$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa File: 880caa1d-47af-334b-8051-595434b22264.roa (raw, json) Hash identifier: 58qjihxjEj3aLohi6RQ9JJK++VDzgGsN7s5npOdcrB0= Subject key identifier: C4:21:33:63:68:FF:FE:03:D6:5D:D4:7C:E7:57:DD:1E:02:A3:6E:EE Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AF2567846E803D65B9B57FBA0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 14618 IP address blocks: 158.115.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:78:46:e8:03:d6:5b:9b:57:fb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=3da4d3fc-6aaa-4c57-a391-6c0723e15246 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:6e:9e:d0:f3:ba:a1:56:84:4c:31:05:95: a0:c1:be:bf:45:14:54:9e:d4:ae:5f:23:41:ae:9b: fc:58:81:e5:f4:5e:a2:14:20:5d:f5:18:c3:f3:5c: 57:11:da:b1:b9:aa:d3:7f:59:cd:97:ea:91:bb:84: fa:c9:3f:62:9d:20:fb:85:bb:6e:a7:21:b9:11:4e: 50:b5:24:d0:4f:9e:f8:20:09:6f:05:8e:5b:ac:d9: 75:72:18:7e:24:7b:6c:72:2e:e9:c6:e5:72:b0:8e: d2:7c:4a:a9:83:4a:34:e5:91:54:e8:13:93:ab:f2: b5:7d:56:7a:f6:74:c3:9d:02:a2:84:ba:9d:40:e7: 84:c1:25:0b:76:59:c7:9e:fe:58:cc:89:9c:1e:ca: 60:28:e1:69:d3:84:60:db:8d:02:3b:ba:39:4c:e4: d9:e2:10:d9:ac:90:da:db:d6:3d:14:21:56:b2:8b: cd:3a:67:6d:37:d4:52:62:a8:a8:f6:19:b6:03:04: ee:47:34:48:25:79:a2:ba:1e:89:5b:43:9f:00:7f: 43:fa:76:7a:89:e7:e1:a3:dd:11:95:87:6d:fb:59: 1b:d3:5e:a9:4c:c1:f9:84:cf:9c:79:9b:4b:38:f9: b4:67:f3:3f:cc:29:5c:b5:b9:34:fc:87:bc:7e:6c: 22:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:21:33:63:68:FF:FE:03:D6:5D:D4:7C:E7:57:DD:1E:02:A3:6E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:96:ed:78:5d:34:ec:12:74:04:a3:08:3a:6b:6f:c5:e9:97: 89:f4:98:ed:6e:45:78:a1:3b:be:40:0b:5a:db:14:81:d4:0b: 3c:2f:c3:ec:00:5d:ee:d3:75:43:f4:82:be:9b:99:d5:87:83: 54:af:d9:fb:b5:9a:f5:1f:bd:04:48:39:6a:11:c4:5e:a3:66: 5e:42:30:a3:88:14:e8:d1:83:ff:3e:49:73:48:46:61:43:53: 13:12:4c:f6:d4:59:50:ea:03:58:40:e2:30:f9:c7:16:f5:63: 4d:b8:73:6f:76:68:b6:d7:62:6e:7b:b5:29:8b:4f:22:3d:e0: ae:6b:7b:a3:18:3a:0c:ac:96:1e:5d:69:e0:ef:1b:6b:f8:07: a4:75:48:a7:c0:8b:a5:b7:6d:d4:50:29:5f:95:68:4d:ad:31: 3d:db:b0:e7:1f:0b:f0:38:b2:20:c0:f6:44:08:cb:16:34:cd: 63:4c:dd:cf:f9:78:3f:c7:1d:dd:79:4b:4d:6b:c9:14:96:ff: 0a:77:11:1a:c2:2d:46:b6:6c:9e:0b:f1:4a:38:74:0b:88:69: 38:1c:6d:56:e3:f0:9a:26:c0:cd:78:9f:5b:24:04:df:21:61: fd:c9:86:f9:c4:e5:f4:46:7a:2f:20:a2:2e:e1:97:39:e1:66: 70:fa:b6:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnhG6APWW5tX+6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk M2RhNGQzZmMtNmFhYS00YzU3LWEzOTEtNmMwNzIzZTE1MjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcJuntDzuqFWhEwxBZWgwb6/RRRUntSuXyNB rpv8WIHl9F6iFCBd9RjD81xXEdqxuarTf1nNl+qRu4T6yT9inSD7hbtupyG5EU5Q tSTQT574IAlvBY5brNl1chh+JHtsci7pxuVysI7SfEqpg0o05ZFU6BOTq/K1fVZ6 9nTDnQKihLqdQOeEwSULdlnHnv5YzImcHspgKOFp04Rg240CO7o5TOTZ4hDZrJDa 29Y9FCFWsovNOmdtN9RSYqio9hm2AwTuRzRIJXmiuh6JW0OfAH9D+nZ6iefho90R lYdt+1kb016pTMH5hM+ceZtLOPm0Z/M/zClctbk0/Ie8fmwi5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQhM2No//4D1l3UfOdX3R4Co27uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvODgwY2FhMWQtNDdhZi0z MzRiLTgwNTEtNTk1NDM0YjIyMjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnONMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuW7XhdNOwSdASjCDprb8Xpl4n0mO1uRXihO75AC1rbFIHUCzwvw+wA Xe7TdUP0gr6bmdWHg1Sv2fu1mvUfvQRIOWoRxF6jZl5CMKOIFOjRg/8+SXNIRmFD UxMSTPbUWVDqA1hA4jD5xxb1Y024c292aLbXYm57tSmLTyI94K5re6MYOgyslh5d aeDvG2v4B6R1SKfAi6W3bdRQKV+VaE2tMT3bsOcfC/A4siDA9kQIyxY0zWNM3c/5 eD/HHd15S01ryRSW/wp3ERrCLUa2bJ4L8Uo4dAuIaTgcbVbj8JomwM14n1skBN8h Yf3JhvnE5fRGei8goi7hlznhZnD6tis= -----END CERTIFICATE-----Generated at Sat Aug 23 06:56:16 2025 by rpki-client