$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa File: 85240ca7-41e9-329b-8a29-307187f566aa.roa (raw, json) Hash identifier: DAwkqYQf3Za7ejjin6iCG+FG3sAWTheJf25tyPv0jRA= Subject key identifier: 68:CB:EF:25:DC:83:41:F6:5D:B3:4C:70:D6:EC:B6:A6:9B:8F:28:27 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584B7B21F2E347B6394A09C1CF40 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 16509 IP address blocks: 158.115.158.0/24 maxlen: 24 2606:7bc0:1093::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f2:e3:47:b6:39:4a:09:c1:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=f1ca0673-612d-4363-a81e-e12e4572f1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9a:e5:c1:54:bd:66:d4:3f:53:a5:07:46:f9: d2:bc:d7:a2:33:a0:e8:85:26:78:68:17:c3:74:cd: 34:1a:ef:93:90:0c:be:07:72:c8:8d:12:a9:f8:56: 97:da:55:af:c6:d1:90:09:b6:b8:5b:ec:f7:ec:17: 21:5c:e0:d9:06:b4:58:7f:a9:77:09:b2:26:d7:ac: 3c:f7:d5:12:61:36:e6:d8:f6:72:32:80:2b:b4:e9: c6:d5:c1:36:60:db:9f:1e:33:bc:ba:9e:51:38:a3: 3b:b9:53:d1:78:5e:fa:4a:83:13:b3:aa:d2:11:ce: 88:b4:a9:66:a7:8b:82:ea:60:50:4e:84:e2:65:fa: 99:a4:ef:fe:bc:28:9a:cb:6f:5f:ac:f0:df:87:c7: a0:8a:50:51:b7:32:25:86:68:b1:75:b7:42:74:25: 50:0d:40:3b:7a:9d:5b:57:26:5d:fd:09:44:d8:f1: 0c:e6:bc:ee:e5:d3:37:9b:f6:53:ff:9f:70:9c:bf: f3:da:96:9e:8c:22:e7:5b:d2:9e:ea:f9:cc:dd:91: ba:e7:fa:62:b5:28:b5:6e:b4:42:b1:53:f7:b2:d4: c4:2e:d3:2f:4f:f0:d9:d4:49:94:b9:81:23:dd:ba: fd:1a:86:17:9b:b7:9c:51:5a:ec:fe:d5:c0:97:62: 4b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CB:EF:25:DC:83:41:F6:5D:B3:4C:70:D6:EC:B6:A6:9B:8F:28:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/85240ca7-41e9-329b-8a29-307187f566aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.158.0/24 IPv6: 2606:7bc0:1093::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:36:47:78:50:bc:10:8a:23:fb:e9:c2:c0:6c:de:df:13:94: 28:e1:18:35:a5:33:3f:cc:3a:d8:50:49:ae:7e:6c:fe:86:33: 91:3c:76:ab:c7:e3:9d:fd:52:3e:95:9e:02:43:59:81:19:c5: 20:c9:3b:7d:44:2a:3a:0e:83:09:63:bc:1e:8d:41:bb:57:6f: 2a:f3:86:fd:c5:f7:12:9b:60:14:1a:80:dc:16:ce:8e:73:08: 35:d3:d9:0d:6e:ee:11:bf:1f:9b:d6:34:94:99:64:82:4b:81: e3:1a:4e:1d:18:67:22:c5:1a:9c:af:48:d7:2f:76:35:6e:c1: 32:9e:68:44:e6:7a:82:f6:78:13:9e:3b:0d:14:94:cd:c2:c8: 0d:b6:9e:7e:b3:52:88:5c:c2:4f:0a:20:b5:73:8d:4c:3d:8e: 00:cd:a7:b2:b3:5f:f2:09:d7:17:46:da:c1:f0:2c:75:c9:10: c8:24:fd:15:d0:66:b0:77:38:b1:b3:78:9a:a7:80:3f:5e:56: 78:67:eb:0b:c1:06:f6:1c:18:9f:1e:ed:3f:43:dd:b0:7c:40: a8:40:14:21:a5:27:b7:12:e4:a1:46:c7:e7:2b:57:3b:e7:bb: cb:85:36:b5:d9:c7:bc:0c:3b:b5:62:33:04:57:4f:c1:10:96: 78:25:cb:ef -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEt7IfLjR7Y5SgnBz0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk ZjFjYTA2NzMtNjEyZC00MzYzLWE4MWUtZTEyZTQ1NzJmMWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZrlwVS9ZtQ/U6UHRvnSvNeiM6DohSZ4aBfD dM00Gu+TkAy+B3LIjRKp+FaX2lWvxtGQCba4W+z37BchXODZBrRYf6l3CbIm16w8 99USYTbm2PZyMoArtOnG1cE2YNufHjO8up5ROKM7uVPReF76SoMTs6rSEc6ItKlm p4uC6mBQToTiZfqZpO/+vCiay29frPDfh8egilBRtzIlhmixdbdCdCVQDUA7ep1b VyZd/QlE2PEM5rzu5dM3m/ZT/59wnL/z2paejCLnW9Ke6vnM3ZG65/pitSi1brRC sVP3stTELtMvT/DZ1EmUuYEj3br9GoYXm7ecUVrs/tXAl2JLaQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGjL7yXcg0H2XbNMcNbstqabjygnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvODUyNDBjYTctNDFlOS0z MjliLThhMjktMzA3MTg3ZjU2NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOeMA8E AgACMAkDBwAmBnvAEJMwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcTZHeFC8EIoj++nCwGze3xOUKOEYNaUz P8w62FBJrn5s/oYzkTx2q8fjnf1SPpWeAkNZgRnFIMk7fUQqOg6DCWO8Ho1Bu1dv KvOG/cX3EptgFBqA3BbOjnMINdPZDW7uEb8fm9Y0lJlkgkuB4xpOHRhnIsUanK9I 1y92NW7BMp5oROZ6gvZ4E547DRSUzcLIDbaefrNSiFzCTwogtXONTD2OAM2nsrNf 8gnXF0bawfAsdckQyCT9FdBmsHc4sbN4mqeAP15WeGfrC8EG9hwYnx7tP0PdsHxA qEAUIaUntxLkoUbH5ytXO+e7y4U2tdnHvAw7tWIzBFdPwRCWeCXL7w== -----END CERTIFICATE-----Generated at Mon Oct 20 19:01:37 2025 by rpki-client