$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa File: 4e23e5df-ddab-3213-b067-9016783a3f0a.roa (raw, json) Hash identifier: 4xSshm6C/NPiy7m1sg1wup4IEfzGG+O3KzqtMENTgjw= Subject key identifier: 78:1E:0F:78:B2:25:51:B6:BF:52:32:AA:4D:2F:DF:AA:9F:89:53:ED Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AF0F139F209231D459BA1F440 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 216.157.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:39:f2:09:23:1d:45:9b:a1:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=0797fbca-d87d-4ef4-aaeb-9fee46de8bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f7:d1:48:89:ed:7c:e4:c3:92:d5:fc:e9:88: 14:a1:e7:8f:e3:f6:00:26:47:aa:57:ff:6a:75:e4: bd:8d:fa:f2:48:a8:f7:51:6b:d7:d0:14:71:fa:f1: 02:bd:0e:d6:4c:02:3a:d0:1d:32:b5:72:3b:50:86: 4e:34:4d:2b:89:da:77:52:43:4b:8e:8d:a3:c7:c9: 0e:82:43:0b:03:e5:52:5d:33:cf:02:16:47:4b:a3: 9d:99:53:4f:f2:71:b5:16:ca:60:48:67:6a:ba:9d: 5a:38:8d:52:2b:c2:5c:06:fa:4d:5a:c8:a6:82:82: 34:bd:f7:92:0a:8d:76:bb:c5:65:88:e1:d5:4a:3e: 77:24:37:ba:08:ea:f8:67:32:6c:ae:e8:4b:d5:47: 95:52:1a:8c:be:4e:e4:ec:b4:0e:77:9b:89:eb:c5: 1b:28:b7:c4:32:82:5d:0f:12:db:d9:da:de:55:ec: b6:72:77:1b:c7:86:7d:69:df:32:c4:4d:6f:49:c3: c6:a5:5e:d8:a6:f8:c1:35:95:26:8d:66:eb:81:ba: 21:53:db:92:57:15:4b:62:1e:b1:dd:4d:d4:61:dd: 91:59:5f:62:78:21:73:43:26:fb:43:00:e5:4b:f7: 87:fd:6a:50:da:f5:fb:10:9b:cc:5c:9e:af:e4:3a: 84:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1E:0F:78:B2:25:51:B6:BF:52:32:AA:4D:2F:DF:AA:9F:89:53:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:19:8f:cc:ff:62:e1:92:62:38:71:a0:af:71:1e:d8:56:45: 6b:7d:ed:fa:b0:08:b8:73:2f:22:84:4c:7e:92:60:ce:b1:8f: cd:02:48:4f:b0:9e:f1:bc:13:93:1e:34:cf:45:d6:2d:e4:93: a0:a1:51:92:12:ee:8d:f9:d7:22:5d:95:0f:b3:da:cf:ad:6f: be:4c:97:19:17:22:a7:86:fa:26:75:45:48:ba:d5:67:63:b6: 20:a7:0d:e5:8c:30:56:c9:c8:33:00:ae:04:f3:28:b4:c6:94: 7b:2b:27:7f:ab:c6:65:01:fe:ae:98:93:ad:27:c3:dc:d1:e9: a4:51:90:9d:a2:16:24:d1:2e:41:73:4b:e3:b3:37:b8:be:fa: 18:03:96:99:b1:1f:ba:3e:1b:e7:95:df:67:30:46:03:5c:a4: 0a:68:7f:d9:7d:47:45:80:19:94:6e:a2:71:c9:c0:63:c3:29: f1:bc:8d:03:43:c1:07:b6:57:26:dd:6d:9b:5b:78:47:02:a2: 57:82:be:36:fe:4c:6b:52:00:56:65:60:01:31:61:75:9f:b0: 82:2b:31:86:de:1d:08:77:0a:ab:02:8a:c1:63:1c:36:e6:90: d2:59:c4:22:78:7b:24:67:38:e7:90:62:4d:19:86:bd:f3:fc: 29:34:16:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TnyCSMdRZuh9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk MDc5N2ZiY2EtZDg3ZC00ZWY0LWFhZWItOWZlZTQ2ZGU4YmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vfRSIntfOTDktX86YgUoeeP4/YAJkeqV/9q deS9jfrySKj3UWvX0BRx+vECvQ7WTAI60B0ytXI7UIZONE0ridp3UkNLjo2jx8kO gkMLA+VSXTPPAhZHS6OdmVNP8nG1FspgSGdqup1aOI1SK8JcBvpNWsimgoI0vfeS Co12u8VliOHVSj53JDe6COr4ZzJsruhL1UeVUhqMvk7k7LQOd5uJ68UbKLfEMoJd DxLb2dreVey2cncbx4Z9ad8yxE1vScPGpV7YpvjBNZUmjWbrgbohU9uSVxVLYh6x 3U3UYd2RWV9ieCFzQyb7QwDlS/eH/WpQ2vX7EJvMXJ6v5DqE7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgeD3iyJVG2v1Iyqk0v36qfiVPtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNGUyM2U1ZGYtZGRhYi0z MjEzLWIwNjctOTAxNjc4M2EzZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgZj8z/YuGSYjhxoK9xHthWRWt97fqwCLhzLyKETH6SYM6xj80CSE+w nvG8E5MeNM9F1i3kk6ChUZIS7o351yJdlQ+z2s+tb75MlxkXIqeG+iZ1RUi61Wdj tiCnDeWMMFbJyDMArgTzKLTGlHsrJ3+rxmUB/q6Yk60nw9zR6aRRkJ2iFiTRLkFz S+OzN7i++hgDlpmxH7o+G+eV32cwRgNcpApof9l9R0WAGZRuonHJwGPDKfG8jQND wQe2VybdbZtbeEcColeCvjb+TGtSAFZlYAExYXWfsIIrMYbeHQh3CqsCisFjHDbm kNJZxCJ4eyRnOOeQYk0Zhr3z/Ck0FkU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:19:07 2025 by rpki-client