$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa File: a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa (raw, json) Hash identifier: woBLEc4HDGAy7qw+CZ4D85zVo0CJU0K5CvNQpiHyzNc= Subject key identifier: E7:47:95:76:68:18:2D:75:2B:68:DC:29:F6:4C:71:0B:F8:37:5C:1E Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584E1A143A42E29ECC9EFE69EA00 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa Signing time: Mon 08 Jun 2026 09:00:12 +0000 ROA not before: Mon 08 Jun 2026 09:00:12 +0000 ROA not after: Sun 06 Sep 2026 09:00:12 +0000 asID: 395831 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1a:14:3a:42:e2:9e:cc:9e:fe:69:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jun 8 09:00:12 2026 GMT Not After : Sep 6 09:00:12 2026 GMT Subject: CN=10172f7b-bdce-481f-b0a2-66754dcaeef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:85:45:36:01:61:e5:fa:73:9e:b9:64:77:a8: 5b:e2:11:66:d5:0e:1f:34:de:06:13:cf:ca:73:b4: 8f:c9:88:4b:8b:19:52:87:0c:8c:2e:88:f6:9b:f6: d5:2a:d7:eb:f0:da:53:b8:c3:0a:81:ed:00:28:ef: a4:f5:cf:3c:ad:c3:63:21:f0:de:ec:d2:58:e1:cc: 33:1d:2e:3d:54:5f:53:05:b5:07:76:a8:da:d8:55: 35:96:a4:b2:8e:8f:3f:df:c5:52:bd:44:4d:10:2f: d2:08:a5:e7:a1:82:28:d3:3a:3b:de:b9:05:36:19: 8e:2b:69:79:ea:49:31:02:c9:82:8d:8f:75:6a:dc: 66:57:25:d9:b1:40:26:14:49:16:bd:0a:03:c1:9a: 8b:91:0e:7f:cc:1d:7b:3f:cb:6b:ca:e1:c2:2c:7a: 54:c9:1d:86:78:fe:31:29:a0:2f:09:9e:4f:90:bf: d0:e4:a5:1f:9b:07:10:f7:f6:ce:95:76:81:bd:ca: 74:d5:39:c1:76:00:cb:2f:b9:f5:57:28:bb:6f:8e: 1a:59:0b:5c:9c:2a:5b:b2:c7:00:2f:f6:1d:e0:7f: 7a:a1:00:b6:c5:9b:1f:70:3f:a9:c9:aa:7b:6f:93: 99:60:24:47:ea:ec:9e:f7:b7:f5:d2:66:a0:ef:6f: 3f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:47:95:76:68:18:2D:75:2B:68:DC:29:F6:4C:71:0B:F8:37:5C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:fc:d7:6f:9c:e7:91:a9:68:57:2e:e9:86:e7:11:a1:bb:b3: 89:99:79:6f:0c:92:67:18:79:56:0a:dc:cc:ec:68:ec:99:4f: 71:e4:62:11:77:9d:e0:7e:bc:8e:d0:53:9f:23:b9:b4:d4:4a: 1f:33:d6:49:8c:b9:0e:da:8f:cf:ea:f1:86:85:b0:82:29:6e: 6a:e9:c7:2e:fa:de:8b:e9:f6:43:d4:41:a7:d9:4a:45:dc:03: 72:1b:10:1d:6f:ad:42:ee:a3:0a:0b:e3:41:73:1a:f7:fa:c2: e8:c5:5f:3e:21:2f:0b:23:6e:88:1f:c8:0e:de:c5:a6:d8:39: 14:47:03:8a:72:fe:ea:44:c5:03:ea:71:84:c2:d6:c7:58:ac: f1:58:cd:ed:fc:04:89:0d:a5:26:3b:f6:8f:50:03:c5:f2:80: 8e:9e:e1:a2:af:8d:50:d7:63:73:bd:0f:8b:ae:17:ed:af:13: 85:5b:55:12:c9:18:df:d3:c1:2d:61:93:17:18:ea:de:79:b1: 7f:74:79:aa:4a:a4:a2:d1:48:e5:c2:92:6d:6c:3e:53:07:d0: d9:5a:6f:1b:bc:bb:a9:b9:8d:e0:db:e5:91:8e:cd:85:cb:c9: 51:8d:e0:91:9c:7e:56:a3:80:ea:1b:39:42:c9:2e:bf:f9:5a: 5d:ea:83:05 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE4aFDpC4p7Mnv5p6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDYwODA5MDAxMloXDTI2MDkwNjA5MDAxMlowLzEtMCsGA1UEAxMk MTAxNzJmN2ItYmRjZS00ODFmLWIwYTItNjY3NTRkY2FlZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoVFNgFh5fpznrlkd6hb4hFm1Q4fNN4GE8/K c7SPyYhLixlShwyMLoj2m/bVKtfr8NpTuMMKge0AKO+k9c88rcNjIfDe7NJY4cwz HS49VF9TBbUHdqja2FU1lqSyjo8/38VSvURNEC/SCKXnoYIo0zo73rkFNhmOK2l5 6kkxAsmCjY91atxmVyXZsUAmFEkWvQoDwZqLkQ5/zB17P8tryuHCLHpUyR2GeP4x KaAvCZ5PkL/Q5KUfmwcQ9/bOlXaBvcp01TnBdgDLL7n1Vyi7b44aWQtcnCpbsscA L/Yd4H96oQC2xZsfcD+pyap7b5OZYCRH6uye97f10mag728/nQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOdHlXZoGC11K2jcKfZMcQv4N1weMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYTZhMzY5Y2UtZjhlMi0z NjkwLTlkZTktMzFkYTgzZTRmMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAOfzXb5znkaloVy7phucRobuziZl5bwyS Zxh5VgrczOxo7JlPceRiEXed4H68jtBTnyO5tNRKHzPWSYy5DtqPz+rxhoWwgilu aunHLvrei+n2Q9RBp9lKRdwDchsQHW+tQu6jCgvjQXMa9/rC6MVfPiEvCyNuiB/I Dt7Fptg5FEcDinL+6kTFA+pxhMLWx1is8VjN7fwEiQ2lJjv2j1ADxfKAjp7hoq+N UNdjc70Pi64X7a8ThVtVEskY39PBLWGTFxjq3nmxf3R5qkqkotFI5cKSbWw+UwfQ 2VpvG7y7qbmN4NvlkY7NhcvJUY3gkZx+VqOA6hs5Qskuv/laXeqDBQ== -----END CERTIFICATE-----Generated at Sun Jun 14 00:22:17 2026 by rpki-client