$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa File: a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa (raw, json) Hash identifier: nCLN3kRfwP86etwGlLMWmamL4d4cQSbpfOog8U3enp0= Subject key identifier: 4D:52:22:D2:4C:16:FA:3F:B5:37:EE:86:26:01:39:FB:72:51:12:D2 Certificate issuer: /CN=d886f3a2-7325-4b74-8802-19528a9f380c Certificate serial: 010D0C9F4328584B4BAC5E0BABB174F96A57F300 Authority key identifier: 70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 397735 IP address blocks: 158.51.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:5e:0b:ab:b1:74:f9:6a:57:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d886f3a2-7325-4b74-8802-19528a9f380c Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=f5c43990-a9fa-4b3e-9054-0d43c08bf22e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:7d:44:e8:58:d8:9b:f5:cf:44:cf:7f:70: ea:88:24:16:b8:b5:eb:a4:96:13:8f:a1:d4:a1:c8: 89:05:58:b5:a9:8d:8e:48:41:b9:3d:e4:4b:6d:92: 4a:40:df:a7:49:07:e4:39:95:c0:3f:d7:d3:bf:07: cf:a8:90:66:bf:20:29:bc:de:38:58:54:9c:32:9d: f6:52:35:77:bf:13:55:b6:2d:4e:5f:94:8a:9e:1a: 20:bc:8a:00:c8:e4:76:a5:7e:b9:73:23:e8:02:22: 5a:50:56:c7:b5:34:68:21:76:f3:73:38:01:9d:58: 03:f0:a7:7f:78:4f:a2:dd:7b:24:3b:59:e6:b8:80: 0a:bc:2d:87:b4:79:50:37:26:6d:b2:40:69:e4:72: fa:63:da:3a:15:4a:5f:9e:14:db:83:2a:01:a2:a0: b9:71:f8:20:71:23:f4:43:61:06:f7:15:c3:6a:9c: cb:50:af:30:35:94:27:63:57:e1:3b:a2:68:cb:78: 85:9e:40:56:3b:40:c4:5d:87:ee:2a:8a:1d:2b:47: 58:0d:88:f3:6b:b7:dc:72:ef:2b:60:a7:b3:79:28: da:13:ab:d7:af:eb:a0:59:16:51:96:26:12:43:f8: f5:44:d5:6d:80:95:eb:76:81:83:a2:b3:c6:61:22: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:52:22:D2:4C:16:FA:3F:B5:37:EE:86:26:01:39:FB:72:51:12:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl X509v3 Authority Key Identifier: keyid:70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer sbgp-ipAddrBlock: critical IPv4: 158.51.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8e:12:5e:e9:97:2c:e9:9b:8c:d8:76:ca:61:3e:69:54:e0: d3:08:58:68:b3:91:dc:7c:4a:7e:a0:5f:93:97:07:6a:cd:6a: 37:87:f4:b9:fc:d1:5e:15:52:e0:f4:9e:b9:2e:ee:54:07:93: a9:47:9a:3b:50:cd:cb:aa:64:f3:cd:d6:2c:35:48:93:1c:22: 41:ed:b9:56:39:5e:90:2d:2d:49:87:54:d6:2b:9b:a9:60:2f: 7c:c3:d1:a0:78:6b:7c:25:3b:ed:21:55:15:bd:c4:d2:d7:25: 16:6b:45:75:bb:98:d6:77:b2:b5:db:16:cf:0e:54:6a:25:0a: e6:e2:d6:af:3e:27:19:bd:ed:77:ee:d5:35:1e:a4:67:0b:65: fc:22:21:74:ae:07:70:0d:ef:e4:5b:5e:a8:1a:38:da:9e:0e: a9:c7:6e:b5:9e:50:12:ff:82:33:9f:c7:f4:67:91:88:11:59: 59:58:0b:33:c7:74:9e:5e:c7:bf:b7:06:48:64:22:e0:82:d1: 33:80:e2:50:4c:f9:83:76:07:b0:b3:e4:36:50:87:8b:4e:d9: 66:ce:b4:d1:a6:b6:5f:13:98:45:29:41:83:c6:b6:68:6f:71: f1:0d:97:be:63:d3:73:1a:bc:4e:a1:51:bb:cf:38:ac:7f:8a: 89:fe:b0:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLrF4Lq7F0+WpX8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NmYzYTItNzMyNS00Yjc0LTg4MDItMTk1MjhhOWYz ODBjMB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk ZjVjNDM5OTAtYTlmYS00YjNlLTkwNTQtMGQ0M2MwOGJmMjJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7h9ROhY2Jv1z0TPf3DqiCQWuLXrpJYTj6HU ociJBVi1qY2OSEG5PeRLbZJKQN+nSQfkOZXAP9fTvwfPqJBmvyApvN44WFScMp32 UjV3vxNVti1OX5SKnhogvIoAyOR2pX65cyPoAiJaUFbHtTRoIXbzczgBnVgD8Kd/ eE+i3XskO1nmuIAKvC2HtHlQNyZtskBp5HL6Y9o6FUpfnhTbgyoBoqC5cfggcSP0 Q2EG9xXDapzLUK8wNZQnY1fhO6Joy3iFnkBWO0DEXYfuKoodK0dYDYjza7fccu8r YKezeSjaE6vXr+ugWRZRliYSQ/j1RNVtgJXrdoGDorPGYSJXgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1SItJMFvo/tTfuhiYBOftyURLSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2 ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUyOGE5ZjM4MGMvYTRhZTFlYmUtOTg1Yy0z M2M4LWFlOTAtOGNhMzM4YTRlYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDg4NmYzYTItNzMyNS00Yjc0LTg4 MDItMTk1MjhhOWYzODBjL2Q4ODZmM2EyLTczMjUtNGI3NC04ODAyLTE5NTI4YTlm MzgwYy5jcmwwHwYDVR0jBBgwFoAUcJut8ULNEhBZHcn7NhsyGUoSs1owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kODg2ZjNhMi03MzI1LTRiNzQtODgwMi0xOTUy OGE5ZjM4MGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCnjMsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWOEl7plyzpm4zYdsphPmlU4NMIWGizkdx8Sn6gX5OXB2rNajeH9Ln8 0V4VUuD0nrku7lQHk6lHmjtQzcuqZPPN1iw1SJMcIkHtuVY5XpAtLUmHVNYrm6lg L3zD0aB4a3wlO+0hVRW9xNLXJRZrRXW7mNZ3srXbFs8OVGolCubi1q8+Jxm97Xfu 1TUepGcLZfwiIXSuB3AN7+RbXqgaONqeDqnHbrWeUBL/gjOfx/RnkYgRWVlYCzPH dJ5ex7+3BkhkIuCC0TOA4lBM+YN2B7Cz5DZQh4tO2WbOtNGmtl8TmEUpQYPGtmhv cfENl75j03MavE6hUbvPOKx/ion+sIk= -----END CERTIFICATE-----Generated at Wed Nov 5 08:47:17 2025 by rpki-client