$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa File: 7ad28868-3583-3dc2-9e44-d9421298441e.roa (raw, json) Hash identifier: YXlZnpe+dOamEnS2ANvsh3Z8NZ7m1sUjR1LzOoYrW04= Subject key identifier: 77:A9:A5:D7:A2:F5:2C:91:39:3F:DC:CE:B7:24:F5:E4:2D:45:47:5E Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AF2567836B01091367A2F5280 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 395831 IP address blocks: 158.115.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:78:36:b0:10:91:36:7a:2f:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=3332cab8-c44f-478c-86ff-aa7da1147e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f5:05:cd:06:72:c1:b0:94:42:0d:d7:69:0d: be:d8:c0:3a:08:3b:cf:e6:06:79:e8:7b:9b:34:de: c2:a4:d9:45:02:51:a7:3d:fc:74:4b:1c:17:42:fc: f0:ff:99:25:92:8e:7d:0a:01:2b:40:5e:07:3a:cd: 60:cb:42:02:b2:85:56:66:b6:9f:5b:a6:5a:76:0c: 78:58:7a:62:49:f2:64:d7:ab:dc:42:00:8d:bd:88: 7b:0f:6e:a8:8f:a3:bb:97:75:6d:f2:9b:14:47:e6: 49:ae:dc:90:3f:86:85:5d:ce:cd:29:0d:80:7d:1f: 10:0f:5f:6b:18:83:fb:49:4f:8c:b5:f2:5c:c4:69: 0e:45:08:89:02:43:3a:fc:99:bc:16:d1:40:28:aa: 1d:1b:36:3f:b5:03:b5:a2:b6:dd:bd:6d:01:9e:df: 0c:fb:b5:ca:f7:23:93:e5:a2:14:a9:e2:84:ff:60: 72:a8:80:32:60:f3:b2:34:2b:11:55:4d:cb:40:f0: dc:9b:46:51:0c:31:b0:44:b0:19:ba:f1:7c:52:9d: 41:03:94:0e:d1:97:23:91:34:49:9d:5a:0a:d1:82: 77:d6:5a:28:1b:5b:a5:08:b6:04:84:a1:1f:7a:19: 50:74:be:de:5e:43:ef:e9:73:15:d8:fa:7a:20:3b: a6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A9:A5:D7:A2:F5:2C:91:39:3F:DC:CE:B7:24:F5:E4:2D:45:47:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:8a:66:5a:4a:17:62:7c:be:af:2a:73:05:3d:4a:f8:51:23: 3a:63:26:21:0a:97:70:60:15:f1:ae:79:8e:72:b9:78:fc:33: ad:8a:00:93:46:0c:53:d2:af:ed:aa:4e:4c:73:e7:a6:7d:c4: 33:cf:48:73:fc:ae:d6:4e:61:68:0e:c1:f1:56:19:11:b5:dc: 14:8e:a1:f7:1a:53:91:9c:df:11:ea:c5:b4:d3:c8:14:36:05: b6:58:ce:29:19:32:07:4a:22:f9:a7:61:c4:75:f2:99:94:3e: 08:49:90:b6:f6:2a:30:b2:71:87:c8:db:87:a1:1d:b7:b5:ab: 93:d1:ca:8d:60:c0:e5:3b:9b:36:e0:f4:10:fc:72:1a:53:a4: 88:a4:0e:01:9c:98:0a:b2:e0:b0:e5:69:07:05:57:27:9b:3b: ab:d0:fc:86:17:e0:0f:76:7f:6f:04:b7:85:d2:5d:f3:12:3b: a7:58:0c:2b:d8:cb:b4:fb:a2:00:50:cd:ce:61:3e:4c:5d:1a: 5d:d3:44:58:bf:12:89:c9:c9:49:03:fd:52:94:40:06:e5:9e: 8d:65:32:52:aa:17:27:99:8e:db:89:1b:3b:0f:35:93:98:85: 3c:10:85:07:1d:a4:28:84:37:21:e4:d8:76:f3:bd:ef:ce:eb: a9:5a:20:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVng2sBCRNnovUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk MzMzMmNhYjgtYzQ0Zi00NzhjLTg2ZmYtYWE3ZGExMTQ3ZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vUFzQZywbCUQg3XaQ2+2MA6CDvP5gZ56Hub NN7CpNlFAlGnPfx0SxwXQvzw/5klko59CgErQF4HOs1gy0ICsoVWZrafW6Zadgx4 WHpiSfJk16vcQgCNvYh7D26oj6O7l3Vt8psUR+ZJrtyQP4aFXc7NKQ2AfR8QD19r GIP7SU+MtfJcxGkORQiJAkM6/Jm8FtFAKKodGzY/tQO1orbdvW0Bnt8M+7XK9yOT 5aIUqeKE/2ByqIAyYPOyNCsRVU3LQPDcm0ZRDDGwRLAZuvF8Up1BA5QO0ZcjkTRJ nVoK0YJ31looG1ulCLYEhKEfehlQdL7eXkPv6XMV2Pp6IDumOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeppdei9SyROT/czrck9eQtRUdeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvN2FkMjg4NjgtMzU4My0z ZGMyLTllNDQtZDk0MjEyOTg0NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiKZlpKF2J8vq8qcwU9SvhRIzpjJiEKl3BgFfGueY5yuXj8M62KAJNG DFPSr+2qTkxz56Z9xDPPSHP8rtZOYWgOwfFWGRG13BSOofcaU5Gc3xHqxbTTyBQ2 BbZYzikZMgdKIvmnYcR18pmUPghJkLb2KjCycYfI24ehHbe1q5PRyo1gwOU7mzbg 9BD8chpTpIikDgGcmAqy4LDlaQcFVyebO6vQ/IYX4A92f28Et4XSXfMSO6dYDCvY y7T7ogBQzc5hPkxdGl3TRFi/EonJyUkD/VKUQAblno1lMlKqFyeZjtuJGzsPNZOY hTwQhQcdpCiENyHk2Hbzve/O66laIBw= -----END CERTIFICATE-----Generated at Sat Aug 23 18:21:52 2025 by rpki-client