$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa File: b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa (raw, json) Hash identifier: gGTGGAanFx8HPVoB6a1paBhmMU7kx63L0SYlCzrBsEs= Subject key identifier: FD:D9:63:7C:E0:64:8E:DF:F3:81:A0:FE:B0:73:E3:64:B1:20:41:85 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584F3A17D1B0B991B707B30E4140 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 14618 IP address blocks: 216.157.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d1:b0:b9:91:b7:07:b3:0e:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=177f83c3-9fdb-4525-a611-0e0858dc0d4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:14:47:d7:97:99:c7:f4:13:25:93:67:a8:cf: c6:9d:e1:6f:f3:35:26:a6:c2:0f:d2:37:67:f6:7d: 88:17:48:98:74:34:61:05:40:2b:49:fd:9a:25:6f: 25:17:54:bc:4f:e7:7d:ed:7d:1a:4b:e8:8c:ce:6f: 79:48:23:1f:f6:2a:cc:aa:66:fa:79:0f:41:60:d3: ea:bb:36:c3:99:2e:14:5d:35:63:bd:fb:27:7e:eb: f2:f7:85:9e:4b:2d:83:51:44:64:07:29:c3:5e:24: 6a:4e:8b:c9:bd:1c:86:16:e9:6b:5d:be:57:27:3c: 32:7f:1f:ef:54:c5:d2:d5:fd:fe:af:ec:d1:55:bc: 0b:9a:c3:58:97:51:b4:f6:52:a3:cd:47:92:c2:87: 5e:8d:7c:aa:44:af:4a:35:46:cf:4b:4e:09:98:f3: 94:ab:da:42:be:d0:06:76:31:fe:19:1c:3a:7d:63: 7a:e7:de:4a:c2:a0:04:16:93:17:66:da:e9:d3:59: df:b1:35:4d:06:14:c7:05:7f:0f:70:2b:e6:98:4d: 27:7d:42:44:6a:b7:d9:9d:a3:a0:44:cd:a0:26:db: 11:37:de:92:89:50:e2:91:79:e4:50:4b:16:6b:78: b6:1a:2b:25:c0:2c:b6:d0:97:43:1f:b4:1a:0e:50: 5a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D9:63:7C:E0:64:8E:DF:F3:81:A0:FE:B0:73:E3:64:B1:20:41:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b97501a5-c1f0-3b1d-b523-c4703b659f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:92:23:8f:48:7f:1f:05:b6:e0:6b:14:81:3b:b1:eb:0a:5b: 71:26:17:13:7d:c6:21:13:41:7b:e9:88:e8:41:8f:bf:1a:db: 70:56:73:4c:e9:a3:d5:0d:e2:7e:d2:70:79:e4:a3:65:66:7d: dc:35:96:63:5e:b4:33:02:21:95:97:62:05:0e:94:e1:ef:52: b2:3a:16:9f:ee:d6:c4:15:09:6b:21:cc:3f:19:5f:32:f9:bf: a6:98:c9:65:40:2f:c4:80:be:4e:5d:e2:74:c3:65:52:df:be: 2d:bb:e0:dc:38:e2:cf:a4:a4:99:99:09:46:3b:00:cb:64:53: cd:b8:51:62:9e:27:d0:d7:05:f3:57:33:2a:5c:7d:e0:97:35: 32:f2:b9:4e:a7:64:66:3f:ca:c8:cb:37:3d:d8:de:20:33:68: e3:29:73:b6:f1:fe:3d:18:a4:06:de:54:e4:eb:b7:99:ec:da: 51:60:96:71:a3:07:de:a5:85:6e:d9:e5:bf:6b:9d:52:79:ab: 10:87:29:d5:61:cd:96:32:74:3f:6e:d7:af:8f:8a:1b:6d:2d: 7a:53:4e:90:70:ba:a5:8f:4d:6f:13:44:da:27:b1:ee:a3:19: c4:a2:05:a4:5e:9e:e6:8f:57:1b:07:51:e9:5b:5d:34:60:44: 0c:45:29:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9GwuZG3B7MOQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MTc3ZjgzYzMtOWZkYi00NTI1LWE2MTEtMGUwODU4ZGMwZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRRH15eZx/QTJZNnqM/GneFv8zUmpsIP0jdn 9n2IF0iYdDRhBUArSf2aJW8lF1S8T+d97X0aS+iMzm95SCMf9irMqmb6eQ9BYNPq uzbDmS4UXTVjvfsnfuvy94WeSy2DUURkBynDXiRqTovJvRyGFulrXb5XJzwyfx/v VMXS1f3+r+zRVbwLmsNYl1G09lKjzUeSwodejXyqRK9KNUbPS04JmPOUq9pCvtAG djH+GRw6fWN6595KwqAEFpMXZtrp01nfsTVNBhTHBX8PcCvmmE0nfUJEarfZnaOg RM2gJtsRN96SiVDikXnkUEsWa3i2GislwCy20JdDH7QaDlBacQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP3ZY3zgZI7f84Gg/rBz42SxIEGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYjk3NTAxYTUtYzFmMC0z YjFkLWI1MjMtYzQ3MDNiNjU5ZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmSI49Ifx8FtuBrFIE7sesKW3EmFxN9xiETQXvpiOhBj78a23BWc0zp o9UN4n7ScHnko2Vmfdw1lmNetDMCIZWXYgUOlOHvUrI6Fp/u1sQVCWshzD8ZXzL5 v6aYyWVAL8SAvk5d4nTDZVLfvi274Nw44s+kpJmZCUY7AMtkU824UWKeJ9DXBfNX MypcfeCXNTLyuU6nZGY/ysjLNz3Y3iAzaOMpc7bx/j0YpAbeVOTrt5ns2lFglnGj B96lhW7Z5b9rnVJ5qxCHKdVhzZYydD9u16+PihttLXpTTpBwuqWPTW8TRNonse6j GcSiBaRenuaPVxsHUelbXTRgRAxFKTU= -----END CERTIFICATE-----Generated at Sat Oct 3 17:43:41 2026 by rpki-client