$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa File: 880caa1d-47af-334b-8051-595434b22264.roa (raw, json) Hash identifier: oTofGroNkfbL+Pr5k6BTTiRLbZjwxINIcaJGmhvp4So= Subject key identifier: 5B:9E:15:3A:54:B5:C1:B5:92:F8:9E:9F:CF:36:4A:35:2B:07:7E:C1 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D9325445AE3E2F9A04409D440 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa Signing time: Tue 21 Apr 2026 01:00:24 +0000 ROA not before: Tue 21 Apr 2026 01:00:24 +0000 ROA not after: Mon 20 Jul 2026 01:00:24 +0000 asID: 14618 IP address blocks: 158.115.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:93:25:44:5a:e3:e2:f9:a0:44:09:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 21 01:00:24 2026 GMT Not After : Jul 20 01:00:24 2026 GMT Subject: CN=fc2d74dd-ac29-426b-b8d6-535f6ffa7b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3e:a0:58:ef:14:76:bb:59:06:1a:b6:b2:ac: bf:47:ad:5e:f8:10:15:24:73:1f:72:f0:24:5d:ce: 74:0a:e9:7d:e5:7e:a4:3d:23:8c:32:01:ac:c3:60: 29:18:6e:3d:b1:84:66:40:f5:df:8a:06:18:d7:30: b7:d6:f7:e8:7f:55:03:19:f1:43:5a:9e:95:86:76: 6b:d8:69:73:e1:fc:b1:45:c0:76:bd:e7:39:93:7d: 40:68:49:d8:51:f4:0b:b2:af:26:91:1b:a5:15:67: 87:74:be:6e:ea:f0:c6:01:59:da:44:55:f7:7d:d5: c1:30:26:5d:a2:b7:40:9b:29:fa:b4:65:da:e6:22: f5:16:5b:1d:88:57:1f:98:3d:7a:49:e0:a2:2e:39: 49:5a:53:3d:37:cd:8a:a1:60:5c:11:cf:77:80:dc: 79:88:1a:73:e0:a0:83:cb:70:e4:20:46:a1:76:12: a4:de:ac:6f:50:03:b0:ae:3d:ea:a7:20:93:3d:53: 3e:57:6e:42:eb:cd:45:b8:e3:00:2c:c7:eb:17:66: b5:26:bd:cf:70:54:18:53:a0:92:8b:f1:64:cf:e1: e6:5f:40:bb:62:31:58:65:9c:1b:e3:ed:22:87:31: ff:20:f5:a2:7d:c2:35:a6:90:e6:cf:67:0d:4c:32: a6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:9E:15:3A:54:B5:C1:B5:92:F8:9E:9F:CF:36:4A:35:2B:07:7E:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:6c:a6:76:d1:69:da:21:23:e8:08:69:7f:c6:9a:ff:80:42: 22:76:df:37:c7:86:76:b2:29:b1:a7:6c:79:95:29:6c:80:81: 87:94:16:34:67:c6:6c:f3:df:22:75:f3:a0:55:31:76:36:7a: d6:36:9c:5a:a4:06:e6:c5:55:ea:1d:af:17:42:14:1f:c9:5c: f0:ba:a3:6b:7b:86:67:2b:0f:13:d9:b8:e0:23:b1:99:41:a7: 56:43:e5:37:b0:61:0b:20:64:8d:2c:d7:c4:5a:88:4b:86:34: da:c0:75:71:8c:c9:f0:7a:1a:da:0a:86:99:a5:05:22:c5:a5: 38:91:43:68:2b:83:79:50:6b:71:09:d0:c9:c1:ed:7e:6f:ad: 51:59:fd:f6:c1:df:46:94:5c:52:d2:48:40:e8:3b:01:2e:ce: 6c:fb:17:23:c6:8c:57:fd:a3:ce:8e:13:68:a2:9c:ed:bf:1c: 9e:56:da:60:bb:76:83:f3:ea:b5:75:ff:83:15:49:b5:e5:d5: e5:e2:9a:1c:65:81:08:b8:f1:ac:61:7a:61:6b:41:ff:8d:3e: 5a:ae:dc:b7:c4:ca:62:1c:31:8a:0d:2e:fa:86:6c:15:81:9d: ff:a6:38:64:08:15:81:0b:21:d7:36:43:99:6f:df:05:84:e9: ff:4a:a6:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2TJURa4+L5oEQJ1EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDQyMTAxMDAyNFoXDTI2MDcyMDAxMDAyNFowLzEtMCsGA1UEAxMk ZmMyZDc0ZGQtYWMyOS00MjZiLWI4ZDYtNTM1ZjZmZmE3YjEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiD6gWO8UdrtZBhq2sqy/R61e+BAVJHMfcvAk Xc50Cul95X6kPSOMMgGsw2ApGG49sYRmQPXfigYY1zC31vfof1UDGfFDWp6VhnZr 2Glz4fyxRcB2vec5k31AaEnYUfQLsq8mkRulFWeHdL5u6vDGAVnaRFX3fdXBMCZd ordAmyn6tGXa5iL1FlsdiFcfmD16SeCiLjlJWlM9N82KoWBcEc93gNx5iBpz4KCD y3DkIEahdhKk3qxvUAOwrj3qpyCTPVM+V25C681FuOMALMfrF2a1Jr3PcFQYU6CS i/Fkz+HmX0C7YjFYZZwb4+0ihzH/IPWifcI1ppDmz2cNTDKm1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFueFTpUtcG1kvien882SjUrB37BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvODgwY2FhMWQtNDdhZi0z MzRiLTgwNTEtNTk1NDM0YjIyMjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnONMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRspnbRadohI+gIaX/Gmv+AQiJ23zfHhnayKbGnbHmVKWyAgYeUFjRn xmzz3yJ186BVMXY2etY2nFqkBubFVeodrxdCFB/JXPC6o2t7hmcrDxPZuOAjsZlB p1ZD5TewYQsgZI0s18RaiEuGNNrAdXGMyfB6GtoKhpmlBSLFpTiRQ2grg3lQa3EJ 0MnB7X5vrVFZ/fbB30aUXFLSSEDoOwEuzmz7FyPGjFf9o86OE2iinO2/HJ5W2mC7 doPz6rV1/4MVSbXl1eXimhxlgQi48axhemFrQf+NPlqu3LfEymIcMYoNLvqGbBWB nf+mOGQIFYELIdc2Q5lv3wWE6f9KpoU= -----END CERTIFICATE-----Generated at Wed May 13 15:05:24 2026 by rpki-client