$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa File: 2613f3f7-60d2-3644-87f5-381f608c7546.roa (raw, json) Hash identifier: hsCluBMX2NBZRtTTDpl8CYGOHiIQJdOjXhE3NlWahWg= Subject key identifier: EB:F6:EA:04:C8:61:5F:1A:61:27:BF:73:68:12:27:24:7A:DB:93:4F Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D91C00384272C2F29E467F100 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 16509 IP address blocks: 216.157.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:03:84:27:2c:2f:29:e4:67:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=4904e9af-7280-462e-9672-a7d43dd84bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cd:6a:50:23:db:67:2e:1e:1f:8f:5c:4d:bf: 85:38:bf:13:62:54:7a:97:af:c9:8f:e4:ab:07:05: 1b:1a:c3:e4:a7:0c:03:f5:c4:5c:66:3f:40:80:c4: cc:74:25:b8:a2:4f:6c:36:07:b3:ee:ac:cc:8f:5e: 30:a7:02:47:37:cf:fd:71:d4:4e:94:fc:f0:19:c6: 44:8e:ba:2a:61:31:59:d0:30:62:50:ab:82:30:46: 28:fe:3c:7f:de:e0:50:6d:c9:63:f4:77:24:c2:01: c4:dd:02:31:51:a3:b2:49:cf:89:ed:d1:fc:3e:2b: eb:e7:89:bd:43:6a:b7:e2:2e:eb:88:cc:7d:b7:8e: 2d:8d:38:b3:4f:57:15:fd:14:82:91:ab:f6:bd:be: d4:48:7f:8b:cd:42:e6:6b:9b:0c:b5:bb:cf:64:37: 50:2d:94:4a:ef:a3:c8:8c:34:e4:b1:a2:91:0d:30: 8b:61:70:f6:7f:63:00:c0:ab:6f:66:55:a2:c0:e6: 79:7c:75:5f:a6:0e:f0:10:af:84:ff:cb:9a:11:5c: f7:d9:5f:e7:e6:95:14:69:d2:43:32:ea:7c:57:7f: 07:3a:5c:6e:58:0a:f7:30:c3:4f:32:a3:82:e3:37: 60:79:8c:8a:5d:f5:f9:da:48:92:2c:e1:79:d7:c7: 2f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F6:EA:04:C8:61:5F:1A:61:27:BF:73:68:12:27:24:7A:DB:93:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:2f:fc:71:67:78:3f:cf:22:f9:17:18:ad:79:ed:0b:27:0d: a0:dc:da:6e:46:05:af:38:d5:2f:b8:28:af:5a:fd:40:7d:78: e7:b6:99:b9:f8:d4:1d:1c:18:b6:b5:d3:fa:a1:f7:31:5c:d1: a4:6b:2e:71:26:38:4e:bf:23:6b:08:4c:e3:f6:66:e2:e7:82: ff:0c:07:15:f0:27:bf:ad:8a:b6:6d:1b:63:43:b7:d2:9d:5a: 99:11:8d:43:b2:a6:27:9c:58:13:d0:52:89:4b:b1:50:ec:4e: 23:32:39:dc:d6:26:f8:63:0f:93:89:92:39:cf:a9:20:55:4e: ba:f9:2d:7e:8c:e5:bd:46:ed:17:aa:c6:11:c6:9c:c0:8c:22: d9:b0:94:f4:d6:6e:57:50:1e:0a:8e:0d:2b:cf:6f:4c:32:63: 4f:c6:12:d4:76:72:56:a2:29:28:e5:91:d2:fc:74:6b:81:01: 18:b0:d2:59:3f:39:ce:00:ba:69:12:a8:8f:64:aa:17:10:6d: cb:13:dd:fc:36:39:00:5a:4b:ca:1d:2d:6a:09:bf:94:01:82: 6d:44:c4:24:24:c6:d9:e8:a5:a2:67:0c:9f:c5:af:bb:91:be: 3b:ba:51:86:54:ff:9f:a2:85:a4:89:51:6d:69:1f:91:02:31: e4:83:c7:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAOEJywvKeRn8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk NDkwNGU5YWYtNzI4MC00NjJlLTk2NzItYTdkNDNkZDg0YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvM1qUCPbZy4eH49cTb+FOL8TYlR6l6/Jj+Sr BwUbGsPkpwwD9cRcZj9AgMTMdCW4ok9sNgez7qzMj14wpwJHN8/9cdROlPzwGcZE jroqYTFZ0DBiUKuCMEYo/jx/3uBQbclj9HckwgHE3QIxUaOySc+J7dH8Pivr54m9 Q2q34i7riMx9t44tjTizT1cV/RSCkav2vb7USH+LzULma5sMtbvPZDdQLZRK76PI jDTksaKRDTCLYXD2f2MAwKtvZlWiwOZ5fHVfpg7wEK+E/8uaEVz32V/n5pUUadJD Mup8V38HOlxuWAr3MMNPMqOC4zdgeYyKXfX52kiSLOF518cvhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOv26gTIYV8aYSe/c2gSJyR625NPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMjYxM2YzZjctNjBkMi0z NjQ0LTg3ZjUtMzgxZjYwOGM3NTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkv/HFneD/PIvkXGK157QsnDaDc2m5GBa841S+4KK9a/UB9eOe2mbn4 1B0cGLa10/qh9zFc0aRrLnEmOE6/I2sITOP2ZuLngv8MBxXwJ7+tirZtG2NDt9Kd WpkRjUOypiecWBPQUolLsVDsTiMyOdzWJvhjD5OJkjnPqSBVTrr5LX6M5b1G7Req xhHGnMCMItmwlPTWbldQHgqODSvPb0wyY0/GEtR2claiKSjlkdL8dGuBARiw0lk/ Oc4AumkSqI9kqhcQbcsT3fw2OQBaS8odLWoJv5QBgm1ExCQkxtnopaJnDJ/Fr7uR vju6UYZU/5+ihaSJUW1pH5ECMeSDx0o= -----END CERTIFICATE-----Generated at Wed May 13 13:05:14 2026 by rpki-client