$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa File: 3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa (raw, json) Hash identifier: bIdNysvH8U/nj4EdrcdokmcSKnxlToZ9cdYVLZ5BGkE= Subject key identifier: 1B:16:E4:D1:66:77:A7:78:3E:32:DF:1E:7A:41:B4:5D:0C:36:E7:49 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584E1A143AF3994E7B8312997A80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa Signing time: Mon 08 Jun 2026 09:00:12 +0000 ROA not before: Mon 08 Jun 2026 09:00:12 +0000 ROA not after: Sun 06 Sep 2026 09:00:12 +0000 asID: 14618 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1a:14:3a:f3:99:4e:7b:83:12:99:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jun 8 09:00:12 2026 GMT Not After : Sep 6 09:00:12 2026 GMT Subject: CN=cb47aa8a-1b80-4bd1-a003-aab73c82fe1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:b7:57:d2:82:1f:51:31:08:cb:92:2b:8d: 69:2b:c8:30:12:ac:58:d9:0e:4e:3a:ad:66:c5:52: 47:7b:8a:5b:e0:b6:4d:8f:0b:1c:f9:da:8d:6e:9b: 42:1f:98:35:ea:b4:9c:1b:f3:d1:38:5a:a1:71:dc: b5:76:25:bb:8c:9b:3d:1a:0f:fe:e2:4a:55:62:20: 73:81:53:5d:ef:3c:de:2f:ae:9f:eb:2a:47:8a:1c: 90:6f:15:86:c4:68:c0:dc:51:9b:57:06:91:92:01: 69:de:2a:87:18:69:40:f7:9b:ed:e4:41:4f:3b:ec: 95:93:cf:d6:f3:a5:a1:04:f7:70:7f:84:b8:aa:97: e9:d5:5f:83:6b:be:d2:d8:84:dc:ac:ef:b1:74:12: 8f:e8:38:46:0c:e1:1f:57:ad:aa:d4:9b:79:90:72: 51:04:1a:91:e7:13:6b:58:49:03:54:49:ef:ad:e4: bd:a5:a1:f0:7e:ab:9d:66:62:3d:1a:36:08:5d:8f: a8:21:41:c9:02:b2:90:9b:a0:db:5b:07:0b:6a:98: 4e:d2:07:e0:af:5f:46:5e:19:25:9c:6b:f6:97:be: ce:4c:82:37:65:c1:e5:e3:f7:98:9e:18:06:97:63: 86:8f:8b:d3:18:3e:df:93:79:be:ad:df:35:49:3c: 77:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:16:E4:D1:66:77:A7:78:3E:32:DF:1E:7A:41:B4:5D:0C:36:E7:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:67:6a:4e:b1:7f:81:2c:94:6c:20:0b:9d:8d:73:71:79:5d: 5d:8b:16:42:0c:e5:bb:4d:68:fb:09:52:90:55:29:8f:71:a5: 59:ba:c1:d1:a4:b8:bb:b9:2e:3c:09:fa:7a:cd:e9:19:91:cd: 56:f6:fe:f7:b2:d3:e1:46:5d:a2:0e:d6:37:51:e4:79:4f:fa: ac:46:ea:4b:ad:81:df:5b:3a:f8:74:b0:84:c4:24:ad:73:7d: e1:36:20:d3:ab:68:a4:c4:8a:c1:cc:ab:bd:30:bc:9a:b7:7d: c2:a9:2c:ce:82:eb:82:14:c1:db:80:25:1c:7e:fe:97:eb:3a: 13:52:33:53:3c:83:62:58:09:8f:c8:b1:e1:df:71:89:78:58: 26:bf:ed:43:48:50:2e:8e:05:9e:22:31:6e:e6:e7:42:6a:88: de:2b:a7:74:95:30:fc:f5:b1:19:22:e5:3c:08:9d:2a:d8:2a: b6:4a:e2:23:77:a1:2d:51:ae:31:53:a1:18:a1:a7:d3:29:0b: 13:f7:48:98:3c:94:47:26:b7:8d:95:36:a1:9c:eb:27:31:f3: 17:67:63:4a:9f:09:19:c4:66:a5:a6:3c:91:de:93:18:5e:c3: 64:8c:60:1b:6a:4a:6a:63:2f:3d:93:fd:be:e0:47:0a:10:47: de:f0:f4:e1 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE4aFDrzmU57gxKZeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk Y2I0N2FhOGEtMWI4MC00YmQxLWEwMDMtYWFiNzNjODJmZTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumO3V9KCH1ExCMuSK41pK8gwEqxY2Q5OOq1m xVJHe4pb4LZNjwsc+dqNbptCH5g16rScG/PROFqhcdy1diW7jJs9Gg/+4kpVYiBz gVNd7zzeL66f6ypHihyQbxWGxGjA3FGbVwaRkgFp3iqHGGlA95vt5EFPO+yVk8/W 86WhBPdwf4S4qpfp1V+Da77S2ITcrO+xdBKP6DhGDOEfV62q1Jt5kHJRBBqR5xNr WEkDVEnvreS9paHwfqudZmI9GjYIXY+oIUHJArKQm6DbWwcLaphO0gfgr19GXhkl nGv2l77OTII3ZcHl4/eYnhgGl2OGj4vTGD7fk3m+rd81STx3WQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFBsW5NFmd6d4PjLfHnpBtF0MNudJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvM2E0ZTBhMTgtZDBmOC0z YmU2LTg5NTMtNWZkODI2M2ZkMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhmdqTrF/gSyUbCALnY1zcXldXYsWQgzl u01o+wlSkFUpj3GlWbrB0aS4u7kuPAn6es3pGZHNVvb+97LT4UZdog7WN1HkeU/6 rEbqS62B31s6+HSwhMQkrXN94TYg06topMSKwcyrvTC8mrd9wqkszoLrghTB24Al HH7+l+s6E1IzUzyDYlgJj8ix4d9xiXhYJr/tQ0hQLo4FniIxbubnQmqI3iundJUw /PWxGSLlPAidKtgqtkriI3ehLVGuMVOhGKGn0ykLE/dImDyURya3jZU2oZzrJzHz F2djSp8JGcRmpaY8kd6TGF7DZIxgG2pKamMvPZP9vuBHChBH3vD04Q== -----END CERTIFICATE-----Generated at Sat Jun 13 07:27:07 2026 by rpki-client