$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa File: 3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa (raw, json) Hash identifier: n/7qQ4blzZygzMHb3Jl38/fKT+ub1Fa+2GzI8EfW9f8= Subject key identifier: 8A:53:2E:15:45:C7:CB:56:93:08:4B:41:93:83:EF:FE:68:E2:38:55 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F5E62E39E26F4F61E2CD58580 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 14618 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e3:9e:26:f4:f6:1e:2c:d5:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=b8279669-cf4c-42ab-8a3c-1275831fe1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:59:05:5d:09:45:c3:ab:90:36:85:7c:87: 00:3d:df:a8:02:3a:50:61:91:02:60:53:94:20:84: 14:69:26:9c:88:53:1c:71:7e:5e:5e:21:46:9a:9e: 16:34:e4:29:0b:df:9b:9b:71:1f:65:9f:ea:34:24: 85:ce:ce:f8:0a:8b:2c:7a:9f:b6:23:91:81:d7:1e: db:f5:64:c4:48:67:10:ac:6c:4d:32:a9:1d:5c:0f: 8a:f4:9d:ae:ee:6b:06:73:b7:17:16:03:0e:df:da: 81:8c:c7:c7:44:c6:7e:42:11:1e:2a:ad:c0:95:4e: 39:dc:04:a0:85:d4:79:ec:a4:e4:5e:11:b3:a3:e5: af:fc:74:47:3a:bf:99:f0:d3:15:20:75:75:95:20: bb:52:4e:2d:ee:4c:8f:f3:bf:33:f3:4f:e0:76:ed: ed:26:39:08:ca:bf:cd:ea:fd:5d:24:fc:bb:79:d9: f1:3e:55:75:e8:44:b5:f3:a0:48:3e:74:2d:8d:d2: 94:f6:84:3c:5f:57:d4:a4:e6:ee:65:8c:2b:60:69: bd:08:bf:cc:76:fb:2c:f7:11:7d:2d:f9:35:82:9f: 19:07:54:a0:5a:66:17:8f:57:d3:de:d3:1f:0e:85: a0:19:1f:13:5d:49:44:71:25:cb:02:42:6e:c2:fa: 96:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:53:2E:15:45:C7:CB:56:93:08:4B:41:93:83:EF:FE:68:E2:38:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:95:1d:fe:a6:55:49:e4:fe:2f:de:4c:90:c9:76:95:23:d5: 38:ff:e0:44:d6:b4:1f:b1:cd:ce:28:48:56:90:38:a9:37:a8: 0a:38:23:3a:8b:8c:ee:5c:1f:ba:bc:6e:14:56:ee:42:b8:8f: 4c:17:1e:fc:74:90:41:e2:53:bb:1e:44:73:6c:fe:25:a1:57: 5a:e2:21:b1:88:70:65:ad:35:0d:84:a1:dc:15:d1:b6:d1:7f: e5:c7:51:4c:d0:64:c0:f7:7e:62:e5:1c:33:24:27:fb:86:2e: ad:70:5e:7a:b6:7e:f2:8f:d5:c8:4e:44:dd:ed:a3:0c:e5:c9: 50:ff:09:67:97:4b:b1:50:66:0f:4b:b0:89:ec:ff:e7:24:45: a5:d7:a0:13:70:74:68:34:46:db:0a:43:d6:bd:f9:ed:07:32: ae:4e:8c:87:7b:b9:77:66:88:c1:c6:eb:41:cb:ee:ad:51:96: 83:b7:2c:f8:a6:42:c8:52:ff:6d:c4:3e:52:e3:c2:03:fd:25: 94:6d:59:b0:55:c6:ad:89:13:1b:f2:f0:a9:03:c8:a5:34:bb: 8e:5d:ee:d9:37:80:53:06:b2:ff:18:20:f3:15:ea:3c:7c:d9: 64:f6:d2:05:3f:09:b7:74:cc:c9:2d:b1:1b:b1:34:13:98:95: 3a:b6:86:35 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9eYuOeJvT2HizVhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YjgyNzk2NjktY2Y0Yy00MmFiLThhM2MtMTI3NTgzMWZlMWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuytZBV0JRcOrkDaFfIcAPd+oAjpQYZECYFOU IIQUaSaciFMccX5eXiFGmp4WNOQpC9+bm3EfZZ/qNCSFzs74Cossep+2I5GB1x7b 9WTESGcQrGxNMqkdXA+K9J2u7msGc7cXFgMO39qBjMfHRMZ+QhEeKq3AlU453ASg hdR57KTkXhGzo+Wv/HRHOr+Z8NMVIHV1lSC7Uk4t7kyP878z80/gdu3tJjkIyr/N 6v1dJPy7ednxPlV16ES186BIPnQtjdKU9oQ8X1fUpObuZYwrYGm9CL/Mdvss9xF9 Lfk1gp8ZB1SgWmYXj1fT3tMfDoWgGR8TXUlEcSXLAkJuwvqWHwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFIpTLhVFx8tWkwhLQZOD7/5o4jhVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvM2E0ZTBhMTgtZDBmOC0z YmU2LTg5NTMtNWZkODI2M2ZkMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALJUd/qZVSeT+L95MkMl2lSPVOP/gRNa0 H7HNzihIVpA4qTeoCjgjOouM7lwfurxuFFbuQriPTBce/HSQQeJTux5Ec2z+JaFX WuIhsYhwZa01DYSh3BXRttF/5cdRTNBkwPd+YuUcMyQn+4YurXBeerZ+8o/VyE5E 3e2jDOXJUP8JZ5dLsVBmD0uwiez/5yRFpdegE3B0aDRG2wpD1r357Qcyrk6Mh3u5 d2aIwcbrQcvurVGWg7cs+KZCyFL/bcQ+UuPCA/0llG1ZsFXGrYkTG/LwqQPIpTS7 jl3u2TeAUway/xgg8xXqPHzZZPbSBT8Jt3TMyS2xG7E0E5iVOraGNQ== -----END CERTIFICATE-----Generated at Sun Oct 4 11:19:46 2026 by rpki-client