$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa File: 1cafc32e-37ff-3be5-8b34-b31586912636.roa (raw, json) Hash identifier: eGkIomX6GQych4UZ+iMD3GNC0jftELTRA72UzCDC/3o= Subject key identifier: 4D:E3:BC:DE:94:E8:E8:2C:F6:4A:37:F6:71:69:14:7B:06:07:22:49 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D39CF7FB8680A3EEA504BCDC0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 16509 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:7f:b8:68:0a:3e:ea:50:4b:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=d7e333c8-b625-407e-92f1-3916235ea5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:66:74:58:e7:07:35:6b:f6:4b:ce:7f:ce:91: 9e:90:3d:ae:b6:a3:a5:12:63:d5:15:2c:c1:83:92: d9:d5:8b:eb:94:94:78:ff:36:c0:2c:6c:a9:8a:b6: 81:30:a0:cd:66:2e:2b:97:29:e6:65:f8:22:b7:42: f8:5b:8a:11:d4:84:e9:d7:18:80:19:f2:34:ce:dc: 60:a6:ca:40:6c:6d:08:1e:11:36:7d:f1:61:54:0f: 4e:0b:a1:fb:59:e7:a1:a7:a7:ac:17:ba:a3:06:96: 5e:95:29:28:1b:9b:6d:5f:80:3c:8f:d1:8f:ec:3b: bc:ba:41:28:df:86:a5:64:3a:7d:ad:20:8d:11:95: 3d:9c:fb:b8:fb:7a:4a:69:e3:5f:cb:80:27:30:67: fb:e9:75:6a:71:1c:7d:ec:1b:a9:9f:c8:a3:65:94: 5e:cc:44:42:81:20:50:0e:57:66:e1:8b:f2:61:f8: 3a:ad:cf:f4:f3:b3:b9:86:01:4b:33:ce:f4:53:f7: 84:77:4f:0f:d9:d4:c2:7e:6b:52:8d:87:ce:cc:b1: e7:02:f4:d0:e0:72:07:ec:ee:46:09:ba:d1:ae:f9: 9a:77:6c:cb:29:38:c6:dd:99:e4:4f:e6:35:c7:22: 44:bf:6d:aa:9e:06:f8:b5:78:ff:31:11:d8:36:6c: ee:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E3:BC:DE:94:E8:E8:2C:F6:4A:37:F6:71:69:14:7B:06:07:22:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:83:cf:0c:d8:db:ed:13:1f:4a:70:a0:e7:76:1c:3a:ae:b1: 3d:70:03:3f:62:18:d4:3e:96:be:0c:16:1d:87:bc:37:09:9a: c0:27:f7:99:a9:e2:9e:0b:9a:99:34:96:5d:50:37:41:55:e0: 07:a4:5a:2b:76:40:c7:80:71:c0:62:2f:37:88:68:79:be:6f: 80:c7:c0:df:11:3d:2b:9c:79:30:60:13:96:31:f0:a2:f9:2d: 5c:be:ca:85:3e:c9:57:71:7a:a0:e1:bc:e5:2e:7f:23:b7:a4: 1d:0e:7a:9c:1c:ba:25:dd:55:23:22:6a:54:58:3b:d3:40:f6: d4:32:23:e3:06:15:2e:20:f4:cd:98:90:57:e4:4c:39:39:81: d4:66:bb:76:4b:dd:ce:fb:47:86:e5:da:9d:d5:17:dc:8e:bd: 85:5b:ca:73:fe:39:0e:6a:fb:2c:66:25:6b:bd:0a:e1:78:53: 16:0b:f8:15:32:74:af:b1:80:ce:90:80:fb:fe:4a:0a:a7:6c: 09:2e:ef:04:cb:ee:cb:3d:c9:00:2a:6b:09:6e:63:db:29:87: b1:e2:d8:c3:e9:f9:a2:04:53:c9:a3:e7:0c:d6:d9:52:5f:b3: c5:99:93:0a:8b:8b:32:51:99:6e:07:15:41:e9:6f:6d:e6:ad: fa:69:36:23 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE05z3+4aAo+6lBLzcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk ZDdlMzMzYzgtYjYyNS00MDdlLTkyZjEtMzkxNjIzNWVhNWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2Z0WOcHNWv2S85/zpGekD2utqOlEmPVFSzB g5LZ1YvrlJR4/zbALGypiraBMKDNZi4rlynmZfgit0L4W4oR1ITp1xiAGfI0ztxg pspAbG0IHhE2ffFhVA9OC6H7Weehp6esF7qjBpZelSkoG5ttX4A8j9GP7Du8ukEo 34alZDp9rSCNEZU9nPu4+3pKaeNfy4AnMGf76XVqcRx97Bupn8ijZZRezERCgSBQ Dldm4YvyYfg6rc/087O5hgFLM870U/eEd08P2dTCfmtSjYfOzLHnAvTQ4HIH7O5G CbrRrvmad2zLKTjG3ZnkT+Y1xyJEv22qngb4tXj/MRHYNmzuSwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFE3jvN6U6Ogs9ko39nFpFHsGByJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMWNhZmMzMmUtMzdmZi0z YmU1LThiMzQtYjMxNTg2OTEyNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAUYPPDNjb7RMfSnCg53YcOq6xPXADP2IY 1D6WvgwWHYe8NwmawCf3maninguamTSWXVA3QVXgB6RaK3ZAx4BxwGIvN4hoeb5v gMfA3xE9K5x5MGATljHwovktXL7KhT7JV3F6oOG85S5/I7ekHQ56nBy6Jd1VIyJq VFg700D21DIj4wYVLiD0zZiQV+RMOTmB1Ga7dkvdzvtHhuXandUX3I69hVvKc/45 Dmr7LGYla70K4XhTFgv4FTJ0r7GAzpCA+/5KCqdsCS7vBMvuyz3JACprCW5j2ymH seLYw+n5ogRTyaPnDNbZUl+zxZmTCouLMlGZbgcVQelvbeat+mk2Iw== -----END CERTIFICATE-----Generated at Thu Mar 26 02:07:56 2026 by rpki-client