$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa File: 4e23e5df-ddab-3213-b067-9016783a3f0a.roa (raw, json) Hash identifier: Iewx4LdQ//Z+wWXaY1LgxnPM0L5aTkVv3ES2NCD1AKc= Subject key identifier: 50:64:8B:5F:A2:5C:FA:18:AB:5B:10:92:4D:8D:EC:8D:BA:D4:F2:CF Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D91C008908CDFAB8F1FC7A800 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 16509 IP address blocks: 216.157.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:08:90:8c:df:ab:8f:1f:c7:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=7c1ac193-d527-416a-8be9-b8ea933250b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:b7:09:02:f7:dc:b7:d1:3d:fb:9b:de:2f: 6c:7f:e0:d9:da:54:a4:2c:8a:83:b9:79:9a:84:48: 95:45:2f:35:7c:1b:7d:0a:1c:08:ef:59:f9:ae:3b: c3:af:08:c7:32:c3:b7:36:5f:b6:01:3c:8d:55:19: 74:53:96:b9:fc:3d:ac:b7:7a:fd:37:a8:fa:ce:0b: 4f:38:d6:d9:3a:03:bb:05:75:cf:e9:1d:61:de:56: 57:a3:b9:d5:2d:bf:08:1c:42:58:f7:eb:a8:22:e1: 49:3a:ee:e4:12:45:bd:7b:45:44:d4:87:22:64:d2: c4:74:85:fa:ba:b6:5b:83:5c:0e:cd:19:b6:ba:2f: 39:63:77:c4:26:6a:36:61:e5:b7:f4:44:d7:25:a0: 4e:6f:83:98:47:61:56:2f:a3:72:74:11:d2:0e:85: cf:d7:49:07:1b:fa:9f:0c:45:26:87:4b:ea:a4:df: 27:fe:95:ab:2a:d3:91:51:0e:f5:54:bf:17:20:4c: 8c:a5:83:17:9e:2e:a3:bd:2e:03:c1:6c:bf:ae:5b: 50:ce:b7:e4:65:4b:db:65:40:47:fc:a0:27:43:17: 4e:64:27:d3:7f:bd:2f:fc:b2:73:61:63:7d:5b:fe: 4b:3e:0c:e7:46:cd:0f:94:49:a3:35:b9:1b:0c:e9: 3e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:64:8B:5F:A2:5C:FA:18:AB:5B:10:92:4D:8D:EC:8D:BA:D4:F2:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:51:7a:31:38:0d:da:f1:9a:6a:2a:83:71:1c:b3:9e:8d:d2: fc:03:81:7d:37:9a:fc:58:70:07:33:e5:95:1d:65:f8:62:26: 49:2c:47:a3:f9:b3:71:4c:bd:7a:69:18:35:a6:16:2b:3b:38: f7:23:49:bb:e6:6d:e8:84:09:07:63:1a:7d:fa:1d:28:68:ab: 17:3c:fb:de:90:dc:7b:7b:1e:16:ff:b4:00:5a:19:ea:64:e9: 84:2c:8d:08:1f:f2:b0:f5:7f:4b:08:58:15:b4:13:7b:80:c3: c2:0d:9f:4d:9f:ee:f2:f2:4a:51:6f:78:cb:40:3f:41:70:17: 51:95:17:e2:87:61:46:99:3f:a5:d8:26:fc:fb:e1:82:52:71: 17:81:56:f1:06:6c:85:b3:1c:e2:4d:ac:63:5a:dd:28:27:f4: a4:49:24:91:e7:7a:cc:af:02:70:46:3f:3b:f5:e3:e3:b5:ef: 6d:8d:8d:61:7f:8f:8a:4e:50:86:ed:74:e9:27:44:b4:c1:43: 97:fc:30:54:d4:c3:cf:3f:8a:7d:69:ea:43:99:67:99:6b:76: 95:2b:b7:2a:72:e7:b5:76:28:39:9c:ae:1d:16:2b:50:11:6e: 18:a7:a6:fa:ea:df:5f:09:5b:24:63:a6:d8:8d:7b:8a:d8:c8: 7a:3e:da:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAiQjN+rjx/HqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk N2MxYWMxOTMtZDUyNy00MTZhLThiZTktYjhlYTkzMzI1MGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4u3CQL33LfRPfub3i9sf+DZ2lSkLIqDuXma hEiVRS81fBt9ChwI71n5rjvDrwjHMsO3Nl+2ATyNVRl0U5a5/D2st3r9N6j6zgtP ONbZOgO7BXXP6R1h3lZXo7nVLb8IHEJY9+uoIuFJOu7kEkW9e0VE1IciZNLEdIX6 urZbg1wOzRm2ui85Y3fEJmo2YeW39ETXJaBOb4OYR2FWL6NydBHSDoXP10kHG/qf DEUmh0vqpN8n/pWrKtORUQ71VL8XIEyMpYMXni6jvS4DwWy/rltQzrfkZUvbZUBH /KAnQxdOZCfTf70v/LJzYWN9W/5LPgznRs0PlEmjNbkbDOk+LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFBki1+iXPoYq1sQkk2N7I261PLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNGUyM2U1ZGYtZGRhYi0z MjEzLWIwNjctOTAxNjc4M2EzZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVRejE4Ddrxmmoqg3Ecs56N0vwDgX03mvxYcAcz5ZUdZfhiJkksR6P5 s3FMvXppGDWmFis7OPcjSbvmbeiECQdjGn36HShoqxc8+96Q3Ht7Hhb/tABaGepk 6YQsjQgf8rD1f0sIWBW0E3uAw8INn02f7vLySlFveMtAP0FwF1GVF+KHYUaZP6XY Jvz74YJScReBVvEGbIWzHOJNrGNa3Sgn9KRJJJHnesyvAnBGPzv14+O1722NjWF/ j4pOUIbtdOknRLTBQ5f8MFTUw88/in1p6kOZZ5lrdpUrtypy57V2KDmcrh0WK1AR bhinpvrq318JWyRjptiNe4rYyHo+2pw= -----END CERTIFICATE-----Generated at Wed May 13 13:14:53 2026 by rpki-client