$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa File: c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa (raw, json) Hash identifier: Vh8pKIpDOe6GuFYd3YMh0/2k0baCPpmUjkAtJGfpyZw= Subject key identifier: 84:D3:89:7D:AF:F3:28:ED:AE:6E:D0:BC:29:6E:E8:3E:42:21:79:B4 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F1467943CDABAF151AEB0C700 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 395831 IP address blocks: 216.157.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:94:3c:da:ba:f1:51:ae:b0:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=ee48b3dc-3904-422f-968f-0d93fbcd6c74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2b:56:13:55:4b:0f:ae:38:90:01:4b:c6:f6: 0c:c8:2f:e2:31:2c:ba:3d:3d:6d:c1:a3:cf:46:24: cd:41:b6:0e:fe:25:cf:1b:e8:84:13:69:d7:4f:7c: e8:f6:bf:f8:ee:00:20:85:72:a9:39:9f:01:d4:89: 37:2d:34:ce:a7:00:1e:4c:d9:68:b4:cc:82:8c:b3: 67:39:54:f1:5c:c9:3e:8c:c8:92:f9:e1:5b:85:6d: 91:dc:fe:73:b5:a8:95:30:51:7d:60:ef:59:87:ff: 1c:46:db:20:2e:a7:b2:95:67:f0:cc:d3:c1:e1:b4: 89:33:85:62:e9:b5:67:14:99:27:7c:55:7d:25:16: 3f:82:4b:d2:89:a6:c3:ac:6e:d5:28:59:66:03:fa: 92:f9:ae:76:b2:49:e1:47:72:a8:ca:0e:37:38:f1: 3e:ab:98:78:3e:61:2f:9d:ab:73:83:10:c3:6a:9d: 7c:ff:5d:01:f8:a5:84:d6:f6:9a:80:3c:0a:20:5c: 24:9d:43:19:53:81:b7:db:a1:b5:f6:f3:5c:ff:cc: 66:84:13:6d:13:05:3d:08:83:98:3b:f5:90:f4:88: d8:3b:08:fb:ec:d7:ba:a7:35:f7:55:cf:64:a1:70: b6:6e:8d:9f:d9:ce:e9:c4:a7:89:5c:2d:36:01:92: e1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D3:89:7D:AF:F3:28:ED:AE:6E:D0:BC:29:6E:E8:3E:42:21:79:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:8d:c2:7b:5a:20:48:95:d2:0d:13:4b:00:98:e6:db:1b:01: d9:b9:4e:73:db:07:4d:a6:5f:ef:80:59:fb:ca:d0:14:d9:18: 57:c6:d6:3d:1c:f5:65:c5:7a:4a:70:7a:0c:34:7d:03:5c:00: 84:6a:3a:be:a3:89:02:fa:38:3e:4b:6b:18:7b:c5:dd:e1:92: eb:a0:56:23:cd:e5:e2:95:35:30:25:73:d2:c4:9a:fd:57:1c: 55:d5:3f:b8:b1:2e:a5:9a:df:70:92:1b:e7:51:a6:45:18:ac: bb:c7:fa:19:fb:f6:9b:fe:73:56:35:01:ef:0d:e5:a2:d7:47: f2:4d:7a:49:7f:a3:7f:5e:4c:d0:19:eb:f5:a6:89:f2:23:fe: e0:70:e5:d1:2f:3f:b6:4e:e6:1b:22:d6:87:6d:c5:22:57:ce: 83:f8:4b:4c:5e:b1:b3:a8:20:7d:44:53:22:9d:f1:9d:a9:fe: b4:a4:bf:bc:cd:27:6d:05:35:5d:b5:4b:23:13:16:1d:ac:5d: f3:90:77:eb:74:43:39:e5:9f:5a:ce:75:7d:cd:16:55:9b:ad: 08:59:19:56:6c:02:ec:d4:86:4a:09:d7:03:51:ac:06:86:4a: 36:95:82:ac:e9:99:8f:6e:90:2f:27:7f:38:34:22:9f:8d:9f: 0b:9e:39:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5Q82rrxUa6wxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZWU0OGIzZGMtMzkwNC00MjJmLTk2OGYtMGQ5M2ZiY2Q2Yzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiytWE1VLD644kAFLxvYMyC/iMSy6PT1twaPP RiTNQbYO/iXPG+iEE2nXT3zo9r/47gAghXKpOZ8B1Ik3LTTOpwAeTNlotMyCjLNn OVTxXMk+jMiS+eFbhW2R3P5ztaiVMFF9YO9Zh/8cRtsgLqeylWfwzNPB4bSJM4Vi 6bVnFJknfFV9JRY/gkvSiabDrG7VKFlmA/qS+a52sknhR3Koyg43OPE+q5h4PmEv natzgxDDap18/10B+KWE1vaagDwKIFwknUMZU4G326G19vNc/8xmhBNtEwU9CIOY O/WQ9IjYOwj77Ne6pzX3Vc9koXC2bo2f2c7pxKeJXC02AZLhKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITTiX2v8yjtrm7QvClu6D5CIXm0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYzJmZDNmMWQtN2RmNy0z Y2UwLTkyMzAtN2FhNzAwY2RiNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeNwntaIEiV0g0TSwCY5tsbAdm5TnPbB02mX++AWfvK0BTZGFfG1j0c 9WXFekpwegw0fQNcAIRqOr6jiQL6OD5Laxh7xd3hkuugViPN5eKVNTAlc9LEmv1X HFXVP7ixLqWa33CSG+dRpkUYrLvH+hn79pv+c1Y1Ae8N5aLXR/JNekl/o39eTNAZ 6/WmifIj/uBw5dEvP7ZO5hsi1odtxSJXzoP4S0xesbOoIH1EUyKd8Z2p/rSkv7zN J20FNV21SyMTFh2sXfOQd+t0Qznln1rOdX3NFlWbrQhZGVZsAuzUhkoJ1wNRrAaG SjaVgqzpmY9ukC8nfzg0Ip+NnwueOag= -----END CERTIFICATE-----Generated at Tue Sep 29 02:02:52 2026 by rpki-client