$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa File: 2ddea806-81f0-34de-aed2-4e3ace1914b0.roa (raw, json) Hash identifier: 04dpu2PAFW1AZUVR8NQ6mQlyMN1T6ksaue2SZkvjkn4= Subject key identifier: 3F:0C:71:6B:FC:AD:09:1F:D2:28:44:44:1B:80:37:30:38:A6:E6:B8 Certificate issuer: /CN=b59f0cf0-b1db-4139-bfc6-e624159d7343 Certificate serial: 010D0C9F4328584F1897A9CB80B8E1838B94AD00 Authority key identifier: AA:F1:D4:E0:D3:6E:14:3A:D7:EB:7E:CF:79:21:A9:01:A2:A9:10:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 31898 IP address blocks: 168.151.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:a9:cb:80:b8:e1:83:8b:94:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b59f0cf0-b1db-4139-bfc6-e624159d7343 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=d048ee01-400c-4a46-8ee5-4901d9b953d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:6f:e4:37:c2:84:9b:a9:f2:08:28:14:dd: a5:81:ba:a2:b5:8e:70:4c:5c:de:2b:0c:62:a1:10: 6e:fd:9e:85:5b:76:69:4d:79:1c:01:03:10:50:a4: d8:eb:7c:a4:6b:f5:e5:32:7c:b1:af:eb:be:2d:b0: 53:04:09:70:cc:91:09:c1:90:f6:3c:0a:1b:da:10: 15:76:9d:ba:90:8c:f8:e1:b0:46:59:97:a0:9b:57: f2:be:81:cd:d2:69:18:0d:9c:fe:2d:da:ee:08:89: d8:c7:c8:2b:06:19:cb:a7:2e:ac:b0:5c:3f:bc:c0: 29:f1:ba:97:4f:e8:e0:79:45:28:36:14:f1:50:25: 3d:8c:23:b2:c6:81:b9:ab:e3:a6:e3:7b:6e:5e:fe: 43:df:0e:9b:71:22:49:a6:c6:27:de:a5:d3:4c:ad: 60:0f:fa:a4:3d:ad:14:8d:75:d5:94:f4:ba:3d:63: b5:8b:2f:c7:ca:44:f0:f7:1d:f6:f4:42:c3:ad:1f: d5:61:e5:a9:f2:e9:90:36:24:26:62:4f:17:37:3b: 31:4a:7a:2e:62:48:9a:fe:4d:37:0a:eb:86:d2:96: c7:85:bb:df:ff:dd:e7:59:4c:8c:13:95:67:04:85: 6d:d7:21:6d:02:07:2e:21:45:65:c4:66:81:98:89: 10:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:0C:71:6B:FC:AD:09:1F:D2:28:44:44:1B:80:37:30:38:A6:E6:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/2ddea806-81f0-34de-aed2-4e3ace1914b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343/b59f0cf0-b1db-4139-bfc6-e624159d7343.crl X509v3 Authority Key Identifier: keyid:AA:F1:D4:E0:D3:6E:14:3A:D7:EB:7E:CF:79:21:A9:01:A2:A9:10:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b59f0cf0-b1db-4139-bfc6-e624159d7343.cer sbgp-ipAddrBlock: critical IPv4: 168.151.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:7b:29:85:10:45:c9:28:44:42:ae:c4:92:a3:f3:a5:a0:2b: 17:da:8b:1c:40:de:b8:18:5d:8b:0e:b9:99:3a:8f:a6:41:e8: f7:ce:21:a6:a2:d2:cd:8c:fc:c2:57:0b:e4:6d:8a:3e:6d:3a: b6:73:96:9f:96:0c:8f:6b:85:58:34:e2:7f:d4:f1:29:82:8a: 2d:70:49:cc:bb:e6:6b:89:4d:e4:2b:1b:7f:9f:4e:67:13:c7: c1:dd:f5:6f:b2:d0:20:fa:95:89:08:1f:99:e4:da:c1:38:67: ff:75:4d:da:17:a5:81:44:54:e0:66:9b:1b:44:7b:d9:06:48: 3a:a5:0e:e5:6f:4e:95:c6:6d:07:28:a9:e0:51:fa:a0:03:da: fa:ee:7f:10:ca:2d:2c:55:57:df:13:d0:6f:4a:1a:c3:15:90: 26:d0:b9:bf:ae:b1:b1:23:70:bb:3d:0a:40:a0:84:bd:d9:a4: 55:dc:f1:95:e3:90:75:02:f4:27:d8:50:5d:60:6d:8e:fb:35: 34:eb:89:e8:d8:a9:c8:7a:ec:b2:7b:13:fb:30:e2:2a:47:c9: 35:54:31:d5:17:13:49:f2:9a:b2:6b:e2:d5:3a:d3:31:93:9c: 01:61:99:6f:57:9a:98:1c:2d:ae:48:05:c9:ff:ae:53:4d:83: e7:46:8f:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl6nLgLjhg4uUrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU5ZjBjZjAtYjFkYi00MTM5LWJmYzYtZTYyNDE1OWQ3 MzQzMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDA0OGVlMDEtNDAwYy00YTQ2LThlZTUtNDkwMWQ5Yjk1M2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorRv5DfChJup8ggoFN2lgbqitY5wTFzeKwxi oRBu/Z6FW3ZpTXkcAQMQUKTY63yka/XlMnyxr+u+LbBTBAlwzJEJwZD2PAob2hAV dp26kIz44bBGWZegm1fyvoHN0mkYDZz+LdruCInYx8grBhnLpy6ssFw/vMAp8bqX T+jgeUUoNhTxUCU9jCOyxoG5q+Om43tuXv5D3w6bcSJJpsYn3qXTTK1gD/qkPa0U jXXVlPS6PWO1iy/HykTw9x329ELDrR/VYeWp8umQNiQmYk8XNzsxSnouYkia/k03 CuuG0pbHhbvf/93nWUyME5VnBIVt1yFtAgcuIUVlxGaBmIkQlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8McWv8rQkf0ihERBuANzA4pua4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNTlm MGNmMC1iMWRiLTQxMzktYmZjNi1lNjI0MTU5ZDczNDMvMmRkZWE4MDYtODFmMC0z NGRlLWFlZDItNGUzYWNlMTkxNGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjU5ZjBjZjAtYjFkYi00MTM5LWJm YzYtZTYyNDE1OWQ3MzQzL2I1OWYwY2YwLWIxZGItNDEzOS1iZmM2LWU2MjQxNTlk NzM0My5jcmwwHwYDVR0jBBgwFoAUqvHU4NNuFDrX637PeSGpAaKpEIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNTlmMGNmMC1iMWRiLTQxMzktYmZjNi1lNjI0 MTU5ZDczNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqJcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB7KYUQRckoREKuxJKj86WgKxfaixxA3rgYXYsOuZk6j6ZB6PfOIaai 0s2M/MJXC+Rtij5tOrZzlp+WDI9rhVg04n/U8SmCii1wScy75muJTeQrG3+fTmcT x8Hd9W+y0CD6lYkIH5nk2sE4Z/91TdoXpYFEVOBmmxtEe9kGSDqlDuVvTpXGbQco qeBR+qAD2vrufxDKLSxVV98T0G9KGsMVkCbQub+usbEjcLs9CkCghL3ZpFXc8ZXj kHUC9CfYUF1gbY77NTTriejYqch67LJ7E/sw4ipHyTVUMdUXE0nymrJr4tU60zGT nAFhmW9XmpgcLa5IBcn/rlNNg+dGj5k= -----END CERTIFICATE-----Generated at Tue Sep 22 16:42:28 2026 by rpki-client