:60:e2:7a:12: a6:e6:da:cb:f0:f1:14:c3:24:47:42:9f:ff:e9:20: 7b:88:ec:cf:04:6b:ef:19:ff:41:e5:f0:ea:ed:c6: 4e:8f:83:e9:9c:65:0d:bc:d2:2b:cf:60:89:28:b4: 3a:7b:61:25:fb:b5:6c:20:d9:e4:06:47:1d:ae:d6: 91:93:dd:4a:d8:27:e6:f2:dc:04:69:7f:9d:64:07: a8:3d:73:ed:90:87:5f:20:d7:33:e1:7b:ad:23:0c: ca:7e:c7:dc:67:0c:ed:c3:61:4a:ae:96:5a:23:a0: 96:08:80:e5:0d:fd:d0:a2:29:b5:ae:27:ec:57:ab: 23:d1:e8:01:ba:29:2a:fa:ae:45:35:f7:18:30:1d: 35:6e:1d:f0:88:51:f6:1f:0d:59:48:fe:c0:6c:aa: 5d:20:d3:71:1c:60:42:8f:53:bc:f5:69:c4:7e:11: 06:05:1c:72:35:9a:65:5c:5f:10:e3:3c:fd:bd:8b: c9:28:aa:ea:e3:03:58:df:db:58:f6:16:5e:a3:2e: 7b:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BD:14:4B:16:CB:81:62:CC:EE:DB:0E:C5:6F:46:B4:BF:D5:65:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/9c704b07-187e-39ac-b560-db3659b3dc4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30/1d394508-6160-4e82-89e3-165fa2784b30.crl X509v3 Authority Key Identifier: keyid:A7:07:57:CD:77:D3:59:F3:D3:90:A9:EB:AB:C5:B6:1D:F8:B9:28:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d394508-6160-4e82-89e3-165fa2784b30.cer sbgp-ipAddrBlock: critical IPv4: 158.51.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:86:df:4d:ef:cf:33:15:94:05:eb:41:9d:f1:7d:8f:32:3e: 5a:1e:b7:36:8a:10:65:f9:77:80:13:1f:7b:d6:65:d7:88:bf: db:81:62:ec:59:c1:b0:b8:30:c3:c7:7f:9b:03:2d:9b:8f:77: 67:30:f1:b4:37:a8:2d:10:dd:02:fe:83:a0:7f:0a:99:6c:61: 9a:f4:83:d8:4d:88:19:dd:63:d4:bb:9f:9f:bd:d8:76:0b:e4: 8e:28:a1:38:59:49:f2:91:a3:11:b7:fa:43:76:88:fa:8c:ce: 84:1d:e0:13:5f:94:dc:ab:29:42:49:a3:d5:2e:72:ad:44:35: e2:5f:91:70:85:8a:ed:7d:7c:91:19:01:c9:34:35:69:0c:08: 26:4b:5d:11:b0:09:eb:27:bb:b3:ed:67:20:45:9f:3f:db:ff: fe:0a:7f:8d:cc:5f:84:b3:0f:70:91:27:3f:b8:3f:fe:2f:4d: 92:85:36:91:f5:4f:98:89:7d:5e:51:25:ce:2b:dd:d6:9f:47: 58:2a:2a:17:1c:13:af:d6:e9:92:78:8a:18:48:f6:05:95:75: 7c:8e:db:40:2c:29:db:b1:15:1b:f6:2f:6f:1e:81:37:e1:df: fb:8c:b3:cb:ac:95:2e:71:d9:32:23:97:99:86:af:c4:b1:9e: c6:57:14:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpmPKLcsrEBbZaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQzOTQ1MDgtNjE2MC00ZTgyLTg5ZTMtMTY1ZmEyNzg0 YjMwMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk MmFiMDI1NDMtYzViNi00MDY0LThmODItZjk0Zjc0YmY4NzJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyCMRQZSMMoeXGJUCOb32sK+nAg/b7x0kVE2 KaR/qqcvrRPYE5Yrz0/DvOP+g0z8r+tePPlXLmDiehKm5trL8PEUwyRHQp//6SB7 iOzPBGvvGf9B5fDq7cZOj4PpnGUNvNIrz2CJKLQ6e2El+7VsINnkBkcdrtaRk91K 2Cfm8twEaX+dZAeoPXPtkIdfINcz4XutIwzKfsfcZwztw2FKrpZaI6CWCIDlDf3Q oim1rifsV6sj0egBuikq+q5FNfcYMB01bh3wiFH2Hw1ZSP7AbKpdINNxHGBCj1O8 9WnEfhEGBRxyNZplXF8Q4zz9vYvJKKrq4wNY39tY9hZeoy572QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS9FEsWy4FizO7bDsVvRrS/1WU9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5 NDUwOC02MTYwLTRlODItODllMy0xNjVmYTI3ODRiMzAvOWM3MDRiMDctMTg3ZS0z OWFjLWI1NjAtZGIzNjU5YjNkYzRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQzOTQ1MDgtNjE2MC00ZTgyLTg5 ZTMtMTY1ZmEyNzg0YjMwLzFkMzk0NTA4LTYxNjAtNGU4Mi04OWUzLTE2NWZhMjc4 NGIzMC5jcmwwHwYDVR0jBBgwFoAUpwdXzXfTWfPTkKnrq8W2Hfi5KEUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDM5NDUwOC02MTYwLTRlODItODllMy0xNjVm YTI3ODRiMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjMKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWG303vzzMVlAXrQZ3xfY8yPloetzaKEGX5d4ATH3vWZdeIv9uBYuxZ wbC4MMPHf5sDLZuPd2cw8bQ3qC0Q3QL+g6B/CplsYZr0g9hNiBndY9S7n5+92HYL 5I4ooThZSfKRoxG3+kN2iPqMzoQd4BNflNyrKUJJo9Uucq1ENeJfkXCFiu19fJEZ Ack0NWkMCCZLXRGwCesnu7PtZyBFnz/b//4Kf43MX4SzD3CRJz+4P/4vTZKFNpH1 T5iJfV5RJc4r3dafR1gqKhccE6/W6ZJ4ihhI9gWVdXyO20AsKduxFRv2L28egTfh 3/uMs8uslS5x2TIjl5mGr8SxnsZXFAg= -----END CERTIFICATE-----Generated at Mon Nov 2 14:29:22 2026 by rpki-client