$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa File: 87954fed-dfd7-33f5-b195-f52a604ac05c.roa (raw, json) Hash identifier: JIdCmyeuWan3Vh4I1abFv6W0HdEoTypAdePa9AtaB+k= Subject key identifier: 8C:32:1A:05:AA:B6:E6:7E:6E:9C:5B:E0:86:45:D3:78:2C:7E:7D:B7 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AF0F13A07BBA8EBECBF8E3480 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 395831 IP address blocks: 216.157.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3a:07:bb:a8:eb:ec:bf:8e:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=ae8e5c8d-1ced-4e54-a8c1-c82fe774bda9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c0:58:88:a7:2b:66:db:6a:df:57:36:75:ea: 7c:a0:a3:47:ae:df:d6:04:26:b0:08:28:a8:b9:66: de:31:df:5e:58:77:ad:be:e0:4c:cf:76:a5:0e:b1: 2c:cb:b7:97:ae:df:5e:46:ee:b7:57:e8:29:e8:7f: 2c:92:85:80:91:e9:06:a5:40:01:bc:a0:38:56:0e: 45:3a:cb:dc:f6:e1:d6:34:9c:fa:44:cf:a2:61:b6: 96:0b:2c:d0:95:1e:b1:1e:da:15:a6:0f:de:df:1e: 9e:b2:bc:37:98:04:03:f8:63:6a:6c:0a:ac:b2:2e: 67:e0:40:d1:8b:48:e9:ed:27:de:56:8d:e8:e8:7c: cb:17:c3:88:2c:19:1c:c1:14:10:60:8d:36:c6:23: 77:50:13:b0:c5:ad:27:4c:55:23:e2:dd:3c:07:9a: 6a:29:0c:99:c7:af:0e:c8:66:7f:95:ff:8f:0a:6a: 11:5f:33:47:58:60:8c:57:60:32:dd:d3:e2:bc:7d: bb:4f:11:1b:ae:01:5f:6c:dd:be:1c:51:24:8c:f4: 7e:65:58:5f:8d:32:30:c4:7d:a1:37:dc:d1:0c:35: 4f:64:b0:e2:a0:a2:5b:c3:b6:03:5a:36:2b:b9:cc: d6:c9:1f:4f:b4:80:2c:94:9c:5f:03:57:e8:3c:c0: 01:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:32:1A:05:AA:B6:E6:7E:6E:9C:5B:E0:86:45:D3:78:2C:7E:7D:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:db:84:65:cf:aa:43:48:77:68:38:b7:ae:5a:9b:f9:58:cf: ee:f9:6e:f0:94:a6:32:51:c3:b7:eb:48:ce:d6:90:02:33:34: 55:be:a5:48:45:f2:ac:d6:b4:1a:2b:42:96:bb:66:b3:65:37: 1c:1d:05:77:78:0b:1a:7e:aa:ba:1a:b9:5e:f1:b8:df:96:85: 8e:14:20:f2:9a:23:2f:16:ec:54:8a:13:ea:95:0c:a3:0c:d2: ef:37:b2:21:8c:6f:a5:e0:f5:1f:3f:88:0d:4f:4f:91:9d:22: f2:0b:97:90:1e:b7:82:d6:cf:59:e9:ef:d9:43:71:31:75:4a: 9c:04:3a:9b:bf:95:f9:68:4a:70:6b:0e:3a:0a:99:f1:bc:9f: 87:fe:71:09:4a:20:ae:4a:f3:41:7c:70:62:d6:40:27:34:37: af:56:f0:7d:d2:ab:b3:34:1a:5b:af:05:31:91:63:1c:88:37: ce:6a:56:bb:49:89:5f:31:44:cc:a7:8e:a9:b1:2e:5f:da:2c: f9:95:26:d1:db:36:cb:34:bd:29:b0:d8:b5:5d:47:94:3e:89: 40:ce:c7:fe:6f:e8:45:60:33:de:9d:31:36:59:0f:6e:94:48: f3:25:27:0f:e0:a8:a6:bd:4d:96:48:b1:5a:ed:ef:60:5d:7e: 3b:f6:9e:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8ToHu6jr7L+ONIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YWU4ZTVjOGQtMWNlZC00ZTU0LWE4YzEtYzgyZmU3NzRiZGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8BYiKcrZttq31c2dep8oKNHrt/WBCawCCio uWbeMd9eWHetvuBMz3alDrEsy7eXrt9eRu63V+gp6H8skoWAkekGpUABvKA4Vg5F Osvc9uHWNJz6RM+iYbaWCyzQlR6xHtoVpg/e3x6esrw3mAQD+GNqbAqssi5n4EDR i0jp7SfeVo3o6HzLF8OILBkcwRQQYI02xiN3UBOwxa0nTFUj4t08B5pqKQyZx68O yGZ/lf+PCmoRXzNHWGCMV2Ay3dPivH27TxEbrgFfbN2+HFEkjPR+ZVhfjTIwxH2h N9zRDDVPZLDioKJbw7YDWjYruczWyR9PtIAslJxfA1foPMAB7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIwyGgWqtuZ+bpxb4IZF03gsfn23MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvODc5NTRmZWQtZGZkNy0z M2Y1LWIxOTUtZjUyYTYwNGFjMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTbhGXPqkNId2g4t65am/lYz+75bvCUpjJRw7frSM7WkAIzNFW+pUhF 8qzWtBorQpa7ZrNlNxwdBXd4Cxp+qroauV7xuN+WhY4UIPKaIy8W7FSKE+qVDKMM 0u83siGMb6Xg9R8/iA1PT5GdIvILl5Aet4LWz1np79lDcTF1SpwEOpu/lfloSnBr DjoKmfG8n4f+cQlKIK5K80F8cGLWQCc0N69W8H3Sq7M0GluvBTGRYxyIN85qVrtJ iV8xRMynjqmxLl/aLPmVJtHbNss0vSmw2LVdR5Q+iUDOx/5v6EVgM96dMTZZD26U SPMlJw/gqKa9TZZIsVrt72Bdfjv2njI= -----END CERTIFICATE-----Generated at Wed Nov 5 20:00:06 2025 by rpki-client