$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa File: b3d1be67-5383-349f-9c24-699e17fb4c78.roa (raw, json) Hash identifier: 7qYRMlCqYhRA3QjQkBCE/IMpkyuYqngnMGBwdP6wOo0= Subject key identifier: 71:46:9E:6C:8C:05:28:54:BE:69:6D:EE:A8:6E:A6:9D:86:9C:DF:98 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AE4611815181FC627FB7DB900 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa Signing time: Mon 18 Aug 2025 01:00:33 +0000 ROA not before: Mon 18 Aug 2025 01:00:33 +0000 ROA not after: Sun 16 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 158.115.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e4:61:18:15:18:1f:c6:27:fb:7d:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 18 01:00:33 2025 GMT Not After : Nov 16 02:00:33 2025 GMT Subject: CN=a2bd4152-b712-46f1-92a0-8c76ca33d054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:73:99:81:22:51:37:28:ef:31:31:9f:cc:b1: d5:19:dc:cf:a1:a7:6c:c5:6b:1a:1a:5f:f7:21:2f: 0c:d9:47:0b:de:3e:70:3a:0a:75:0f:93:ff:f3:a4: 8d:fe:cf:4b:5b:94:be:38:85:e5:b9:d7:30:78:44: dc:4e:ee:48:aa:d3:e3:19:a1:65:94:9f:06:a8:9c: ac:83:02:d4:91:6d:65:3f:52:d6:e6:d0:bb:5e:ce: 7d:4c:6e:7d:43:2a:04:08:e7:fe:d2:89:c4:d1:ba: 3d:88:18:ee:5c:a1:db:e4:b1:f0:eb:bf:cc:ca:92: 59:a5:61:ad:03:b1:51:19:4f:8c:25:61:21:e4:92: 5c:05:da:24:2a:59:0c:c1:0e:c2:9f:e1:f8:e1:bb: b8:0e:13:26:03:f1:48:f0:14:0e:e1:ea:23:46:3b: f1:00:40:fa:b8:84:41:44:01:1b:11:3c:18:8b:a3: df:46:a6:d7:bb:8e:ec:fa:3e:ea:39:05:6f:72:22: e5:04:f9:e8:2d:73:68:91:32:2e:71:c7:1b:77:e4: 90:50:01:53:e4:f8:17:6f:75:73:ba:f0:20:ee:f2: 3e:ae:d8:12:54:c6:b7:c2:36:7b:09:b2:75:a8:7f: fc:21:7e:35:9f:0b:60:20:86:b5:3a:68:8b:97:8c: a1:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:46:9E:6C:8C:05:28:54:BE:69:6D:EE:A8:6E:A6:9D:86:9C:DF:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ca:f4:c9:e4:bc:bd:65:ec:44:62:8f:73:0d:34:48:a8:e4: 91:ea:16:76:e6:59:f0:67:bb:ea:62:f0:7a:0f:c4:8d:10:77: ad:1f:3a:95:d8:4e:c5:f7:66:a4:39:1e:2e:f8:39:fb:3c:e2: 1e:77:2b:2e:db:8a:d9:0c:9d:59:0d:b1:6b:a4:8f:97:d4:2f: 03:d1:67:52:c8:83:49:2f:75:39:55:30:4e:5c:ba:11:82:eb: 0c:73:66:8e:ed:c7:09:53:26:aa:a5:5f:d4:7a:dc:03:de:ab: 56:11:12:35:26:50:55:7c:bc:fe:75:63:d1:66:30:46:fa:49: dc:62:4e:6e:8b:de:68:c4:01:74:f5:ac:cd:36:c8:93:0e:51: 8d:ae:4a:3f:7a:df:b7:60:51:69:ef:71:6a:76:ce:2e:b9:b1: 1b:51:80:82:c1:21:2e:dd:7d:1e:0b:2f:9b:4a:ed:c3:ab:ae: 03:62:b3:d1:ec:7f:95:46:aa:cb:75:97:8d:d0:ac:1c:f7:56: 1c:42:e7:8c:28:70:f7:77:e1:30:85:71:68:da:01:fd:5e:f9: 3b:5f:3f:2b:91:e6:89:19:f0:5a:4c:8a:a8:75:01:d4:31:ba: 24:4b:66:5a:05:8d:32:b8:68:c4:d5:ef:d5:98:a9:0b:39:a2: 4d:81:f5:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYRgVGB/GJ/t9uQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk YTJiZDQxNTItYjcxMi00NmYxLTkyYTAtOGM3NmNhMzNkMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3OZgSJRNyjvMTGfzLHVGdzPoadsxWsaGl/3 IS8M2UcL3j5wOgp1D5P/86SN/s9LW5S+OIXludcweETcTu5IqtPjGaFllJ8GqJys gwLUkW1lP1LW5tC7Xs59TG59QyoECOf+0onE0bo9iBjuXKHb5LHw67/MypJZpWGt A7FRGU+MJWEh5JJcBdokKlkMwQ7Cn+H44bu4DhMmA/FI8BQO4eojRjvxAED6uIRB RAEbETwYi6PfRqbXu47s+j7qOQVvciLlBPnoLXNokTIucccbd+SQUAFT5PgXb3Vz uvAg7vI+rtgSVMa3wjZ7CbJ1qH/8IX41nwtgIIa1OmiLl4yhBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFGnmyMBShUvmlt7qhupp2GnN+YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYjNkMWJlNjctNTM4My0z NDlmLTljMjQtNjk5ZTE3ZmI0Yzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnK9MnkvL1l7ERij3MNNEio5JHqFnbmWfBnu+pi8HoPxI0Qd60fOpXY TsX3ZqQ5Hi74Ofs84h53Ky7bitkMnVkNsWukj5fULwPRZ1LIg0kvdTlVME5cuhGC 6wxzZo7txwlTJqqlX9R63APeq1YREjUmUFV8vP51Y9FmMEb6SdxiTm6L3mjEAXT1 rM02yJMOUY2uSj9637dgUWnvcWp2zi65sRtRgILBIS7dfR4LL5tK7cOrrgNis9Hs f5VGqst1l43QrBz3VhxC54wocPd34TCFcWjaAf1e+TtfPyuR5okZ8FpMiqh1AdQx uiRLZloFjTK4aMTV79WYqQs5ok2B9Vw= -----END CERTIFICATE-----Generated at Wed Aug 20 10:44:30 2025 by rpki-client