$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa File: 5c304d34-8950-35d5-acec-d2d13773b41a.roa (raw, json) Hash identifier: rKGRdegAqNo+qBcaGaCrERRi2O6H12XmG+63ILLEvHs= Subject key identifier: 40:72:B9:B5:E1:C3:69:C4:FD:C8:24:79:8C:25:AC:73:93:D0:F4:1A Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584B153C1C1E876E862CB2A53D38 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 16509 IP address blocks: 216.157.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:1c:1e:87:6e:86:2c:b2:a5:3d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=d94489e2-4deb-4ef1-af31-ea307c270cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a1:dd:e6:61:4f:53:5f:73:79:87:e6:43:d2: 4e:cc:1f:e0:c5:55:ba:b2:e8:ad:10:c6:7c:5e:40: 79:3a:08:34:f6:d6:b4:a8:13:76:fd:91:ea:cd:37: 95:3d:49:50:29:40:f2:5f:e3:a1:20:89:8f:f9:27: 4c:5d:c6:1b:f8:34:7b:21:56:fa:f2:6d:66:73:f0: 0a:7a:59:7c:73:c6:d4:e4:dc:7e:3a:cf:1c:43:07: 6e:f9:2a:a0:31:e0:a1:c7:fe:8f:50:c6:61:42:68: da:75:0c:9e:92:db:c1:64:42:f8:bf:62:c8:e5:2e: 0a:a2:09:2f:81:31:34:a1:4a:63:ef:64:e8:d2:1b: 08:4e:25:56:bc:49:19:0a:95:31:8e:42:ee:a0:9b: bc:03:82:7c:8e:e9:2c:56:93:0d:b7:32:bd:6a:3f: a5:78:82:3e:57:67:af:bc:f8:05:06:b5:f1:95:83: 52:6f:33:fe:77:38:d5:b8:71:64:53:d3:ae:e9:07: 31:8e:15:07:9a:f5:b0:d0:9d:36:ca:e7:e9:7f:2b: e1:d2:7f:bf:b2:47:46:fa:98:1e:f3:a5:36:07:23: 0f:0f:53:98:57:09:f5:b6:31:5c:bd:fc:c2:e0:ff: d8:62:52:c3:a7:bb:44:cf:95:d5:a5:cf:96:cc:7b: de:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:72:B9:B5:E1:C3:69:C4:FD:C8:24:79:8C:25:AC:73:93:D0:F4:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:de:d0:a9:66:f8:fe:02:38:9b:a1:11:7c:ff:f1:57:59:6a: 73:eb:78:4a:0f:18:14:ce:9c:54:90:6f:f5:7a:80:a1:a6:87: b6:67:e1:74:78:a1:09:71:31:e9:eb:1b:7b:14:f7:ad:d3:17: df:0c:27:74:ab:1a:93:c7:02:bf:5d:30:a3:a3:ae:91:a2:d8: a8:99:d5:7f:84:fa:d1:1c:78:c9:98:93:1b:c7:36:de:24:59: cd:44:2d:f0:49:5e:a9:15:d3:95:e1:f7:c7:8a:b4:98:a0:94: 65:2e:33:48:42:b1:fb:6a:9d:b2:85:cd:85:d3:8b:90:75:13: aa:65:0a:1f:e3:63:8e:1a:0f:b4:8d:04:93:7f:c0:de:79:22: 6f:0a:03:28:4f:2e:10:75:3a:3a:c7:67:91:ef:b4:be:9a:46: 98:b3:2f:b2:e4:38:78:43:85:a9:30:0f:97:f5:49:14:3e:fa: a3:9c:1b:14:46:bd:26:ac:8b:c0:99:db:12:12:34:14:b7:79: c6:b0:c4:45:24:7e:21:b1:d9:99:e3:c2:30:0f:ce:d6:12:9c: 84:bc:bf:47:80:92:c9:84:1e:d6:fd:72:e7:90:e4:a6:2f:e5: 2b:54:f6:6a:ce:0b:b7:b1:6d:ef:44:d7:7b:1c:55:2d:63:14: 3c:56:73:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBweh26GLLKlPTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk ZDk0NDg5ZTItNGRlYi00ZWYxLWFmMzEtZWEzMDdjMjcwY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqHd5mFPU19zeYfmQ9JOzB/gxVW6suitEMZ8 XkB5Ogg09ta0qBN2/ZHqzTeVPUlQKUDyX+OhIImP+SdMXcYb+DR7IVb68m1mc/AK ell8c8bU5Nx+Os8cQwdu+SqgMeChx/6PUMZhQmjadQyektvBZEL4v2LI5S4Kogkv gTE0oUpj72To0hsITiVWvEkZCpUxjkLuoJu8A4J8juksVpMNtzK9aj+leII+V2ev vPgFBrXxlYNSbzP+dzjVuHFkU9Ou6QcxjhUHmvWw0J02yufpfyvh0n+/skdG+pge 86U2ByMPD1OYVwn1tjFcvfzC4P/YYlLDp7tEz5XVpc+WzHveiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEByubXhw2nE/cgkeYwlrHOT0PQaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNWMzMDRkMzQtODk1MC0z NWQ1LWFjZWMtZDJkMTM3NzNiNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPe0Klm+P4COJuhEXz/8VdZanPreEoPGBTOnFSQb/V6gKGmh7Zn4XR4 oQlxMenrG3sU963TF98MJ3SrGpPHAr9dMKOjrpGi2KiZ1X+E+tEceMmYkxvHNt4k Wc1ELfBJXqkV05Xh98eKtJiglGUuM0hCsftqnbKFzYXTi5B1E6plCh/jY44aD7SN BJN/wN55Im8KAyhPLhB1OjrHZ5HvtL6aRpizL7LkOHhDhakwD5f1SRQ++qOcGxRG vSasi8CZ2xISNBS3ecawxEUkfiGx2ZnjwjAPztYSnIS8v0eAksmEHtb9cueQ5KYv 5StU9mrOC7exbe9E13scVS1jFDxWc3A= -----END CERTIFICATE-----Generated at Thu Oct 9 01:21:57 2025 by rpki-client