$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa File: 0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa (raw, json) Hash identifier: 5/XxJy19+JvsBhr9QxIOQ3jwZrEnnSvCXD0dlsYaOy4= Subject key identifier: A7:EC:E2:4C:8D:1A:7A:35:02:AA:7E:70:5C:AB:A2:73:FF:E8:7B:93 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F093CDA519796D3D7DB360300 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 158.115.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:da:51:97:96:d3:d7:db:36:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=40193ae8-6af2-49e6-8784-680609e8a657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:e2:68:7c:79:60:20:b1:17:dd:b5:41:b8:a6: ee:3d:21:0a:52:f6:79:68:9b:2d:bf:d0:c0:c5:3c: 97:59:30:2a:50:c9:cd:c1:a9:18:fb:67:cb:10:7c: b1:85:d8:af:67:2d:92:9d:11:28:39:3f:cb:fe:bd: eb:55:ac:bf:d4:01:15:91:f7:03:64:74:f9:0f:43: bd:16:53:9d:ee:a8:69:24:e5:89:fa:23:56:6f:62: e0:fd:0e:14:17:d8:b7:a8:92:cf:3f:d8:28:09:f4: 20:e7:77:ef:44:b2:22:51:44:ef:54:c5:ce:aa:d6: 7a:0c:b2:51:91:d7:27:f8:67:ed:19:37:bb:6b:9a: 10:53:fb:36:36:70:97:6a:d7:88:0f:c1:17:86:34: d3:c6:58:c1:51:c8:48:d7:a2:88:7c:f8:0b:7c:76: 00:f1:50:ac:2b:92:fa:a4:d1:04:b1:f8:3d:01:ab: 4c:98:fc:84:7c:04:79:9a:22:74:b2:8a:64:00:bc: 95:2f:04:cc:f4:f3:8d:c0:09:46:86:bd:8a:c2:27: 17:60:1d:86:62:31:e0:4b:23:48:74:32:b4:cb:e2: 40:18:93:df:4f:de:e2:08:b8:51:5e:34:75:9b:05: 7b:b4:d1:7c:d5:00:a6:10:a0:bf:e3:65:f9:64:a9: 50:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:EC:E2:4C:8D:1A:7A:35:02:AA:7E:70:5C:AB:A2:73:FF:E8:7B:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:36:7c:06:bf:29:86:6b:a3:a9:be:14:76:89:04:8d:1a:16: 1f:c2:6b:8e:bb:06:c3:b8:50:70:10:8f:fc:2e:df:c4:50:4c: 4b:f8:97:0d:1e:28:a0:69:d9:16:0e:25:68:2a:bb:7b:38:b8: 77:04:c2:d6:b9:31:85:91:33:67:7d:6b:5f:12:c1:db:2b:89: dd:77:23:db:99:e8:8a:99:5a:7f:a6:47:f8:08:b2:58:59:05: 3a:37:0e:9f:8c:df:65:7b:9c:aa:b7:00:af:4c:be:24:75:ca: 3d:a7:dc:ee:23:8c:00:3d:63:4f:14:fe:4b:f4:bc:15:e1:b6: f0:f4:34:a7:94:3b:bc:fd:dc:27:14:6c:0f:cf:4c:ca:73:9d: 95:80:a8:2b:b3:3c:e8:4b:47:66:c0:ef:b5:6a:65:29:75:0d: 8b:a6:fb:b8:f1:b5:67:04:67:c8:41:5c:8c:d4:87:05:17:a5: 48:e3:61:33:58:95:16:df:d4:a8:e5:b0:ad:a3:f5:85:58:c1: d3:4d:6b:85:f9:70:35:84:24:c7:e8:f8:f4:4f:c9:79:96:db: 73:ef:5d:bb:d4:7f:6a:6c:f1:0e:a6:c1:c7:94:79:87:83:1b: dd:c0:83:ca:30:19:b2:d5:58:55:db:36:59:83:45:34:93:d9: 9f:02:94:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNpRl5bT19s2AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NDAxOTNhZTgtNmFmMi00OWU2LTg3ODQtNjgwNjA5ZThhNjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9OJofHlgILEX3bVBuKbuPSEKUvZ5aJstv9DA xTyXWTAqUMnNwakY+2fLEHyxhdivZy2SnREoOT/L/r3rVay/1AEVkfcDZHT5D0O9 FlOd7qhpJOWJ+iNWb2Lg/Q4UF9i3qJLPP9goCfQg53fvRLIiUUTvVMXOqtZ6DLJR kdcn+GftGTe7a5oQU/s2NnCXateID8EXhjTTxljBUchI16KIfPgLfHYA8VCsK5L6 pNEEsfg9AatMmPyEfAR5miJ0sopkALyVLwTM9PONwAlGhr2KwicXYB2GYjHgSyNI dDK0y+JAGJPfT97iCLhRXjR1mwV7tNF81QCmEKC/42X5ZKlQhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfs4kyNGno1Aqp+cFyronP/6HuTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMDQ5NWY4YzktNzRmOS0z NWZhLWIxZWQtNjA5ZjJjYTdlNTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGM2fAa/KYZro6m+FHaJBI0aFh/Ca467BsO4UHAQj/wu38RQTEv4lw0e KKBp2RYOJWgqu3s4uHcEwta5MYWRM2d9a18Swdsrid13I9uZ6IqZWn+mR/gIslhZ BTo3Dp+M32V7nKq3AK9MviR1yj2n3O4jjAA9Y08U/kv0vBXhtvD0NKeUO7z93CcU bA/PTMpznZWAqCuzPOhLR2bA77VqZSl1DYum+7jxtWcEZ8hBXIzUhwUXpUjjYTNY lRbf1KjlsK2j9YVYwdNNa4X5cDWEJMfo+PRPyXmW23PvXbvUf2ps8Q6mwceUeYeD G93Ag8owGbLVWFXbNlmDRTST2Z8ClDs= -----END CERTIFICATE-----Generated at Sun Sep 20 14:47:03 2026 by rpki-client