$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa File: 693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa (raw, json) Hash identifier: rtP+WWkJ27D8ZkBftD+hXiz4iTjixXGqFZI3t+XJfdw= Subject key identifier: 0C:65:24:10:29:0C:99:94:FF:0F:13:EE:13:4A:29:6C:A6:71:E9:C5 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AF0F137410F5E5D49A3CD4200 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 395831 IP address blocks: 158.115.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:37:41:0f:5e:5d:49:a3:cd:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=e98547b4-1d60-42ba-acba-f86c0a0e8721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9e:93:54:d6:f2:bd:93:2e:be:74:30:59:8d: bb:88:17:25:af:98:0e:b3:8b:56:50:ce:4e:db:72: b6:0e:01:80:b3:c0:c2:b7:8e:b7:47:a2:27:7e:dc: ad:ff:2c:b0:fb:48:99:9f:33:e0:a3:91:e8:0a:7e: 31:0f:5c:0c:7a:85:c5:2b:e9:35:b1:81:91:a4:f0: 4d:48:e2:47:d8:2b:a7:c2:ac:3c:2c:0f:88:ea:2c: e8:78:b9:b8:31:90:bb:38:a2:a6:5e:3e:ab:ff:54: 2f:88:ce:a9:1a:f9:99:21:c2:c9:a1:00:ce:7b:7c: 4b:7b:21:2f:09:05:c7:8e:5c:e2:f5:12:66:80:4f: 90:a3:17:12:04:1e:3b:da:5e:90:51:0f:bd:f6:6d: fe:f2:74:35:ce:dc:48:94:1f:23:4d:3f:3e:c1:83: 61:2a:74:4b:1d:d1:f5:e1:7f:ec:07:a3:d6:07:70: de:93:71:c7:43:b6:ab:1c:4b:b0:03:77:12:96:7b: c6:96:db:71:99:84:7f:ec:81:80:60:9f:c3:4a:1e: 98:16:89:bc:62:0b:c7:bd:28:9a:20:4b:7e:3f:f1: 26:68:35:45:ff:0c:66:90:bf:80:a3:c7:ed:b8:5b: 5b:b0:6f:57:86:5c:0a:2d:7a:62:4f:19:18:b0:a3: b1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:65:24:10:29:0C:99:94:FF:0F:13:EE:13:4A:29:6C:A6:71:E9:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e5:cc:cd:34:e2:4d:d3:c4:a8:0a:84:ca:7e:13:f6:f0:b3: e5:85:f8:c5:1d:b8:05:c3:d3:de:6a:f9:27:1b:5f:e4:24:b2: 50:e6:49:12:5a:9d:f8:ee:e6:b6:2c:2d:17:bf:e5:84:39:43: 2f:bc:31:06:93:d4:0f:23:c0:77:5b:91:a1:82:7a:c2:28:74: 51:4a:a8:6f:c3:79:ce:19:9a:3d:c8:02:1f:2c:2e:06:fc:c0: c1:64:70:ef:28:5d:e5:f2:36:d5:56:64:b4:d4:f8:71:a9:fb: ac:1e:05:1f:df:f1:8c:ff:25:a6:16:06:34:42:62:f1:88:58: fd:d4:55:4f:4b:49:07:5e:b5:4a:2a:08:ba:03:24:e5:51:02: a4:a2:95:39:54:1a:84:3c:f9:4f:7b:5e:e1:76:0f:9a:fe:c6: 0f:7c:90:2f:f0:25:b3:a8:8b:6d:ee:3e:17:85:6f:39:f7:be: 7e:2a:31:50:a9:99:b8:a4:91:a6:a9:3e:02:d8:49:0d:42:02: 05:15:03:82:08:cc:39:ef:5b:f2:dd:9c:f9:3e:44:98:d0:46: dc:90:f5:6b:48:74:32:a6:b4:ad:15:25:d1:9f:ab:59:b7:e2: a0:05:54:2d:d1:7d:ce:0e:14:ca:2e:8b:f1:b8:78:55:4f:fb: d4:ca:11:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TdBD15dSaPNQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk ZTk4NTQ3YjQtMWQ2MC00MmJhLWFjYmEtZjg2YzBhMGU4NzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmp6TVNbyvZMuvnQwWY27iBclr5gOs4tWUM5O 23K2DgGAs8DCt463R6Inftyt/yyw+0iZnzPgo5HoCn4xD1wMeoXFK+k1sYGRpPBN SOJH2Cunwqw8LA+I6izoeLm4MZC7OKKmXj6r/1QviM6pGvmZIcLJoQDOe3xLeyEv CQXHjlzi9RJmgE+QoxcSBB472l6QUQ+99m3+8nQ1ztxIlB8jTT8+wYNhKnRLHdH1 4X/sB6PWB3Dek3HHQ7arHEuwA3cSlnvGlttxmYR/7IGAYJ/DSh6YFom8YgvHvSia IEt+P/EmaDVF/wxmkL+Ao8ftuFtbsG9XhlwKLXpiTxkYsKOxPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxlJBApDJmU/w8T7hNKKWymcenFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNjkzYTdmN2MtZWY5Mi0z MDQ0LWIxM2QtYjJlYzU1ZDMyMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHlzM004k3TxKgKhMp+E/bws+WF+MUduAXD095q+ScbX+QkslDmSRJa nfju5rYsLRe/5YQ5Qy+8MQaT1A8jwHdbkaGCesIodFFKqG/Dec4Zmj3IAh8sLgb8 wMFkcO8oXeXyNtVWZLTU+HGp+6weBR/f8Yz/JaYWBjRCYvGIWP3UVU9LSQdetUoq CLoDJOVRAqSilTlUGoQ8+U97XuF2D5r+xg98kC/wJbOoi23uPheFbzn3vn4qMVCp mbikkaapPgLYSQ1CAgUVA4IIzDnvW/LdnPk+RJjQRtyQ9WtIdDKmtK0VJdGfq1m3 4qAFVC3Rfc4OFMoui/G4eFVP+9TKEfA= -----END CERTIFICATE-----Generated at Wed Nov 5 20:06:27 2025 by rpki-client