$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa File: 1cafc32e-37ff-3be5-8b34-b31586912636.roa (raw, json) Hash identifier: tCHmvKDdkTtXqieQ8++lo/htFKtjWZ/DCNR/8axuTX8= Subject key identifier: 00:60:90:57:0B:E4:4C:26:01:68:52:78:44:AD:08:EB:EF:94:EF:41 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584EBC7702E1F94B19B36E15FB40 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa Signing time: Wed 05 Aug 2026 13:00:12 +0000 ROA not before: Wed 05 Aug 2026 13:00:12 +0000 ROA not after: Tue 03 Nov 2026 14:00:12 +0000 asID: 16509 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:77:02:e1:f9:4b:19:b3:6e:15:fb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 5 13:00:12 2026 GMT Not After : Nov 3 14:00:12 2026 GMT Subject: CN=0518505b-d32b-4d58-adf6-603a3d45eaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ac:23:ab:31:89:d0:2a:c4:42:56:a3:e3:8a: 5d:5a:6a:f3:2a:4d:7f:30:f8:ec:e7:ff:10:2c:ca: 90:aa:ec:96:33:cb:9b:16:7f:7e:01:0c:0e:61:42: f1:e0:32:9f:a7:94:4c:7c:a0:17:d5:70:5b:19:c6: 24:59:f4:59:11:cb:62:25:37:b1:f3:4c:a7:35:35: 49:ab:19:a7:c0:4e:96:06:8d:4c:34:8f:48:33:43: 89:3e:80:da:24:e0:96:12:d2:3f:90:9e:a6:ee:93: 7d:9e:91:df:c2:14:e6:01:b0:74:79:38:bc:33:ac: 79:b7:35:75:55:b4:eb:3b:da:a8:4f:23:db:d5:a3: 67:83:c8:08:a8:54:6a:c6:99:60:d4:2c:7b:3c:de: 74:6b:5a:fe:b9:22:a1:ce:92:cb:06:45:48:6e:75: 80:d5:55:a6:ee:fc:5c:d0:ac:1f:63:ee:e8:dc:3f: 43:0c:4d:a6:c0:2d:80:68:bf:7a:3d:bf:e1:de:f2: e2:81:79:77:56:07:83:e4:00:3d:e9:e7:d3:d0:25: 65:4d:cb:fc:42:da:4e:77:3e:4a:b8:7c:52:b7:86: 07:fb:f5:af:a0:31:51:a2:15:fb:f7:e6:1a:b0:58: 22:48:47:34:df:3f:bb:68:81:45:52:fe:c4:bb:b2: a9:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:60:90:57:0B:E4:4C:26:01:68:52:78:44:AD:08:EB:EF:94:EF:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:46:6f:9a:0d:30:c1:07:25:c9:cf:6e:3c:59:df:26:aa:f3: 08:16:a0:45:60:10:70:d0:62:81:dd:20:dd:59:72:ef:d6:f5: 49:dd:ca:8a:a7:47:6f:3f:4e:32:c8:ab:5f:ab:fc:b1:3f:9b: 83:6e:b4:8b:aa:57:6b:f4:68:12:7b:a8:cf:a6:4c:e9:e4:4e: 56:9c:1e:4b:ce:d9:75:94:81:91:e7:35:0e:48:65:5f:09:c0: 4d:95:03:fc:ae:7c:1f:92:11:5c:c4:a4:90:9c:30:66:c2:7b: 11:b9:05:7c:4a:e2:28:e8:7d:dc:de:86:56:8a:21:88:33:61: 90:a8:33:db:05:f6:9a:61:68:6e:dd:d2:9f:28:76:0b:ff:e1: 99:ac:fe:e8:b0:9f:85:42:7e:06:65:b5:e7:25:54:91:4e:54: 90:a6:47:9d:0e:0c:ba:e0:a2:4d:3d:6b:5c:57:1c:8f:e6:2b: 78:45:eb:0d:94:04:ed:fe:94:28:5c:07:43:b5:3d:43:5e:89: 6e:36:6b:1b:f6:d3:87:d1:a1:1f:42:d1:9f:72:cd:48:a2:df: 4b:3b:2e:c3:f0:05:c4:a9:ba:77:87:7d:eb:1e:66:0f:89:64: 5c:58:40:ca:aa:24:8a:e3:d9:4b:c2:4e:34:03:a4:30:ac:10: bb:06:f2:a7 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE68dwLh+UsZs24V+0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk MDUxODUwNWItZDMyYi00ZDU4LWFkZjYtNjAzYTNkNDVlYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyawjqzGJ0CrEQlaj44pdWmrzKk1/MPjs5/8Q LMqQquyWM8ubFn9+AQwOYULx4DKfp5RMfKAX1XBbGcYkWfRZEctiJTex80ynNTVJ qxmnwE6WBo1MNI9IM0OJPoDaJOCWEtI/kJ6m7pN9npHfwhTmAbB0eTi8M6x5tzV1 VbTrO9qoTyPb1aNng8gIqFRqxplg1Cx7PN50a1r+uSKhzpLLBkVIbnWA1VWm7vxc 0KwfY+7o3D9DDE2mwC2AaL96Pb/h3vLigXl3VgeD5AA96efT0CVlTcv8QtpOdz5K uHxSt4YH+/WvoDFRohX79+YasFgiSEc03z+7aIFFUv7Eu7KptQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFABgkFcL5EwmAWhSeEStCOvvlO9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMWNhZmMzMmUtMzdmZi0z YmU1LThiMzQtYjMxNTg2OTEyNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAJEZvmg0wwQclyc9uPFnfJqrzCBagRWAQ cNBigd0g3Vly79b1Sd3KiqdHbz9OMsirX6v8sT+bg260i6pXa/RoEnuoz6ZM6eRO VpweS87ZdZSBkec1DkhlXwnATZUD/K58H5IRXMSkkJwwZsJ7EbkFfEriKOh93N6G VoohiDNhkKgz2wX2mmFobt3Snyh2C//hmaz+6LCfhUJ+BmW15yVUkU5UkKZHnQ4M uuCiTT1rXFccj+YreEXrDZQE7f6UKFwHQ7U9Q16JbjZrG/bTh9GhH0LRn3LNSKLf Szsuw/AFxKm6d4d96x5mD4lkXFhAyqokiuPZS8JONAOkMKwQuwbypw== -----END CERTIFICATE-----Generated at Thu Aug 20 23:39:32 2026 by rpki-client