$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/40e00cd1-a5cb-37b9-8198-def8b617d648.roa File: 40e00cd1-a5cb-37b9-8198-def8b617d648.roa (raw, json) Hash identifier: rN9bjImUj/fI3wNvLKzEXUCRmE6CUSxzoLbz5DRU16w= Subject key identifier: AD:04:72:54:89:5E:4D:EF:7F:77:7B:D4:F6:FA:36:E3:E8:39:0D:5E Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584E96A6388A45DD5FA0F9A47540 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/40e00cd1-a5cb-37b9-8198-def8b617d648.roa Signing time: Wed 22 Jul 2026 23:54:41 +0000 ROA not before: Wed 22 Jul 2026 23:54:41 +0000 ROA not after: Tue 20 Oct 2026 23:54:41 +0000 asID: 395831 IP address blocks: 158.115.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:96:a6:38:8a:45:dd:5f:a0:f9:a4:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jul 22 23:54:41 2026 GMT Not After : Oct 20 23:54:41 2026 GMT Subject: CN=032a1dfc-5672-4329-9f9d-beed38ea2f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:6e:e5:46:dc:8e:7a:70:28:4b:c0:f7:12: 66:1c:f8:d3:75:ba:44:b7:7c:93:a0:76:91:b3:77: d0:aa:c5:81:48:7a:8c:1e:22:b8:16:82:f2:15:d4: 82:6f:2a:68:9e:0e:7f:7a:ca:3c:77:4f:eb:71:0d: 48:3e:9b:70:90:2d:c4:50:6e:16:e9:e3:8e:73:4b: 3f:ac:b6:71:0f:b0:8a:84:49:c5:ef:54:86:c0:d2: 56:46:cb:d3:7c:fb:8d:a4:30:61:1f:58:48:52:1a: 9c:58:92:a6:95:8b:7e:cf:fd:5a:44:5a:c9:87:ed: 36:79:a8:74:6c:f6:6b:46:9b:27:89:ed:c2:5d:8f: 2a:f7:57:13:12:2f:5e:69:0d:ee:e1:8b:9a:d7:7f: 29:4e:0c:d2:b6:0d:90:8c:18:c4:e8:5d:ab:c3:6a: 70:18:26:12:84:e0:7b:89:1a:c2:e6:98:9b:ac:a2: 73:1d:d5:a6:c5:34:54:e1:51:1e:6e:0f:9d:89:ab: e8:b4:a4:4b:4f:10:89:74:e2:07:07:c2:95:df:0f: d8:b3:c1:02:77:2d:d8:ac:26:1f:69:2b:5b:0b:24: b9:b1:b3:0f:46:12:23:f8:ab:68:3a:31:4e:ba:be: 27:34:93:fc:38:bc:4e:82:20:fa:da:5e:f8:36:7d: 4a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:04:72:54:89:5E:4D:EF:7F:77:7B:D4:F6:FA:36:E3:E8:39:0D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/40e00cd1-a5cb-37b9-8198-def8b617d648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:6c:35:e7:9d:44:19:3a:50:c9:76:15:74:b7:17:e4:97:8c: eb:1c:54:ac:0d:42:fa:94:36:4b:6b:ab:34:53:dd:b3:4c:08: eb:4c:eb:53:ce:a8:7a:62:fa:e1:0e:aa:37:71:e6:3a:51:64: a2:b0:a9:6e:74:ad:39:83:58:21:4a:04:32:89:5f:c2:91:71: 55:91:f2:44:e5:dd:1a:71:b0:08:0e:9c:42:29:c9:78:4e:bc: df:ef:b0:f4:29:38:58:52:f6:9d:c5:2c:56:51:c4:17:f7:4b: 45:53:9b:bd:44:4a:d0:31:cc:28:12:87:5c:61:16:74:f6:bd: eb:f6:bb:28:f8:c1:4e:66:1b:6c:d0:18:30:50:ef:b0:e8:5b: c9:25:20:a7:b6:a1:01:eb:12:26:db:00:9b:74:39:e9:7a:bf: 3c:ed:24:66:9e:5c:56:e1:dd:5e:2c:58:12:4c:ac:8b:a3:a5: 54:9c:67:a1:51:93:d8:d8:6c:25:8c:72:11:81:61:08:ac:78: 9c:9e:83:3e:be:7e:04:a4:d0:39:5a:de:e3:1f:65:a5:ed:fb: cd:3d:02:69:f0:23:af:c9:5e:b4:53:17:59:af:db:04:20:fa: 82:f1:d4:75:1d:4b:33:86:f2:d7:cf:78:29:4f:7a:5e:c6:6a: cc:14:88:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6WpjiKRd1foPmkdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDcyMjIzNTQ0MVoXDTI2MTAyMDIzNTQ0MVowLzEtMCsGA1UEAxMk MDMyYTFkZmMtNTY3Mi00MzI5LTlmOWQtYmVlZDM4ZWEyZjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+1u5UbcjnpwKEvA9xJmHPjTdbpEt3yToHaR s3fQqsWBSHqMHiK4FoLyFdSCbypong5/eso8d0/rcQ1IPptwkC3EUG4W6eOOc0s/ rLZxD7CKhEnF71SGwNJWRsvTfPuNpDBhH1hIUhqcWJKmlYt+z/1aRFrJh+02eah0 bPZrRpsnie3CXY8q91cTEi9eaQ3u4Yua138pTgzStg2QjBjE6F2rw2pwGCYShOB7 iRrC5pibrKJzHdWmxTRU4VEebg+diavotKRLTxCJdOIHB8KV3w/Ys8ECdy3YrCYf aStbCyS5sbMPRhIj+KtoOjFOur4nNJP8OLxOgiD62l74Nn1KuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0EclSJXk3vf3d71Pb6NuPoOQ1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNDBlMDBjZDEtYTVjYi0z N2I5LTgxOTgtZGVmOGI2MTdkNjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEBsNeedRBk6UMl2FXS3F+SXjOscVKwNQvqUNktrqzRT3bNMCOtM61PO qHpi+uEOqjdx5jpRZKKwqW50rTmDWCFKBDKJX8KRcVWR8kTl3RpxsAgOnEIpyXhO vN/vsPQpOFhS9p3FLFZRxBf3S0VTm71EStAxzCgSh1xhFnT2vev2uyj4wU5mG2zQ GDBQ77DoW8klIKe2oQHrEibbAJt0Oel6vzztJGaeXFbh3V4sWBJMrIujpVScZ6FR k9jYbCWMchGBYQiseJyegz6+fgSk0Dla3uMfZaXt+809AmnwI6/JXrRTF1mv2wQg +oLx1HUdSzOG8tfPeClPel7GaswUiHE= -----END CERTIFICATE-----Generated at Fri Jul 24 11:03:38 2026 by rpki-client