$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/5a27232a-feac-3474-9b25-16a64cc19512.roa File: 5a27232a-feac-3474-9b25-16a64cc19512.roa (raw, json) Hash identifier: xg3QoyGRLbrX+2rf+Tgjl0qObuSKeYZpLb+oUQcFvKQ= Subject key identifier: A6:69:21:75:8C:C8:5F:77:1A:A7:01:C1:EB:F5:ED:69:81:92:7A:95 Certificate issuer: /CN=458adead-fc85-4377-ae8f-70e00c42b223 Certificate serial: 010D0C9F4328584B7DECABD733D72AFA253A1B00 Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/5a27232a-feac-3474-9b25-16a64cc19512.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 157.248.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:ab:d7:33:d7:2a:fa:25:3a:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=fcdb58bb-99da-4b2b-8f3a-8a9c9706b961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6d:4f:d0:b8:25:ee:01:31:76:b4:de:5d:f7: b9:52:9b:f5:f7:e6:fe:36:40:0d:f7:95:47:dc:0f: af:a0:45:b6:2f:67:7a:0b:bd:8d:90:b8:53:9d:8a: 7c:0b:a3:24:9c:c9:fc:af:6e:c8:3c:55:c3:d5:97: 57:ff:fc:4b:29:ab:17:4c:66:41:a9:04:ad:46:07: 46:2e:68:e7:3e:d9:8e:fd:f5:28:17:78:12:c4:d2: 9b:ca:0d:c8:90:1a:c0:ef:5f:4b:40:d4:cb:d7:e9: 95:7a:e0:eb:7e:38:45:10:ce:19:b9:51:c9:f1:06: 23:57:2e:f5:37:bc:0f:ee:c9:5f:1d:26:b7:64:e3: 32:05:77:44:79:20:5d:6d:9f:0c:32:a8:20:56:9b: d3:11:1c:3d:f2:b1:99:c4:82:c8:2c:c5:d3:5c:bf: a4:ef:aa:25:53:c7:ca:ad:9d:4c:ae:d1:c8:ea:1b: 3d:d6:df:a9:f9:ae:a7:98:f6:ba:f2:43:d2:85:4f: d8:31:07:5a:c4:db:c8:ef:dd:ee:c5:c0:b6:eb:2d: d7:8c:5b:84:67:06:a1:0e:29:21:1b:4d:d5:5b:de: fc:91:9f:35:da:55:2e:12:8d:a8:64:5a:58:38:14: 7b:8b:aa:0c:0b:0b:c1:89:43:c6:a3:87:df:8d:5b: 0f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:69:21:75:8C:C8:5F:77:1A:A7:01:C1:EB:F5:ED:69:81:92:7A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/5a27232a-feac-3474-9b25-16a64cc19512.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl X509v3 Authority Key Identifier: keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer sbgp-ipAddrBlock: critical IPv4: 157.248.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:f2:31:b4:ca:30:16:b5:e2:12:8b:3c:33:c0:47:94:b4:21: 3e:93:cb:b7:7f:e6:19:78:84:15:e2:e9:96:ca:1e:6e:b6:0c: a1:a2:09:1f:c9:cd:9a:3c:1e:a2:4f:3a:c5:01:c5:54:81:cd: e8:4f:a9:6e:bf:2e:09:70:b1:23:c1:f8:9f:d4:d3:94:50:a9: cb:bd:96:5c:03:77:7f:8a:d6:59:b4:db:bf:1f:f9:f5:d0:60: 34:73:9e:fd:52:24:cf:2e:33:24:ad:b1:78:23:c2:bd:e9:a5: 33:77:8f:c4:70:0d:ad:7f:ed:fb:dc:67:ec:66:58:6b:04:8f: 1b:76:5b:30:44:1f:fc:ad:48:e4:a5:7b:92:62:fd:90:b8:bf: c4:75:69:ae:2f:58:d3:80:74:b2:24:f0:60:9d:b8:f3:b3:7a: 91:10:6e:f8:de:d8:8b:a9:db:7d:1b:84:3d:af:9c:8a:6e:74: 16:7d:1a:95:89:ce:50:26:07:3d:a4:90:5f:00:cf:4b:6b:2d: 6b:4c:41:65:e6:0e:85:81:22:ee:79:68:f1:e9:55:d2:ff:68: 65:a8:a5:4e:e7:d9:4a:8b:66:ae:63:60:23:29:b7:0f:ed:e3: bc:6c:17:41:42:77:53:69:b0:20:82:56:28:c7:d6:98:2b:67: df:13:0a:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97KvXM9cq+iU6GwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4YWRlYWQtZmM4NS00Mzc3LWFlOGYtNzBlMDBjNDJi MjIzMB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZmNkYjU4YmItOTlkYS00YjJiLThmM2EtOGE5Yzk3MDZiOTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4G1P0Lgl7gExdrTeXfe5Upv19+b+NkAN95VH 3A+voEW2L2d6C72NkLhTnYp8C6MknMn8r27IPFXD1ZdX//xLKasXTGZBqQStRgdG LmjnPtmO/fUoF3gSxNKbyg3IkBrA719LQNTL1+mVeuDrfjhFEM4ZuVHJ8QYjVy71 N7wP7slfHSa3ZOMyBXdEeSBdbZ8MMqggVpvTERw98rGZxILILMXTXL+k76olU8fK rZ1MrtHI6hs91t+p+a6nmPa68kPShU/YMQdaxNvI793uxcC26y3XjFuEZwahDikh G03VW978kZ812lUuEo2oZFpYOBR7i6oMCwvBiUPGo4ffjVsPNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKZpIXWMyF93GqcBwev17WmBknqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NThh ZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUwMGM0MmIyMjMvNWEyNzIzMmEtZmVhYy0z NDc0LTliMjUtMTZhNjRjYzE5NTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU4YWRlYWQtZmM4NS00Mzc3LWFl OGYtNzBlMDBjNDJiMjIzLzQ1OGFkZWFkLWZjODUtNDM3Ny1hZThmLTcwZTAwYzQy YjIyMy5jcmwwHwYDVR0jBBgwFoAUgFwvkgT+eRfx4bKa4aKlQkaLRQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NThhZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUw MGM0MmIyMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnfgVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7yMbTKMBa14hKLPDPAR5S0IT6Ty7d/5hl4hBXi6ZbKHm62DKGiCR/J zZo8HqJPOsUBxVSBzehPqW6/LglwsSPB+J/U05RQqcu9llwDd3+K1lm0278f+fXQ YDRznv1SJM8uMyStsXgjwr3ppTN3j8RwDa1/7fvcZ+xmWGsEjxt2WzBEH/ytSOSl e5Ji/ZC4v8R1aa4vWNOAdLIk8GCduPOzepEQbvje2Iup230bhD2vnIpudBZ9GpWJ zlAmBz2kkF8Az0trLWtMQWXmDoWBIu55aPHpVdL/aGWopU7n2UqLZq5jYCMptw/t 47xsF0FCd1NpsCCCVijH1pgrZ98TCkY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:51 2025 by rpki-client