$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa File: 87954fed-dfd7-33f5-b195-f52a604ac05c.roa (raw, json) Hash identifier: +HV7rWh8BHCNOIgfrWbKefHXg7y03LHavxdDc4g3idM= Subject key identifier: 24:C4:C5:15:25:28:1F:04:40:DA:F3:D7:E5:5E:BE:A8:6E:A5:6C:9C Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D91C0089D0930E4E6BC3E7B00 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 395831 IP address blocks: 216.157.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:08:9d:09:30:e4:e6:bc:3e:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=eeae1a31-e2b5-4d54-8812-4cbc951b74a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:66:7b:73:47:53:b3:3b:a8:f2:0b:4c:2a: ae:c3:b6:0d:42:d3:59:71:96:77:cc:22:30:1d:2a: e2:b0:d9:36:12:58:fb:4a:c8:6f:02:b1:20:65:6c: 95:17:ca:81:04:68:76:45:ce:38:06:2d:ee:89:03: 64:56:49:f3:1e:da:1f:99:50:f2:7c:51:3d:f3:90: 4c:e3:86:b0:54:e2:a4:b1:df:35:5d:6e:b0:94:9a: 96:98:c1:85:53:d8:04:eb:82:d9:66:a6:10:fc:6f: ed:2b:ac:51:67:fe:13:13:cf:d8:1b:20:d2:fd:86: b4:be:95:b4:a5:5e:8c:ca:b6:c3:9b:49:52:fb:7d: 7a:d9:28:1d:cf:63:68:e8:df:0d:0b:1f:15:c1:8d: 3d:a8:63:e4:ef:a4:f7:7d:01:d7:d3:ce:be:d7:76: a3:e8:47:90:08:20:c9:a3:24:98:f3:5d:82:c0:ee: 42:e0:e3:f3:35:fb:6c:71:38:ab:db:1f:2f:83:9e: b0:65:6a:dc:df:16:f7:47:b0:e0:79:71:1a:94:91: 78:09:51:8d:56:90:6d:3a:df:5b:dc:e2:03:a2:a3: c4:b4:9e:9a:9d:c2:69:07:56:6f:49:d5:a4:93:d3: 9e:92:4c:71:36:bd:b5:27:a5:17:f3:39:af:f9:2c: 3f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C4:C5:15:25:28:1F:04:40:DA:F3:D7:E5:5E:BE:A8:6E:A5:6C:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:45:2a:40:59:0c:93:a2:a7:ef:df:05:2e:22:8a:2f:39:9e: 18:3d:59:e0:b8:1a:7f:7e:51:bb:1b:2b:64:a4:25:34:e7:af: a9:9b:4d:33:74:33:e7:5e:d7:8d:ab:c4:32:41:b6:e7:32:cc: 84:18:66:51:34:3e:16:a8:8f:b4:de:98:8d:2b:1d:8e:53:58: 34:94:37:3f:71:2d:48:74:64:17:d0:25:0c:0d:07:20:8d:9a: c1:c6:4b:39:bc:70:24:fb:88:cf:ee:52:de:8d:41:41:9c:15: e4:c3:46:33:4b:97:46:2a:e5:89:8a:5e:2b:b8:80:cc:a0:c3: bf:2c:72:19:d0:ea:40:91:fc:6f:e9:96:ba:6e:c2:64:73:3a: 36:33:70:aa:fc:be:b8:1e:fe:99:5c:cd:25:2d:4f:52:c4:d2: d8:85:1f:c8:3f:35:f2:39:27:3d:68:0a:e1:ca:8d:fe:d7:6d: 9e:64:ca:08:7b:fb:bb:79:0e:ec:45:ad:7a:4c:eb:45:b0:30: 50:52:f0:4a:a9:6b:ab:0b:c1:af:79:9b:14:3d:b4:05:2b:d2: 93:e9:51:b6:cf:d5:c1:43:9c:4e:13:9f:55:c6:af:99:e9:62: 5b:14:d4:0d:65:2f:2f:fe:3d:37:d0:7d:b8:76:4e:d9:79:d7: 4b:92:cf:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAidCTDk5rw+ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk ZWVhZTFhMzEtZTJiNS00ZDU0LTg4MTItNGNiYzk1MWI3NGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRFme3NHU7M7qPILTCquw7YNQtNZcZZ3zCIw HSrisNk2Elj7SshvArEgZWyVF8qBBGh2Rc44Bi3uiQNkVknzHtofmVDyfFE985BM 44awVOKksd81XW6wlJqWmMGFU9gE64LZZqYQ/G/tK6xRZ/4TE8/YGyDS/Ya0vpW0 pV6MyrbDm0lS+3162Sgdz2No6N8NCx8VwY09qGPk76T3fQHX086+13aj6EeQCCDJ oySY812CwO5C4OPzNftscTir2x8vg56wZWrc3xb3R7DgeXEalJF4CVGNVpBtOt9b 3OIDoqPEtJ6ancJpB1ZvSdWkk9OekkxxNr21J6UX8zmv+Sw/swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTExRUlKB8EQNrz1+VevqhupWycMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvODc5NTRmZWQtZGZkNy0z M2Y1LWIxOTUtZjUyYTYwNGFjMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVFKkBZDJOip+/fBS4iii85nhg9WeC4Gn9+UbsbK2SkJTTnr6mbTTN0 M+de142rxDJBtucyzIQYZlE0Phaoj7TemI0rHY5TWDSUNz9xLUh0ZBfQJQwNByCN msHGSzm8cCT7iM/uUt6NQUGcFeTDRjNLl0Yq5YmKXiu4gMygw78schnQ6kCR/G/p lrpuwmRzOjYzcKr8vrge/plczSUtT1LE0tiFH8g/NfI5Jz1oCuHKjf7XbZ5kygh7 +7t5DuxFrXpM60WwMFBS8Eqpa6sLwa95mxQ9tAUr0pPpUbbP1cFDnE4Tn1XGr5np YlsU1A1lLy/+PTfQfbh2Ttl510uSz0o= -----END CERTIFICATE-----Generated at Wed May 13 13:23:44 2026 by rpki-client