$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa File: 5c304d34-8950-35d5-acec-d2d13773b41a.roa (raw, json) Hash identifier: tvKmdfZK7idUdD781xq5hgM2xiRxtMD+NJULIZKExA4= Subject key identifier: A3:28:A6:94:24:2E:0F:F6:41:8F:5B:BE:C5:4D:E1:A1:5A:D3:29:81 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584E97B50475FE073D270029CA80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa Signing time: Thu 23 Jul 2026 09:00:11 +0000 ROA not before: Thu 23 Jul 2026 09:00:11 +0000 ROA not after: Wed 21 Oct 2026 09:00:11 +0000 asID: 16509 IP address blocks: 216.157.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:97:b5:04:75:fe:07:3d:27:00:29:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jul 23 09:00:11 2026 GMT Not After : Oct 21 09:00:11 2026 GMT Subject: CN=c8b0fb52-9748-4bab-9f5c-b9b5c07aae94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0b:e3:7e:9e:32:1a:c4:65:56:52:d0:15:1c: 33:72:b5:60:f6:d0:28:b5:c4:72:29:d7:de:88:54: 46:5e:e9:f4:1f:c4:98:be:d0:e1:08:ff:85:a7:e1: e0:fa:b9:65:b8:20:02:e2:50:53:19:86:5c:5a:eb: 7a:7d:00:dc:6e:4d:21:be:5e:0c:f7:27:3b:0b:2b: 3b:8d:28:61:fc:bb:36:eb:30:25:64:cc:57:92:36: e6:42:8e:4c:6e:92:b8:23:dd:9e:18:e5:da:69:fa: 09:83:e0:4d:f6:68:01:d2:40:3a:72:d5:ea:ee:3b: 82:9f:3b:77:bd:70:30:4d:a0:58:11:93:89:b2:50: 9a:c4:a5:18:96:1f:ae:8d:1d:97:de:9b:1a:c7:3e: a0:30:c1:a0:ef:50:e3:73:7a:bb:cd:bc:19:0d:03: bd:1a:c4:e6:56:ae:ef:39:40:7c:5c:cd:36:0c:62: ec:2d:15:84:60:f7:59:88:eb:11:46:8e:14:9c:fc: 42:ef:51:43:d1:55:cc:ba:ce:11:2f:3f:ff:4a:fe: 8b:18:53:14:43:c2:fb:da:e6:10:a9:0c:2b:50:37: fd:f0:92:9d:f0:50:e2:25:1e:c9:e3:92:06:b0:3c: 43:1e:c9:57:81:ef:9c:89:22:23:93:f5:74:4d:05: 1a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:28:A6:94:24:2E:0F:F6:41:8F:5B:BE:C5:4D:E1:A1:5A:D3:29:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:12:ff:a4:5e:d8:c4:95:11:4f:14:fa:61:d4:1c:2c:62:a6: 19:f7:b9:84:22:01:48:fd:62:20:3c:dd:42:43:e3:04:55:39: f7:8d:32:9b:d5:02:f5:0e:73:ac:25:a1:05:31:88:48:7c:5a: d7:3c:b2:a3:6c:46:50:14:27:d8:3b:a6:85:43:bc:83:ca:ef: 8f:05:c1:73:59:f8:b9:8a:4f:12:fb:26:6e:fc:b5:f0:f4:13: be:40:cc:16:2b:3d:7b:1d:22:df:53:f1:09:b4:c9:31:99:8f: 31:c3:8a:b4:a7:96:7b:55:10:42:5a:50:b9:c1:cc:17:85:3f: 56:12:a5:ca:b4:95:25:6a:d7:36:74:b3:be:46:76:0a:f6:27: 17:8d:02:c1:25:7b:d8:8a:67:23:e4:c8:03:a3:2e:89:26:b0: 58:8d:88:82:a4:74:29:21:83:c8:46:30:53:f4:c8:d5:87:a2: 2e:85:d7:06:e1:f7:0b:d5:e5:3d:96:b1:f7:e0:4f:ea:94:36: e8:67:64:3f:b2:35:bc:82:e6:cc:9c:6d:56:56:9b:9b:eb:e5: c5:27:7f:32:a0:f9:12:fc:0c:c3:43:14:65:19:92:bb:7e:8c: 7e:64:4e:23:6a:02:4c:87:ca:bb:5b:0f:33:f4:65:38:c1:b9: 18:84:2e:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6XtQR1/gc9JwApyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDcyMzA5MDAxMVoXDTI2MTAyMTA5MDAxMVowLzEtMCsGA1UEAxMk YzhiMGZiNTItOTc0OC00YmFiLTlmNWMtYjliNWMwN2FhZTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Avjfp4yGsRlVlLQFRwzcrVg9tAotcRyKdfe iFRGXun0H8SYvtDhCP+Fp+Hg+rlluCAC4lBTGYZcWut6fQDcbk0hvl4M9yc7Cys7 jShh/Ls26zAlZMxXkjbmQo5MbpK4I92eGOXaafoJg+BN9mgB0kA6ctXq7juCnzt3 vXAwTaBYEZOJslCaxKUYlh+ujR2X3psaxz6gMMGg71Djc3q7zbwZDQO9GsTmVq7v OUB8XM02DGLsLRWEYPdZiOsRRo4UnPxC71FD0VXMus4RLz//Sv6LGFMUQ8L72uYQ qQwrUDf98JKd8FDiJR7J45IGsDxDHslXge+ciSIjk/V0TQUamQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMoppQkLg/2QY9bvsVN4aFa0ymBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNWMzMDRkMzQtODk1MC0z NWQ1LWFjZWMtZDJkMTM3NzNiNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQS/6Re2MSVEU8U+mHUHCxiphn3uYQiAUj9YiA83UJD4wRVOfeNMpvV AvUOc6wloQUxiEh8Wtc8sqNsRlAUJ9g7poVDvIPK748FwXNZ+LmKTxL7Jm78tfD0 E75AzBYrPXsdIt9T8Qm0yTGZjzHDirSnlntVEEJaULnBzBeFP1YSpcq0lSVq1zZ0 s75Gdgr2JxeNAsEle9iKZyPkyAOjLokmsFiNiIKkdCkhg8hGMFP0yNWHoi6F1wbh 9wvV5T2WsffgT+qUNuhnZD+yNbyC5sycbVZWm5vr5cUnfzKg+RL8DMNDFGUZkrt+ jH5kTiNqAkyHyrtbDzP0ZTjBuRiELkY= -----END CERTIFICATE-----Generated at Fri Jul 24 11:53:25 2026 by rpki-client