$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa File: 6b69b583-d314-3cbc-92db-88a1fc81de8f.roa (raw, json) Hash identifier: DAR8UVjRuf4EB7g7E8iPSKkbfdYZ2J8Wsdr1eb/1aoc= Subject key identifier: 37:0A:1B:13:69:EF:CA:C8:1A:33:70:26:11:55:41:F1:8A:9A:55:91 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D0912659B4D597DB54C29F400 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa Signing time: Mon 02 Mar 2026 14:00:41 +0000 ROA not before: Mon 02 Mar 2026 14:00:41 +0000 ROA not after: Sun 31 May 2026 13:00:41 +0000 asID: 395831 IP address blocks: 158.115.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:09:12:65:9b:4d:59:7d:b5:4c:29:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 2 14:00:41 2026 GMT Not After : May 31 13:00:41 2026 GMT Subject: CN=89313bc0-64e4-435b-8a8f-647ab6bcb086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c7:fc:e3:fc:22:50:51:0c:0f:0d:3f:65:fe: f8:0b:89:58:ac:0e:ff:fd:0b:0a:1d:19:ca:c1:61: 97:ac:87:0f:34:43:bf:cb:43:81:c4:01:99:51:5b: 81:da:60:ed:a7:78:9f:79:6e:95:e4:c3:f0:e2:54: bf:d1:2e:01:bf:0a:40:6c:ee:2a:dd:18:18:e6:fd: d6:28:f9:d9:ae:f0:16:fa:52:6f:2f:fb:ab:4e:be: 13:05:15:cc:b0:a2:25:64:c1:ab:22:36:ed:0a:d8: c0:0b:06:30:1e:5d:36:51:6a:d4:9f:24:a2:5a:07: 6a:e2:63:bd:3f:d7:6b:ba:93:96:8f:b8:6a:09:26: f0:e3:46:f3:ce:12:e2:c2:df:b6:ce:f9:e8:58:29: 34:f9:43:2d:32:d2:30:1f:9f:da:be:9a:93:0c:6f: ca:90:cd:f1:d0:90:89:08:76:c4:46:b4:d6:75:ff: 1f:fd:16:0b:ec:4e:86:86:3b:ac:b8:36:ad:3f:4d: f4:6f:7b:41:83:d8:63:2c:ec:6d:cf:24:3b:90:af: 3b:57:1c:ee:d1:c9:3d:54:35:88:b9:24:5e:46:a2: 11:17:6e:a8:10:e2:6f:b5:31:be:c5:4e:f9:5c:3d: 14:95:80:7d:e7:75:35:0d:ba:57:a2:03:e8:df:75: db:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:0A:1B:13:69:EF:CA:C8:1A:33:70:26:11:55:41:F1:8A:9A:55:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:d4:26:3e:39:c3:d4:6b:c4:d3:c2:9f:3a:1b:8a:c9:71:59: f1:31:39:88:0c:56:3d:b1:ff:d5:75:10:40:f3:ca:20:6a:d7: 98:95:68:e6:49:44:24:b6:80:c6:8e:8a:27:52:1d:2b:bd:d6: db:58:f6:4f:44:15:58:70:ad:99:ba:b3:d7:14:79:54:da:dd: 23:2b:69:a8:a5:f6:23:ad:2e:ed:7a:c7:66:d7:4f:99:f5:28: ea:60:01:10:66:1c:2c:2d:5a:16:94:60:e9:0b:7c:fc:fa:2c: 85:b6:99:6f:ac:1e:0b:bb:f3:c8:50:7d:57:8c:e4:e5:0b:29: 26:25:05:8e:ff:e9:9f:c2:1c:52:d2:ed:b3:4c:f2:6f:40:d2: f1:52:a3:e3:7e:d3:c2:b7:85:6a:de:66:5b:7d:99:da:b6:1b: e8:d1:ea:68:32:30:fc:e7:00:29:ab:39:24:92:b2:9f:d9:33: a0:66:44:a8:26:d9:42:e4:7d:cc:09:57:ad:3f:4c:09:ea:ae: 58:c5:eb:dd:79:81:63:7e:86:6d:36:8f:02:f7:19:f9:e9:6d: 35:6e:12:cb:76:03:3c:29:77:7c:db:9e:3f:64:dc:35:0d:5b: 1b:0a:ed:f9:79:ec:22:f4:a7:fc:72:10:97:d8:9d:64:43:6c: 3d:ef:40:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0JEmWbTVl9tUwp9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDMwMjE0MDA0MVoXDTI2MDUzMTEzMDA0MVowLzEtMCsGA1UEAxMk ODkzMTNiYzAtNjRlNC00MzViLThhOGYtNjQ3YWI2YmNiMDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMf84/wiUFEMDw0/Zf74C4lYrA7//QsKHRnK wWGXrIcPNEO/y0OBxAGZUVuB2mDtp3ifeW6V5MPw4lS/0S4BvwpAbO4q3RgY5v3W KPnZrvAW+lJvL/urTr4TBRXMsKIlZMGrIjbtCtjACwYwHl02UWrUnySiWgdq4mO9 P9drupOWj7hqCSbw40bzzhLiwt+2zvnoWCk0+UMtMtIwH5/avpqTDG/KkM3x0JCJ CHbERrTWdf8f/RYL7E6GhjusuDatP030b3tBg9hjLOxtzyQ7kK87Vxzu0ck9VDWI uSReRqIRF26oEOJvtTG+xU75XD0UlYB953U1DbpXogPo33XbPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcKGxNp78rIGjNwJhFVQfGKmlWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNmI2OWI1ODMtZDMxNC0z Y2JjLTkyZGItODhhMWZjODFkZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrUJj45w9RrxNPCnzobislxWfExOYgMVj2x/9V1EEDzyiBq15iVaOZJ RCS2gMaOiidSHSu91ttY9k9EFVhwrZm6s9cUeVTa3SMraail9iOtLu16x2bXT5n1 KOpgARBmHCwtWhaUYOkLfPz6LIW2mW+sHgu788hQfVeM5OULKSYlBY7/6Z/CHFLS 7bNM8m9A0vFSo+N+08K3hWreZlt9mdq2G+jR6mgyMPznACmrOSSSsp/ZM6BmRKgm 2ULkfcwJV60/TAnqrljF6915gWN+hm02jwL3GfnpbTVuEst2Azwpd3zbnj9k3DUN WxsK7fl57CL0p/xyEJfYnWRDbD3vQLg= -----END CERTIFICATE-----Generated at Mon Mar 2 18:50:24 2026 by rpki-client