$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa File: 5c304d34-8950-35d5-acec-d2d13773b41a.roa (raw, json) Hash identifier: KX7W/UnK6u/UvYdSVr/Q600fME8YBGss9O6eov8Uxxk= Subject key identifier: DD:67:70:72:9D:88:6B:99:1A:56:95:CA:FE:98:0F:E9:2C:10:E5:2F Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584DB7703128BC7FCFBCA0B41DA0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa Signing time: Mon 04 May 2026 01:00:25 +0000 ROA not before: Mon 04 May 2026 01:00:25 +0000 ROA not after: Sun 02 Aug 2026 01:00:25 +0000 asID: 16509 IP address blocks: 216.157.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:b7:70:31:28:bc:7f:cf:bc:a0:b4:1d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: May 4 01:00:25 2026 GMT Not After : Aug 2 01:00:25 2026 GMT Subject: CN=34167835-0c70-4c9d-abf1-d33e9c4e0da8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:0f:a0:d5:e4:20:23:93:3a:6d:2b:18:55: f5:b6:c2:51:09:18:27:13:6c:02:bf:c0:48:ea:0c: 29:94:46:40:c9:1e:68:1b:0a:b6:96:6d:64:90:e9: a9:e9:42:ea:08:14:f2:e1:11:21:7f:f3:d6:ad:1e: 9d:83:fa:3d:05:44:09:c8:65:20:ae:a3:49:1e:8b: 8a:04:3a:a1:71:d1:de:9d:4f:43:a5:d4:1b:b7:9f: 7a:1c:a6:dd:34:5a:12:f8:d7:e7:7e:6c:b3:03:33: 58:19:da:1f:4b:96:c0:7d:df:70:99:c0:a6:6e:94: 42:70:ee:63:5a:8f:97:e9:ef:c9:a3:7c:28:57:31: c3:cb:84:83:d3:30:b9:92:ec:a1:c0:0c:8d:e8:59: 84:c7:8c:6b:13:74:b2:c3:71:19:e2:ab:59:49:6e: c4:1e:8f:2f:56:2f:2c:1e:42:08:30:7a:c3:09:cd: de:4e:b4:ee:b8:d4:25:13:63:d9:b9:b2:ce:45:3a: c0:19:e8:79:f0:78:d4:d0:57:d2:46:17:71:f1:13: 45:89:58:23:55:9d:cd:e6:6d:ba:13:aa:a9:54:d7: 63:e5:8c:76:34:56:7f:aa:e0:15:53:09:98:61:7c: 51:de:5d:59:ef:69:1e:a8:89:62:d5:29:db:24:c7: 0c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:67:70:72:9D:88:6B:99:1A:56:95:CA:FE:98:0F:E9:2C:10:E5:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ac:a7:f7:fb:a1:52:39:59:d6:c6:55:4c:96:8a:67:2a:f1: 7d:ba:e8:62:70:52:71:9d:c6:ac:2b:d7:30:aa:71:76:a6:ab: c3:1c:23:94:51:61:78:e0:5a:13:0e:f1:f8:5f:bc:2e:29:35: 17:34:40:26:05:fc:1f:d2:9b:d0:ce:df:f7:20:c3:65:9c:8e: d4:61:e2:99:7a:2c:4f:96:91:61:44:18:aa:db:95:d6:29:2f: 38:10:f6:07:e0:12:5e:89:4f:3f:75:2c:06:30:74:a9:48:bd: af:fe:31:1e:3b:f4:0b:d0:c4:4d:15:30:3a:0a:1d:c8:79:21: ff:cf:8e:86:d3:25:a4:17:d1:33:b2:c5:a7:38:25:fc:29:5e: 85:a1:18:31:da:65:75:cc:2c:97:ef:83:2a:0a:0f:7d:74:83: 7f:0f:95:25:5f:e8:11:c0:d0:92:83:f4:37:81:9d:9b:b0:ae: 9e:9b:de:cd:b5:f4:66:b7:e6:53:e0:6e:39:ee:7d:b1:fe:e6: c5:6d:56:bd:01:56:a9:c5:88:df:b7:bb:1c:d0:0a:42:e9:d9: ee:12:89:04:15:d4:39:d8:d6:5e:53:a1:d0:81:c8:53:a0:e9: 0a:d4:56:d2:7c:e8:e0:ba:8b:f1:45:98:71:f3:26:94:80:b8: 2d:7e:67:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE23cDEovH/PvKC0HaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDUwNDAxMDAyNVoXDTI2MDgwMjAxMDAyNVowLzEtMCsGA1UEAxMk MzQxNjc4MzUtMGM3MC00YzlkLWFiZjEtZDMzZTljNGUwZGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPQPoNXkICOTOm0rGFX1tsJRCRgnE2wCv8BI 6gwplEZAyR5oGwq2lm1kkOmp6ULqCBTy4REhf/PWrR6dg/o9BUQJyGUgrqNJHouK BDqhcdHenU9DpdQbt596HKbdNFoS+NfnfmyzAzNYGdofS5bAfd9wmcCmbpRCcO5j Wo+X6e/Jo3woVzHDy4SD0zC5kuyhwAyN6FmEx4xrE3Syw3EZ4qtZSW7EHo8vVi8s HkIIMHrDCc3eTrTuuNQlE2PZubLORTrAGeh58HjU0FfSRhdx8RNFiVgjVZ3N5m26 E6qpVNdj5Yx2NFZ/quAVUwmYYXxR3l1Z72keqIli1SnbJMcMZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1ncHKdiGuZGlaVyv6YD+ksEOUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNWMzMDRkMzQtODk1MC0z NWQ1LWFjZWMtZDJkMTM3NzNiNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGsp/f7oVI5WdbGVUyWimcq8X266GJwUnGdxqwr1zCqcXamq8McI5RR YXjgWhMO8fhfvC4pNRc0QCYF/B/Sm9DO3/cgw2WcjtRh4pl6LE+WkWFEGKrbldYp LzgQ9gfgEl6JTz91LAYwdKlIva/+MR479AvQxE0VMDoKHch5If/PjobTJaQX0TOy xac4JfwpXoWhGDHaZXXMLJfvgyoKD310g38PlSVf6BHA0JKD9DeBnZuwrp6b3s21 9Ga35lPgbjnufbH+5sVtVr0BVqnFiN+3uxzQCkLp2e4SiQQV1DnY1l5TodCByFOg 6QrUVtJ86OC6i/FFmHHzJpSAuC1+Z1U= -----END CERTIFICATE-----Generated at Wed May 13 13:38:55 2026 by rpki-client