$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa File: 1cafc32e-37ff-3be5-8b34-b31586912636.roa (raw, json) Hash identifier: 4g8XQE38em54JOBVHOfXIoAAL4nQhQP1fgXqXNFyb/s= Subject key identifier: 7E:FE:38:D9:87:2C:3B:B3:D4:2C:52:1C:7C:3C:D9:02:61:BD:D5:2C Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F5E62E2E5D387D0B02783CCA0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 16509 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e2:e5:d3:87:d0:b0:27:83:cc:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=32e3e607-a977-4d0c-84d5-e71a6a6a5c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:24:e8:6a:ff:9b:87:3e:c9:5f:4a:36:d5:17: 03:c6:cf:d6:ca:e9:e8:c1:8b:43:3f:69:35:6e:d5: f0:76:40:52:0a:6d:de:70:ac:87:73:c8:97:a7:f7: 68:62:53:97:d1:76:18:a7:d0:d0:e0:c5:5e:4b:8e: c2:47:7a:53:cc:50:46:73:31:ce:cc:26:99:3b:a2: b0:f4:9e:ec:67:ed:b0:13:25:a7:85:e0:8a:b9:2e: 56:36:f3:d4:29:d3:84:6f:c0:f7:32:73:57:6b:08: 1e:f7:f7:9a:83:7d:b8:c7:41:d9:f1:1c:a0:85:dc: f0:2a:4f:1b:ec:bd:15:05:15:9e:9b:ea:01:7a:8d: ae:9b:cd:1e:88:64:ce:74:c8:ad:6f:ca:e9:02:61: 35:cc:ea:b9:f2:cf:89:47:6f:f5:32:18:9d:f1:0c: b1:48:59:f6:66:5c:0f:a8:54:7c:b9:c0:d8:7b:62: 04:1c:92:42:e4:fb:8c:14:5f:91:d5:20:eb:36:23: ee:00:c4:cc:6d:f7:42:de:04:ea:f3:9b:49:b8:3c: 1f:5f:b6:f3:cb:46:71:1d:46:76:fe:8f:b0:d0:d3: 3f:0d:19:cf:e7:0f:98:2d:2d:35:af:3d:63:b7:7e: 12:ba:9f:ea:24:45:3d:f5:4c:e8:aa:2d:c2:7a:e6: 52:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:FE:38:D9:87:2C:3B:B3:D4:2C:52:1C:7C:3C:D9:02:61:BD:D5:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:94:19:0c:29:0c:29:88:51:5d:bd:67:70:44:ad:27:ee:71: 16:21:9d:b8:3b:09:b3:bd:46:7f:65:83:75:5a:e1:c4:0d:4f: b6:98:52:7c:3d:ef:7e:f3:33:77:9e:fa:cf:52:a6:13:11:79: 70:54:96:29:2d:3e:cb:c9:df:eb:ec:29:75:5a:f5:13:9e:66: 67:dd:3b:a0:13:ce:66:8c:77:1e:51:89:91:31:b3:3f:4d:ed: d2:3f:3c:9e:eb:8d:4f:05:8c:25:40:6e:b4:47:e9:24:32:98: 27:bb:01:02:b7:bb:64:f9:dc:f2:6c:f9:78:fe:52:ab:21:63: 3b:b4:34:8c:90:8e:cf:37:fc:2f:a8:f9:f3:70:d7:15:74:75: 00:9c:2e:07:19:b2:45:5a:54:77:a2:e1:56:fa:81:ed:34:20: be:4f:44:9b:4c:78:c4:7e:cf:69:19:28:da:c2:69:89:62:29: ab:c7:5f:92:bd:39:60:0e:90:d8:58:98:13:6a:b4:2b:64:2b: 54:c1:7b:82:75:d8:4e:49:10:2f:4b:80:26:46:7e:af:f5:86: d8:e0:bb:12:d3:1f:93:b8:66:76:59:da:2b:a7:cd:f7:0d:3b: 7a:49:f9:58:55:3b:cc:b4:74:39:51:b1:c8:1b:47:fb:db:d7: 6a:a6:49:1a -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9eYuLl04fQsCeDzKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MzJlM2U2MDctYTk3Ny00ZDBjLTg0ZDUtZTcxYTZhNmE1YzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiToav+bhz7JX0o21RcDxs/WyunowYtDP2k1 btXwdkBSCm3ecKyHc8iXp/doYlOX0XYYp9DQ4MVeS47CR3pTzFBGczHOzCaZO6Kw 9J7sZ+2wEyWnheCKuS5WNvPUKdOEb8D3MnNXawge9/eag324x0HZ8RyghdzwKk8b 7L0VBRWem+oBeo2um80eiGTOdMitb8rpAmE1zOq58s+JR2/1Mhid8QyxSFn2ZlwP qFR8ucDYe2IEHJJC5PuMFF+R1SDrNiPuAMTMbfdC3gTq85tJuDwfX7bzy0ZxHUZ2 /o+w0NM/DRnP5w+YLS01rz1jt34Sup/qJEU99Uzoqi3CeuZSIQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFH7+ONmHLDuz1CxSHHw82QJhvdUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMWNhZmMzMmUtMzdmZi0z YmU1LThiMzQtYjMxNTg2OTEyNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhZQZDCkMKYhRXb1ncEStJ+5xFiGduDsJ s71Gf2WDdVrhxA1PtphSfD3vfvMzd576z1KmExF5cFSWKS0+y8nf6+wpdVr1E55m Z907oBPOZox3HlGJkTGzP03t0j88nuuNTwWMJUButEfpJDKYJ7sBAre7ZPnc8mz5 eP5SqyFjO7Q0jJCOzzf8L6j583DXFXR1AJwuBxmyRVpUd6LhVvqB7TQgvk9Em0x4 xH7PaRko2sJpiWIpq8dfkr05YA6Q2FiYE2q0K2QrVMF7gnXYTkkQL0uAJkZ+r/WG 2OC7EtMfk7hmdlnaK6fN9w07ekn5WFU7zLR0OVGxyBtH+9vXaqZJGg== -----END CERTIFICATE-----Generated at Sun Oct 4 10:23:17 2026 by rpki-client