$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/de85f81d-5b86-3a60-9216-abadab73b34b.roa File: de85f81d-5b86-3a60-9216-abadab73b34b.roa (raw, json) Hash identifier: VIdXY/r2S2tVl4mYEa8N/WbzyevX9Va2WfB0GE/tg2k= Subject key identifier: FF:83:E6:B3:33:0B:81:1B:B0:87:6A:F2:C6:1C:A4:81:3A:9C:38:1E Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F7070406C25CD201C20E0A500 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/de85f81d-5b86-3a60-9216-abadab73b34b.roa Signing time: Fri 09 Oct 2026 00:12:09 +0000 ROA not before: Fri 09 Oct 2026 00:12:09 +0000 ROA not after: Thu 07 Jan 2027 01:12:09 +0000 asID: 395831 IP address blocks: 216.157.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:70:40:6c:25:cd:20:1c:20:e0:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Oct 9 00:12:09 2026 GMT Not After : Jan 7 01:12:09 2027 GMT Subject: CN=1019ad16-84c9-4507-98f3-b0d72cdce0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:c5:d9:43:c0:90:c3:43:99:5a:9f:3e:ee: f8:ef:2b:7d:14:c8:e5:de:f0:c8:33:0e:48:99:9d: d9:69:35:45:9f:05:8a:16:ba:c2:d7:63:81:44:34: 1f:55:1b:d5:02:e5:8d:50:7b:43:b4:2e:53:f7:c0: 87:ca:07:04:f5:43:a2:45:f9:98:82:63:8a:17:d7: fd:dd:72:8f:05:1b:1a:1a:8b:0c:e8:16:fd:58:23: b5:3a:78:98:51:ec:b1:b2:4a:66:19:06:fe:d2:09: d3:6a:44:61:81:94:c1:5f:37:77:75:bc:fc:cb:37: 41:d6:a8:48:ca:02:06:5d:07:9a:02:40:26:f9:cc: 77:1b:80:65:12:43:62:5d:bf:b2:6b:36:2d:80:09: 94:28:4e:6d:36:a5:51:a1:2d:0b:64:0e:44:89:23: ea:cb:15:13:bb:55:70:24:f8:a3:72:86:50:1c:9e: 6a:25:6c:e2:69:0c:c0:e4:07:30:69:2c:a5:1e:1a: 32:92:26:5e:b8:ee:97:8c:f0:cb:18:31:3c:23:a2: ce:a4:e9:c0:f2:6a:7f:93:b0:e7:2b:c4:b6:4f:23: ab:d5:df:a8:16:d0:6b:39:6d:74:b2:9e:58:29:15: 91:eb:69:dd:0f:0c:1a:50:53:d9:e9:6c:0d:b5:a1: e2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:83:E6:B3:33:0B:81:1B:B0:87:6A:F2:C6:1C:A4:81:3A:9C:38:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/de85f81d-5b86-3a60-9216-abadab73b34b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:49:03:eb:4f:c6:7e:27:1d:7c:a0:d6:ad:77:12:8a:70:38: bb:f6:da:8b:8e:6c:14:73:c7:4d:d4:16:9b:55:e8:4a:86:57: e9:8a:7c:53:ee:97:2a:9d:2c:cc:05:60:5a:33:cc:55:79:cc: e5:86:09:b6:89:25:2a:99:e0:8a:b5:5b:7c:04:62:df:d8:9d: 18:57:99:0a:7e:19:49:cf:58:a0:7e:98:70:4e:f2:d8:94:2b: 5f:f3:e8:ef:81:00:84:26:21:7a:64:d1:74:a3:59:b6:a0:05: 93:b9:3a:1b:57:12:94:e6:fa:83:aa:79:22:35:61:3f:6c:c8: 70:51:29:3e:e1:80:c7:9f:ec:57:a5:b2:7a:eb:f3:08:86:1a: 2d:63:33:a2:b1:86:05:df:2b:05:16:43:04:a5:09:e2:8f:03: d9:98:4a:39:4f:ab:fc:56:c4:e7:57:9e:32:8d:72:23:c9:24: 89:84:c7:80:eb:fd:47:ab:51:6f:00:6a:cf:6e:2a:fc:96:06: 19:56:fb:44:2e:8c:79:60:1b:7f:db:8c:66:78:d5:e1:dc:72: c2:0b:88:70:f4:11:fe:e6:02:18:d8:ef:5d:95:d5:05:67:32: bf:02:3e:d3:08:85:27:96:0c:fb:fa:4d:df:08:f5:81:a4:31: 67:44:e0:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9wcEBsJc0gHCDgpQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MTAwOTAwMTIwOVoXDTI3MDEwNzAxMTIwOVowLzEtMCsGA1UEAxMk MTAxOWFkMTYtODRjOS00NTA3LTk4ZjMtYjBkNzJjZGNlMGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr3F2UPAkMNDmVqfPu747yt9FMjl3vDIMw5I mZ3ZaTVFnwWKFrrC12OBRDQfVRvVAuWNUHtDtC5T98CHygcE9UOiRfmYgmOKF9f9 3XKPBRsaGosM6Bb9WCO1OniYUeyxskpmGQb+0gnTakRhgZTBXzd3dbz8yzdB1qhI ygIGXQeaAkAm+cx3G4BlEkNiXb+yazYtgAmUKE5tNqVRoS0LZA5EiSPqyxUTu1Vw JPijcoZQHJ5qJWziaQzA5AcwaSylHhoykiZeuO6XjPDLGDE8I6LOpOnA8mp/k7Dn K8S2TyOr1d+oFtBrOW10sp5YKRWR62ndDwwaUFPZ6WwNtaHixQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+D5rMzC4EbsIdq8sYcpIE6nDgeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZGU4NWY4MWQtNWI4Ni0z YTYwLTkyMTYtYWJhZGFiNzNiMzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExJA+tPxn4nHXyg1q13EopwOLv22ouObBRzx03UFptV6EqGV+mKfFPu lyqdLMwFYFozzFV5zOWGCbaJJSqZ4Iq1W3wEYt/YnRhXmQp+GUnPWKB+mHBO8tiU K1/z6O+BAIQmIXpk0XSjWbagBZO5OhtXEpTm+oOqeSI1YT9syHBRKT7hgMef7Fel snrr8wiGGi1jM6KxhgXfKwUWQwSlCeKPA9mYSjlPq/xWxOdXnjKNciPJJImEx4Dr /UerUW8Aas9uKvyWBhlW+0QujHlgG3/bjGZ41eHccsILiHD0Ef7mAhjY712V1QVn Mr8CPtMIhSeWDPv6Td8I9YGkMWdE4Ck= -----END CERTIFICATE-----Generated at Sun Oct 11 22:21:55 2026 by rpki-client