$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa File: 3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa (raw, json) Hash identifier: 1nLWgQskHZercGM2cSF3cT2xYJ7Kip57VRM1Q9lzlj4= Subject key identifier: E7:96:90:B7:72:79:EB:D8:F7:85:67:EC:13:98:A3:8A:85:58:A1:83 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584CB121BF4B43AC80442BDE6300 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa Signing time: Fri 30 Jan 2026 02:00:31 +0000 ROA not before: Fri 30 Jan 2026 02:00:31 +0000 ROA not after: Thu 30 Apr 2026 01:00:31 +0000 asID: 14618 IP address blocks: 158.115.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b1:21:bf:4b:43:ac:80:44:2b:de:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jan 30 02:00:31 2026 GMT Not After : Apr 30 01:00:31 2026 GMT Subject: CN=f20a09e2-a387-43c1-b729-846f670000ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:da:f7:06:57:c2:be:9f:f9:d2:bd:c3:6a:8d: dd:dc:e9:ac:20:e2:98:e0:25:37:0c:3e:eb:b2:5b: 96:c1:b5:4a:d0:a1:5e:66:d4:54:aa:7a:9c:ad:5f: 29:43:e5:28:59:4b:df:fa:32:3a:77:97:ed:47:13: 1d:28:36:a4:e8:c3:d3:18:63:25:98:3e:a7:8c:23: e4:2b:b3:7f:56:4c:40:ae:02:b2:2a:19:5d:1d:5e: e1:27:d5:44:44:92:5a:11:84:1f:94:37:9d:90:a1: fd:cc:e4:0e:7b:48:08:be:ae:be:62:ef:e0:57:67: 6c:fc:0a:57:2c:5a:d4:f9:d9:22:97:9b:e7:85:67: e2:2e:21:20:dd:a2:21:14:05:2b:8c:24:6d:b3:3f: 88:99:38:e2:e9:61:0c:fd:0f:f3:f1:51:f4:0a:62: 20:1c:47:26:cf:8c:a1:c9:89:2f:9c:a5:11:82:de: fd:24:03:98:19:ad:1f:91:5d:7b:ad:02:60:10:79: f2:87:cd:27:67:91:e3:1d:74:a6:3b:7d:ee:db:46: 57:91:58:c3:12:7b:37:ea:ba:19:4a:c9:34:4d:97: 50:aa:42:87:78:2a:2a:52:c9:a4:d6:40:54:26:cb: aa:3e:be:21:5e:f4:7b:b3:f1:d7:f0:c3:40:bc:a0: ae:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:96:90:B7:72:79:EB:D8:F7:85:67:EC:13:98:A3:8A:85:58:A1:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:75:b2:09:39:78:9e:87:24:68:fb:92:fc:c0:2b:f8:8a:74: 6a:4a:6e:6f:4c:33:d5:de:a9:fb:ad:49:6a:65:11:25:c8:96: c0:82:3a:1b:17:e1:76:31:7c:de:d2:09:3f:3c:db:61:46:3e: 02:a0:14:cd:dc:94:ba:72:13:a5:e4:e6:d6:8e:c5:a0:33:eb: 48:0c:b6:d9:48:87:a3:c2:f6:b3:0d:fc:1e:ad:5a:0e:83:e2: 83:45:5f:9e:0b:ac:dc:f3:f4:73:91:0e:48:1c:b1:c4:bf:7f: c7:04:c0:53:a9:79:96:93:32:77:db:09:02:80:fa:bc:4c:c7: 89:1f:12:e2:d9:b3:d1:ba:e4:69:96:13:4e:e7:75:d4:3b:b3: 07:26:11:a5:6e:44:79:60:c1:6c:54:8e:b9:12:a6:b3:1f:b6: 68:6d:99:d6:2e:7d:b2:dd:0e:28:d8:53:c7:45:8a:3f:5d:6b: 62:15:3b:5e:f6:fa:45:ab:10:5a:f5:05:62:64:6e:18:8e:84: 01:9c:55:8e:82:ea:a7:4d:b1:7a:af:b7:fe:27:14:e4:81:18: e8:2c:b6:c9:73:40:e8:c1:2b:e4:c4:05:25:85:d3:45:6f:7f: 6c:7a:5c:59:9a:85:c6:bb:06:9c:22:df:5e:c5:a2:e0:be:c6: 70:66:37:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyxIb9LQ6yARCveYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDEzMDAyMDAzMVoXDTI2MDQzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZjIwYTA5ZTItYTM4Ny00M2MxLWI3MjktODQ2ZjY3MDAwMGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+9r3BlfCvp/50r3Dao3d3OmsIOKY4CU3DD7r sluWwbVK0KFeZtRUqnqcrV8pQ+UoWUvf+jI6d5ftRxMdKDak6MPTGGMlmD6njCPk K7N/VkxArgKyKhldHV7hJ9VERJJaEYQflDedkKH9zOQOe0gIvq6+Yu/gV2ds/ApX LFrU+dkil5vnhWfiLiEg3aIhFAUrjCRtsz+ImTji6WEM/Q/z8VH0CmIgHEcmz4yh yYkvnKURgt79JAOYGa0fkV17rQJgEHnyh80nZ5HjHXSmO33u20ZXkVjDEns36roZ Ssk0TZdQqkKHeCoqUsmk1kBUJsuqPr4hXvR7s/HX8MNAvKCuYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeWkLdyeevY94Vn7BOYo4qFWKGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMzk0OWY5ZTItOWNiNC0z ZjdlLTk0NDEtOTgwMzMwZjdiZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH51sgk5eJ6HJGj7kvzAK/iKdGpKbm9MM9XeqfutSWplESXIlsCCOhsX 4XYxfN7SCT8822FGPgKgFM3clLpyE6Xk5taOxaAz60gMttlIh6PC9rMN/B6tWg6D 4oNFX54LrNzz9HORDkgcscS/f8cEwFOpeZaTMnfbCQKA+rxMx4kfEuLZs9G65GmW E07nddQ7swcmEaVuRHlgwWxUjrkSprMftmhtmdYufbLdDijYU8dFij9da2IVO172 +kWrEFr1BWJkbhiOhAGcVY6C6qdNsXqvt/4nFOSBGOgstslzQOjBK+TEBSWF00Vv f2x6XFmahca7Bpwi317FouC+xnBmNyw= -----END CERTIFICATE-----Generated at Mon Mar 2 12:49:13 2026 by rpki-client