$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa File: 8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa (raw, json) Hash identifier: ktUKPOa94PKVw/ezV7oZX3YZkjiZZTlVDgj511yY/UY= Subject key identifier: 82:51:41:AF:83:D8:D7:5C:E6:C7:01:55:FC:12:7F:15:AA:84:93:25 Certificate issuer: /CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Certificate serial: 010D0C9F4328584B970CE44E30DF61C3EC254B8D Authority key identifier: AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 26457 IP address blocks: 158.51.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:e4:4e:30:df:61:c3:ec:25:4b:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c88ddf4a-b762-40e0-ad58-c8b1a63f462f Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=5914cc79-cdc6-40af-b0e7-a1983467e3c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d4:90:c2:f2:30:58:62:59:ff:f4:bc:3a:fd: 07:61:4a:dc:21:3a:0d:29:fa:56:67:9c:d2:ad:46: 8f:f7:27:42:e8:08:17:b5:e7:78:b1:9e:65:96:91: dc:d6:9a:c3:1a:9b:a7:bf:f2:70:46:da:2c:5f:cb: d5:35:aa:b5:8f:ab:2b:74:a9:a8:df:9a:59:5b:70: ca:dc:52:d4:47:b8:5d:22:e1:7d:de:5c:45:87:54: 71:b0:56:63:0c:0c:b1:ce:0b:2f:48:e4:e3:21:72: cf:cf:4e:19:41:59:06:73:8e:40:56:c2:e4:72:c5: 27:5c:e3:67:0c:ea:77:6f:04:11:55:04:b0:48:7e: d8:bf:cf:81:be:17:6a:bc:ad:d8:0e:94:b5:70:2d: 43:95:25:e6:cb:77:18:07:7c:6c:38:8a:e0:42:b4: 9d:39:47:31:50:d0:09:e9:d9:dc:4d:75:54:d3:91: 34:4f:fe:a9:30:7d:b7:a9:7b:04:9b:24:81:74:7a: 50:ca:0a:4d:f7:6a:02:d1:74:02:3c:0e:4b:46:9f: ae:c8:91:fe:af:df:32:fa:18:df:55:f6:84:ed:23: 22:5b:64:ad:82:d4:60:e4:b7:5b:3d:3a:48:8f:c0: 54:82:3d:c8:b8:b6:c5:ad:79:0b:fb:0f:70:35:84: 65:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:51:41:AF:83:D8:D7:5C:E6:C7:01:55:FC:12:7F:15:AA:84:93:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/8cfe8520-4f07-3f7f-b893-fe9444ccb384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.crl X509v3 Authority Key Identifier: keyid:AE:33:3D:70:D3:C7:96:31:FD:81:5B:22:8D:DC:0E:31:0C:E9:14:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c88ddf4a-b762-40e0-ad58-c8b1a63f462f.cer sbgp-ipAddrBlock: critical IPv4: 158.51.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:b1:25:18:6c:6a:3c:2f:a5:11:5a:39:8e:52:0a:ce:76:26: 83:2a:06:bd:c3:9f:d9:30:2c:5f:24:76:a3:c0:8f:7f:d0:f9: 4f:3f:85:98:ba:2f:85:ce:c1:2c:72:fd:53:31:96:2f:80:16: 61:d4:35:21:60:c5:90:51:27:22:db:9b:9b:39:25:b7:ed:2c: fe:a9:0e:b5:c2:42:d8:c8:74:84:5e:28:ed:8b:12:13:09:c0: 96:24:62:60:ac:6d:71:e2:44:e7:26:92:a9:08:ac:2d:60:c9: 8e:b7:6f:02:61:14:c8:f8:06:ad:03:d9:ee:fa:04:99:08:cb: 05:24:1e:1d:ee:e0:d0:c0:3f:fa:dd:6c:67:46:fe:db:8e:50: ec:d7:fa:2f:9b:0f:e5:dd:44:c8:f2:20:b7:3f:77:58:20:55: 20:2a:79:fd:2c:be:f6:1a:c1:40:52:78:87:cb:40:fb:a4:f5: fe:65:a9:45:1f:2f:f0:6e:37:64:87:7c:32:0e:59:b9:5f:b4: 56:c4:c7:e2:0b:e5:cf:c7:1f:60:b2:ca:c3:d9:98:e8:89:19: 1e:da:42:63:f5:2b:ff:99:c9:17:93:13:28:aa:5a:f1:45:69: d3:6a:c1:12:e0:15:b3:38:fa:09:3a:9c:08:68:f5:53:46:f0: c9:c7:ea:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDOROMN9hw+wlS40wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg4ZGRmNGEtYjc2Mi00MGUwLWFkNTgtYzhiMWE2M2Y0 NjJmMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NTkxNGNjNzktY2RjNi00MGFmLWIwZTctYTE5ODM0NjdlM2M2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tSQwvIwWGJZ//S8Ov0HYUrcIToNKfpWZ5zS rUaP9ydC6AgXted4sZ5llpHc1prDGpunv/JwRtosX8vVNaq1j6srdKmo35pZW3DK 3FLUR7hdIuF93lxFh1RxsFZjDAyxzgsvSOTjIXLPz04ZQVkGc45AVsLkcsUnXONn DOp3bwQRVQSwSH7Yv8+BvhdqvK3YDpS1cC1DlSXmy3cYB3xsOIrgQrSdOUcxUNAJ 6dncTXVU05E0T/6pMH23qXsEmySBdHpQygpN92oC0XQCPA5LRp+uyJH+r98y+hjf VfaE7SMiW2StgtRg5LdbPTpIj8BUgj3IuLbFrXkL+w9wNYRlpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJRQa+D2Ndc5scBVfwSfxWqhJMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhk ZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIxYTYzZjQ2MmYvOGNmZTg1MjAtNGYwNy0z ZjdmLWI4OTMtZmU5NDQ0Y2NiMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzg4ZGRmNGEtYjc2Mi00MGUwLWFk NTgtYzhiMWE2M2Y0NjJmL2M4OGRkZjRhLWI3NjItNDBlMC1hZDU4LWM4YjFhNjNm NDYyZi5jcmwwHwYDVR0jBBgwFoAUrjM9cNPHljH9gVsijdwOMQzpFOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jODhkZGY0YS1iNzYyLTQwZTAtYWQ1OC1jOGIx YTYzZjQ2MmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWxJRhsajwvpRFaOY5SCs52JoMqBr3Dn9kwLF8kdqPAj3/Q+U8/hZi6 L4XOwSxy/VMxli+AFmHUNSFgxZBRJyLbm5s5JbftLP6pDrXCQtjIdIReKO2LEhMJ wJYkYmCsbXHiROcmkqkIrC1gyY63bwJhFMj4Bq0D2e76BJkIywUkHh3u4NDAP/rd bGdG/tuOUOzX+i+bD+XdRMjyILc/d1ggVSAqef0svvYawUBSeIfLQPuk9f5lqUUf L/BuN2SHfDIOWblftFbEx+IL5c/HH2CyysPZmOiJGR7aQmP1K/+ZyReTEyiqWvFF adNqwRLgFbM4+gk6nAho9VNG8MnH6mc= -----END CERTIFICATE-----Generated at Wed Nov 5 06:56:04 2025 by rpki-client