$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa File: cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa (raw, json) Hash identifier: 6y4aaIuXkn06n+cQDeQSVF9LNPBaoUwR4qr5JyMu9No= Subject key identifier: A9:C4:42:E9:99:0E:D8:C6:F6:3C:1A:45:14:33:AA:81:AB:D7:8B:42 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584B48E1BD1990A591D1050A0380 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 14618 IP address blocks: 158.115.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bd:19:90:a5:91:d1:05:0a:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=e0b128b1-d29c-46ca-b412-3cc85137c968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:93:f3:94:8e:be:df:3b:55:e2:74:1f:1b:3b: fc:3f:4e:f3:03:00:e8:2e:88:01:2b:b4:c8:17:cb: 86:86:72:b0:b9:20:4b:47:70:3e:1a:c0:37:2f:ea: 16:77:6a:5e:59:7b:77:b4:27:82:1b:a6:48:23:72: a4:11:87:3c:84:e7:c0:83:81:47:71:3b:3a:ab:df: 2d:b0:11:c7:04:19:ce:a0:e6:40:09:57:20:f4:96: a9:2c:6f:a3:12:b2:61:2b:11:00:6b:d3:0e:5e:c5: 20:99:11:3e:6b:ad:10:dd:92:48:2d:e7:dd:f8:a9: 43:f5:2f:db:46:f3:c7:62:b5:33:2b:ad:58:5d:54: 53:d5:07:bf:26:26:d3:00:4c:f5:2a:ff:09:db:68: 6d:0a:63:4b:32:69:51:a6:ac:9c:24:7b:b9:0c:3c: cb:71:0b:7b:05:a6:c8:5e:5d:e3:bc:5e:05:d0:68: f3:4c:7c:41:6c:b2:14:5d:4e:44:3a:dd:9d:b7:ec: a6:aa:19:24:e0:2c:6c:d2:89:23:05:2f:6a:fc:72: a1:62:be:8e:42:14:c4:13:6a:44:03:46:12:7d:c9: 30:48:05:60:2b:30:5e:0a:e3:ed:c8:5e:c2:4e:78: d0:fb:e9:45:cf:54:eb:67:14:d9:d7:d6:e0:b3:29: 4e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C4:42:E9:99:0E:D8:C6:F6:3C:1A:45:14:33:AA:81:AB:D7:8B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cb9936ad-19cd-3e50-a519-c4edc873f8fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:4b:a4:56:a9:c1:c2:a2:f3:eb:ae:3e:51:f9:7d:9d:f4:ea: 69:f6:88:a9:4a:bd:96:52:4a:b3:df:9a:53:1c:59:69:47:78: cc:ab:ca:b9:69:17:57:81:5c:48:ef:cb:0f:07:e7:94:88:97: ad:15:86:cb:59:c2:35:35:b0:c8:a1:98:01:3c:8e:4b:25:77: dd:c4:90:2b:50:4a:82:82:4e:ec:07:59:0d:44:b2:47:9a:05: f4:a7:9f:32:9e:11:ff:4e:07:e9:c6:26:8a:6f:44:8c:a5:b0: 02:e9:99:cb:d5:79:7c:41:6e:67:f3:c2:e1:ae:1d:52:63:50: e3:85:c3:9f:ee:27:ad:b4:0a:97:a2:99:74:15:5d:e4:63:4c: 0b:2e:2f:aa:01:27:13:6a:55:7d:ee:70:f7:2b:f1:8d:da:42: 9e:7c:60:55:7c:e1:2c:a7:3e:39:f0:93:cd:bc:ba:62:dc:39: 7d:50:f0:50:c3:eb:f5:9b:08:b2:d8:55:81:23:92:da:5d:df: a4:b3:e8:af:08:52:29:2a:e2:1b:22:b3:ea:01:1a:6f:de:44: 6e:57:0d:30:73:8e:5c:61:3b:0b:34:53:ad:ce:3f:cc:d6:0f: 94:b0:4b:5d:4f:43:34:dd:dd:2e:cc:aa:15:4d:ef:f9:72:95: 3c:74:55:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4b0ZkKWR0QUKA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZTBiMTI4YjEtZDI5Yy00NmNhLWI0MTItM2NjODUxMzdjOTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpPzlI6+3ztV4nQfGzv8P07zAwDoLogBK7TI F8uGhnKwuSBLR3A+GsA3L+oWd2peWXt3tCeCG6ZII3KkEYc8hOfAg4FHcTs6q98t sBHHBBnOoOZACVcg9JapLG+jErJhKxEAa9MOXsUgmRE+a60Q3ZJILefd+KlD9S/b RvPHYrUzK61YXVRT1Qe/JibTAEz1Kv8J22htCmNLMmlRpqycJHu5DDzLcQt7BabI Xl3jvF4F0GjzTHxBbLIUXU5EOt2dt+ymqhkk4Cxs0okjBS9q/HKhYr6OQhTEE2pE A0YSfckwSAVgKzBeCuPtyF7CTnjQ++lFz1TrZxTZ19bgsylOwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnEQumZDtjG9jwaRRQzqoGr14tCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvY2I5OTM2YWQtMTljZC0z ZTUwLWE1MTktYzRlZGM4NzNmOGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhLpFapwcKi8+uuPlH5fZ306mn2iKlKvZZSSrPfmlMcWWlHeMyryrlp F1eBXEjvyw8H55SIl60VhstZwjU1sMihmAE8jksld93EkCtQSoKCTuwHWQ1Eskea BfSnnzKeEf9OB+nGJopvRIylsALpmcvVeXxBbmfzwuGuHVJjUOOFw5/uJ620Cpei mXQVXeRjTAsuL6oBJxNqVX3ucPcr8Y3aQp58YFV84SynPjnwk828umLcOX1Q8FDD 6/WbCLLYVYEjktpd36Sz6K8IUikq4hsis+oBGm/eRG5XDTBzjlxhOws0U63OP8zW D5SwS11PQzTd3S7MqhVN7/lylTx0VZs= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:15 2025 by rpki-client