$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/aee1a109-6c8a-3502-9111-b9b5953b35f9.roa File: aee1a109-6c8a-3502-9111-b9b5953b35f9.roa (raw, json) Hash identifier: 2ZgOr0lVI39v5FbTl0/49FeAbh0Nzph6d9yKAN/mrNg= Subject key identifier: 22:A8:5A:69:32:B7:FE:B3:8D:81:E0:DE:3D:66:B6:D4:AD:45:9A:25 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584B153C1BF5E6FAB5AB67E88E00 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/aee1a109-6c8a-3502-9111-b9b5953b35f9.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 395831 IP address blocks: 216.157.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:1b:f5:e6:fa:b5:ab:67:e8:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=2dfc495e-b0d4-4807-ae9f-352c582232d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:77:32:35:cb:af:bb:a9:67:1c:9e:f1:29: a2:a6:46:78:e8:46:14:3a:cf:8c:b5:ee:30:1f:bf: d1:f7:6d:a3:3a:18:ba:8c:41:74:f5:3e:9b:87:7a: e4:0e:1a:2e:8c:fb:9d:2e:a3:2a:f9:02:7f:e8:a0: 03:6a:0d:a8:e5:df:6e:5b:18:c2:ca:ae:6e:0a:d0: c5:f8:fc:e1:47:1d:fd:c9:d8:93:52:0c:b7:59:8d: 7e:7c:57:5d:13:59:14:4b:d8:83:45:8a:6d:ef:27: d9:fd:a9:0d:f2:b7:7f:4e:1b:46:37:b4:43:d4:34: 74:cb:c9:f2:ed:b8:4f:6d:54:8c:39:b9:77:06:5b: 8f:89:81:10:9d:5b:dd:9d:67:f4:d7:b8:1d:18:fc: 2f:97:d9:17:66:dc:da:3c:5a:de:06:a0:fd:8f:ab: fe:99:aa:ab:3a:9f:e6:ca:48:ae:2c:bb:e9:c7:ef: 88:ee:e2:71:8b:96:10:7c:ce:67:c2:9d:10:7d:66: 6e:4e:e6:c1:53:50:92:39:ac:4e:a8:a2:92:79:0b: 8b:31:12:21:4d:ea:8e:d4:0d:1a:c5:78:38:54:23: 02:10:02:39:7d:e3:d4:14:0b:98:4e:35:32:d4:2b: 0f:63:23:c6:bb:bc:3a:6b:da:21:1d:3f:58:c1:3b: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:A8:5A:69:32:B7:FE:B3:8D:81:E0:DE:3D:66:B6:D4:AD:45:9A:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/aee1a109-6c8a-3502-9111-b9b5953b35f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:bc:08:ca:6c:98:af:8a:06:4d:33:ec:ba:c4:8d:9e:41:16: fa:db:f2:30:1a:f7:81:13:be:ef:9a:d3:f2:ad:65:eb:48:11: ae:1b:04:02:eb:23:0c:6b:b3:19:70:1e:89:1a:c4:7d:ab:8a: 4f:63:de:11:60:58:58:57:ee:28:28:b4:ea:d4:9c:69:82:3d: 4d:8c:8a:ad:cc:83:03:aa:27:a9:72:f4:cd:bb:1d:a7:ba:e5: 0b:bc:d8:c3:9f:ab:8d:10:df:b5:fc:51:ec:23:1f:50:57:22: 46:eb:46:d7:fe:4e:28:3d:cf:a4:08:f1:8c:32:da:d6:44:f6: af:3b:f3:3c:ff:3f:3f:9f:27:94:5c:ea:9a:b4:c4:af:d7:0c: 95:49:6f:57:b2:c5:75:74:af:71:ae:f1:27:e9:e8:de:0b:b0: 90:f4:80:cd:9e:3a:54:d3:07:cc:65:b3:6b:47:95:14:b8:a6: 3f:d0:cd:7d:79:83:5a:47:4e:1f:53:e8:bf:66:d5:27:3b:11: 3d:a3:69:0a:6a:58:b8:59:67:c7:4d:28:15:45:d9:6c:83:ce: 3e:39:00:c7:e7:1a:e4:e8:21:85:fc:0f:b2:77:62:1c:9b:21: e6:f4:e9:31:07:05:8a:91:51:21:c8:09:a7:42:a3:9d:97:e6: 17:21:9e:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPBv15vq1q2fojgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk MmRmYzQ5NWUtYjBkNC00ODA3LWFlOWYtMzUyYzU4MjIzMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkp3MjXLr7upZxye8SmipkZ46EYUOs+Mte4w H7/R922jOhi6jEF09T6bh3rkDhoujPudLqMq+QJ/6KADag2o5d9uWxjCyq5uCtDF +PzhRx39ydiTUgy3WY1+fFddE1kUS9iDRYpt7yfZ/akN8rd/ThtGN7RD1DR0y8ny 7bhPbVSMObl3BluPiYEQnVvdnWf017gdGPwvl9kXZtzaPFreBqD9j6v+maqrOp/m ykiuLLvpx++I7uJxi5YQfM5nwp0QfWZuTubBU1CSOaxOqKKSeQuLMRIhTeqO1A0a xXg4VCMCEAI5fePUFAuYTjUy1CsPYyPGu7w6a9ohHT9YwTuOEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKoWmkyt/6zjYHg3j1mttStRZolMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYWVlMWExMDktNmM4YS0z NTAyLTkxMTEtYjliNTk1M2IzNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABC8CMpsmK+KBk0z7LrEjZ5BFvrb8jAa94ETvu+a0/KtZetIEa4bBALr IwxrsxlwHokaxH2rik9j3hFgWFhX7igotOrUnGmCPU2Miq3MgwOqJ6ly9M27Hae6 5Qu82MOfq40Q37X8UewjH1BXIkbrRtf+Tig9z6QI8Ywy2tZE9q878zz/Pz+fJ5Rc 6pq0xK/XDJVJb1eyxXV0r3Gu8Sfp6N4LsJD0gM2eOlTTB8xls2tHlRS4pj/QzX15 g1pHTh9T6L9m1Sc7ET2jaQpqWLhZZ8dNKBVF2WyDzj45AMfnGuToIYX8D7J3Yhyb Ieb06TEHBYqRUSHICadCo52X5hchnjs= -----END CERTIFICATE-----Generated at Thu Oct 9 01:21:49 2025 by rpki-client