$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/60a1323c-203e-3098-b964-667c4099d08a.roa File: 60a1323c-203e-3098-b964-667c4099d08a.roa (raw, json) Hash identifier: ppwSDYkgYtXCf+EsklTTRaUGrJ+w+1IUfPE0TMt4HJU= Subject key identifier: 99:65:53:3B:11:F4:17:3B:47:2A:FC:82:CA:AA:8E:B1:88:D8:84:60 Certificate issuer: /CN=0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee Certificate serial: 010D0C9F4328584B99D794B151A6C080BE868700 Authority key identifier: 0F:F8:40:D1:FC:82:C8:78:6A:6D:E0:A6:1C:8A:B2:BF:72:F1:9D:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/60a1323c-203e-3098-b964-667c4099d08a.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 40350 IP address blocks: 158.51.226.0/23 maxlen: 23 158.51.226.0/24 maxlen: 24 158.51.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:94:b1:51:a6:c0:80:be:86:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=ae3a329e-4cc9-43d8-8f5a-92a52d4d3fb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:54:42:1a:b8:08:6e:48:a8:b8:fb:1c:5d:78: b8:6f:2c:bd:48:20:5b:38:56:25:12:4a:8c:9e:37: c0:b6:37:b5:e5:03:1f:3f:b5:71:75:19:10:e4:06: 0e:aa:e0:4c:67:a0:bd:6a:77:cd:ec:bb:a0:d8:56: 62:36:ca:1f:71:2b:b4:0e:24:f1:65:4e:0a:a0:4f: 1c:f4:6a:9d:fb:af:18:16:d4:9b:b3:a3:78:cd:73: c9:7b:a7:ac:78:23:02:ea:dd:e6:cb:2f:45:ef:d2: d8:13:78:59:aa:bf:77:7c:01:e5:10:3e:46:69:48: 0d:77:90:80:1c:ec:c1:1e:62:b1:af:f3:f3:e5:c2: b4:f0:33:0c:54:86:2b:9e:d3:01:75:ce:3a:a2:7c: 8c:91:d3:2d:3a:8e:70:ad:b2:ae:91:62:e6:a5:55: 1a:9e:c6:cf:47:62:c5:72:8c:62:e1:76:da:ab:64: 1d:db:d2:96:c6:dd:58:66:b9:c9:f4:a9:ea:c7:e5: 35:f1:7f:34:5e:f8:2e:5e:43:da:f1:6b:3d:fb:72: 96:d7:1c:02:a7:6e:11:e6:85:a8:3c:1d:52:e8:56: c2:e5:e0:8e:ea:43:93:94:0a:0e:0e:d5:91:81:80: a4:31:e1:ea:dd:df:45:c9:55:71:0b:07:8f:41:9b: ad:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:65:53:3B:11:F4:17:3B:47:2A:FC:82:CA:AA:8E:B1:88:D8:84:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/60a1323c-203e-3098-b964-667c4099d08a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.crl X509v3 Authority Key Identifier: keyid:0F:F8:40:D1:FC:82:C8:78:6A:6D:E0:A6:1C:8A:B2:BF:72:F1:9D:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0abc51f3-d2a5-45eb-9fb8-69f8d4fc27ee.cer sbgp-ipAddrBlock: critical IPv4: 158.51.