$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa File: b3d1be67-5383-349f-9c24-699e17fb4c78.roa (raw, json) Hash identifier: NTTIvdr6djLwaFXesNmRCSjwuVRMz9eingQPX9Y/5M0= Subject key identifier: 2F:F6:B7:52:28:F2:DC:D1:C9:4B:19:32:D0:C0:A4:45:2F:4D:54:D0 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584E66DA0E2D741FFE5ECB96E3E0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa Signing time: Sun 05 Jul 2026 21:00:11 +0000 ROA not before: Sun 05 Jul 2026 21:00:11 +0000 ROA not after: Sat 03 Oct 2026 21:00:11 +0000 asID: 16509 IP address blocks: 158.115.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:66:da:0e:2d:74:1f:fe:5e:cb:96:e3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jul 5 21:00:11 2026 GMT Not After : Oct 3 21:00:11 2026 GMT Subject: CN=88be0ec2-dad0-4052-99eb-11f92e720c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:62:44:ec:d4:62:c3:e1:a1:ec:e2:70:9b:2b: 6a:a7:f7:21:62:7f:83:a3:dd:f8:05:89:a9:52:1d: 6c:ec:c4:0f:56:7d:38:44:25:16:8d:06:ec:57:80: 4f:96:e5:04:d9:9a:c2:ba:cb:20:ee:d1:29:d3:8f: 55:7a:28:1f:d9:69:e4:95:9e:09:ca:b5:c0:f4:8a: c4:72:16:80:2a:28:52:f4:4a:10:28:c3:04:f0:90: 7b:30:9d:b7:79:fd:51:23:3e:1f:e3:76:b0:27:ef: c1:66:f0:97:56:42:04:ac:8f:41:4d:9c:14:a0:a0: 81:0b:14:7e:cf:4c:48:e3:de:8a:06:40:25:9f:3b: 3a:4c:d5:3a:c9:6b:ba:94:34:c4:da:b5:ee:6f:a6: df:21:27:e8:aa:a4:a0:02:96:58:07:d5:27:ed:ee: 78:b0:51:78:f3:58:86:28:07:db:e4:8a:7f:b2:08: a1:32:8b:99:cb:ba:60:a7:44:04:8a:c8:c5:8c:99: 9b:35:a8:77:0b:32:b0:70:e7:09:5c:bf:4e:dd:76: a5:88:9e:7d:58:5c:72:a4:b7:cd:9e:af:26:f0:c9: b7:57:3e:7d:a3:90:cf:e5:3b:8b:cf:8d:c3:29:09: 3f:5b:9e:6e:39:43:53:c1:0d:38:72:a4:7e:d9:39: 68:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:F6:B7:52:28:F2:DC:D1:C9:4B:19:32:D0:C0:A4:45:2F:4D:54:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3d1be67-5383-349f-9c24-699e17fb4c78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:a1:5a:70:bc:a5:bf:17:c8:0f:83:fa:f4:8c:65:fb:8c:74: 8d:00:30:b4:38:89:6a:21:f6:8f:a6:67:74:14:1d:19:03:cb: da:18:a0:ab:a2:29:ab:e5:53:dc:f1:0b:0f:58:78:9b:ad:5a: 3b:87:45:bc:4e:14:27:a1:ce:69:c2:59:af:51:8a:1c:56:83: 9f:3c:e4:fb:1f:23:71:de:e5:4e:83:ef:31:b1:17:f5:f7:88: 73:e7:53:f2:2f:6b:41:d1:c1:35:a8:4f:c4:4a:83:98:8c:d2: 8e:c5:60:eb:c8:d4:63:13:5a:9d:49:24:76:4c:c6:0f:0d:e6: 9b:ce:a1:d4:c0:82:ce:b2:c3:42:63:77:5c:63:19:25:51:b4: 5f:03:9c:1d:3c:5d:8e:f0:a5:13:cb:6b:d7:59:52:d1:1c:e3: 65:41:50:2d:65:85:86:1b:72:61:96:90:1c:1c:75:e9:25:c0: fe:b1:e0:9b:ea:9b:1c:19:64:a9:6a:12:bc:b8:2a:69:da:0a: 46:cb:16:db:9a:48:d9:18:dc:b6:f5:0e:f4:bc:a4:49:1a:54: 35:7b:fc:fd:70:52:11:02:8e:2d:f2:f2:96:59:24:f6:24:75: e2:08:79:ac:de:77:ff:f8:a5:7d:e1:d0:52:44:a9:a5:b0:73: c7:4c:87:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2g4tdB/+XsuW4+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk ODhiZTBlYzItZGFkMC00MDUyLTk5ZWItMTFmOTJlNzIwYzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGJE7NRiw+Gh7OJwmytqp/chYn+Do934BYmp Uh1s7MQPVn04RCUWjQbsV4BPluUE2ZrCussg7tEp049Veigf2WnklZ4JyrXA9IrE chaAKihS9EoQKMME8JB7MJ23ef1RIz4f43awJ+/BZvCXVkIErI9BTZwUoKCBCxR+ z0xI496KBkAlnzs6TNU6yWu6lDTE2rXub6bfISfoqqSgApZYB9Un7e54sFF481iG KAfb5Ip/sgihMouZy7pgp0QEisjFjJmbNah3CzKwcOcJXL9O3XaliJ59WFxypLfN nq8m8Mm3Vz59o5DP5TuLz43DKQk/W55uOUNTwQ04cqR+2TloWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/2t1Io8tzRyUsZMtDApEUvTVTQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYjNkMWJlNjctNTM4My0z NDlmLTljMjQtNjk5ZTE3ZmI0Yzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2hWnC8pb8XyA+D+vSMZfuMdI0AMLQ4iWoh9o+mZ3QUHRkDy9oYoKui KavlU9zxCw9YeJutWjuHRbxOFCehzmnCWa9RihxWg5885PsfI3He5U6D7zGxF/X3 iHPnU/Iva0HRwTWoT8RKg5iM0o7FYOvI1GMTWp1JJHZMxg8N5pvOodTAgs6yw0Jj d1xjGSVRtF8DnB08XY7wpRPLa9dZUtEc42VBUC1lhYYbcmGWkBwcdeklwP6x4Jvq mxwZZKlqEry4KmnaCkbLFtuaSNkY3Lb1DvS8pEkaVDV7/P1wUhECji3y8pZZJPYk deIIeazed//4pX3h0FJEqaWwc8dMhzE= -----END CERTIFICATE-----Generated at Mon Jul 6 20:14:09 2026 by rpki-client