$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa File: d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa (raw, json) Hash identifier: VF/XRRqnusOvEW0h31rOuNWaz/iKdGNfsrtgSdQjjtY= Subject key identifier: 8F:FE:4E:6F:7B:A7:29:28:D5:D8:13:02:7F:92:B7:F8:E0:2D:4D:42 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584B48E1BCF0EC4B8818D664E080 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa Signing time: Tue 23 Sep 2025 01:00:33 +0000 ROA not before: Tue 23 Sep 2025 01:00:33 +0000 ROA not after: Mon 22 Dec 2025 02:00:33 +0000 asID: 16509 IP address blocks: 158.115.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:48:e1:bc:f0:ec:4b:88:18:d6:64:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 23 01:00:33 2025 GMT Not After : Dec 22 02:00:33 2025 GMT Subject: CN=d34fd093-b9f5-4f0f-84f6-7977be75c31b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:e2:c5:f4:c9:0a:0e:f5:61:b3:12:27:a4: 95:06:6b:74:6d:ab:03:fe:3d:b9:29:7d:bb:91:61: 7c:64:9b:18:35:a5:04:81:90:04:8b:c3:56:fb:46: d0:b1:da:95:89:9b:62:0c:b9:46:4c:7b:8c:41:43: dd:16:f4:3f:3c:d6:80:bd:ce:36:fc:04:94:26:b6: 11:3a:a0:db:d5:8c:86:37:05:89:5f:ab:c4:de:5d: 8e:75:0d:d1:9b:e5:2f:53:ac:c0:30:6e:b1:5b:b8: b2:c6:a4:1b:0a:60:f3:0c:32:dd:95:e3:9d:4a:2a: 82:6b:89:4f:38:8d:3a:e2:75:8e:9b:2c:52:23:2b: d7:5c:7e:26:a4:e4:f7:ee:5f:09:2e:3e:d3:d6:ab: 5d:d3:bf:99:f5:90:26:9d:52:ee:c4:ea:2c:37:4a: 1d:c0:e4:d9:85:25:66:28:29:8b:d6:12:36:c7:fa: 47:83:7c:f2:dd:af:f4:35:f2:71:37:63:43:c4:27: 33:b1:6d:a3:c1:e2:0b:3d:bb:93:6c:57:62:f6:47: 9d:50:84:99:7f:63:e1:ce:37:77:21:88:f5:0b:7f: 06:27:e5:c9:7d:6c:7e:c2:1b:e0:46:33:48:21:ed: 26:ee:19:b9:a3:2f:0b:52:34:24:1b:6e:8d:35:d6: d9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FE:4E:6F:7B:A7:29:28:D5:D8:13:02:7F:92:B7:F8:E0:2D:4D:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5c88e45-fe27-3d6c-9869-cdaf57271a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a7:e7:14:9a:af:02:e4:7c:87:35:c0:ff:8f:1b:d0:8b:e5: 5c:f1:50:b4:09:ce:44:c5:9c:96:37:b0:99:85:f7:6d:ca:75: 8c:dd:9c:b8:65:fe:c6:2f:2c:9a:65:58:aa:06:b5:45:d0:03: 62:0b:e8:fa:a6:af:23:5a:7a:67:f7:aa:7c:04:72:29:8e:95: 4e:a9:69:be:13:a1:76:ab:3f:3f:10:2f:a9:f3:67:4a:69:e4: 2a:8f:33:fa:34:19:6d:f4:3f:9f:3f:78:46:2a:14:de:6a:36: 85:80:bd:7e:25:7e:e7:43:e5:17:a5:90:8f:ba:30:26:60:43: 6b:00:d3:a3:cb:31:c9:7c:38:86:05:d6:89:4d:06:91:08:ac: e6:e1:b7:53:1d:77:c8:fd:86:9f:7f:5e:63:2b:05:96:60:37: 62:73:76:21:3f:60:92:f9:3d:bf:0d:97:14:de:65:19:f3:c9: ac:9f:14:84:3b:d9:2e:d6:6c:7b:64:ca:c8:2c:8d:82:3c:4a: 93:d5:77:82:6c:6a:aa:ed:6c:8a:ab:74:76:a7:24:b5:33:1a: f7:6d:97:ff:16:fc:89:2d:d2:28:c5:8b:3a:bf:75:62:5f:22: 14:be:b7:76:8c:bf:16:26:cc:76:39:46:5a:89:e8:9d:47:91: 6d:cc:04:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtI4bzw7EuIGNZk4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDkyMzAxMDAzM1oXDTI1MTIyMjAyMDAzM1owLzEtMCsGA1UEAxMk ZDM0ZmQwOTMtYjlmNS00ZjBmLTg0ZjYtNzk3N2JlNzVjMzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIvixfTJCg71YbMSJ6SVBmt0basD/j25KX27 kWF8ZJsYNaUEgZAEi8NW+0bQsdqViZtiDLlGTHuMQUPdFvQ/PNaAvc42/ASUJrYR OqDb1YyGNwWJX6vE3l2OdQ3Rm+UvU6zAMG6xW7iyxqQbCmDzDDLdleOdSiqCa4lP OI064nWOmyxSIyvXXH4mpOT37l8JLj7T1qtd07+Z9ZAmnVLuxOosN0odwOTZhSVm KCmL1hI2x/pHg3zy3a/0NfJxN2NDxCczsW2jweILPbuTbFdi9kedUISZf2Phzjd3 IYj1C38GJ+XJfWx+whvgRjNIIe0m7hm5oy8LUjQkG26NNdbZDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/+Tm97pyko1dgTAn+St/jgLU1CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZDVjODhlNDUtZmUyNy0z ZDZjLTk4NjktY2RhZjU3MjcxYTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFan5xSarwLkfIc1wP+PG9CL5VzxULQJzkTFnJY3sJmF923KdYzdnLhl /sYvLJplWKoGtUXQA2IL6PqmryNaemf3qnwEcimOlU6pab4ToXarPz8QL6nzZ0pp 5CqPM/o0GW30P58/eEYqFN5qNoWAvX4lfudD5RelkI+6MCZgQ2sA06PLMcl8OIYF 1olNBpEIrObht1Mdd8j9hp9/XmMrBZZgN2JzdiE/YJL5Pb8NlxTeZRnzyayfFIQ7 2S7WbHtkysgsjYI8SpPVd4JsaqrtbIqrdHanJLUzGvdtl/8W/Ikt0ijFizq/dWJf IhS+t3aMvxYmzHY5RlqJ6J1HkW3MBNw= -----END CERTIFICATE-----Generated at Thu Oct 9 01:16:45 2025 by rpki-client