$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa File: 3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa (raw, json) Hash identifier: SvwxcASZFmbbHh8z0aSGAKuVOCw94itiakwn5a0ECjg= Subject key identifier: 62:EE:A7:6E:1A:C8:D0:3F:5C:10:C1:90:52:F4:84:50:26:40:79:AA Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D39CF80F0A4C6A93B2EEE0920 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:80:f0:a4:c6:a9:3b:2e:ee:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=5fdc7209-ec69-47e1-9297-c1e2bfb215a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:31:c5:eb:07:5a:fa:ef:50:9f:cb:9c:79:f8: a8:bf:d0:e3:8f:c4:b2:00:63:77:db:23:69:f1:33: 4e:0c:ce:fd:49:98:ec:2f:02:d7:e1:7a:92:90:a9: da:33:b1:e5:55:8a:bb:28:fc:0b:af:37:a5:5b:bd: a5:ce:f7:99:9c:47:72:a8:87:a9:2f:99:39:e6:8d: 2a:ab:be:33:06:ac:b0:f5:ea:b1:1d:f2:ed:f5:04: eb:9d:bb:37:64:ec:3e:3e:c9:bd:c2:c3:6d:bb:53: 2a:a3:06:2e:03:92:3f:ef:cc:21:8f:14:84:c9:3c: 21:2e:92:78:0e:9c:c8:c1:8e:d1:fa:63:62:fb:f8: 53:09:6b:02:0c:24:04:5c:69:44:f2:d8:7a:ee:e2: 38:0b:48:c7:2c:d2:01:54:e1:78:11:0d:b2:6b:32: a4:47:93:46:eb:fe:76:75:e2:07:f8:5d:73:17:35: bf:3f:f3:74:14:69:16:f0:6f:a8:d2:32:be:2a:8e: 1c:92:a7:d5:21:07:d1:a3:46:81:87:19:45:6f:48: 82:d4:d0:2a:34:07:eb:57:cc:eb:b0:aa:92:da:a4: c8:7b:1a:57:99:eb:ae:88:7f:5a:47:0f:8f:50:9d: 74:9a:5f:ea:1d:d5:50:b5:2c:ce:0e:ce:cf:c4:d3: 10:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EE:A7:6E:1A:C8:D0:3F:5C:10:C1:90:52:F4:84:50:26:40:79:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:8f:ec:4f:19:bb:7b:ea:a1:d4:f7:14:14:75:3b:8d:33:47: 46:15:17:d4:80:51:13:19:a0:ca:df:ac:9d:99:fa:71:14:95: 40:79:42:1a:63:26:fc:56:ea:05:0f:6c:fa:17:ab:f4:50:b7: 10:24:36:54:a9:a3:b4:bc:6d:cb:a0:82:38:ca:d2:72:86:fb: e1:e9:f9:e7:9b:7d:b2:1a:f4:f0:cf:46:89:cd:53:3e:83:88: 8b:b2:08:3c:23:da:86:a7:29:5b:5b:eb:da:19:e7:51:a5:44: 33:85:b4:4e:4e:a3:8a:dc:b2:8c:a7:99:af:d6:f4:76:48:1f: bb:41:78:14:5f:75:0a:51:ca:52:3f:f4:fe:a0:95:64:75:fb: 65:72:c7:aa:65:77:7f:37:ba:aa:39:0f:50:2e:c2:ba:c3:f1: 01:48:d3:3d:7a:e5:5e:11:a9:cb:62:a1:77:0e:2a:0b:cb:79: d7:5c:d0:34:e1:64:98:08:c3:c2:5f:97:b2:53:95:b4:a3:61: f2:c0:c1:be:5d:11:af:58:7d:b9:59:47:ac:98:69:ed:56:f8: 54:f3:d3:8b:35:30:95:bc:8a:57:8e:73:2d:87:4b:87:4a:29: 7c:af:e9:95:9f:92:11:2c:f9:32:42:e8:ff:38:d2:0f:b3:a2: 24:99:50:e7 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE05z4DwpMapOy7uCSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk NWZkYzcyMDktZWM2OS00N2UxLTkyOTctYzFlMmJmYjIxNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDHF6wda+u9Qn8ucefiov9Djj8SyAGN32yNp 8TNODM79SZjsLwLX4XqSkKnaM7HlVYq7KPwLrzelW72lzveZnEdyqIepL5k55o0q q74zBqyw9eqxHfLt9QTrnbs3ZOw+Psm9wsNtu1MqowYuA5I/78whjxSEyTwhLpJ4 DpzIwY7R+mNi+/hTCWsCDCQEXGlE8th67uI4C0jHLNIBVOF4EQ2yazKkR5NG6/52 deIH+F1zFzW/P/N0FGkW8G+o0jK+Ko4ckqfVIQfRo0aBhxlFb0iC1NAqNAfrV8zr sKqS2qTIexpXmeuuiH9aRw+PUJ10ml/qHdVQtSzODs7PxNMQdwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGLup24ayNA/XBDBkFL0hFAmQHmqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvM2E0ZTBhMTgtZDBmOC0z YmU2LTg5NTMtNWZkODI2M2ZkMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAH4/sTxm7e+qh1PcUFHU7jTNHRhUX1IBR Exmgyt+snZn6cRSVQHlCGmMm/FbqBQ9s+her9FC3ECQ2VKmjtLxty6CCOMrScob7 4en555t9shr08M9Gic1TPoOIi7IIPCPahqcpW1vr2hnnUaVEM4W0Tk6jityyjKeZ r9b0dkgfu0F4FF91ClHKUj/0/qCVZHX7ZXLHqmV3fze6qjkPUC7CusPxAUjTPXrl XhGpy2Khdw4qC8t511zQNOFkmAjDwl+XslOVtKNh8sDBvl0Rr1h9uVlHrJhp7Vb4 VPPTizUwlbyKV45zLYdLh0opfK/plZ+SESz5MkLo/zjSD7OiJJlQ5w== -----END CERTIFICATE-----Generated at Thu Mar 26 12:47:40 2026 by rpki-client