$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/752ee1ac-3a3a-3437-8c09-9f21c38dec58.roa File: 752ee1ac-3a3a-3437-8c09-9f21c38dec58.roa (raw, json) Hash identifier: 2kKQtC+wiMkJW3fCClvhH+qvWsSlTmW6kbBukrFbfCI= Subject key identifier: EA:99:5E:15:64:DF:B8:B6:F5:F8:45:2D:02:9E:6C:E8:54:9F:DE:38 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D91C00365CA43D2B135FDE7D9 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/752ee1ac-3a3a-3437-8c09-9f21c38dec58.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 14618 IP address blocks: 216.157.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:03:65:ca:43:d2:b1:35:fd:e7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=06afaf91-5a8f-46eb-b225-3ede6d5113ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2f:78:aa:d1:27:2d:39:03:66:81:e9:d1:04: dc:42:34:87:bc:e1:88:98:05:ff:7d:68:95:ec:f0: b8:09:70:ab:e0:9a:ac:52:6a:1e:b7:66:ab:a6:ac: 2c:09:fd:90:f2:c7:7f:aa:9a:91:2f:4a:88:ff:a2: 68:dc:28:37:43:05:fe:7c:41:27:f1:26:1d:73:ba: b3:ca:72:11:01:eb:f2:ba:5e:2c:2a:50:5c:5d:37: c5:7d:60:cd:ea:66:a3:57:65:ff:40:6f:be:de:fd: 47:e5:91:e1:c3:9c:77:6a:a3:37:37:79:db:20:11: ed:60:5c:88:89:24:a9:6f:67:3b:bc:d9:fc:43:cb: 23:91:be:85:5e:94:67:ca:f8:50:c5:e1:28:e4:61: d6:9e:e2:45:2e:01:a7:28:54:8a:42:b4:8e:f8:2b: e5:82:ce:ff:8f:68:7a:bd:a1:8a:a7:18:3c:f4:79: 5c:c1:7a:67:c4:a9:27:76:36:18:ce:5c:a6:db:dc: 6d:d6:d4:b7:5a:d9:e1:47:d1:16:ae:b2:aa:01:50: b5:e2:ab:b6:95:01:d3:43:b8:de:3b:aa:f3:5d:48: ef:3e:d1:db:03:da:2d:7d:be:42:66:cc:94:05:40: b0:a1:11:0b:65:5f:fc:b2:54:5f:1f:f1:c1:56:b6: a8:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:99:5E:15:64:DF:B8:B6:F5:F8:45:2D:02:9E:6C:E8:54:9F:DE:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/752ee1ac-3a3a-3437-8c09-9f21c38dec58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:22:52:cf:f9:9f:35:96:bc:86:83:58:86:e9:6b:5c:ba:ff: 0f:a0:f3:31:04:19:d4:44:d2:1c:49:12:da:70:25:27:43:ac: 28:1e:77:78:9d:90:ec:4f:b3:24:04:d5:37:19:d4:cf:f8:e6: 2b:5a:67:33:4d:5b:ac:f4:64:43:1e:a6:5a:e5:cb:8a:34:33: de:23:40:93:90:73:dd:57:a0:0a:60:de:2f:d8:bb:4f:2d:f2: b9:7a:7f:72:03:fc:90:8d:55:94:72:ce:e4:03:df:f8:d4:57: d3:c2:81:a9:43:d9:dc:b4:ed:85:52:f0:d0:c9:43:99:95:9b: 54:6a:d3:e5:6f:08:c9:ad:2d:ea:dd:63:0c:1b:be:77:1e:d3: 77:96:1b:0b:3c:57:9c:90:c1:c9:d6:1e:32:e6:ec:ad:a4:07: b1:9c:2d:76:04:cc:67:6e:bc:8a:e8:47:00:0e:2b:4c:65:a5: 00:fb:59:75:7d:7a:5f:db:3a:8d:1f:bf:64:69:4d:02:2a:f0: c8:00:b6:99:f1:22:78:8c:55:85:19:59:fc:26:58:4c:d5:57: b6:d8:db:52:6d:95:dd:b4:ce:11:9d:2d:09:c3:9e:63:94:03: 54:df:df:d2:9a:dd:08:18:4c:26:e1:16:6d:f2:85:82:b8:35: eb:12:b8:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwANlykPSsTX959kwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MDZhZmFmOTEtNWE4Zi00NmViLWIyMjUtM2VkZTZkNTExM2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS94qtEnLTkDZoHp0QTcQjSHvOGImAX/fWiV 7PC4CXCr4JqsUmoet2arpqwsCf2Q8sd/qpqRL0qI/6Jo3Cg3QwX+fEEn8SYdc7qz ynIRAevyul4sKlBcXTfFfWDN6majV2X/QG++3v1H5ZHhw5x3aqM3N3nbIBHtYFyI iSSpb2c7vNn8Q8sjkb6FXpRnyvhQxeEo5GHWnuJFLgGnKFSKQrSO+Cvlgs7/j2h6 vaGKpxg89HlcwXpnxKkndjYYzlym29xt1tS3WtnhR9EWrrKqAVC14qu2lQHTQ7je O6rzXUjvPtHbA9otfb5CZsyUBUCwoRELZV/8slRfH/HBVraojwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqZXhVk37i29fhFLQKebOhUn944MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNzUyZWUxYWMtM2EzYS0z NDM3LThjMDktOWYyMWMzOGRlYzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABciUs/5nzWWvIaDWIbpa1y6/w+g8zEEGdRE0hxJEtpwJSdDrCged3id kOxPsyQE1TcZ1M/45itaZzNNW6z0ZEMeplrly4o0M94jQJOQc91XoApg3i/Yu08t 8rl6f3ID/JCNVZRyzuQD3/jUV9PCgalD2dy07YVS8NDJQ5mVm1Rq0+VvCMmtLerd Ywwbvnce03eWGws8V5yQwcnWHjLm7K2kB7GcLXYEzGduvIroRwAOK0xlpQD7WXV9 el/bOo0fv2RpTQIq8MgAtpnxIniMVYUZWfwmWEzVV7bY21Jtld20zhGdLQnDnmOU A1Tf39Ka3QgYTCbhFm3yhYK4NesSuJ0= -----END CERTIFICATE-----Generated at Wed May 13 14:00:06 2026 by rpki-client