$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5863efda-fb1f-333c-9e74-1e8e0363fbe8.roa File: 5863efda-fb1f-333c-9e74-1e8e0363fbe8.roa (raw, json) Hash identifier: rvLP3yjgxoNm8sSNrft57UA/CoL8oTQL0IwiA93FN1g= Subject key identifier: F9:D5:D0:A1:22:F7:1F:9B:60:99:77:A1:01:8A:C7:80:4E:2E:5E:55 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AF256781FE666A61212A97780 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5863efda-fb1f-333c-9e74-1e8e0363fbe8.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 16509 IP address blocks: 158.115.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:78:1f:e6:66:a6:12:12:a9:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=078c3968-5631-418a-9ca1-e56f53ac5b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:34:7e:55:e3:87:a4:da:79:89:23:ed:03:a8: 44:76:1a:9e:ee:c0:22:97:9d:77:30:c3:ea:66:4d: e0:16:23:c5:a7:c1:92:46:55:f5:43:92:e0:00:22: 4d:1b:29:1c:23:2a:da:04:92:b8:cf:53:50:52:91: ee:dc:46:98:00:39:e1:2e:80:f7:0d:82:d1:c8:7b: f7:73:35:1f:4b:95:b3:00:8c:46:8e:ae:ad:19:92: 71:89:25:44:aa:4c:a0:7e:d1:6a:21:e7:39:6a:72: f0:c9:9b:16:31:b4:df:78:a1:21:04:7d:71:06:2e: 48:fc:66:db:76:d2:b3:ed:4c:50:d3:de:8c:2c:ae: 27:b7:f2:25:2d:92:f7:3d:e3:58:ff:da:bb:a3:d2: 9c:dd:4a:95:c4:2e:b5:4b:bc:bc:78:b5:34:ca:cf: 9c:4f:26:31:cd:cb:19:a8:c7:9d:49:ab:54:eb:29: 8c:22:0e:b9:a0:6e:85:be:8c:d2:aa:46:8c:b2:35: 2a:81:63:3e:59:e2:d1:8b:11:ad:4e:62:a9:5c:b6: 51:ec:87:96:1b:8a:c7:bc:43:e5:17:f2:f9:c3:fd: e0:1e:8c:d9:5f:2c:f6:59:0c:b3:33:dc:d1:d2:48: 03:0e:66:f1:27:50:e6:89:3a:15:a6:df:69:f5:f7: 8c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D5:D0:A1:22:F7:1F:9B:60:99:77:A1:01:8A:C7:80:4E:2E:5E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5863efda-fb1f-333c-9e74-1e8e0363fbe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1f:7a:44:55:62:77:85:de:f2:0a:3c:16:12:29:62:eb:a7: b3:e2:c6:8e:1e:1d:ec:dc:e6:2a:6c:56:34:f5:6e:55:3e:4b: 71:cc:0c:0b:87:4b:b0:d9:5f:1f:10:d3:41:ae:c4:8d:e1:03: e2:5e:03:d0:07:bf:15:9f:b2:eb:d5:70:b3:29:26:ba:81:1e: 47:25:fe:bb:a6:c0:fa:79:99:74:46:2f:f6:1c:e9:e6:06:65: e3:76:37:37:6a:72:37:ac:e3:05:f6:b3:d4:97:ec:bf:08:71: 25:6c:46:36:03:8b:36:9c:68:a5:cc:ae:e1:48:fa:f4:de:2e: 7a:e8:63:6a:38:85:ce:d5:4f:18:d8:57:fb:ca:32:f3:d2:f5: f0:49:54:c1:0f:6f:d5:45:a2:8c:c0:3e:9d:eb:d9:c3:49:15: 2a:37:61:0e:e3:6a:db:00:c9:30:2b:26:c0:82:e4:38:3f:dc: 74:ca:eb:27:db:e6:43:f7:db:4d:07:fa:a7:e8:15:80:07:fb: 62:74:11:10:6a:db:56:f6:37:70:03:78:89:01:6b:9c:21:36: c3:ff:ad:8f:45:88:d8:2b:33:d1:de:9c:df:8d:c9:fe:62:5e: 1c:47:25:b8:02:96:04:1b:12:f1:25:e2:f8:46:10:43:de:21: cb:5e:94:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVngf5mamEhKpd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MDc4YzM5NjgtNTYzMS00MThhLTljYTEtZTU2ZjUzYWM1YjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjR+VeOHpNp5iSPtA6hEdhqe7sAil513MMPq Zk3gFiPFp8GSRlX1Q5LgACJNGykcIyraBJK4z1NQUpHu3EaYADnhLoD3DYLRyHv3 czUfS5WzAIxGjq6tGZJxiSVEqkygftFqIec5anLwyZsWMbTfeKEhBH1xBi5I/Gbb dtKz7UxQ096MLK4nt/IlLZL3PeNY/9q7o9Kc3UqVxC61S7y8eLU0ys+cTyYxzcsZ qMedSatU6ymMIg65oG6FvozSqkaMsjUqgWM+WeLRixGtTmKpXLZR7IeWG4rHvEPl F/L5w/3gHozZXyz2WQyzM9zR0kgDDmbxJ1DmiToVpt9p9feM1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnV0KEi9x+bYJl3oQGKx4BOLl5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNTg2M2VmZGEtZmIxZi0z MzNjLTllNzQtMWU4ZTAzNjNmYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8fekRVYneF3vIKPBYSKWLrp7Pixo4eHezc5ipsVjT1blU+S3HMDAuH S7DZXx8Q00GuxI3hA+JeA9AHvxWfsuvVcLMpJrqBHkcl/rumwPp5mXRGL/Yc6eYG ZeN2Nzdqcjes4wX2s9SX7L8IcSVsRjYDizacaKXMruFI+vTeLnroY2o4hc7VTxjY V/vKMvPS9fBJVMEPb9VFoozAPp3r2cNJFSo3YQ7jatsAyTArJsCC5Dg/3HTK6yfb 5kP3200H+qfoFYAH+2J0ERBq21b2N3ADeIkBa5whNsP/rY9FiNgrM9HenN+Nyf5i XhxHJbgClgQbEvEl4vhGEEPeIctelBI= -----END CERTIFICATE-----Generated at Sat Aug 23 08:21:30 2025 by rpki-client