$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa File: 6b69b583-d314-3cbc-92db-88a1fc81de8f.roa (raw, json) Hash identifier: JHSZJbtzxjOZG1C/BrdcB8IBwnLSJzHCwjUxfu0jzXo= Subject key identifier: 89:62:C8:87:4D:73:8F:B7:99:47:14:1E:A0:8F:CD:A6:2F:51:49:49 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F497515BD3DC8D2B766137180 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395831 IP address blocks: 158.115.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:15:bd:3d:c8:d2:b7:66:13:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5aa59e56-d6ed-4c8f-9dac-ef1cc1356e47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:87:a1:93:35:a8:36:bb:19:48:45:0b:ef:46: 02:db:4c:1d:38:21:6d:84:bd:53:ca:b1:7c:ee:c4: 43:8a:f6:99:d2:89:4c:21:68:ed:6a:b8:a0:8a:ca: a4:e3:a3:8e:c9:97:69:d8:6b:f0:cf:ea:99:f2:00: e0:d9:a7:3c:09:53:89:4b:6e:43:47:da:97:5c:d3: 83:02:64:9c:15:e7:e2:68:64:f2:b3:ee:92:7c:cd: 96:c8:c9:ab:00:ae:5d:08:5c:9a:31:37:6b:5f:d8: 47:96:31:98:e7:6d:c8:e4:61:66:e4:8f:7f:20:9f: 0c:f4:e1:63:34:56:66:bf:8b:c0:e0:8a:a2:b4:02: f1:b7:8f:d6:63:46:29:83:6b:70:fb:84:a8:7a:a8: 3a:71:90:62:0b:7e:d4:7c:15:c6:ec:9b:0f:c2:1d: d3:68:8e:04:ac:89:42:2d:54:9d:7a:ee:32:a2:a8: a1:51:0f:05:ca:92:b1:d6:8b:5b:e7:6e:d7:fb:cb: 09:13:1b:e7:66:ba:04:23:6d:af:58:3d:6b:d4:01: 72:4c:fb:b9:09:b6:bc:56:39:a7:e1:5a:ee:ac:23: 87:05:2a:1b:2d:78:0d:09:15:21:6f:40:62:cf:ed: 11:c3:6a:52:27:74:61:2e:a6:e1:4c:ed:9e:d5:97: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:62:C8:87:4D:73:8F:B7:99:47:14:1E:A0:8F:CD:A6:2F:51:49:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:bd:96:48:07:b4:b4:35:7d:77:c8:43:38:f9:70:93:2c:bc: 2e:0a:ca:c8:cc:ea:37:aa:5b:5e:e5:11:ff:e2:83:cd:e4:33: 4d:1a:98:42:57:f5:74:e5:06:9a:33:7f:4b:8b:76:db:c5:28: 53:fc:fb:9a:e0:7a:e6:96:51:a3:7d:d0:0c:39:3e:fc:e9:b0: bb:b8:2c:d0:b3:32:51:f8:0c:94:13:be:31:28:a6:ad:90:39: 9a:86:85:1b:07:42:19:f6:03:24:c8:18:2d:e6:c4:0b:00:2e: dc:04:ac:ce:91:97:b1:22:0e:08:ab:c0:0b:9d:f3:68:df:3b: 69:db:d0:5b:8b:01:43:50:0c:bb:5a:ef:61:3e:3f:6b:55:6d: 15:82:84:77:9f:00:7a:c5:66:e5:1f:81:fc:c1:d5:e8:6d:f2: 19:60:d8:2b:6b:1b:b3:fd:e6:61:b9:ba:19:5c:87:73:a9:ad: 9b:ac:80:81:0c:58:cb:bd:4f:84:fc:73:a2:37:4d:39:2a:18: 8b:0c:49:89:66:86:d0:c6:87:17:1b:39:a6:4f:6a:15:f2:f4: 22:36:7c:af:fb:12:6b:c3:37:5a:53:0e:24:56:90:77:66:94: 70:00:8b:57:40:af:d3:58:32:a0:11:35:a2:cc:57:02:4b:35: 1f:96:c4:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdRW9PcjSt2YTcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWFhNTllNTYtZDZlZC00YzhmLTlkYWMtZWYxY2MxMzU2ZTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oehkzWoNrsZSEUL70YC20wdOCFthL1TyrF8 7sRDivaZ0olMIWjtarigisqk46OOyZdp2Gvwz+qZ8gDg2ac8CVOJS25DR9qXXNOD AmScFefiaGTys+6SfM2WyMmrAK5dCFyaMTdrX9hHljGY523I5GFm5I9/IJ8M9OFj NFZmv4vA4IqitALxt4/WY0Ypg2tw+4Soeqg6cZBiC37UfBXG7JsPwh3TaI4ErIlC LVSdeu4yoqihUQ8FypKx1otb527X+8sJExvnZroEI22vWD1r1AFyTPu5Cba8Vjmn 4VrurCOHBSobLXgNCRUhb0Biz+0Rw2pSJ3RhLqbhTO2e1ZcasQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIliyIdNc4+3mUcUHqCPzaYvUUlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNmI2OWI1ODMtZDMxNC0z Y2JjLTkyZGItODhhMWZjODFkZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq9lkgHtLQ1fXfIQzj5cJMsvC4KysjM6jeqW17lEf/ig83kM00amEJX 9XTlBpozf0uLdtvFKFP8+5rgeuaWUaN90Aw5PvzpsLu4LNCzMlH4DJQTvjEopq2Q OZqGhRsHQhn2AyTIGC3mxAsALtwErM6Rl7EiDgirwAud82jfO2nb0FuLAUNQDLta 72E+P2tVbRWChHefAHrFZuUfgfzB1eht8hlg2CtrG7P95mG5uhlch3OprZusgIEM WMu9T4T8c6I3TTkqGIsMSYlmhtDGhxcbOaZPahXy9CI2fK/7EmvDN1pTDiRWkHdm lHAAi1dAr9NYMqARNaLMVwJLNR+WxPI= -----END CERTIFICATE-----Generated at Sun Oct 4 17:10:08 2026 by rpki-client