$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9d5d9a0c-ba9b-400f-b0b3-592b437c05df/e0f657e7-d925-3a76-9e65-99ea5cce1b81.roa File: e0f657e7-d925-3a76-9e65-99ea5cce1b81.roa (raw, json) Hash identifier: GOToDcjkr7ubBBObCyM7Rh+vOnahGGUj4a0ZkCklCTQ= Subject key identifier: D5:AC:CB:F9:98:B6:4D:6B:10:B5:07:EB:DB:55:F8:2B:B7:93:DE:A8 Certificate issuer: /CN=9d5d9a0c-ba9b-400f-b0b3-592b437c05df Certificate serial: 010D0C9F4328584F4973F1D1E5B7273108B26E80 Authority key identifier: 2C:1D:58:D4:BF:F9:8B:50:2D:27:A0:22:72:86:33:E9:7C:98:7C:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9d5d9a0c-ba9b-400f-b0b3-592b437c05df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9d5d9a0c-ba9b-400f-b0b3-592b437c05df/e0f657e7-d925-3a76-9e65-99ea5cce1b81.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63255 IP address blocks: 158.146.84.0/24 maxlen: 24 158.146.85.0/24 maxlen: 24 158.146.86.0/24 maxlen: 24 158.146.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9d5d9a0c-ba9b-400f-b0b3-592b437c05df/9d5d9a0c-ba9b-400f-b0b3-592b437c05df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9d5d9a0c-ba9b-400f-b0b3-592b437c05df/9d5d9a0c-ba9b-400f-b0b3-592b437c05df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9d5d9a0c-ba9b-400f-b0b3-592b437c05df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:f1:d1:e5:b7:27:31:08:b2:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5d9a0c-ba9b-400f-b0b3-592b437c05df Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=db77b77c-19b3-4071-b6f7-da1a0cf62a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a4:97:7f:cd:c8:97:8f:7e:d1:7a:5f:bb:59: 85:ed:e4:8f:a9:2b:be:b5:ad:9e:20:f4:27:2b:43: 1d:61:a0:4b:67:ac:58:40:88:32:b0:6a:c8:ab:08: 62:7b:b1:95:94:da:85:3a:7f:43:c8:3c:9a:2d:1f: f6:c6:67:cb:88:e4:fd:f8:54:6e:3c:e8:7f:0a:8c: 56:46:d7:59:57:ee:2f:52:7b:b6:df:12:78:0d:5f: b9:55:b5:dc:1f:fd:9c:28:8d:53:23:19:9d:63:a0: 8f:2d:5e:88:d1:77:bb:df:f8:3d:8f:7c:03:c5:27: 91:0a:71:21:a3:4e:10:7e:3c:d6:07:6d:a7:8b:59: 85:1d:b1:ef:3c:d1:f4:66:c2:fe:c1:8d:ec:08:b0: 54:91:c3:00:1b:7f:58:e9:36:9c:3c:05:25:f3:2e: 40:37:9e:48:20:d4:b8:ee:d7:4b:76:79:10:c4:6f: 0e:ad:81:08:93:7c:b7:3d:9a:39:e1:82:38:d9:20: c6:5a:ff:d4:98:00:0e:c0:3a:f4:df:6a:28:e6:19: 9f:ca:b9:c1:46:92:77:4c:a9:ad:d4:a3:86:af:9e: cd:06:ac:5b:1a:56:6b:f2:09:32:85:a2:3b:cf:8d: 7b:3b:d7:aa:e5:24:50:a3:4c:bd:c4:c5:a3:c8:c7: 4c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AC:CB:F9:98:B6:4D:6B:10:B5:07:EB:DB:55:F8:2B:B7:93:DE:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9d5d9a0c-ba9b-400f-b0b3-592b437c05df/e0f657e7-d925-3a76-9e65-99ea5cce1b81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9d5d9a0c-ba9b-400f-b0b3-592b437c05df/9d5d9a0c-ba9b-400f-b0b3-592b437c05df.crl X509v3 Authority Key Identifier: keyid:2C:1D:58:D4:BF:F9:8B:50:2D:27:A0:22:72:86:33:E9:7C:98:7C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/9d5d9a0c-ba9b-400f-b0b3-592b437c05df.cer sbgp-ipAddrBlock: critical IPv4: 158.146.84.