$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b59e6a96-5462-38cf-bf6f-93d112de2c35.roa File: b59e6a96-5462-38cf-bf6f-93d112de2c35.roa (raw, json) Hash identifier: PLtbp5taWRIwcuQtBZ5aUzK+Lcam9dxAiXqbB27tQY4= Subject key identifier: B3:E6:C3:17:2A:13:4C:F1:57:5A:47:B2:19:2A:17:E1:E0:CC:1C:0E Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F70709E1F94605A69EBE71540 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b59e6a96-5462-38cf-bf6f-93d112de2c35.roa Signing time: Fri 09 Oct 2026 00:12:54 +0000 ROA not before: Fri 09 Oct 2026 00:12:54 +0000 ROA not after: Thu 07 Jan 2027 01:12:54 +0000 asID: 16509 IP address blocks: 216.157.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:70:9e:1f:94:60:5a:69:eb:e7:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Oct 9 00:12:54 2026 GMT Not After : Jan 7 01:12:54 2027 GMT Subject: CN=2a961c0f-bc7b-4a8a-b757-00e6810c054b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:90:b3:84:12:eb:22:17:0e:cb:49:69:a3:e8: 17:d4:21:c2:85:f1:9c:cc:07:93:a7:80:3a:77:11: 80:50:91:ff:78:a5:2a:e6:bb:7a:b9:08:2b:4e:91: 31:49:ad:3f:b9:b5:89:7d:5f:f7:1f:95:0a:e5:f1: e4:44:bf:8f:47:18:a6:36:b2:ee:4c:32:c1:bc:2a: ab:c2:df:a0:9c:f8:71:a1:21:eb:57:bf:c7:59:d8: a0:fb:25:23:4c:8a:e6:6f:46:e1:cd:f1:e7:6d:75: 60:f4:6e:30:bf:20:27:bf:5e:b9:c3:36:c8:83:57: 0e:29:ab:53:34:59:ce:c4:7e:c9:f7:d5:e3:57:63: ed:a6:57:08:4c:58:a5:83:cb:6c:65:90:2d:2b:05: d1:70:69:4e:41:22:be:77:c7:59:60:76:75:26:83: 78:c9:ac:36:0f:a1:d1:b5:37:a4:b1:cd:4e:51:95: 03:ae:8a:a3:52:88:74:cb:f9:80:23:06:80:1d:23: 0e:55:9f:1a:a1:33:ae:40:f6:75:88:97:8e:53:c9: 7c:fa:fe:95:1c:fa:e9:2e:f9:5a:36:bc:b0:49:c2: 01:3e:95:9c:b0:fa:07:c7:be:92:02:af:62:4a:77: e3:a3:a2:0b:42:2c:52:f2:df:fd:78:e7:4e:0d:26: f0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E6:C3:17:2A:13:4C:F1:57:5A:47:B2:19:2A:17:E1:E0:CC:1C:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b59e6a96-5462-38cf-bf6f-93d112de2c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:8a:c6:c6:9f:f4:ad:2f:4f:0d:0e:a4:96:65:51:91:3a:a5: 11:0d:9b:3f:20:c2:9d:41:b4:9d:ce:e0:c6:cd:13:b5:4f:4b: 71:f0:2b:13:b8:31:2e:f8:f9:3c:08:38:2c:b0:11:88:36:2c: 04:3d:7b:16:7e:bc:a4:36:ec:d0:57:61:d2:06:19:2f:b9:f3: 5d:67:aa:10:cc:70:3a:d4:9a:c6:fb:ab:c1:0f:69:bc:09:cc: b3:82:03:11:54:d7:d3:33:0d:5c:ca:89:bb:a1:a6:5f:69:15: 8d:a1:3a:ce:1f:79:95:a8:53:21:52:bb:2b:d6:41:3f:57:b5: 8b:a9:eb:4a:20:18:a4:55:1c:05:a4:50:af:0a:f8:6b:d0:38: 69:f8:d8:3c:15:f2:25:d2:c7:f9:63:94:c2:05:8b:06:e5:18: 8a:cc:8d:8a:23:04:89:17:0a:b0:a5:c9:a9:75:62:49:3c:25: 4f:ee:dd:2c:05:9e:3f:60:47:56:b6:90:91:4e:c8:36:55:41: b5:20:dc:b9:5c:0a:de:9f:2f:a1:b7:f3:50:0d:14:1e:1b:83: 4d:47:48:9b:e1:4b:5b:54:11:dc:0b:52:5f:0b:d6:ac:0e:fb: ab:11:3f:ca:f1:c5:0d:c6:6d:15:8b:34:be:be:8c:09:1f:76: b1:d7:76:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wcJ4flGBaaevnFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MTAwOTAwMTI1NFoXDTI3MDEwNzAxMTI1NFowLzEtMCsGA1UEAxMk MmE5NjFjMGYtYmM3Yi00YThhLWI3NTctMDBlNjgxMGMwNTRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5CzhBLrIhcOy0lpo+gX1CHChfGczAeTp4A6 dxGAUJH/eKUq5rt6uQgrTpExSa0/ubWJfV/3H5UK5fHkRL+PRximNrLuTDLBvCqr wt+gnPhxoSHrV7/HWdig+yUjTIrmb0bhzfHnbXVg9G4wvyAnv165wzbIg1cOKatT NFnOxH7J99XjV2PtplcITFilg8tsZZAtKwXRcGlOQSK+d8dZYHZ1JoN4yaw2D6HR tTeksc1OUZUDroqjUoh0y/mAIwaAHSMOVZ8aoTOuQPZ1iJeOU8l8+v6VHPrpLvla NrywScIBPpWcsPoHx76SAq9iSnfjo6ILQixS8t/9eOdODSbwkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLPmwxcqE0zxV1pHshkqF+HgzBwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYjU5ZTZhOTYtNTQ2Mi0z OGNmLWJmNmYtOTNkMTEyZGUyYzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOKxsaf9K0vTw0OpJZlUZE6pRENmz8gwp1BtJ3O4MbNE7VPS3HwKxO4 MS74+TwIOCywEYg2LAQ9exZ+vKQ27NBXYdIGGS+5811nqhDMcDrUmsb7q8EPabwJ zLOCAxFU19MzDVzKibuhpl9pFY2hOs4feZWoUyFSuyvWQT9XtYup60ogGKRVHAWk UK8K+GvQOGn42DwV8iXSx/ljlMIFiwblGIrMjYojBIkXCrClyal1Ykk8JU/u3SwF nj9gR1a2kJFOyDZVQbUg3LlcCt6fL6G381ANFB4bg01HSJvhS1tUEdwLUl8L1qwO +6sRP8rxxQ3GbRWLNL6+jAkfdrHXdhQ= -----END CERTIFICATE-----Generated at Sun Oct 11 10:48:11 2026 by rpki-client