$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa File: dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa (raw, json) Hash identifier: s0dUz4MWXTpICqx3ZsVhBsUXINIgCOkGnWDfs6p85P0= Subject key identifier: E0:EF:1D:CD:F2:FD:50:32:ED:FD:AA:3A:73:0E:E7:B0:C9:7D:65:65 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584FB6710A96215A8BF77016B980 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 14618 IP address blocks: 216.157.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:0a:96:21:5a:8b:f7:70:16:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=f1e4b2dc-0e4d-4198-9866-26aaab11a23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:d0:96:79:c8:38:74:a1:cf:2e:1e:e4:4c:4f: 1b:ab:17:27:a3:58:0b:8b:b5:72:57:15:e6:ab:94: 9c:3c:19:55:2b:f7:52:43:f8:ea:3b:6a:17:22:23: 43:8e:c3:18:e5:ce:63:6f:f9:64:2e:23:38:bb:0e: 26:af:b4:08:d0:61:69:cd:fd:19:43:da:dc:c0:72: 43:b1:76:98:e9:aa:21:0b:99:49:06:87:aa:d7:5a: 6a:83:01:3a:55:19:0c:d0:6e:d4:28:78:63:29:7a: a6:73:d0:1e:d4:b5:0d:b7:32:85:9e:87:f6:bd:25: c1:bc:1b:56:06:d6:ac:f7:fa:bd:e0:c3:b8:b7:95: 2d:0e:85:7d:40:dd:64:30:ac:91:04:ee:25:fb:b0: bf:c7:c4:e1:49:18:63:a9:6c:f9:ad:57:4f:5a:99: 78:6b:ac:50:c9:0a:41:f8:2e:5b:0e:57:0d:4a:ed: 40:8c:fd:f5:b8:d2:32:fe:35:7a:93:bf:dc:fc:e0: 79:af:4c:b1:ca:98:cd:35:68:1b:f5:a9:0c:a2:6c: 1f:43:b9:a2:bf:ba:f4:48:6d:0f:96:bf:f3:1f:df: 82:a1:e0:6d:3f:12:ca:25:a5:d3:a4:30:e0:ed:71: 6d:63:26:7e:04:b1:85:13:cf:47:59:74:e8:44:05: 9a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EF:1D:CD:F2:FD:50:32:ED:FD:AA:3A:73:0E:E7:B0:C9:7D:65:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:28:b5:18:83:01:a3:40:1d:80:a6:05:e2:a3:e8:e4:0f:0d: c9:24:24:9b:83:3d:9c:e1:ef:69:a9:78:d9:c0:2c:23:f8:93: 3a:5c:93:e2:e4:ed:69:c6:b0:60:45:29:38:39:3c:0e:d5:3f: 75:d1:8b:a8:ab:1e:af:b2:ae:32:3b:ec:15:56:74:cd:79:d1: 97:e5:16:1c:03:7d:54:46:7e:16:1e:0f:3a:5b:a6:c7:87:a9: 8b:83:8f:f5:84:f0:7e:22:94:01:d5:94:a0:2e:5f:08:15:4f: 98:c4:7a:a8:5b:78:25:19:38:53:02:40:96:fe:e9:db:d7:47: 83:b8:40:a8:63:b0:6f:d7:2f:53:cf:22:54:9e:80:09:a9:07: ec:ac:79:0e:cd:e7:81:cf:73:cb:1d:c1:7d:31:4b:da:67:f3: 73:00:08:2e:e6:58:3b:c9:6b:ff:e5:e4:b1:e1:cd:fb:f7:2e: 24:5f:7b:7c:87:26:82:ee:ef:a8:8f:98:6c:27:e5:23:ff:d3: 42:90:85:dd:1b:9f:ea:f1:60:de:b4:2d:39:24:66:47:f6:29: 75:f3:fd:a0:20:75:83:18:5e:e5:ae:db:46:2b:19:5f:72:76: 4e:b9:32:60:94:c7:b4:67:9e:31:42:68:12:f8:8b:27:2b:94: 5e:13:e6:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+2cQqWIVqL93AWuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk ZjFlNGIyZGMtMGU0ZC00MTk4LTk4NjYtMjZhYWFiMTFhMjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdCWecg4dKHPLh7kTE8bqxcno1gLi7VyVxXm q5ScPBlVK/dSQ/jqO2oXIiNDjsMY5c5jb/lkLiM4uw4mr7QI0GFpzf0ZQ9rcwHJD sXaY6aohC5lJBoeq11pqgwE6VRkM0G7UKHhjKXqmc9Ae1LUNtzKFnof2vSXBvBtW Btas9/q94MO4t5UtDoV9QN1kMKyRBO4l+7C/x8ThSRhjqWz5rVdPWpl4a6xQyQpB +C5bDlcNSu1AjP31uNIy/jV6k7/c/OB5r0yxypjNNWgb9akMomwfQ7miv7r0SG0P lr/zH9+CoeBtPxLKJaXTpDDg7XFtYyZ+BLGFE89HWXToRAWauQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODvHc3y/VAy7f2qOnMO57DJfWVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZGJhY2NmNTMtMTBkMS0z ZjI3LWEwMzYtMjljMjJlNmY4ZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwotRiDAaNAHYCmBeKj6OQPDckkJJuDPZzh72mpeNnALCP4kzpck+Lk 7WnGsGBFKTg5PA7VP3XRi6irHq+yrjI77BVWdM150ZflFhwDfVRGfhYeDzpbpseH qYuDj/WE8H4ilAHVlKAuXwgVT5jEeqhbeCUZOFMCQJb+6dvXR4O4QKhjsG/XL1PP IlSegAmpB+yseQ7N54HPc8sdwX0xS9pn83MACC7mWDvJa//l5LHhzfv3LiRfe3yH JoLu76iPmGwn5SP/00KQhd0bn+rxYN60LTkkZkf2KXXz/aAgdYMYXuWu20YrGV9y dk65MmCUx7RnnjFCaBL4iycrlF4T5is= -----END CERTIFICATE-----Generated at Thu Nov 5 04:41:23 2026 by rpki-client