$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c258e36e-fd95-31f2-b381-fab16f55d8da.roa File: c258e36e-fd95-31f2-b381-fab16f55d8da.roa (raw, json) Hash identifier: 2eU4Kd6p5CSewENcH/zFY9FWQMgVqpoY9lX1sxDCAlI= Subject key identifier: 47:55:89:CC:79:13:CF:28:3D:6B:9A:EF:F2:8B:AE:1A:26:BF:80:C7 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F15CCE99DEABB3F29C1077000 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c258e36e-fd95-31f2-b381-fab16f55d8da.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 158.115.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e9:9d:ea:bb:3f:29:c1:07:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=a31a2d63-fa33-4117-b065-86217d84a6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5e:38:30:aa:64:c8:8a:c6:aa:91:e1:19:c3: b8:2b:0f:f8:70:5c:74:bf:61:53:08:0b:b2:f0:fc: 42:97:5b:1b:6f:6a:af:ff:de:1c:98:91:c5:40:f0: 44:76:a9:f6:87:8c:83:1a:57:79:c9:17:cc:b9:33: d4:36:19:76:09:76:97:a9:3b:15:ef:0a:93:6a:b5: cc:36:a8:bd:8f:91:2d:42:25:34:33:31:8d:da:82: a3:02:0f:fb:e9:6c:2b:63:ea:a1:a7:d3:a0:18:8c: c0:48:b9:36:19:7d:10:13:db:b8:e5:46:cd:e9:21: ea:a4:c8:5f:40:f8:b6:ac:a9:59:22:0f:6a:ca:99: d8:ad:c3:01:5d:bd:5a:59:81:6c:63:32:78:78:2c: 27:0e:19:2b:c0:8d:21:86:26:c3:35:6d:5c:16:08: f1:d1:f7:17:87:94:28:97:ff:28:c9:1a:79:ca:15: 89:52:41:0b:b9:af:a4:2a:1a:bb:62:40:59:30:36: 6f:17:55:aa:84:b7:22:33:ce:00:04:98:b0:54:28: 73:da:fc:6e:24:04:7b:7d:f1:c2:44:4a:ae:3b:6f: 0d:5c:9c:0d:4f:2c:6b:01:e9:3e:33:6b:be:1b:97: 13:3c:84:47:5e:25:c3:e6:fd:f4:18:f2:32:43:07: c9:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:55:89:CC:79:13:CF:28:3D:6B:9A:EF:F2:8B:AE:1A:26:BF:80:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c258e36e-fd95-31f2-b381-fab16f55d8da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:3c:e0:76:55:18:f2:30:6e:16:2c:46:37:77:1a:9e:a9:93: ba:4f:ea:1d:a1:5d:ef:83:46:8a:3e:b3:3d:df:1f:7c:06:5a: 91:46:fa:55:99:31:20:02:a2:f6:38:7b:ac:1b:54:6e:b1:ea: 32:f0:dd:5a:50:64:af:a6:ef:22:38:ad:07:24:2d:0a:54:f9: fb:ac:ca:6e:42:8a:7b:d8:44:fd:dd:82:77:2f:a3:60:8f:3a: 4f:4c:f4:b3:46:35:d0:8b:77:99:d7:3c:47:76:16:21:7a:6a: e2:52:ac:fe:8c:56:9b:71:d5:40:6b:9a:9a:4a:d4:1c:36:d2: 69:7e:ab:cb:db:32:0a:6d:5a:ae:fe:21:7b:7c:12:a5:45:ee: 60:65:34:80:84:69:c7:ee:a5:01:8e:58:ea:e5:69:57:43:58: 3a:0b:72:e8:29:b5:44:d8:ba:af:13:53:1a:31:1b:fd:84:b6: d4:9d:dc:ce:85:21:b8:bf:94:06:c7:93:7f:51:ea:fa:aa:e0: 65:da:41:7a:f0:9b:ac:50:5d:2b:4a:5f:95:4c:94:5b:35:d1: 24:95:a7:ae:46:d8:c8:c1:a8:bd:26:00:63:32:9f:d9:79:9b: 57:71:9a:a6:49:62:5c:2b:2e:60:42:4c:6c:3e:5b:0e:5f:01: 89:92:00:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzOmd6rs/KcEHcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YTMxYTJkNjMtZmEzMy00MTE3LWIwNjUtODYyMTdkODRhNmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs144MKpkyIrGqpHhGcO4Kw/4cFx0v2FTCAuy 8PxCl1sbb2qv/94cmJHFQPBEdqn2h4yDGld5yRfMuTPUNhl2CXaXqTsV7wqTarXM Nqi9j5EtQiU0MzGN2oKjAg/76WwrY+qhp9OgGIzASLk2GX0QE9u45UbN6SHqpMhf QPi2rKlZIg9qypnYrcMBXb1aWYFsYzJ4eCwnDhkrwI0hhibDNW1cFgjx0fcXh5Qo l/8oyRp5yhWJUkELua+kKhq7YkBZMDZvF1WqhLciM84ABJiwVChz2vxuJAR7ffHC REquO28NXJwNTyxrAek+M2u+G5cTPIRHXiXD5v30GPIyQwfJ6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdVicx5E88oPWua7/KLrhomv4DHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYzI1OGUzNmUtZmQ5NS0z MWYyLWIzODEtZmFiMTZmNTVkOGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnONMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEo84HZVGPIwbhYsRjd3Gp6pk7pP6h2hXe+DRoo+sz3fH3wGWpFG+lWZ MSACovY4e6wbVG6x6jLw3VpQZK+m7yI4rQckLQpU+fusym5CinvYRP3dgncvo2CP Ok9M9LNGNdCLd5nXPEd2FiF6auJSrP6MVptx1UBrmppK1Bw20ml+q8vbMgptWq7+ IXt8EqVF7mBlNICEacfupQGOWOrlaVdDWDoLcugptUTYuq8TUxoxG/2EttSd3M6F Ibi/lAbHk39R6vqq4GXaQXrwm6xQXStKX5VMlFs10SSVp65G2MjBqL0mAGMyn9l5 m1dxmqZJYlwrLmBCTGw+Ww5fAYmSAJs= -----END CERTIFICATE-----Generated at Sun Oct 4 09:45:53 2026 by rpki-client