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:85:ff:f3:d7:63:f1:10:f1:9a:32:66:7e:4e:e5:46:77:db: 74:25:ad:42:b5:79:be:d8:91:8f:15:31:59:f9:30:d5:a1:79: 12:97:e4:3b:7d:bc:26:ed:03:bb:38:4b:1f:de:c9:d4:17:47: 38:d8:cd:31:79:5a:e4:f5:b0:44:fb:14:c4:19:b5:c7:e3:45: 20:28:a7:41:a6:55:35:e8:cb:ac:c5:aa:78:48:02:96:e5:4e: cd:b9:57:24:96:f3:a4:8b:99:2d:9c:23:a2:53:ac:38:e9:c8: 34:22:3c:21:43:de:fb:25:59:93:7e:c5:10:97:fc:2d:d5:02: 6e:45:01:56:2e:a5:cf:17:2f:56:20:68:11:ea:98:cb:17:c1: 77:a9:23:5f:c4:5c:b9:56:e3:11:6d:29:f2:17:a5:2f:e2:33: 34:72:a2:ba:44:3b:0b:ec:83:04:02:21:6a:c7:18:d7:f9:24: 8c:12:76:5f:c0:60:62:be:e9:2c:db:40:3a:73:97:6d:22:85: 2d:0a:85:78:82:c6:df:da:96:94:46:23:53:ed:45:3c:17:80: d4:3f:a8:1a:d2:20:de:be:51:1e:e7:30:59:27:ab:6d:84:d4: e7:a4:19:40:a8:5c:d1:da:eb:5b:a0:2e:86:f2:cb:bf:74:9f: 40:5e:75:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ15SxUabAgL6GhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFiYzUxZjMtZDJhNS00NWViLTlmYjgtNjlmOGQ0ZmMy N2VlMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YWUzYTMyOWUtNGNjOS00M2Q4LThmNWEtOTJhNTJkNGQzZmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVRCGrgIbkiouPscXXi4byy9SCBbOFYlEkqM njfAtje15QMfP7VxdRkQ5AYOquBMZ6C9anfN7Lug2FZiNsofcSu0DiTxZU4KoE8c 9Gqd+68YFtSbs6N4zXPJe6eseCMC6t3myy9F79LYE3hZqr93fAHlED5GaUgNd5CA HOzBHmKxr/Pz5cK08DMMVIYrntMBdc46onyMkdMtOo5wrbKukWLmpVUansbPR2LF coxi4Xbaq2Qd29KWxt1YZrnJ9Knqx+U18X80XvguXkPa8Ws9+3KW1xwCp24R5oWo PB1S6FbC5eCO6kOTlAoODtWRgYCkMeHq3d9FyVVxCwePQZutlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJllUzsR9Bc7Ryr8gsqqjrGI2IRgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wYWJj NTFmMy1kMmE1LTQ1ZWItOWZiOC02OWY4ZDRmYzI3ZWUvNjBhMTMyM2MtMjAzZS0z MDk4LWI5NjQtNjY3YzQwOTlkMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGFiYzUxZjMtZDJhNS00NWViLTlm YjgtNjlmOGQ0ZmMyN2VlLzBhYmM1MWYzLWQyYTUtNDVlYi05ZmI4LTY5ZjhkNGZj MjdlZS5jcmwwHwYDVR0jBBgwFoAUD/hA0fyCyHhqbeCmHIqyv3LxnUEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8wYWJjNTFmMy1kMmE1LTQ1ZWItOWZiOC02OWY4 ZDRmYzI3ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnjPiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFOF//PXY/EQ8ZoyZn5O5UZ323QlrUK1eb7YkY8VMVn5MNWheRKX5Dt9 vCbtA7s4Sx/eydQXRzjYzTF5WuT1sET7FMQZtcfjRSAop0GmVTXoy6zFqnhIApbl Ts25VySW86SLmS2cI6JTrDjpyDQiPCFD3vslWZN+xRCX/C3VAm5FAVYupc8XL1Yg aBHqmMsXwXepI1/EXLlW4xFtKfIXpS/iMzRyorpEOwvsgwQCIWrHGNf5JIwSdl/A YGK+6SzbQDpzl20ihS0KhXiCxt/alpRGI1PtRTwXgNQ/qBrSIN6+UR7nMFknq22E 1OekGUCoXNHa61ugLobyy790n0BedY8= -----END CERTIFICATE-----Generated at Wed Nov 5 01:20:07 2025 by rpki-client