$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5d5a019f-4ad8-3f99-aec0-5d8a3583cf27.roa File: 5d5a019f-4ad8-3f99-aec0-5d8a3583cf27.roa (raw, json) Hash identifier: 3x6SisjRxMblPIw07nCbDWGb7pokPKyMEz+ngQyP/6o= Subject key identifier: A0:83:D8:FC:35:C5:CC:9D:4F:A8:85:90:95:CA:F4:A9:D0:3D:38:3A Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AF0F1371152B38E303BCDAC80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5d5a019f-4ad8-3f99-aec0-5d8a3583cf27.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 14618 IP address blocks: 158.115.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:37:11:52:b3:8e:30:3b:cd:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=bf6213be-2c8b-472c-9170-16e44c7e999b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b1:16:76:3a:a7:3d:ea:1f:d8:58:4f:51:a5: 46:79:92:04:07:96:95:15:c5:54:7f:3c:73:b5:44: 6d:b5:f5:46:c3:c1:a4:db:74:d1:32:3c:90:2e:1a: 99:c3:a6:60:b2:e6:51:d7:75:84:9f:18:68:54:24: e3:79:5f:8c:6b:5b:4f:b3:01:da:fb:7a:3a:6f:47: 53:2d:49:8c:84:f0:57:b2:54:d6:2f:4a:ec:e0:58: e1:26:8f:6d:b3:2c:1a:9e:d9:d6:c5:52:14:72:44: 10:07:82:a4:ae:7d:11:cd:86:db:d1:6e:10:e7:05: 47:58:a6:ea:9c:05:1e:12:9e:32:d1:38:18:3d:23: 7a:1a:7c:db:23:18:29:6c:27:f5:c8:d8:80:75:81: 53:35:65:4c:fe:eb:0a:84:37:3b:36:27:05:2c:d6: 04:bf:ad:1c:fa:f8:59:98:ef:00:4d:a0:5a:91:24: 8d:96:10:71:87:1f:41:79:d2:81:a8:cc:92:7c:3b: 79:54:23:f3:f4:6c:04:86:fa:ae:53:91:f0:05:1f: 7e:85:3d:48:42:d9:21:a1:12:91:22:62:54:56:ed: d3:a9:fc:f0:f8:91:4a:c6:f7:30:e3:dd:a2:e2:08: 99:1b:a7:af:25:fe:86:42:76:be:e0:b9:0e:b7:29: 7b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:83:D8:FC:35:C5:CC:9D:4F:A8:85:90:95:CA:F4:A9:D0:3D:38:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5d5a019f-4ad8-3f99-aec0-5d8a3583cf27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:96:b8:ac:02:08:3f:b0:3e:f7:71:23:8a:35:75:bd:20:29: 26:49:fb:e6:1d:8f:1d:6e:f6:c2:30:ba:ab:61:53:7a:05:a9: f0:91:6f:fc:de:77:72:8a:4c:5d:58:63:23:48:e3:b1:5c:d9: 77:44:e0:c3:85:62:e1:ad:e5:71:2e:fa:a2:ea:dc:18:e9:67: 49:e0:fc:1b:47:a7:ef:27:39:8a:b5:65:9d:b7:11:6d:7b:f8: 84:d3:51:f8:51:74:53:9d:17:7e:79:cb:7b:d2:4d:ed:21:d6: 76:43:13:8e:fb:db:65:0e:f3:29:3e:c1:b1:da:4d:fe:2f:30: 66:9d:5b:2b:f5:76:66:74:f1:62:51:8f:34:91:03:57:38:73: df:15:5a:46:c2:80:49:ac:13:e2:ab:ea:c7:d0:9e:66:d9:ab: e3:af:89:cf:fd:9a:55:25:d5:fa:e1:a8:15:a4:14:11:07:2c: e3:b0:a6:2d:e2:01:fe:b8:25:14:48:80:54:a5:c3:f6:b9:56: cf:c6:8b:99:b0:ba:2e:8b:52:c4:b6:0f:72:96:7b:0c:fa:7d: 5f:f8:87:3b:15:aa:68:1e:ae:cf:9e:90:82:fb:ee:8e:cd:67: b7:40:21:92:b4:2d:eb:15:d2:95:65:e8:70:e6:04:dd:a1:1a: 03:88:71:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TcRUrOOMDvNrIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YmY2MjEzYmUtMmM4Yi00NzJjLTkxNzAtMTZlNDRjN2U5OTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bEWdjqnPeof2FhPUaVGeZIEB5aVFcVUfzxz tURttfVGw8Gk23TRMjyQLhqZw6ZgsuZR13WEnxhoVCTjeV+Ma1tPswHa+3o6b0dT LUmMhPBXslTWL0rs4FjhJo9tsywantnWxVIUckQQB4Kkrn0RzYbb0W4Q5wVHWKbq nAUeEp4y0TgYPSN6GnzbIxgpbCf1yNiAdYFTNWVM/usKhDc7NicFLNYEv60c+vhZ mO8ATaBakSSNlhBxhx9BedKBqMySfDt5VCPz9GwEhvquU5HwBR9+hT1IQtkhoRKR ImJUVu3Tqfzw+JFKxvcw492i4giZG6evJf6GQna+4LkOtyl7QwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCD2Pw1xcydT6iFkJXK9KnQPTg6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNWQ1YTAxOWYtNGFkOC0z Zjk5LWFlYzAtNWQ4YTM1ODNjZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuWuKwCCD+wPvdxI4o1db0gKSZJ++Ydjx1u9sIwuqthU3oFqfCRb/ze d3KKTF1YYyNI47Fc2XdE4MOFYuGt5XEu+qLq3BjpZ0ng/BtHp+8nOYq1ZZ23EW17 +ITTUfhRdFOdF355y3vSTe0h1nZDE47722UO8yk+wbHaTf4vMGadWyv1dmZ08WJR jzSRA1c4c98VWkbCgEmsE+Kr6sfQnmbZq+Ovic/9mlUl1frhqBWkFBEHLOOwpi3i Af64JRRIgFSlw/a5Vs/Gi5mwui6LUsS2D3KWewz6fV/4hzsVqmgers+ekIL77o7N Z7dAIZK0LesV0pVl6HDmBN2hGgOIcXU= -----END CERTIFICATE-----Generated at Sat Aug 23 08:10:42 2025 by rpki-client