$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c11ee4ee-47af-3a13-b0f3-3a19f78fc97d.roa File: c11ee4ee-47af-3a13-b0f3-3a19f78fc97d.roa (raw, json) Hash identifier: 4aTtWpqDaNYOyW3epNHQqMIW0P3kFq/vlYLu5vqwhsw= Subject key identifier: 14:F6:7F:56:BA:34:AC:3B:8A:3B:9B:E7:E2:26:AE:DA:C6:54:7F:C5 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584B48E1BCDB371664185CD69540 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c11ee4ee-47af-3a13-b0f3-3a19f78fc97d.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 158.115.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bc:db:37:16:64:18:5c:d6:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=36101c60-9492-4bec-bf70-d2526565d73b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:58:63:c6:52:6e:0d:eb:35:89:5b:06:a0:4d: 62:12:f1:d1:c4:f1:4a:79:b5:0e:51:d7:39:a8:97: 56:cf:80:4a:47:dd:bb:80:18:ff:85:1f:4f:d0:99: bd:d1:0e:18:00:c4:54:f3:11:24:39:c3:48:1b:8c: b1:9a:1f:8c:0b:3f:7d:be:bb:63:bd:53:58:3d:ee: b7:22:14:a6:93:2e:33:94:8f:ef:94:83:6d:3a:18: ba:17:20:19:2a:07:82:74:ff:8b:80:29:9a:30:1e: 5b:35:e3:a9:67:90:68:50:bf:62:55:94:ff:bc:93: 74:b6:d4:c9:af:db:40:1b:75:d4:40:81:a1:64:db: 02:04:91:1b:e8:4a:18:9a:35:f6:d0:23:66:e1:11: e0:57:17:6b:06:40:eb:d3:0c:43:4b:09:a6:fd:3f: 5d:55:87:1c:60:30:4e:79:a5:6d:5a:60:4b:c4:c3: 97:a2:ed:ee:21:70:d6:3f:9a:52:2a:5f:cc:44:80: be:e4:6a:7c:5c:71:aa:38:bd:64:3a:91:c3:c1:21: 0b:b3:64:a0:2d:93:2e:e1:c8:1a:87:fc:a0:36:99: ae:d9:45:9c:74:3a:0c:24:cb:b4:de:aa:99:fb:c4: 80:9a:e6:aa:88:eb:49:6b:38:2e:00:d4:b3:a3:d1: 2d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F6:7F:56:BA:34:AC:3B:8A:3B:9B:E7:E2:26:AE:DA:C6:54:7F:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c11ee4ee-47af-3a13-b0f3-3a19f78fc97d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:fd:e7:c1:22:c8:39:09:37:eb:bc:4c:a0:00:2d:04:74:d1: c6:95:b1:51:68:02:93:e8:56:be:e5:03:16:b4:59:5e:b8:20: 4f:d5:df:ca:b7:22:f7:5a:32:0b:ae:bd:8d:11:fa:ba:35:ef: ca:8c:b0:c8:bc:49:de:cf:ac:1b:cc:70:00:2a:75:1c:c6:6e: e4:1c:b2:64:35:64:3d:f4:0e:38:66:f2:91:ef:9a:92:7b:d2: 01:13:0f:36:ce:f9:08:39:ed:bc:96:6e:e7:cd:9b:a4:9a:ef: c7:3d:cf:0f:50:35:57:0c:08:23:df:2f:74:42:b1:6c:61:d0: 39:7b:19:8d:f8:57:0a:50:d9:fe:24:a5:8e:be:44:7c:ca:0b: 90:07:7a:3b:02:d5:86:c5:b6:dd:87:61:19:45:dd:f1:40:85: 7b:38:7f:b6:d5:3f:8e:df:d5:b9:23:0d:7f:a5:32:21:52:83: 76:e1:5c:95:77:2a:ac:a0:b6:5e:c4:19:fa:79:0f:fe:10:d0: 03:f0:0b:86:d7:a3:cf:db:89:25:44:bb:d1:f3:7c:08:c3:5b: 8f:1f:43:b3:fa:e0:30:95:f5:51:99:25:a4:4a:8f:94:1a:e7: 4f:38:a6:68:12:4e:8a:40:61:cc:06:11:19:19:bb:54:b6:b3: 36:a1:3e:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bzbNxZkGFzWlUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk MzYxMDFjNjAtOTQ5Mi00YmVjLWJmNzAtZDI1MjY1NjVkNzNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1hjxlJuDes1iVsGoE1iEvHRxPFKebUOUdc5 qJdWz4BKR927gBj/hR9P0Jm90Q4YAMRU8xEkOcNIG4yxmh+MCz99vrtjvVNYPe63 IhSmky4zlI/vlINtOhi6FyAZKgeCdP+LgCmaMB5bNeOpZ5BoUL9iVZT/vJN0ttTJ r9tAG3XUQIGhZNsCBJEb6EoYmjX20CNm4RHgVxdrBkDr0wxDSwmm/T9dVYccYDBO eaVtWmBLxMOXou3uIXDWP5pSKl/MRIC+5Gp8XHGqOL1kOpHDwSELs2SgLZMu4cga h/ygNpmu2UWcdDoMJMu03qqZ+8SAmuaqiOtJazguANSzo9EtFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBT2f1a6NKw7ijub5+ImrtrGVH/FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYzExZWU0ZWUtNDdhZi0z YTEzLWIwZjMtM2ExOWY3OGZjOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7958EiyDkJN+u8TKAALQR00caVsVFoApPoVr7lAxa0WV64IE/V38q3 IvdaMguuvY0R+ro178qMsMi8Sd7PrBvMcAAqdRzGbuQcsmQ1ZD30Djhm8pHvmpJ7 0gETDzbO+Qg57byWbufNm6Sa78c9zw9QNVcMCCPfL3RCsWxh0Dl7GY34VwpQ2f4k pY6+RHzKC5AHejsC1YbFtt2HYRlF3fFAhXs4f7bVP47f1bkjDX+lMiFSg3bhXJV3 Kqygtl7EGfp5D/4Q0APwC4bXo8/biSVEu9HzfAjDW48fQ7P64DCV9VGZJaRKj5Qa 5084pmgSTopAYcwGERkZu1S2szahPk8= -----END CERTIFICATE-----Generated at Wed Oct 8 19:48:44 2025 by rpki-client