$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/aa7e8b13-1f48-3a14-a6fc-7da7a4ec0b18.roa File: aa7e8b13-1f48-3a14-a6fc-7da7a4ec0b18.roa (raw, json) Hash identifier: 7KW8ijQyLLiD8Ozya6WjHEzD6IB+ToRIX4AwaEXLFas= Subject key identifier: 44:EB:D7:85:EF:1B:61:95:BD:B8:4D:7C:CE:89:DD:2A:54:A2:BB:20 Certificate issuer: /CN=c8ce2cc6-982f-4737-a54f-fef1295ff0ad Certificate serial: 010D0C9F4328584F82ADCB5ABF5CE068E52073E0 Authority key identifier: ED:F5:0B:85:84:2E:59:EA:DD:03:8B:D4:C8:28:A8:20:A5:1B:3D:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/aa7e8b13-1f48-3a14-a6fc-7da7a4ec0b18.roa Signing time: Thu 15 Oct 2026 13:00:13 +0000 ROA not before: Thu 15 Oct 2026 13:00:13 +0000 ROA not after: Wed 13 Jan 2027 14:00:13 +0000 asID: 14618 IP address blocks: 67.158.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:82:ad:cb:5a:bf:5c:e0:68:e5:20:73:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8ce2cc6-982f-4737-a54f-fef1295ff0ad Validity Not Before: Oct 15 13:00:13 2026 GMT Not After : Jan 13 14:00:13 2027 GMT Subject: CN=4d57c6fe-a0a8-489d-8fc8-6c238f618a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ca:a8:b7:8b:36:eb:65:0d:63:da:db:2e:53: b1:6a:fe:bf:39:ca:12:5c:3b:8b:2f:2a:45:c6:c7: 6d:1d:c0:af:3b:a8:18:eb:ef:f2:c3:20:b3:9e:e3: fd:a4:67:b6:2f:3a:04:0b:01:cc:8d:02:89:3c:e2: 60:88:17:06:25:71:46:c5:cb:2e:ae:81:d0:ac:f3: 62:07:70:ab:0c:ef:5d:07:d7:f7:31:a4:fa:31:e8: 25:c3:50:dd:4f:1c:14:a5:06:c1:db:1d:d6:d9:01: c7:39:13:8e:9d:f7:a4:82:45:e3:7c:61:95:5f:04: bd:0b:b0:9b:78:4b:3a:58:db:6c:14:17:62:85:b2: da:58:5d:e8:86:db:9c:f7:21:f3:d7:97:14:9c:9d: c9:88:44:2d:98:27:2e:8f:44:a0:a8:e0:64:d3:a7: b0:80:42:ae:ea:8d:da:54:e2:19:6c:42:04:64:b2: 43:a3:4c:a3:2d:92:cf:a5:96:fc:cf:9a:02:52:53: 6f:d5:94:bf:07:23:6b:60:75:4d:5b:c4:24:2e:e7: ec:e2:1e:d3:a7:8a:ad:cd:e3:df:8f:68:26:a9:48: ce:fd:77:c3:98:d8:75:22:1d:50:e0:3b:c0:6f:c0: 20:cf:21:61:64:bd:a4:0a:d5:70:55:3f:17:4b:27: eb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EB:D7:85:EF:1B:61:95:BD:B8:4D:7C:CE:89:DD:2A:54:A2:BB:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/aa7e8b13-1f48-3a14-a6fc-7da7a4ec0b18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.crl X509v3 Authority Key Identifier: keyid:ED:F5:0B:85:84:2E:59:EA:DD:03:8B:D4:C8:28:A8:20:A5:1B:3D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c8ce2cc6-982f-4737-a54f-fef1295ff0ad.cer sbgp-ipAddrBlock: critical IPv4: 67.158.