$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa File: a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa (raw, json) Hash identifier: 3BxAr42oS/xV4WKQRy4e0rO3aVw9I1IJ/bQW+7DA0zo= Subject key identifier: 3C:59:61:13:FD:A9:3D:0E:11:0C:1F:93:BF:57:28:62:65:24:56:B2 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D39CF7FCB5F2BE0F82474ED40 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa Signing time: Fri 20 Mar 2026 01:00:32 +0000 ROA not before: Fri 20 Mar 2026 01:00:32 +0000 ROA not after: Thu 18 Jun 2026 01:00:32 +0000 asID: 395831 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:39:cf:7f:cb:5f:2b:e0:f8:24:74:ed:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 20 01:00:32 2026 GMT Not After : Jun 18 01:00:32 2026 GMT Subject: CN=03f81865-839a-46e3-971d-1b87f00ae26d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b9:56:c7:35:ce:fb:01:e9:2a:43:f1:b4:79: b2:b8:81:75:eb:3c:31:b4:cd:cc:b2:92:83:1e:c0: 3f:88:09:e6:1b:fd:57:2e:f5:2d:1f:9e:60:21:00: 4e:b8:fa:b1:03:bf:0d:97:e9:86:46:d3:b0:77:12: cb:62:4a:b8:87:57:a6:f8:c5:fe:55:15:b4:92:a8: 72:a1:13:8e:71:f0:b2:e0:c6:51:8d:c5:f4:fd:00: c3:68:c2:6c:6d:74:00:93:80:01:33:5a:cb:e5:e5: 78:da:f9:64:86:73:2e:96:02:4d:c1:9c:4d:02:74: 50:02:9a:ef:aa:36:ae:2a:95:5f:22:e6:b9:98:5e: c4:2b:66:2e:bc:a6:b5:07:a5:ca:cb:ba:9f:f7:35: 85:9d:5c:ea:a1:c9:1a:2b:ff:2d:67:aa:ae:c9:ae: cb:5b:60:46:c6:63:96:be:b3:72:9a:d5:bd:d8:1f: b1:2b:b9:fa:2f:2e:6d:5d:8e:6a:d9:1a:a0:87:1f: 5b:9a:38:85:91:34:e8:40:ca:79:15:07:d9:4a:bc: 02:52:9d:d0:43:67:51:e5:8f:f3:81:5f:6b:9d:fc: 53:f8:da:94:4b:41:d4:08:b5:34:c7:9e:3d:c2:34: c0:1d:96:fc:c3:76:04:66:24:3c:89:25:3e:f4:a7: dd:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:59:61:13:FD:A9:3D:0E:11:0C:1F:93:BF:57:28:62:65:24:56:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a6a369ce-f8e2-3690-9de9-31da83e4f39d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:dc:5f:bc:ee:f8:65:71:00:58:53:44:2e:e0:7e:ec:9f:d5: 93:92:e9:88:11:37:10:e0:60:49:ce:09:f4:40:f5:f6:13:79: 6b:7f:58:12:b3:3a:3e:4e:3c:5e:95:57:ca:ee:d8:90:e6:63: bb:ed:78:cb:fc:28:d4:8e:85:ce:b6:28:c3:57:f8:0a:16:a0: 83:05:03:c3:9d:a4:3e:cc:07:dc:cd:9a:e3:4a:86:51:ca:b6: 95:17:a1:34:c1:c3:44:fb:a5:7f:d7:3c:76:a4:a1:6d:3e:82: af:29:5c:4e:ad:42:2d:6f:2b:e2:4c:74:70:6a:0c:06:69:d0: c0:20:a1:d3:36:2a:d1:69:50:a5:b7:c4:de:0d:08:45:f7:56: ba:5f:1e:5b:96:30:3f:e4:3f:1f:d4:dc:93:11:89:db:4d:35: 69:d4:31:45:92:62:3f:4f:0a:77:77:f0:c4:70:b0:5c:2f:70: a1:23:42:6e:fd:3b:4e:6b:8a:00:bb:42:54:f4:ce:ae:06:13: d9:f4:b5:b7:db:ed:6c:55:31:fa:f7:92:3f:e6:8b:45:f6:57: 62:91:10:01:b7:ff:0b:e4:59:ab:41:97:e3:57:4c:1d:2a:bc: 00:20:bc:9b:a2:fa:a0:f8:5a:1e:b6:46:a9:39:3c:ce:ac:32: 1a:f5:34:fd -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE05z3/LXyvg+CR07UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk MDNmODE4NjUtODM5YS00NmUzLTk3MWQtMWI4N2YwMGFlMjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrlWxzXO+wHpKkPxtHmyuIF16zwxtM3MspKD HsA/iAnmG/1XLvUtH55gIQBOuPqxA78Nl+mGRtOwdxLLYkq4h1em+MX+VRW0kqhy oROOcfCy4MZRjcX0/QDDaMJsbXQAk4ABM1rL5eV42vlkhnMulgJNwZxNAnRQAprv qjauKpVfIua5mF7EK2YuvKa1B6XKy7qf9zWFnVzqockaK/8tZ6quya7LW2BGxmOW vrNymtW92B+xK7n6Ly5tXY5q2Rqghx9bmjiFkTToQMp5FQfZSrwCUp3QQ2dR5Y/z gV9rnfxT+NqUS0HUCLU0x549wjTAHZb8w3YEZiQ8iSU+9KfdeQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFDxZYRP9qT0OEQwfk79XKGJlJFayMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYTZhMzY5Y2UtZjhlMi0z NjkwLTlkZTktMzFkYTgzZTRmMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADNxfvO74ZXEAWFNELuB+7J/Vk5LpiBE3 EOBgSc4J9ED19hN5a39YErM6Pk48XpVXyu7YkOZju+14y/wo1I6FzrYow1f4Chag gwUDw52kPswH3M2a40qGUcq2lRehNMHDRPulf9c8dqShbT6CrylcTq1CLW8r4kx0 cGoMBmnQwCCh0zYq0WlQpbfE3g0IRfdWul8eW5YwP+Q/H9TckxGJ2001adQxRZJi P08Kd3fwxHCwXC9woSNCbv07TmuKALtCVPTOrgYT2fS1t9vtbFUx+veSP+aLRfZX YpEQAbf/C+RZq0GX41dMHSq8ACC8m6L6oPhaHrZGqTk8zqwyGvU0/Q== -----END CERTIFICATE-----Generated at Thu Mar 26 17:04:34 2026 by rpki-client