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:31:2b:c4:14:ff:86:89:44:32:d4:6f:86:de:b1:fe:45:2b: 5f:1a:45:9c:5c:40:3e:c2:78:39:ba:aa:0c:b0:4a:f6:91:3d: 6e:a8:bc:2c:a9:64:a0:99:16:4e:9a:72:fe:24:7e:6f:a2:d5: 7c:fc:cf:f0:14:4e:33:37:38:2e:c0:34:34:e7:8a:b1:70:dc: 4e:16:c4:a1:ad:1e:b7:a7:ab:67:e1:2c:26:17:c4:e5:94:1c: d3:76:15:9d:f7:47:28:a9:63:15:1c:aa:60:da:59:2a:59:b7: 6f:8a:b8:33:ee:cf:55:ce:cb:19:75:55:70:76:16:27:40:fa: 09:65:54:02:6d:2e:10:62:c2:f7:b4:35:ae:87:c2:0a:dc:72: 25:e4:e9:67:20:15:22:a7:39:07:7d:b6:66:c3:7c:17:b7:db: 7a:32:89:71:17:2c:62:db:09:08:a6:02:f8:9a:b7:6d:17:08: ea:4a:73:3a:61:9c:a3:e8:79:67:95:c2:a8:69:b4:8e:f7:68: d3:e5:fc:17:dc:54:91:82:36:61:18:3c:6b:54:87:41:f6:cc: a1:4f:4b:f8:8b:16:15:f7:6e:c5:ff:5d:b2:f1:54:60:aa:26: 16:6d:86:96:6b:fc:a3:0e:88:33:52:ca:e4:2c:17:cc:5a:a3: 9d:d8:00:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc/HR5bcnMQiyboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWQ1ZDlhMGMtYmE5Yi00MDBmLWIwYjMtNTkyYjQzN2Mw NWRmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGI3N2I3N2MtMTliMy00MDcxLWI2ZjctZGExYTBjZjYyYTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6SXf83Il49+0Xpfu1mF7eSPqSu+ta2eIPQn K0MdYaBLZ6xYQIgysGrIqwhie7GVlNqFOn9DyDyaLR/2xmfLiOT9+FRuPOh/CoxW RtdZV+4vUnu23xJ4DV+5VbXcH/2cKI1TIxmdY6CPLV6I0Xe73/g9j3wDxSeRCnEh o04QfjzWB22ni1mFHbHvPNH0ZsL+wY3sCLBUkcMAG39Y6TacPAUl8y5AN55IINS4 7tdLdnkQxG8OrYEIk3y3PZo54YI42SDGWv/UmAAOwDr032oo5hmfyrnBRpJ3TKmt 1KOGr57NBqxbGlZr8gkyhaI7z417O9eq5SRQo0y9xMWjyMdMBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWsy/mYtk1rELUH69tV+Cu3k96oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85ZDVk OWEwYy1iYTliLTQwMGYtYjBiMy01OTJiNDM3YzA1ZGYvZTBmNjU3ZTctZDkyNS0z YTc2LTllNjUtOTllYTVjY2UxYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOWQ1ZDlhMGMtYmE5Yi00MDBmLWIw YjMtNTkyYjQzN2MwNWRmLzlkNWQ5YTBjLWJhOWItNDAwZi1iMGIzLTU5MmI0Mzdj MDVkZi5jcmwwHwYDVR0jBBgwFoAULB1Y1L/5i1AtJ6AicoYz6XyYfHwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85ZDVkOWEwYy1iYTliLTQwMGYtYjBiMy01OTJi NDM3YzA1ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnpJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8xK8QU/4aJRDLUb4besf5FK18aRZxcQD7CeDm6qgywSvaRPW6ovCyp ZKCZFk6acv4kfm+i1Xz8z/AUTjM3OC7ANDTnirFw3E4WxKGtHrenq2fhLCYXxOWU HNN2FZ33RyipYxUcqmDaWSpZt2+KuDPuz1XOyxl1VXB2FidA+gllVAJtLhBiwve0 Na6HwgrcciXk6WcgFSKnOQd9tmbDfBe323oyiXEXLGLbCQimAviat20XCOpKczph nKPoeWeVwqhptI73aNPl/BfcVJGCNmEYPGtUh0H2zKFPS/iLFhX3bsX/XbLxVGCq JhZthpZr/KMOiDNSyuQsF8xao53YAP0= -----END CERTIFICATE-----Generated at Sun Sep 27 18:36:22 2026 by rpki-client