$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa File: 3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa (raw, json) Hash identifier: PV+DV4FjgkKnlC4XHG9VJLAFHv5YC+B2mrcyelShIgE= Subject key identifier: 1B:63:D2:4F:D5:BA:E7:74:65:6F:DB:70:48:41:E4:1F:2F:5E:22:DE Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F146795FD20CA72D6EFAC3850 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 14618 IP address blocks: 158.115.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:95:fd:20:ca:72:d6:ef:ac:38:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=af4fff32-e257-4091-90e3-45183e61f484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:24:f0:55:02:32:42:8c:c4:c8:ae:2b:d0:66: 83:46:88:b7:94:01:d2:4f:7e:21:dd:ce:64:48:58: 17:2f:6f:19:31:7c:91:5a:83:04:81:cc:26:ad:03: c5:4e:08:f6:06:d0:59:6a:64:e0:58:f3:1a:a8:08: de:14:d0:fe:59:fd:88:6e:2d:5e:ab:06:8b:59:70: f7:12:22:ae:e4:4e:f9:83:3f:41:50:ef:90:c9:ae: db:56:c2:d3:d7:5d:86:77:4f:bb:c7:44:16:67:44: a0:37:2d:ce:47:11:79:cd:5e:dc:6c:4f:51:99:bb: 37:54:1e:cc:8e:9c:5e:9c:c4:5f:a6:0a:9a:88:56: 3e:57:8d:b9:a4:6c:96:7c:ca:b9:07:15:04:07:ca: ef:a4:38:70:69:96:29:64:b5:53:10:47:ce:9d:03: a7:11:54:7c:86:4a:13:58:74:a8:46:e4:93:ee:57: dc:0d:7f:88:27:0c:61:72:a3:f9:15:a9:5e:1c:02: ed:25:69:4e:c5:d0:d4:0e:7f:f4:29:ca:ad:8b:e9: a2:d7:a6:c4:7b:45:46:69:39:c7:96:90:f2:14:cd: 67:ed:2f:11:49:83:dd:5f:c2:d2:c7:b1:35:48:5f: 94:c8:9e:7c:0f:1a:3c:fd:cd:52:70:b4:10:5a:04: 28:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:63:D2:4F:D5:BA:E7:74:65:6F:DB:70:48:41:E4:1F:2F:5E:22:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:68:0a:c5:de:ec:31:29:bd:6a:eb:c2:c7:19:ca:28:44:42: b6:23:5d:72:15:8d:86:d9:8c:40:89:58:ca:9a:76:84:b4:1d: 01:62:26:5c:ff:a7:b4:69:00:82:2a:0b:c5:82:6d:87:a9:c9: 7f:f3:62:98:7e:1c:5f:bb:fe:57:52:1c:cc:0c:c7:14:68:82: ce:9f:04:a3:97:de:a2:9b:b7:f7:c0:aa:01:f8:64:25:0c:4f: c1:7b:ec:d9:74:76:e7:69:32:ab:66:40:db:01:76:4c:cf:3a: a7:14:8d:e5:83:79:33:1e:27:b8:80:78:e0:e6:d1:8d:5b:1a: 2e:4c:a7:eb:ee:e7:44:f4:8d:a7:76:43:8b:89:4b:2e:28:29: 39:ea:a7:0c:9f:af:18:c6:34:e8:2d:df:f3:2a:c0:46:75:b2: 35:89:8a:a8:46:62:62:6b:f5:e8:7d:3b:8a:86:f8:6b:63:bb: 01:89:83:56:ae:4b:04:e2:d8:c2:cb:53:b4:3b:ef:04:db:56: 35:56:eb:c6:d3:6e:63:57:02:73:65:4b:31:aa:82:fc:51:70: e8:39:bf:5c:8f:49:63:d2:5b:24:d7:16:76:d8:47:b3:cc:95: d4:c9:d0:0e:9d:d5:0c:c7:27:cf:cf:6b:56:0a:f3:73:a6:11: 46:aa:b4:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5X9IMpy1u+sOFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YWY0ZmZmMzItZTI1Ny00MDkxLTkwZTMtNDUxODNlNjFmNDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliTwVQIyQozEyK4r0GaDRoi3lAHST34h3c5k SFgXL28ZMXyRWoMEgcwmrQPFTgj2BtBZamTgWPMaqAjeFND+Wf2Ibi1eqwaLWXD3 EiKu5E75gz9BUO+Qya7bVsLT112Gd0+7x0QWZ0SgNy3ORxF5zV7cbE9Rmbs3VB7M jpxenMRfpgqaiFY+V425pGyWfMq5BxUEB8rvpDhwaZYpZLVTEEfOnQOnEVR8hkoT WHSoRuST7lfcDX+IJwxhcqP5FaleHALtJWlOxdDUDn/0Kcqti+mi16bEe0VGaTnH lpDyFM1n7S8RSYPdX8LSx7E1SF+UyJ58Dxo8/c1ScLQQWgQozQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtj0k/Vuud0ZW/bcEhB5B8vXiLeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMzk0OWY5ZTItOWNiNC0z ZjdlLTk0NDEtOTgwMzMwZjdiZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARoCsXe7DEpvWrrwscZyihEQrYjXXIVjYbZjECJWMqadoS0HQFiJlz/ p7RpAIIqC8WCbYepyX/zYph+HF+7/ldSHMwMxxRogs6fBKOX3qKbt/fAqgH4ZCUM T8F77Nl0dudpMqtmQNsBdkzPOqcUjeWDeTMeJ7iAeODm0Y1bGi5Mp+vu50T0jad2 Q4uJSy4oKTnqpwyfrxjGNOgt3/MqwEZ1sjWJiqhGYmJr9eh9O4qG+GtjuwGJg1au SwTi2MLLU7Q77wTbVjVW68bTbmNXAnNlSzGqgvxRcOg5v1yPSWPSWyTXFnbYR7PM ldTJ0A6d1QzHJ8/Pa1YK83OmEUaqtF8= -----END CERTIFICATE-----Generated at Sun Oct 4 00:14:00 2026 by rpki-client