$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa File: 6b69b583-d314-3cbc-92db-88a1fc81de8f.roa (raw, json) Hash identifier: RUBKNdFHFH2/uj0a/hBRjP1eS35x3neJjIQicIkDv7w= Subject key identifier: 27:54:18:AD:87:F9:38:60:B6:98:44:80:91:62:4A:7C:78:E6:93:B5 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584B48E1BD03E2A81ABE387C9080 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 395831 IP address blocks: 158.115.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bd:03:e2:a8:1a:be:38:7c:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=f068b55f-35fb-4d27-92b0-e02a942edc80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:75:c4:6c:be:a2:a4:b7:35:f7:dd:ee:a8:a4: a7:18:d9:09:32:bf:33:ab:b4:c7:85:e9:12:3a:43: f6:58:b7:d3:16:8a:0f:ae:f8:5d:7b:0a:93:72:d6: 03:d0:69:85:50:31:ea:a4:49:2e:e5:89:18:0d:7b: 06:bb:f1:cd:73:7b:cc:63:72:7f:b2:7a:c3:1d:99: d4:ef:3d:10:b8:a4:a0:15:ae:38:6b:e4:6a:01:9c: 1e:e2:78:40:60:e4:19:64:11:34:3b:81:91:66:42: 0b:0f:21:7c:99:11:41:d7:23:de:10:0e:a1:92:9e: 24:24:eb:bc:c8:1d:59:7a:b1:b0:e1:f5:1d:41:0a: d6:3a:ac:60:07:a2:35:09:76:25:1b:f2:39:49:8b: 66:ae:4d:fc:91:d1:12:a2:96:dd:1b:0d:b9:f2:e8: 53:23:d2:4e:6c:05:ef:9f:80:51:5b:06:8f:38:45: 20:d6:1f:4b:6f:68:ca:ff:d9:aa:4a:a3:72:73:71: 29:c1:c6:de:6a:14:64:ed:24:25:60:7c:06:76:49: fa:26:71:be:6e:84:73:c6:a6:b2:ad:5c:ac:70:c4: 8b:50:80:f5:68:5d:00:fc:4f:b7:bd:1d:7b:75:56: 8e:be:42:59:70:66:c2:47:bc:30:fa:07:18:70:e5: 3e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:54:18:AD:87:F9:38:60:B6:98:44:80:91:62:4A:7C:78:E6:93:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:b5:88:c4:e9:a2:4a:8f:d0:e7:b7:15:99:85:ac:60:1f:f4: 3f:47:29:27:fc:7c:d4:3c:5a:c9:f2:44:96:40:5e:dc:b5:2d: 66:97:87:3e:40:94:03:0a:59:76:14:58:f6:df:e0:d6:f0:63: f4:2a:a8:ce:05:77:1a:a8:68:f5:d4:0a:f2:02:5e:e9:af:bf: 10:f3:ac:0c:7e:c9:aa:19:6d:7a:7e:76:b5:df:fb:41:f1:0b: eb:14:f3:05:48:5d:48:81:ed:71:57:54:4d:b2:d9:3e:82:65: d5:65:5e:8c:db:1d:3f:73:04:c6:79:fb:28:e2:0d:82:07:ec: c0:dc:24:78:be:d2:8b:98:5d:bf:37:4d:4e:83:13:24:b6:91: f4:58:67:26:bc:b8:19:31:2e:85:e6:af:76:0a:e1:ad:87:88: 30:8c:a8:de:12:f3:00:a4:36:24:5e:19:bd:94:e2:a5:3b:8c: 8a:93:76:84:c9:3e:6c:15:59:19:15:61:88:ef:ab:28:91:ba: 30:a6:b0:b9:75:7d:13:87:3a:d3:5c:71:5d:48:ee:a7:ca:59: 53:d7:72:f8:de:eb:13:96:d5:93:03:b4:87:8c:1b:69:dc:6a: c9:ef:d8:02:5c:f8:0d:5e:09:cb:e7:f2:25:bb:cc:d7:7a:b4: a9:41:4b:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4b0D4qgavjh8kIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjA2OGI1NWYtMzVmYi00ZDI3LTkyYjAtZTAyYTk0MmVkYzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03XEbL6ipLc1993uqKSnGNkJMr8zq7THhekS OkP2WLfTFooPrvhdewqTctYD0GmFUDHqpEku5YkYDXsGu/HNc3vMY3J/snrDHZnU 7z0QuKSgFa44a+RqAZwe4nhAYOQZZBE0O4GRZkILDyF8mRFB1yPeEA6hkp4kJOu8 yB1ZerGw4fUdQQrWOqxgB6I1CXYlG/I5SYtmrk38kdESopbdGw258uhTI9JObAXv n4BRWwaPOEUg1h9Lb2jK/9mqSqNyc3EpwcbeahRk7SQlYHwGdkn6JnG+boRzxqay rVyscMSLUID1aF0A/E+3vR17dVaOvkJZcGbCR7ww+gcYcOU+ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdUGK2H+ThgtphEgJFiSnx45pO1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNmI2OWI1ODMtZDMxNC0z Y2JjLTkyZGItODhhMWZjODFkZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK1iMTpokqP0Oe3FZmFrGAf9D9HKSf8fNQ8WsnyRJZAXty1LWaXhz5A lAMKWXYUWPbf4NbwY/QqqM4FdxqoaPXUCvICXumvvxDzrAx+yaoZbXp+drXf+0Hx C+sU8wVIXUiB7XFXVE2y2T6CZdVlXozbHT9zBMZ5+yjiDYIH7MDcJHi+0ouYXb83 TU6DEyS2kfRYZya8uBkxLoXmr3YK4a2HiDCMqN4S8wCkNiReGb2U4qU7jIqTdoTJ PmwVWRkVYYjvqyiRujCmsLl1fROHOtNccV1I7qfKWVPXcvje6xOW1ZMDtIeMG2nc asnv2AJc+A1eCcvn8iW7zNd6tKlBS50= -----END CERTIFICATE-----Generated at Thu Oct 9 01:16:57 2025 by rpki-client