$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa File: 7ad28868-3583-3dc2-9e44-d9421298441e.roa (raw, json) Hash identifier: 8vfLDnAU22izqNrGF6loOcnxruyeE5duFkU26Gc7QqI= Subject key identifier: AF:E0:EB:EA:E0:E6:01:9C:19:44:B5:89:05:A5:70:FA:84:F4:FC:50 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F15CCE72B43F4EAD7EAEB74C0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 395831 IP address blocks: 158.115.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:e7:2b:43:f4:ea:d7:ea:eb:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=aec619ee-606f-4681-ab65-8df28eb767d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:95:4e:90:5a:11:bf:6d:d5:35:38:d6:b4:1e: 3d:37:c2:52:af:f2:3d:2c:15:60:cd:36:90:ae:72: 0b:7c:45:d7:ee:6a:fc:4a:f0:7e:c3:cb:d6:02:7c: 84:56:99:43:ae:e7:27:89:bb:e7:6c:c5:43:fd:69: 69:79:8e:ef:5d:ef:81:42:96:54:f3:e0:eb:78:12: 58:14:b5:e9:b2:d5:78:af:9c:1b:b1:1d:cc:79:6b: ae:d2:7b:99:49:0d:ba:f9:49:a9:f7:91:e3:f6:76: 10:27:53:1d:74:ac:f7:3a:40:c8:8a:50:10:3c:97: 28:c5:50:e1:ac:44:e4:1c:5a:3a:7d:39:75:b9:93: 38:18:71:42:32:ac:44:22:f8:47:4f:17:35:d5:85: 0a:c6:ad:36:c1:d7:ac:26:61:23:7c:3d:72:f8:a0: 41:6b:32:50:77:d4:d6:3b:71:70:85:30:ee:80:f1: fd:e3:89:62:34:ec:29:15:69:4f:85:2a:2d:af:c8: 37:b4:f3:2f:a9:99:c5:56:32:7b:3b:9a:98:02:3e: b3:c5:4e:97:2e:45:95:41:6a:a5:f2:bf:08:62:f7: eb:5e:71:44:3c:dc:61:cb:11:08:0d:72:b0:2e:3b: d1:56:ca:6b:79:7d:60:a2:51:2b:88:d9:02:d6:f5: 46:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E0:EB:EA:E0:E6:01:9C:19:44:B5:89:05:A5:70:FA:84:F4:FC:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:ae:f2:2a:4b:1e:b8:ad:35:e1:38:fc:df:c6:cd:3b:fb:57: 79:d2:48:60:4a:50:f5:02:57:1d:82:34:10:8c:a4:3e:33:3c: 96:d1:ed:a9:49:aa:7b:1d:b0:69:2b:91:97:90:e4:49:b4:f0: 63:8b:3c:16:7d:19:a7:8b:fe:bd:20:30:9f:43:e9:36:ef:e2: d2:c9:33:01:1b:51:79:b3:d3:55:3a:cb:ae:d9:30:fd:a6:59: 9c:38:44:6b:e3:b7:6d:d5:54:63:1d:d9:03:49:8b:69:f3:07: 9b:32:30:1a:01:92:15:33:04:95:9e:c4:c5:74:3f:63:be:ca: fc:da:18:ab:28:93:8e:f9:52:eb:6d:51:d1:04:c3:8c:88:0b: b9:d5:8c:1f:d5:29:07:69:75:36:ab:34:a5:6b:45:bd:0e:d2: d3:96:ca:ed:76:60:36:3c:a2:a7:3f:95:a4:45:30:21:75:5e: 57:19:69:0c:a3:02:ac:8c:6a:d1:67:49:ea:ab:a4:72:8e:d7: 13:da:a6:cf:b7:f2:21:4a:32:ed:39:f1:93:0f:32:20:39:c2: 83:f0:4a:f5:63:44:eb:b8:b3:46:48:d8:99:e9:e0:84:eb:ab: 6f:93:0f:7c:00:b9:a7:1f:01:41:ae:cf:39:18:63:d2:ef:ac: 54:fe:d4:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzOcrQ/Tq1+rrdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk YWVjNjE5ZWUtNjA2Zi00NjgxLWFiNjUtOGRmMjhlYjc2N2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35VOkFoRv23VNTjWtB49N8JSr/I9LBVgzTaQ rnILfEXX7mr8SvB+w8vWAnyEVplDrucnibvnbMVD/WlpeY7vXe+BQpZU8+DreBJY FLXpstV4r5wbsR3MeWuu0nuZSQ26+Ump95Hj9nYQJ1MddKz3OkDIilAQPJcoxVDh rETkHFo6fTl1uZM4GHFCMqxEIvhHTxc11YUKxq02wdesJmEjfD1y+KBBazJQd9TW O3FwhTDugPH944liNOwpFWlPhSotr8g3tPMvqZnFVjJ7O5qYAj6zxU6XLkWVQWql 8r8IYvfrXnFEPNxhyxEIDXKwLjvRVspreX1golEriNkC1vVGBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/g6+rg5gGcGUS1iQWlcPqE9PxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvN2FkMjg4NjgtMzU4My0z ZGMyLTllNDQtZDk0MjEyOTg0NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOu8ipLHritNeE4/N/GzTv7V3nSSGBKUPUCVx2CNBCMpD4zPJbR7alJ qnsdsGkrkZeQ5Em08GOLPBZ9GaeL/r0gMJ9D6Tbv4tLJMwEbUXmz01U6y67ZMP2m WZw4RGvjt23VVGMd2QNJi2nzB5syMBoBkhUzBJWexMV0P2O+yvzaGKsok475Uutt UdEEw4yIC7nVjB/VKQdpdTarNKVrRb0O0tOWyu12YDY8oqc/laRFMCF1XlcZaQyj AqyMatFnSeqrpHKO1xPaps+38iFKMu058ZMPMiA5woPwSvVjROu4s0ZI2Jnp4ITr q2+TD3wAuacfAUGuzzkYY9LvrFT+1PQ= -----END CERTIFICATE-----Generated at Sat Oct 10 15:42:51 2026 by rpki-client