$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa File: 565178fb-511a-3ca3-a684-f9494640e395.roa (raw, json) Hash identifier: slvCS/T9zVMX//RVuW7IFd2kYHLLPp6ipnIDdJnUKTQ= Subject key identifier: 6D:BB:04:11:3E:D9:86:B4:E7:63:52:04:F6:E4:24:51:13:9F:FD:47 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AF0F13BF1C9B976AAED982040 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 158.115.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3b:f1:c9:b9:76:aa:ed:98:20:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=cfc86e33-9501-4779-8708-33068aa019c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:35:48:3b:eb:f4:37:10:c7:5a:81:d0:8d:d6: ed:43:26:cd:16:57:1c:73:33:6e:31:83:e6:e7:23: b2:9f:71:51:16:bd:80:07:3e:c6:8e:f9:39:63:2a: 26:d6:5e:2a:c6:34:da:81:03:12:7a:3c:48:b1:e8: 17:88:2a:4a:2c:a9:82:a5:5b:46:4d:dc:ff:38:9f: c8:31:78:9f:bd:35:3c:51:b1:21:b9:8d:29:61:40: 35:d0:1b:98:73:2f:58:b6:d9:ac:59:3d:59:f8:86: f8:af:af:4a:8b:41:1e:92:6f:e1:28:48:ce:61:0c: d4:28:4e:5a:db:cd:61:33:43:a2:8b:60:84:fa:e6: b5:7a:ca:bf:65:ed:c6:a1:be:a4:fe:14:bd:8b:50: ab:2e:81:d3:da:e0:bd:cb:24:ac:d6:f6:eb:d6:ad: 17:fc:a8:1f:82:00:18:50:ce:a0:50:78:00:b0:eb: 1c:97:a6:8c:da:c9:9e:ea:8a:43:ee:d3:f3:67:d8: 33:2b:da:20:19:83:b1:ba:3d:7a:f2:5f:eb:9e:48: a7:bc:6b:06:31:7f:c4:7a:9c:f8:1d:4c:cf:e1:e6: 46:da:c5:cf:8e:0f:17:0c:91:86:c8:9e:4d:25:70: 28:49:c2:49:7d:77:0a:5f:a6:03:78:ac:a2:01:42: 96:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BB:04:11:3E:D9:86:B4:E7:63:52:04:F6:E4:24:51:13:9F:FD:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c4:54:a3:3f:66:18:56:4c:7d:7d:46:87:fd:95:23:b5:c6: f8:43:20:62:fa:d4:7a:bd:60:7b:92:93:50:cd:ff:99:47:e2: a3:a9:75:7e:8b:16:73:33:67:c5:9f:7c:57:21:f0:ed:9f:36: 55:54:9a:31:54:3d:34:95:d6:d4:74:1e:0d:16:c6:ca:a9:0a: e4:65:30:7a:a0:3a:50:e5:92:0d:8e:57:35:67:4f:b9:62:2e: e6:3d:3a:0b:1c:3a:23:cb:17:bc:c0:8f:36:8c:9b:bb:06:f0: 29:7c:be:03:49:06:7e:b1:f3:d4:0e:6d:b3:b4:36:99:45:a2: 8b:48:6e:ef:6c:e8:19:dd:e1:92:f1:45:88:a6:16:c8:fd:7b: 8c:5b:22:8c:00:ee:e0:83:b9:80:8b:bc:18:e8:d3:d3:f3:78: 42:7a:44:3b:12:87:05:d4:6e:10:18:d4:8c:89:df:2c:da:11: 7d:e6:bf:6a:51:7b:ee:36:e3:b2:6d:2f:24:6e:37:ef:2f:d6: d1:14:21:7f:ef:74:39:44:78:ac:04:98:cf:37:01:5f:52:33: 95:17:45:48:91:5a:fd:ef:b3:8a:11:84:97:0c:dd:92:59:c1: 52:5d:1b:a0:29:0c:18:68:3e:df:b6:c0:00:2d:1d:bc:3b:68: 55:34:70:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8Tvxybl2qu2YIEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk Y2ZjODZlMzMtOTUwMS00Nzc5LTg3MDgtMzMwNjhhYTAxOWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jVIO+v0NxDHWoHQjdbtQybNFlccczNuMYPm 5yOyn3FRFr2ABz7Gjvk5Yyom1l4qxjTagQMSejxIsegXiCpKLKmCpVtGTdz/OJ/I MXifvTU8UbEhuY0pYUA10BuYcy9YttmsWT1Z+Ib4r69Ki0Eekm/hKEjOYQzUKE5a 281hM0Oii2CE+ua1esq/Ze3Gob6k/hS9i1CrLoHT2uC9yySs1vbr1q0X/KgfggAY UM6gUHgAsOscl6aM2sme6opD7tPzZ9gzK9ogGYOxuj168l/rnkinvGsGMX/Eepz4 HUzP4eZG2sXPjg8XDJGGyJ5NJXAoScJJfXcKX6YDeKyiAUKWDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG27BBE+2Ya052NSBPbkJFETn/1HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNTY1MTc4ZmItNTExYS0z Y2EzLWE2ODQtZjk0OTQ2NDBlMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrEVKM/ZhhWTH19Rof9lSO1xvhDIGL61Hq9YHuSk1DN/5lH4qOpdX6L FnMzZ8WffFch8O2fNlVUmjFUPTSV1tR0Hg0WxsqpCuRlMHqgOlDlkg2OVzVnT7li LuY9OgscOiPLF7zAjzaMm7sG8Cl8vgNJBn6x89QObbO0NplFootIbu9s6Bnd4ZLx RYimFsj9e4xbIowA7uCDuYCLvBjo09PzeEJ6RDsShwXUbhAY1IyJ3yzaEX3mv2pR e+4247JtLyRuN+8v1tEUIX/vdDlEeKwEmM83AV9SM5UXRUiRWv3vs4oRhJcM3ZJZ wVJdG6ApDBhoPt+2wAAtHbw7aFU0cM8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:50:00 2025 by rpki-client