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:8d:21:9c:5d:3b:90:0c:7f:d7:0f:46:86:d6:86:c9:d8:36: 70:55:d3:16:e1:b9:e7:49:69:b1:cf:34:d3:70:0f:d3:4a:75: 55:e4:f5:74:a5:b5:4e:4a:cb:0c:45:6d:41:95:f1:a8:a9:68: be:89:a4:46:48:35:45:b0:df:44:cf:5b:ba:9a:2a:c4:24:61: 34:b8:1f:15:69:f3:fd:6f:d3:4a:23:a2:02:d6:9e:4d:85:32: 58:b9:c6:47:7d:1d:fd:38:9f:4d:51:f0:78:02:89:c1:0a:d3: 6c:66:84:86:49:b4:ca:98:e3:0f:a0:98:a8:4f:91:99:a7:ee: 42:f5:11:28:7e:be:f1:ae:2d:fa:9a:68:b1:c9:2b:29:77:09: 2a:9c:83:62:4c:cb:96:13:ac:dc:65:e5:ce:69:39:ca:7a:3b: 54:15:b1:b6:24:8c:9c:d9:79:36:2b:e7:2c:6f:4e:6e:ed:a5: 3e:bf:4b:be:d8:d4:c6:86:a2:7f:a1:3f:f7:c3:d7:49:30:1c: 41:c3:3a:6d:06:7c:93:e6:6c:88:57:fa:ae:eb:6d:a1:76:16: e7:bd:63:9a:f9:f6:25:7c:50:71:9b:f0:bc:4f:04:98:48:51: fb:32:33:51:87:48:50:51:82:98:0a:00:ad:08:9d:00:a9:37: 8d:80:e0:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Crctav1zgaOUgc+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzhjZTJjYzYtOTgyZi00NzM3LWE1NGYtZmVmMTI5NWZm MGFkMB4XDTI2MTAxNTEzMDAxM1oXDTI3MDExMzE0MDAxM1owLzEtMCsGA1UEAxMk NGQ1N2M2ZmUtYTBhOC00ODlkLThmYzgtNmMyMzhmNjE4YTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsqot4s262UNY9rbLlOxav6/OcoSXDuLLypF xsdtHcCvO6gY6+/ywyCznuP9pGe2LzoECwHMjQKJPOJgiBcGJXFGxcsuroHQrPNi B3CrDO9dB9f3MaT6Meglw1DdTxwUpQbB2x3W2QHHOROOnfekgkXjfGGVXwS9C7Cb eEs6WNtsFBdihbLaWF3ohtuc9yHz15cUnJ3JiEQtmCcuj0SgqOBk06ewgEKu6o3a VOIZbEIEZLJDo0yjLZLPpZb8z5oCUlNv1ZS/ByNrYHVNW8QkLufs4h7Tp4qtzePf j2gmqUjO/XfDmNh1Ih1Q4DvAb8AgzyFhZL2kCtVwVT8XSyfr0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETr14XvG2GVvbhNfM6J3SpUorsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGNl MmNjNi05ODJmLTQ3MzctYTU0Zi1mZWYxMjk1ZmYwYWQvYWE3ZThiMTMtMWY0OC0z YTE0LWE2ZmMtN2RhN2E0ZWMwYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzhjZTJjYzYtOTgyZi00NzM3LWE1 NGYtZmVmMTI5NWZmMGFkL2M4Y2UyY2M2LTk4MmYtNDczNy1hNTRmLWZlZjEyOTVm ZjBhZC5jcmwwHwYDVR0jBBgwFoAU7fULhYQuWerdA4vUyCioIKUbPQIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jOGNlMmNjNi05ODJmLTQ3MzctYTU0Zi1mZWYx Mjk1ZmYwYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ545MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByNIZxdO5AMf9cPRobWhsnYNnBV0xbhuedJabHPNNNwD9NKdVXk9XSl tU5KywxFbUGV8aipaL6JpEZINUWw30TPW7qaKsQkYTS4HxVp8/1v00ojogLWnk2F Mli5xkd9Hf04n01R8HgCicEK02xmhIZJtMqY4w+gmKhPkZmn7kL1ESh+vvGuLfqa aLHJKyl3CSqcg2JMy5YTrNxl5c5pOcp6O1QVsbYkjJzZeTYr5yxvTm7tpT6/S77Y 1MaGon+hP/fD10kwHEHDOm0GfJPmbIhX+q7rbaF2Fue9Y5r59iV8UHGb8LxPBJhI UfsyM1GHSFBRgpgKAK0InQCpN42A4Dc= -----END CERTIFICATE-----Generated at Sun Nov 15 17:56:26 2026 by rpki-client