$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa File: 7ad28868-3583-3dc2-9e44-d9421298441e.roa (raw, json) Hash identifier: AlhH93zU4FSqxfIkpm3ag8vOevc2gofwPZ8hanVZgkU= Subject key identifier: 64:38:16:C4:9B:2D:C8:D0:56:D3:C2:A9:17:64:2D:02:82:6B:29:CD Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D9325444DE3CFC84D8817C840 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 395831 IP address blocks: 158.115.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:44:4d:e3:cf:c8:4d:88:17:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=7b8b797d-d91e-4c7b-9ea9-cd28b8723064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c8:c7:1e:36:8f:e2:c5:12:15:19:e0:39:38: 0f:da:65:7b:7a:60:98:b0:d0:e4:1c:79:ee:90:4b: 91:aa:fb:07:60:69:bb:bb:7c:a5:4a:e0:f0:6b:d3: cb:34:4d:a0:ea:d6:72:e4:5a:3a:26:bf:f0:32:ec: 93:90:6e:83:3f:e6:71:eb:9f:80:6d:0b:3b:9e:93: 44:0b:18:c1:f8:0c:57:09:bd:ec:5c:57:36:f4:9f: e2:a8:79:b0:67:3a:12:a8:7a:d1:b4:07:3f:4a:d1: dd:a2:23:61:25:4f:c6:32:59:dc:87:93:07:0f:c1: 69:40:16:1c:46:5a:3a:43:7e:6c:c6:ba:be:eb:00: c6:a8:84:5d:34:1b:8b:d1:71:d4:56:67:9f:a6:eb: 34:7e:e3:2d:9c:ef:b3:f2:75:74:56:b9:dd:0f:81: 0d:96:b4:f2:04:8b:3e:f1:d8:1a:50:29:7a:82:e4: 10:86:6f:32:67:a6:21:62:9a:67:03:98:48:20:c5: aa:db:5c:bc:b3:aa:0e:5c:5e:1a:bf:99:e9:5d:d9: 14:9e:5e:3e:3c:71:f8:81:a6:83:b5:4d:0b:cd:75: 8c:ee:94:3f:ec:b1:83:d0:b8:d0:c4:58:8d:c3:a8: 80:81:a5:1e:8a:3f:70:3c:87:32:13:4c:3a:7f:d5: 66:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:38:16:C4:9B:2D:C8:D0:56:D3:C2:A9:17:64:2D:02:82:6B:29:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ee:a6:36:b8:0c:8b:3d:44:95:c9:c8:58:d4:0c:e4:a6:1b: 7d:b6:60:8c:c9:e6:da:82:fa:8a:4f:48:49:37:f8:b0:9b:95: 32:00:74:86:67:a6:34:aa:eb:63:e2:2d:c0:b5:c0:f0:e3:bd: 00:67:f7:88:82:59:15:07:d7:d1:0e:09:f3:b7:24:93:87:9f: ac:6e:e2:6f:6c:6f:27:50:2a:7d:98:0d:c2:29:37:79:a7:0b: a5:1b:d6:56:89:d6:f7:23:22:b9:dc:81:97:c1:13:69:f9:b0: ac:3d:7b:dc:64:13:19:81:0d:59:ed:5a:7a:f9:b1:25:13:e5: ed:7b:08:e1:a1:96:b1:63:a5:c7:b8:a3:5d:15:e7:5c:39:75: 84:cf:2c:d9:3d:89:f8:a2:c9:bc:ea:58:43:18:47:2c:2e:46: 94:10:59:92:76:fa:18:7c:cb:56:b5:39:33:60:3c:eb:4f:28: 84:96:78:25:9b:5b:1c:28:e2:b0:e7:78:b2:74:d9:74:ec:4a: a0:e8:62:3d:af:ea:1b:90:2e:0f:24:90:f7:dd:a7:eb:77:08: 4b:de:1d:9c:39:7f:6c:e4:67:35:ff:0b:e7:4b:b5:d0:37:19: 1e:0b:8a:9b:57:66:bf:0e:34:52:a2:f8:01:b3:7b:03:fe:d9: 94:7f:05:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJURN48/ITYgXyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk N2I4Yjc5N2QtZDkxZS00YzdiLTllYTktY2QyOGI4NzIzMDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8jHHjaP4sUSFRngOTgP2mV7emCYsNDkHHnu kEuRqvsHYGm7u3ylSuDwa9PLNE2g6tZy5Fo6Jr/wMuyTkG6DP+Zx65+AbQs7npNE CxjB+AxXCb3sXFc29J/iqHmwZzoSqHrRtAc/StHdoiNhJU/GMlnch5MHD8FpQBYc Rlo6Q35sxrq+6wDGqIRdNBuL0XHUVmefpus0fuMtnO+z8nV0VrndD4ENlrTyBIs+ 8dgaUCl6guQQhm8yZ6YhYppnA5hIIMWq21y8s6oOXF4av5npXdkUnl4+PHH4gaaD tU0LzXWM7pQ/7LGD0LjQxFiNw6iAgaUeij9wPIcyE0w6f9VmUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQ4FsSbLcjQVtPCqRdkLQKCaynNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvN2FkMjg4NjgtMzU4My0z ZGMyLTllNDQtZDk0MjEyOTg0NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHupja4DIs9RJXJyFjUDOSmG322YIzJ5tqC+opPSEk3+LCblTIAdIZn pjSq62PiLcC1wPDjvQBn94iCWRUH19EOCfO3JJOHn6xu4m9sbydQKn2YDcIpN3mn C6Ub1laJ1vcjIrncgZfBE2n5sKw9e9xkExmBDVntWnr5sSUT5e17COGhlrFjpce4 o10V51w5dYTPLNk9ifiiybzqWEMYRywuRpQQWZJ2+hh8y1a1OTNgPOtPKISWeCWb Wxwo4rDneLJ02XTsSqDoYj2v6huQLg8kkPfdp+t3CEveHZw5f2zkZzX/C+dLtdA3 GR4LiptXZr8ONFKi+AGzewP+2ZR/BbM= -----END CERTIFICATE-----Generated at Wed May 13 12:57:13 2026 by rpki-client