$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa File: f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa (raw, json) Hash identifier: QnLGNA+ZV23lcc0PqYtJ02/wscQBbZrWUk7VzrJiidM= Subject key identifier: 8A:C4:EA:81:9D:02:E1:12:3E:03:D0:5A:74:CC:57:AC:96:E5:07:3E Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F146796099942B79E9C376DE0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 16509 IP address blocks: 158.115.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:96:09:99:42:b7:9e:9c:37:6d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=f8e9f806-74a7-4798-bac4-7967e1a93414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:2d:f5:60:a3:d1:f9:92:89:27:23:c2:bb:66: 2c:f2:c3:4e:b1:92:b3:6e:7c:94:1c:dc:df:67:f8: 81:69:b3:c6:85:08:d9:64:da:40:5d:ef:76:d2:dd: c9:73:7b:e9:14:f2:2e:7f:cc:3b:f9:c2:ec:95:6a: f1:53:7b:75:5a:e3:76:b1:28:4e:2b:e2:59:b6:19: 03:e1:84:e8:c0:55:09:60:76:ec:c8:f3:00:d4:29: 99:e8:7e:a1:40:46:93:3b:4d:ba:97:86:0d:d7:70: a4:49:15:d4:7d:99:66:33:e4:1c:f0:f7:42:e5:f4: f1:99:f8:ba:79:9d:a5:cc:bb:a9:2f:28:d3:68:c3: 09:82:98:77:68:91:b5:e1:1b:57:58:12:31:82:82: ac:c9:15:81:b8:49:ea:0c:3a:ef:02:f8:ef:a4:6b: 81:1a:84:5e:34:7f:56:49:c4:a6:fd:4f:45:b2:17: 26:84:ee:42:a8:6e:ba:b0:e0:8a:35:65:6c:3c:38: 57:38:19:e4:3b:54:86:8e:f0:d4:e6:17:d9:9c:cb: 9f:f1:03:04:87:2d:03:ea:6c:fa:9d:aa:14:56:dc: 0f:0b:f2:00:61:99:16:30:c1:cb:61:89:ee:40:b8: bb:f5:07:31:52:af:29:12:4d:1a:d5:72:95:94:2f: 03:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C4:EA:81:9D:02:E1:12:3E:03:D0:5A:74:CC:57:AC:96:E5:07:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:a6:18:c2:6c:46:9f:45:f5:0d:cf:cc:24:00:36:e7:0c:82: 1f:f4:a1:b1:3a:91:54:6d:d4:3a:fe:74:e8:83:7e:54:bd:df: 3b:3f:02:5c:c3:8b:06:64:00:f4:72:d4:25:db:3e:bd:8a:91: 28:88:35:92:b4:45:33:4b:66:3c:74:31:20:6c:24:2d:43:e6: 8e:f9:4f:9e:e4:02:b7:26:1a:a4:2a:94:34:56:d4:6b:a9:04: ad:63:78:97:53:f3:c1:34:73:28:74:e9:6e:51:ba:c5:76:2f: eb:eb:39:fa:09:0e:64:fe:22:28:61:7d:30:66:cd:2f:25:16: c7:74:fb:59:c9:64:70:92:d5:f0:6e:a9:72:ce:09:d0:eb:e7: 7b:cf:b0:49:24:80:52:0c:18:6a:14:e3:8d:a0:c6:ee:f5:2d: be:e7:f8:d8:1a:dd:9a:02:39:df:9e:c7:dc:3e:a7:7d:11:db: 75:81:fb:67:3c:39:f8:bc:2c:a5:e3:5c:a1:49:62:b6:9c:24: 6a:5d:90:6f:a1:4f:4a:dd:34:37:b5:7d:5f:60:6c:4f:f7:a3: dd:e8:65:71:94:aa:98:59:dc:55:72:6d:ab:01:26:bd:9d:12: f4:90:b7:08:d3:01:46:25:97:65:3f:a9:a1:2d:eb:05:0d:29: 5a:02:bd:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5YJmUK3npw3beAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk ZjhlOWY4MDYtNzRhNy00Nzk4LWJhYzQtNzk2N2UxYTkzNDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnS31YKPR+ZKJJyPCu2Ys8sNOsZKzbnyUHNzf Z/iBabPGhQjZZNpAXe920t3Jc3vpFPIuf8w7+cLslWrxU3t1WuN2sShOK+JZthkD 4YTowFUJYHbsyPMA1CmZ6H6hQEaTO026l4YN13CkSRXUfZlmM+Qc8PdC5fTxmfi6 eZ2lzLupLyjTaMMJgph3aJG14RtXWBIxgoKsyRWBuEnqDDrvAvjvpGuBGoReNH9W ScSm/U9FshcmhO5CqG66sOCKNWVsPDhXOBnkO1SGjvDU5hfZnMuf8QMEhy0D6mz6 naoUVtwPC/IAYZkWMMHLYYnuQLi79QcxUq8pEk0a1XKVlC8DIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrE6oGdAuESPgPQWnTMV6yW5Qc+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZjhkNmU5NzgtMmQzZi0z ZDA0LWJmYjgtMzdmYzY1NTc2MWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCmGMJsRp9F9Q3PzCQANucMgh/0obE6kVRt1Dr+dOiDflS93zs/AlzD iwZkAPRy1CXbPr2KkSiINZK0RTNLZjx0MSBsJC1D5o75T57kArcmGqQqlDRW1Gup BK1jeJdT88E0cyh06W5RusV2L+vrOfoJDmT+IihhfTBmzS8lFsd0+1nJZHCS1fBu qXLOCdDr53vPsEkkgFIMGGoU442gxu71Lb7n+Nga3ZoCOd+ex9w+p30R23WB+2c8 Ofi8LKXjXKFJYracJGpdkG+hT0rdNDe1fV9gbE/3o93oZXGUqphZ3FVybasBJr2d EvSQtwjTAUYll2U/qaEt6wUNKVoCvVI= -----END CERTIFICATE-----Generated at Tue Sep 29 19:35:24 2026 by rpki-client