$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa File: 3e297adb-169e-3352-bbb2-8260355bfd1a.roa (raw, json) Hash identifier: QP+puEGS1L2k1DTBfb+4+nTTZ23GS5bNFKUOfsZW774= Subject key identifier: DC:6C:1D:FC:E4:17:9B:35:87:7E:E1:B6:37:04:CC:0F:4A:D2:A3:D5 Certificate issuer: /CN=458adead-fc85-4377-ae8f-70e00c42b223 Certificate serial: 010D0C9F4328584F51D2AD822CEB0543DF8AF780 Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa Signing time: Mon 28 Sep 2026 01:00:12 +0000 ROA not before: Mon 28 Sep 2026 01:00:12 +0000 ROA not after: Sun 27 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 157.248.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:51:d2:ad:82:2c:eb:05:43:df:8a:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223 Validity Not Before: Sep 28 01:00:12 2026 GMT Not After : Dec 27 02:00:12 2026 GMT Subject: CN=759bcbb7-6cd7-4a5c-8011-22dbfb1c016c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:63:29:5e:96:cc:6d:7c:37:9e:ae:c4:e0:85: 0e:3f:5c:ee:7e:61:41:13:04:29:cb:69:cf:f0:67: b1:40:02:2c:29:0c:02:91:f5:8a:78:5f:ed:3f:3a: ef:dd:00:2f:8c:26:39:93:ae:c8:f6:bf:6a:af:0f: 69:ce:a4:6b:b7:81:ae:29:35:81:c2:1f:80:64:1f: 94:16:8c:fa:42:0c:cc:40:ff:8f:66:95:c5:1a:7d: d9:ce:37:99:39:99:bd:0d:ef:6a:ed:83:22:e6:e6: bf:69:01:22:38:e5:c5:a5:e0:9b:ce:b2:17:13:62: 1e:88:65:94:04:02:9c:2f:6d:84:5c:23:c9:28:26: 65:ca:e2:a1:b2:28:a4:8e:0a:4f:19:16:62:a3:73: 0a:8d:81:db:e8:68:7b:aa:21:50:65:15:11:45:13: d0:17:21:9c:d2:60:87:ba:39:86:f7:4a:b1:9d:96: b0:63:9a:ea:24:63:1b:92:8c:2f:60:ee:a8:c2:1b: b4:24:fd:d2:9c:6b:92:5a:8b:92:9f:80:7a:a9:0a: 7a:ee:a5:16:f0:3a:fe:da:12:23:5e:c0:5d:63:bd: e2:4e:c4:14:c9:00:57:fb:0f:fb:44:be:d0:70:1f: 30:4c:f2:d7:b1:f3:18:17:5f:f9:26:f2:15:af:c0: cf:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6C:1D:FC:E4:17:9B:35:87:7E:E1:B6:37:04:CC:0F:4A:D2:A3:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl X509v3 Authority Key Identifier: keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer sbgp-ipAddrBlock: critical IPv4: 157.248.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:36:42:79:fc:d4:74:30:45:51:32:e9:62:c7:fb:14:f5:51: 64:02:40:61:86:f6:5f:37:0e:10:8a:7b:d9:d8:ec:df:ac:62: 07:c0:3b:60:62:4b:73:38:24:f7:a1:55:5e:b5:16:f1:2d:d3: 4d:42:cf:eb:ac:3b:b0:7a:03:2a:c0:4d:19:94:93:c4:dd:36: 1c:c3:fd:6a:ce:db:02:d0:22:35:91:82:9b:8e:20:33:d3:79: 4b:52:fa:ab:b6:92:69:36:41:9d:a9:b1:d7:fa:04:99:72:ca: 66:5c:6a:41:e0:a3:2c:a4:b6:35:80:ba:39:3c:75:63:75:5f: c6:49:88:5d:f5:b9:1c:f9:12:11:12:e9:06:9f:02:65:1f:7d: 0e:8d:6c:c8:6f:d0:c4:38:bd:c2:00:a0:b0:c8:91:3d:27:90: 7b:d7:ac:b8:b9:01:f4:a5:d1:e8:d1:38:0e:6e:25:d8:db:dc: 01:68:1e:19:b2:03:b7:8b:43:4d:c1:61:d7:8a:35:83:cb:55: 05:1f:f5:f7:76:33:27:b8:2b:2e:f8:54:9c:80:ac:11:2f:f1: 31:f2:bb:fb:ad:71:16:cf:bb:fe:05:a9:49:19:b3:d0:9b:ae: 69:61:a9:2d:1d:58:9f:43:6a:14:e3:02:8d:88:a7:f1:5c:51: 30:c6:4b:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9R0q2CLOsFQ9+K94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4YWRlYWQtZmM4NS00Mzc3LWFlOGYtNzBlMDBjNDJi MjIzMB4XDTI2MDkyODAxMDAxMloXDTI2MTIyNzAyMDAxMlowLzEtMCsGA1UEAxMk NzU5YmNiYjctNmNkNy00YTVjLTgwMTEtMjJkYmZiMWMwMTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmMpXpbMbXw3nq7E4IUOP1zufmFBEwQpy2nP 8GexQAIsKQwCkfWKeF/tPzrv3QAvjCY5k67I9r9qrw9pzqRrt4GuKTWBwh+AZB+U Foz6QgzMQP+PZpXFGn3ZzjeZOZm9De9q7YMi5ua/aQEiOOXFpeCbzrIXE2IeiGWU BAKcL22EXCPJKCZlyuKhsiikjgpPGRZio3MKjYHb6Gh7qiFQZRURRRPQFyGc0mCH ujmG90qxnZawY5rqJGMbkowvYO6owhu0JP3SnGuSWouSn4B6qQp67qUW8Dr+2hIj XsBdY73iTsQUyQBX+w/7RL7QcB8wTPLXsfMYF1/5JvIVr8DPAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxsHfzkF5s1h37htjcEzA9K0qPVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NThh ZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUwMGM0MmIyMjMvM2UyOTdhZGItMTY5ZS0z MzUyLWJiYjItODI2MDM1NWJmZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU4YWRlYWQtZmM4NS00Mzc3LWFl OGYtNzBlMDBjNDJiMjIzLzQ1OGFkZWFkLWZjODUtNDM3Ny1hZThmLTcwZTAwYzQy YjIyMy5jcmwwHwYDVR0jBBgwFoAUgFwvkgT+eRfx4bKa4aKlQkaLRQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NThhZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUw MGM0MmIyMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnfjaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAc2Qnn81HQwRVEy6WLH+xT1UWQCQGGG9l83DhCKe9nY7N+sYgfAO2Bi S3M4JPehVV61FvEt001Cz+usO7B6AyrATRmUk8TdNhzD/WrO2wLQIjWRgpuOIDPT eUtS+qu2kmk2QZ2psdf6BJlyymZcakHgoyyktjWAujk8dWN1X8ZJiF31uRz5EhES 6QafAmUffQ6NbMhv0MQ4vcIAoLDIkT0nkHvXrLi5AfSl0ejROA5uJdjb3AFoHhmy A7eLQ03BYdeKNYPLVQUf9fd2Mye4Ky74VJyArBEv8THyu/utcRbPu/4FqUkZs9Cb rmlhqS0dWJ9DahTjAo2Ip/FcUTDGS/k= -----END CERTIFICATE-----Generated at Tue Oct 13 23:27:54 2026 by rpki-client