$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa File: 0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa (raw, json) Hash identifier: dIXleVnRIdfyLjylCY01LFvD33qmx+jDVRe5WOioGZo= Subject key identifier: 6A:FA:DD:EE:55:F0:6E:7A:33:E4:A0:A5:8E:DA:24:76:C3:10:7D:7E Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D8695462CE788CFC6139DB080 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa Signing time: Thu 16 Apr 2026 13:00:31 +0000 ROA not before: Thu 16 Apr 2026 13:00:31 +0000 ROA not after: Wed 15 Jul 2026 13:00:31 +0000 asID: 14618 IP address blocks: 158.115.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:86:95:46:2c:e7:88:cf:c6:13:9d:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 16 13:00:31 2026 GMT Not After : Jul 15 13:00:31 2026 GMT Subject: CN=7adf26d5-8b33-49b3-a79b-5903c8156a05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:7c:be:27:b5:84:da:6e:9a:46:c0:8a:28:aa: 19:29:f4:28:3b:ad:03:33:4a:fb:f6:9a:66:54:77: ad:64:43:ab:ea:f1:3c:9f:f4:a4:d9:32:f4:91:56: a1:08:a0:36:d6:c3:ef:a0:94:67:51:29:f5:8c:b0: cf:be:df:9e:94:22:ea:f3:2a:b1:48:d7:b8:58:e2: 44:f2:87:fc:ab:9c:73:7a:33:1c:75:97:44:08:ca: 7d:b9:d4:95:b5:be:5a:a7:14:4b:ab:bf:f6:38:f5: 7c:72:8b:7e:e6:e0:c8:a2:af:a4:55:23:0e:41:e9: 3a:7f:a8:a2:2f:29:eb:3b:2f:96:fd:cb:46:98:76: b2:ad:57:c5:bf:52:1a:12:0a:6e:01:b5:69:5c:61: 7b:56:01:5d:ac:a5:3b:e3:5f:0a:a5:1e:29:8c:50: 66:2c:01:0d:77:fa:c2:bf:3d:a1:95:ac:57:b2:de: 11:15:fd:92:4a:44:43:b2:22:7b:2f:13:4c:16:b4: c1:f2:67:01:8d:06:14:7d:b4:15:35:4c:ed:f7:06: 2b:5e:72:17:3d:bc:c6:25:df:fe:26:c7:b0:ae:b7: 55:04:3f:63:9c:73:40:1b:a0:3b:03:34:11:f0:08: b5:6d:65:e6:66:aa:19:a2:22:02:31:4d:ca:fd:da: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FA:DD:EE:55:F0:6E:7A:33:E4:A0:A5:8E:DA:24:76:C3:10:7D:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:91:f2:56:68:30:f7:14:11:d2:98:93:31:38:84:3d:41:4d: bc:f1:05:fa:cc:de:74:9e:8b:00:71:21:37:45:2b:9e:03:d2: f8:a2:48:c2:50:9b:18:0a:54:9e:9b:70:87:ee:9c:93:a0:b4: ff:e5:e4:e9:49:bc:07:3c:e6:f7:a0:22:09:d0:1b:f7:b2:7e: 02:99:00:4e:eb:96:fe:17:67:a8:47:d6:0c:c9:f4:db:07:cc: 8f:e5:61:51:57:d1:16:db:af:76:7d:13:b4:2e:4b:e8:4b:9f: f8:88:18:bd:97:93:e1:37:af:9b:d3:8e:df:b1:d9:88:ad:d1: 58:5e:0a:e0:8d:63:e8:f2:8a:79:7d:02:16:62:30:db:1b:3a: f2:e7:fa:91:f8:b7:b3:9b:59:16:96:28:94:98:41:8c:5a:e2: 87:09:de:e3:9a:59:a8:49:80:26:eb:00:a9:0b:36:8c:d3:37: 1c:68:33:22:82:82:54:05:35:39:1c:be:63:f4:00:07:ac:d1: 5b:cf:34:10:94:20:e8:82:1a:c0:f1:1d:bb:3a:28:79:61:eb: d2:de:33:61:f7:ce:9b:5f:49:cc:b2:98:61:ee:5d:db:22:1f: a4:98:70:01:c3:a3:91:9e:e4:7b:54:89:9c:9e:a7:6f:15:da: 08:d9:0e:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2GlUYs54jPxhOdsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDQxNjEzMDAzMVoXDTI2MDcxNTEzMDAzMVowLzEtMCsGA1UEAxMk N2FkZjI2ZDUtOGIzMy00OWIzLWE3OWItNTkwM2M4MTU2YTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHy+J7WE2m6aRsCKKKoZKfQoO60DM0r79ppm VHetZEOr6vE8n/Sk2TL0kVahCKA21sPvoJRnUSn1jLDPvt+elCLq8yqxSNe4WOJE 8of8q5xzejMcdZdECMp9udSVtb5apxRLq7/2OPV8cot+5uDIoq+kVSMOQek6f6ii LynrOy+W/ctGmHayrVfFv1IaEgpuAbVpXGF7VgFdrKU7418KpR4pjFBmLAENd/rC vz2hlaxXst4RFf2SSkRDsiJ7LxNMFrTB8mcBjQYUfbQVNUzt9wYrXnIXPbzGJd/+ JsewrrdVBD9jnHNAG6A7AzQR8Ai1bWXmZqoZoiICMU3K/dqonQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGr63e5V8G56M+SgpY7aJHbDEH1+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMDQ5NWY4YzktNzRmOS0z NWZhLWIxZWQtNjA5ZjJjYTdlNTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyR8lZoMPcUEdKYkzE4hD1BTbzxBfrM3nSeiwBxITdFK54D0viiSMJQ mxgKVJ6bcIfunJOgtP/l5OlJvAc85vegIgnQG/eyfgKZAE7rlv4XZ6hH1gzJ9NsH zI/lYVFX0Rbbr3Z9E7QuS+hLn/iIGL2Xk+E3r5vTjt+x2Yit0VheCuCNY+jyinl9 AhZiMNsbOvLn+pH4t7ObWRaWKJSYQYxa4ocJ3uOaWahJgCbrAKkLNozTNxxoMyKC glQFNTkcvmP0AAes0VvPNBCUIOiCGsDxHbs6KHlh69LeM2H3zptfScyymGHuXdsi H6SYcAHDo5Ge5HtUiZyep28V2gjZDsM= -----END CERTIFICATE-----Generated at Fri Apr 17 14:50:31 2026 by rpki-client