$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa File: dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa (raw, json) Hash identifier: S2XVROiWdik9dn2TNSQi8LqzJ/s/+QaM0I3crLVUWoc= Subject key identifier: F0:E8:8E:C9:FA:01:B9:79:92:0A:6C:87:8D:0B:A7:F3:59:CC:1A:66 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F14679424702E1F95C031F1C0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 14618 IP address blocks: 216.157.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:94:24:70:2e:1f:95:c0:31:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=d210d8e3-efca-4121-9461-636a2a24716d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b5:cf:d2:51:be:e2:c7:a9:f4:81:46:d8:a6: fe:21:28:ef:bd:30:49:b5:1b:e8:55:0a:80:50:14: b7:80:88:82:09:51:b3:16:47:70:57:c5:d6:7d:05: 83:47:55:59:ee:a4:05:0c:bb:f6:14:cf:da:ce:ee: 7e:00:e5:ac:c3:45:fa:89:5b:20:46:21:19:52:a0: bc:73:c7:30:38:da:02:03:e7:cd:f7:96:02:a3:4a: ac:58:2d:fb:e8:f2:35:fc:57:5d:9c:fa:99:a6:8f: b3:a6:b7:e8:27:c9:0d:37:32:04:f7:84:42:29:54: 4b:d2:de:60:db:c4:9f:ef:32:ad:20:d8:ed:6f:c9: d3:51:d2:4f:0e:fa:2d:18:b8:67:16:3e:2f:15:29: 16:50:d1:52:af:dd:16:98:79:49:cc:53:75:66:0e: 67:54:8a:14:31:65:a3:db:dc:49:71:5e:cf:a1:5d: 04:83:3f:e9:8b:cd:ae:de:bc:98:c8:97:d6:80:ee: 57:67:89:95:7b:b0:17:85:73:38:ba:cc:17:43:f4: 1e:a6:bd:3d:77:a2:fd:6f:cb:78:1f:35:1d:f2:31: 5e:78:d1:cc:ad:91:01:8f:7e:20:01:d7:36:da:25: 75:69:19:5d:c4:df:25:46:ad:76:62:93:8c:e9:4d: c1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E8:8E:C9:FA:01:B9:79:92:0A:6C:87:8D:0B:A7:F3:59:CC:1A:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:2c:7f:8b:e5:ae:9a:0c:31:a2:db:3b:87:ad:50:c4:24:ef: 62:8a:0a:42:43:c0:5f:d1:cf:bb:c3:02:c7:5a:d5:af:4e:da: 1a:88:40:b2:63:a9:bd:2f:75:d2:24:68:c2:10:e9:61:16:cb: 19:02:bf:64:29:ba:a9:00:2f:45:d7:7d:c5:59:52:53:4c:42: be:81:dd:eb:69:75:86:3a:a6:cb:4d:c7:ed:5e:71:fe:1b:49: 22:d3:c1:53:4c:04:61:fb:46:dc:d5:d0:66:2e:3b:02:38:c2: 3a:7a:9d:7f:5f:a3:0b:93:94:e4:c4:d1:18:78:f8:89:94:b4: e3:d5:fd:9b:e2:42:5f:92:32:93:bb:24:a4:8a:4e:6c:93:1e: 54:75:2e:2c:f0:51:78:78:55:4e:40:6b:29:38:32:89:bb:dc: 8f:5b:e9:e2:6f:d4:51:9b:84:ed:4e:89:20:7d:eb:a6:10:26: a2:d3:1d:55:dc:76:f4:82:34:5d:8e:61:19:3a:6e:b6:0a:3e: bc:5b:97:b4:be:83:9f:77:54:b3:53:81:50:e3:ac:b9:16:88: 6c:cf:37:bb:0a:a7:1b:04:78:7e:60:dd:65:d1:61:7b:bb:6c: fc:f6:13:85:76:e5:ca:00:7c:45:91:49:a3:8f:97:dc:4f:b0: 64:00:9e:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5QkcC4flcAx8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZDIxMGQ4ZTMtZWZjYS00MTIxLTk0NjEtNjM2YTJhMjQ3MTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rXP0lG+4sep9IFG2Kb+ISjvvTBJtRvoVQqA UBS3gIiCCVGzFkdwV8XWfQWDR1VZ7qQFDLv2FM/azu5+AOWsw0X6iVsgRiEZUqC8 c8cwONoCA+fN95YCo0qsWC376PI1/FddnPqZpo+zprfoJ8kNNzIE94RCKVRL0t5g 28Sf7zKtINjtb8nTUdJPDvotGLhnFj4vFSkWUNFSr90WmHlJzFN1Zg5nVIoUMWWj 29xJcV7PoV0Egz/pi82u3ryYyJfWgO5XZ4mVe7AXhXM4uswXQ/Qepr09d6L9b8t4 HzUd8jFeeNHMrZEBj34gAdc22iV1aRldxN8lRq12YpOM6U3B9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDojsn6Abl5kgpsh40Lp/NZzBpmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZGJhY2NmNTMtMTBkMS0z ZjI3LWEwMzYtMjljMjJlNmY4ZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAsf4vlrpoMMaLbO4etUMQk72KKCkJDwF/Rz7vDAsda1a9O2hqIQLJj qb0vddIkaMIQ6WEWyxkCv2QpuqkAL0XXfcVZUlNMQr6B3etpdYY6pstNx+1ecf4b SSLTwVNMBGH7RtzV0GYuOwI4wjp6nX9fowuTlOTE0Rh4+ImUtOPV/ZviQl+SMpO7 JKSKTmyTHlR1LizwUXh4VU5Aayk4Mom73I9b6eJv1FGbhO1OiSB966YQJqLTHVXc dvSCNF2OYRk6brYKPrxbl7S+g593VLNTgVDjrLkWiGzPN7sKpxsEeH5g3WXRYXu7 bPz2E4V25coAfEWRSaOPl9xPsGQAniU= -----END CERTIFICATE-----Generated at Sun Sep 20 14:48:01 2026 by rpki-client