$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/58338d87-0d2e-38fc-b96d-5c89f8fc72ac.roa File: 58338d87-0d2e-38fc-b96d-5c89f8fc72ac.roa (raw, json) Hash identifier: rIAPkf1SmI+SleF4c1ufLUvgITveN9dsxirzoGeZjDU= Subject key identifier: 22:5C:AA:CA:9B:1E:05:93:9B:D3:93:FD:57:B5:97:CF:11:29:05:3B Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A6826018A7E03E259C884C200 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/58338d87-0d2e-38fc-b96d-5c89f8fc72ac.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 16509 IP address blocks: 158.115.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:01:8a:7e:03:e2:59:c8:84:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=e997a119-72d5-49ed-b572-93f0029cd0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:53:eb:04:04:47:5c:a1:ec:ac:33:e0:25:c4: d7:f2:1a:32:2e:ec:10:65:a5:f9:db:9f:5b:c7:62: ba:e7:4d:94:ad:f3:cd:90:f1:3c:7d:d3:61:8a:5a: af:2d:7d:09:51:60:24:97:a8:fd:c7:eb:6d:b9:89: 63:91:ce:5c:f5:3d:eb:e1:3b:5e:dd:65:49:81:e5: 24:3b:57:7b:96:39:e4:52:8c:b7:b1:63:9e:47:92: 91:b1:50:ce:a6:3e:1c:ef:e2:64:31:4d:8e:c5:2e: 89:42:19:1b:1b:fe:74:41:64:25:e8:c7:43:6e:5f: fd:27:fe:4a:30:ee:56:14:c2:98:2d:8b:c2:78:ee: 28:9f:d6:57:06:65:ec:60:6f:2c:fc:f8:ae:46:3a: 30:f2:90:6a:00:d4:06:1a:2c:74:86:11:ed:32:e1: 8d:e7:c3:43:11:66:f7:c7:83:ad:c1:a0:37:e7:d4: f1:fc:10:1b:3a:c3:e1:3f:0f:4a:39:27:88:4c:a5: 69:14:78:e4:e2:c9:7f:c1:c8:78:b4:32:9b:87:f6: 27:c4:6d:42:a6:9e:19:f9:f1:bd:a9:35:55:b2:9a: b9:d6:fe:35:7b:44:97:61:d4:ac:2d:cd:d9:83:ee: f4:88:4e:19:eb:41:3f:bf:79:ee:d5:28:bf:e9:2b: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5C:AA:CA:9B:1E:05:93:9B:D3:93:FD:57:B5:97:CF:11:29:05:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/58338d87-0d2e-38fc-b96d-5c89f8fc72ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:d2:26:e5:0f:9e:12:c8:c2:41:45:a9:16:f7:5b:4d:a6:ee: 46:02:0e:77:2f:36:1a:6c:00:d7:67:66:29:3a:d1:29:a4:97: 27:81:7c:14:92:4f:6f:d9:b2:2b:02:e3:d1:fd:f5:d9:76:2f: f9:e8:52:0b:2b:de:2b:6a:76:0a:38:4c:93:55:04:54:af:c6: 9c:bf:aa:f4:5f:e5:ce:75:92:67:d8:69:be:23:ba:22:4d:c2: 21:47:66:b5:98:5c:c7:6f:7b:9f:88:f2:40:03:1d:05:26:87: 35:99:85:96:93:dd:df:a7:36:c2:05:9c:f4:af:c4:54:1a:3e: 09:6b:2d:a6:cd:83:59:52:3a:6a:aa:9d:0d:5c:c9:88:6e:de: 83:32:14:29:4f:93:57:a5:12:81:9f:55:bc:c4:60:4f:14:0f: 00:13:86:ba:f0:80:e0:ff:6d:c3:60:b6:69:e2:40:87:f1:ee: 0f:70:10:ce:58:ab:d6:c6:7c:6a:d5:ba:51:a4:c6:07:70:43: 81:44:e2:6c:13:24:71:d7:0d:dc:58:4d:36:75:87:d8:85:d3: 93:c6:a7:60:cb:cd:56:82:03:47:65:6f:df:0b:81:b9:60:72: fd:ab:11:5e:35:2d:13:72:0d:f7:e7:07:f8:ad:0d:26:16:47: bd:b6:7d:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgGKfgPiWciEwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZTk5N2ExMTktNzJkNS00OWVkLWI1NzItOTNmMDAyOWNkMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lPrBARHXKHsrDPgJcTX8hoyLuwQZaX5259b x2K6502UrfPNkPE8fdNhilqvLX0JUWAkl6j9x+ttuYljkc5c9T3r4Tte3WVJgeUk O1d7ljnkUoy3sWOeR5KRsVDOpj4c7+JkMU2OxS6JQhkbG/50QWQl6MdDbl/9J/5K MO5WFMKYLYvCeO4on9ZXBmXsYG8s/PiuRjow8pBqANQGGix0hhHtMuGN58NDEWb3 x4OtwaA359Tx/BAbOsPhPw9KOSeITKVpFHjk4sl/wch4tDKbh/YnxG1Cpp4Z+fG9 qTVVspq51v41e0SXYdSsLc3Zg+70iE4Z60E/v3nu1Si/6St9/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJcqsqbHgWTm9OT/Ve1l88RKQU7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNTgzMzhkODctMGQyZS0z OGZjLWI5NmQtNWM4OWY4ZmM3MmFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvSJuUPnhLIwkFFqRb3W02m7kYCDncvNhpsANdnZik60SmklyeBfBSS T2/ZsisC49H99dl2L/noUgsr3itqdgo4TJNVBFSvxpy/qvRf5c51kmfYab4juiJN wiFHZrWYXMdve5+I8kADHQUmhzWZhZaT3d+nNsIFnPSvxFQaPglrLabNg1lSOmqq nQ1cyYhu3oMyFClPk1elEoGfVbzEYE8UDwAThrrwgOD/bcNgtmniQIfx7g9wEM5Y q9bGfGrVulGkxgdwQ4FE4mwTJHHXDdxYTTZ1h9iF05PGp2DLzVaCA0dlb98Lgblg cv2rEV41LRNyDffnB/itDSYWR722fQk= -----END CERTIFICATE-----Generated at Wed Aug 6 05:24:45 2025 by rpki-client