$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/c59e8cf9-be8c-3b67-b2ce-606b17a1812a.roa File: c59e8cf9-be8c-3b67-b2ce-606b17a1812a.roa (raw, json) Hash identifier: yDn2Or78uvFgebOPeGD/E1WqXSvonvu2SEPeRjT9PHI= Subject key identifier: 02:35:CA:11:C8:00:15:C1:51:DC:51:A5:44:C3:BB:B0:F6:AA:E1:00 Certificate issuer: /CN=03b51393-7784-45a0-9621-168719782436 Certificate serial: 010D0C9F4328584F497392A8683250CE5E7C2500 Authority key identifier: EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/c59e8cf9-be8c-3b67-b2ce-606b17a1812a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10384 IP address blocks: 152.87.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:92:a8:68:32:50:ce:5e:7c:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03b51393-7784-45a0-9621-168719782436 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ec343d4c-a117-4eba-be74-62b0cd85e11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:7e:a5:74:9b:d0:c9:bf:19:2b:06:c6:ba:c6: 1a:6a:d9:2d:fc:52:81:15:40:de:d3:e3:a8:5b:4d: 2d:00:4e:e2:97:36:c0:b2:91:42:d4:e3:48:7c:54: 0d:57:09:6f:0e:95:cc:2e:aa:22:0e:fa:fb:97:27: 51:76:f0:07:7b:d4:fa:81:80:02:ce:82:66:42:6b: 0a:1d:f3:b5:33:88:66:e1:a9:ec:c6:b3:d7:8b:89: 69:79:da:2a:2f:37:3a:ea:bf:64:aa:6e:34:04:94: b9:9c:e8:ed:41:ca:02:47:8a:a4:ed:ed:cc:31:1c: 86:7f:22:cf:7e:68:0e:88:54:e0:2c:d4:bc:b1:e8: e9:04:5e:79:6a:b1:61:b7:40:b4:14:25:00:3c:20: 95:a1:5b:39:51:33:bd:52:bf:61:01:0d:e1:89:39: b5:3d:26:f7:7e:b1:a9:4c:61:b0:52:e2:8c:dd:87: 6e:cb:50:e6:58:de:28:6f:24:65:be:1a:4b:fb:22: 65:47:e9:ec:29:ef:08:dc:39:d7:ba:5e:ce:c5:22: 5e:5e:3a:7f:cc:7b:9e:82:1b:ec:8b:d7:f0:8e:6c: 95:96:fc:5d:a1:f9:59:10:72:59:17:98:e3:ed:81: 44:9a:4d:15:d5:8a:93:8b:1f:ae:c4:99:36:b5:32: cd:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:35:CA:11:C8:00:15:C1:51:DC:51:A5:44:C3:BB:B0:F6:AA:E1:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/c59e8cf9-be8c-3b67-b2ce-606b17a1812a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436/03b51393-7784-45a0-9621-168719782436.crl X509v3 Authority Key Identifier: keyid:EC:99:4B:99:9B:94:26:05:74:C3:31:52:EC:B9:D2:FA:8E:3F:05:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03b51393-7784-45a0-9621-168719782436.cer sbgp-ipAddrBlock: critical IPv4: 152.87.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:7a:01:60:4c:48:fc:74:b3:a0:ab:81:51:86:ba:2d:16:ed: 0b:1d:09:a1:6a:90:0a:5d:8c:ba:da:11:f3:aa:55:a9:5a:72: fd:01:b2:5a:bb:db:d8:2d:d9:3f:1c:f0:c1:1f:cd:5c:d4:50: df:20:64:cd:f4:12:e1:76:dd:18:ae:d2:88:27:2f:82:c4:a0: ef:89:97:4b:7f:09:4c:09:8b:60:67:ab:43:e7:b5:c6:1e:24: 7b:b5:1d:6c:7c:71:a4:e1:ec:69:78:13:dd:4e:a6:ea:58:d8: e3:5a:da:29:d2:0e:d1:88:e4:c8:3d:b1:16:04:a5:93:63:07: 00:1d:b6:9b:91:99:7f:a9:be:39:af:1a:3c:39:62:15:86:d7: fa:3f:01:33:18:f2:85:fb:d6:2c:2f:a3:9d:0c:86:e3:9b:57: 75:0d:5f:04:e6:f8:68:fe:b9:3e:3c:24:4e:70:ef:c4:5c:91: 3d:0b:eb:be:8a:b2:bd:8b:a3:26:f7:52:6d:e5:43:42:f9:0c: af:70:e7:74:e5:3f:6f:e8:b4:08:dd:4c:e9:83:1c:d8:1b:73: f7:35:69:6c:f6:90:85:b8:f2:c1:57:cc:31:3d:3b:70:b1:8d: a6:2e:45:c5:db:f6:c7:49:1f:74:c5:63:d4:58:66:be:be:55: 1e:58:56:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc5KoaDJQzl58JQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDNiNTEzOTMtNzc4NC00NWEwLTk2MjEtMTY4NzE5Nzgy NDM2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWMzNDNkNGMtYTExNy00ZWJhLWJlNzQtNjJiMGNkODVlMTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX6ldJvQyb8ZKwbGusYaatkt/FKBFUDe0+Oo W00tAE7ilzbAspFC1ONIfFQNVwlvDpXMLqoiDvr7lydRdvAHe9T6gYACzoJmQmsK HfO1M4hm4ansxrPXi4lpedoqLzc66r9kqm40BJS5nOjtQcoCR4qk7e3MMRyGfyLP fmgOiFTgLNS8sejpBF55arFht0C0FCUAPCCVoVs5UTO9Ur9hAQ3hiTm1PSb3frGp TGGwUuKM3Yduy1DmWN4obyRlvhpL+yJlR+nsKe8I3DnXul7OxSJeXjp/zHueghvs i9fwjmyVlvxdoflZEHJZF5jj7YFEmk0V1YqTix+uxJk2tTLNkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAI1yhHIABXBUdxRpUTDu7D2quEAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1 MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3MTk3ODI0MzYvYzU5ZThjZjktYmU4Yy0z YjY3LWIyY2UtNjA2YjE3YTE4MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMDNiNTEzOTMtNzc4NC00NWEwLTk2 MjEtMTY4NzE5NzgyNDM2LzAzYjUxMzkzLTc3ODQtNDVhMC05NjIxLTE2ODcxOTc4 MjQzNi5jcmwwHwYDVR0jBBgwFoAU7JlLmZuUJgV0wzFS7LnS+o4/BSIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wM2I1MTM5My03Nzg0LTQ1YTAtOTYyMS0xNjg3 MTk3ODI0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmFcqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAd6AWBMSPx0s6CrgVGGui0W7QsdCaFqkApdjLraEfOqValacv0Bslq7 29gt2T8c8MEfzVzUUN8gZM30EuF23Riu0ognL4LEoO+Jl0t/CUwJi2Bnq0PntcYe JHu1HWx8caTh7Gl4E91OpupY2ONa2inSDtGI5Mg9sRYEpZNjBwAdtpuRmX+pvjmv Gjw5YhWG1/o/ATMY8oX71iwvo50MhuObV3UNXwTm+Gj+uT48JE5w78RckT0L676K sr2Loyb3Um3lQ0L5DK9w53TlP2/otAjdTOmDHNgbc/c1aWz2kIW48sFXzDE9O3Cx jaYuRcXb9sdJH3TFY9RYZr6+VR5YVjY= -----END CERTIFICATE-----Generated at Mon Oct 19 08:05:46 2026 by rpki-client