$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa File: 3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa (raw, json) Hash identifier: /qfRNTSAXnKDZkH/xWgMdl/uhFr585Dech9Hgav78yw= Subject key identifier: B3:2C:B5:FB:EE:77:A2:9B:01:42:14:8A:43:E8:F1:BD:27:F0:6A:CE Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D91C005C4FE9EA0D0B45A5F00 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 14618 IP address blocks: 158.115.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:05:c4:fe:9e:a0:d0:b4:5a:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=0227db65-6a64-4e42-8741-133171b3b6cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:06:59:e9:e5:49:53:e9:21:df:44:d0:25:ac: 6e:d9:cb:bb:e3:bf:a2:38:a8:7a:78:4b:8d:86:cc: ae:dc:7e:51:f8:12:2e:46:b3:15:bd:ce:8f:57:24: ff:42:95:66:f0:ca:40:14:16:d8:cb:bc:ca:ec:d5: 5e:d7:25:ac:97:64:47:43:94:cd:f6:55:54:56:77: 2f:ab:f6:d7:e7:bb:ab:a9:ba:76:3b:8e:8f:ff:c3: 60:44:ef:79:24:52:ff:c3:80:db:a0:76:75:f7:ac: cd:44:8d:29:7d:85:55:74:cb:98:9c:7b:5c:0e:5d: cf:83:96:28:85:51:f0:46:2e:4b:16:ee:dc:49:72: 6b:08:d4:23:48:bb:f4:c9:f6:da:2f:4f:b8:23:98: 2c:f2:90:48:aa:e4:e1:32:6e:13:83:c4:b3:e1:33: 6c:9b:17:ac:f1:0f:4f:60:c3:65:8c:4c:b8:a3:ef: a6:9f:0c:8f:62:f1:2f:6c:7b:fd:9d:ae:f9:be:8f: 64:81:6b:51:de:26:ec:66:19:02:ca:59:d3:2f:4e: 8e:6f:59:27:2b:cf:5c:87:6f:72:78:d3:fc:d0:f1: 30:d3:9f:26:64:3f:43:6c:e1:4e:44:13:04:84:e6: 17:49:f3:d1:5f:15:d7:68:d5:3e:8a:dc:92:f3:d6: 39:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:2C:B5:FB:EE:77:A2:9B:01:42:14:8A:43:E8:F1:BD:27:F0:6A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:15:6a:a2:73:c6:0b:19:68:f3:e8:e9:9c:22:4e:56:f4:cb: ee:b8:c2:b5:91:e4:f6:c7:f7:a5:7c:91:79:ac:18:52:f0:d8: 2c:5c:94:1c:38:28:a0:ce:d6:fd:fe:8b:38:4f:f8:15:b7:7f: 9c:48:32:f2:c4:4f:a4:e9:0d:ec:db:53:af:5c:41:4d:2f:bc: 48:01:10:6f:e4:b8:03:f4:d3:37:b4:40:c0:b2:4f:70:42:b1: 81:ca:7b:8d:7c:26:d9:29:ca:d3:0c:94:06:06:54:65:c8:a4: 3d:bf:28:5f:4d:7d:03:ae:55:30:1a:07:fe:df:0a:c1:73:f8: f5:2f:a7:a7:ce:13:79:8b:71:72:06:00:71:6c:2b:f0:a8:cd: 13:52:94:8a:08:13:88:82:6b:c0:9c:bc:a6:b2:58:4e:da:e0: 8d:e1:5a:e1:ca:73:03:ac:f0:ec:d0:e2:44:0a:85:d6:16:82: 70:9b:04:41:66:ba:7e:95:2b:53:e5:dc:50:e7:96:8a:24:34: e9:d0:40:48:39:8f:07:52:b9:de:71:04:24:5e:61:b3:df:9e: 9a:c4:65:5c:49:05:c5:62:38:8d:a5:c0:4f:44:47:67:1a:8f: f0:78:b1:f2:f9:7a:44:9e:f0:0a:43:18:57:dd:f9:da:27:ab: 53:31:5b:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAXE/p6g0LRaXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MDIyN2RiNjUtNmE2NC00ZTQyLTg3NDEtMTMzMTcxYjNiNmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQZZ6eVJU+kh30TQJaxu2cu747+iOKh6eEuN hsyu3H5R+BIuRrMVvc6PVyT/QpVm8MpAFBbYy7zK7NVe1yWsl2RHQ5TN9lVUVncv q/bX57urqbp2O46P/8NgRO95JFL/w4DboHZ196zNRI0pfYVVdMuYnHtcDl3Pg5Yo hVHwRi5LFu7cSXJrCNQjSLv0yfbaL0+4I5gs8pBIquThMm4Tg8Sz4TNsmxes8Q9P YMNljEy4o++mnwyPYvEvbHv9na75vo9kgWtR3ibsZhkCylnTL06Ob1knK89ch29y eNP80PEw058mZD9DbOFORBMEhOYXSfPRXxXXaNU+ityS89Y54QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMstfvud6KbAUIUikPo8b0n8GrOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMzk0OWY5ZTItOWNiNC0z ZjdlLTk0NDEtOTgwMzMwZjdiZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIVaqJzxgsZaPPo6ZwiTlb0y+64wrWR5PbH96V8kXmsGFLw2CxclBw4 KKDO1v3+izhP+BW3f5xIMvLET6TpDezbU69cQU0vvEgBEG/kuAP00ze0QMCyT3BC sYHKe418JtkpytMMlAYGVGXIpD2/KF9NfQOuVTAaB/7fCsFz+PUvp6fOE3mLcXIG AHFsK/CozRNSlIoIE4iCa8CcvKayWE7a4I3hWuHKcwOs8OzQ4kQKhdYWgnCbBEFm un6VK1Pl3FDnlookNOnQQEg5jwdSud5xBCReYbPfnprEZVxJBcViOI2lwE9ER2ca j/B4sfL5ekSe8ApDGFfd+donq1MxWzA= -----END CERTIFICATE-----Generated at Wed May 13 10:38:30 2026 by rpki-client