$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa File: c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa (raw, json) Hash identifier: 4dLn9yC6jEtr+aHS3/TLhbMDOCheSAnv91aDN6d7KGI= Subject key identifier: D4:1B:63:6A:23:67:98:74:40:C0:3E:E3:E3:86:07:EA:DF:BE:B5:4B Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D91C00392D49FCA21BA19A600 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 395831 IP address blocks: 216.157.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:03:92:d4:9f:ca:21:ba:19:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=21a0f471-3182-4559-bb1c-67831f82d938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:63:27:6c:af:79:c6:42:4f:4f:71:67:24: 59:6b:1b:72:72:21:33:21:ae:0c:2a:ad:a4:fe:2b: 4c:ea:08:6f:12:73:0a:00:a8:92:06:d8:ef:55:8b: 39:85:4a:dc:c1:21:c3:70:b4:fe:6e:db:b8:91:6f: 2c:b7:69:2c:18:9d:75:80:82:a1:9b:ef:db:90:89: 96:cf:ba:01:99:b7:6c:dd:14:81:2e:ef:fc:f4:77: 84:0d:1a:06:cc:36:a0:9b:5e:f9:08:7a:e8:88:77: 58:f4:f1:ac:d9:cb:a0:bf:ed:47:8b:a6:17:5c:6d: 0a:16:34:07:13:85:58:a3:f2:23:50:61:e5:fa:55: d3:85:04:19:37:09:3f:4e:24:40:01:89:ad:67:29: 7b:0c:d0:d5:cb:07:f1:3d:43:de:fa:9a:17:b8:99: 47:1d:76:f4:c3:51:e4:08:29:10:ef:f1:fe:94:19: d3:a5:d7:45:d6:0e:7c:43:0a:b7:01:bc:e7:4b:ee: 5a:ce:66:f1:98:51:9c:11:9d:d7:e4:c4:cc:52:d2: 59:b1:4e:b1:25:32:32:b6:97:6d:c9:0e:64:cc:e1: a6:be:ba:d3:9d:65:f7:4a:7a:98:ff:d4:c9:44:1f: 12:4c:dd:f7:11:c4:36:85:33:df:86:5a:89:fd:76: f2:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1B:63:6A:23:67:98:74:40:C0:3E:E3:E3:86:07:EA:DF:BE:B5:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:e4:fb:2b:3e:cb:3f:1e:cb:63:20:5e:df:d8:12:e1:42:2d: b0:86:46:6a:1d:b5:4f:b4:b8:d6:f3:03:da:1b:44:bb:69:b0: 2f:66:df:64:4c:f3:c4:c5:f2:78:7c:a6:8e:b1:fd:24:63:52: f0:ca:bc:6a:10:f2:a1:96:ce:77:1d:2d:37:1d:e9:ba:66:02: a4:20:a4:22:f4:5a:de:4a:26:01:a4:28:e7:7c:91:68:ea:33: 64:9d:96:3d:a1:67:5e:80:f7:e9:d2:a5:7e:f8:45:15:5b:a6: a0:22:06:3a:83:65:08:d6:09:2b:94:5c:f8:e1:05:b2:10:51: 76:ff:02:67:ad:f8:ce:f2:01:90:92:f1:bc:be:99:fd:70:8e: 5d:d1:87:51:b5:a4:31:63:8f:1e:53:9b:f3:a8:95:d3:53:4b: 5e:05:ca:f9:9e:04:58:07:4a:ca:71:8b:45:f1:1f:d6:74:d5: 3d:b6:b0:6f:23:4d:36:33:78:76:f3:fb:03:c8:67:00:be:60: 05:54:2a:46:95:5b:2a:1f:ef:15:f7:45:76:dc:bf:47:f4:84: de:72:70:9e:f0:67:77:f0:cc:ee:64:e5:e5:ea:46:19:df:fb: 1d:94:90:a6:28:c7:59:26:5c:90:39:ff:0a:36:fb:b8:a3:32: e2:10:75:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAOS1J/KIboZpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MjFhMGY0NzEtMzE4Mi00NTU5LWJiMWMtNjc4MzFmODJkOTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYpjJ2yvecZCT09xZyRZaxtyciEzIa4MKq2k /itM6ghvEnMKAKiSBtjvVYs5hUrcwSHDcLT+btu4kW8st2ksGJ11gIKhm+/bkImW z7oBmbds3RSBLu/89HeEDRoGzDagm175CHroiHdY9PGs2cugv+1Hi6YXXG0KFjQH E4VYo/IjUGHl+lXThQQZNwk/TiRAAYmtZyl7DNDVywfxPUPe+poXuJlHHXb0w1Hk CCkQ7/H+lBnTpddF1g58Qwq3AbznS+5azmbxmFGcEZ3X5MTMUtJZsU6xJTIytpdt yQ5kzOGmvrrTnWX3SnqY/9TJRB8STN33EcQ2hTPfhlqJ/Xby8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQbY2ojZ5h0QMA+4+OGB+rfvrVLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYzJmZDNmMWQtN2RmNy0z Y2UwLTkyMzAtN2FhNzAwY2RiNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbk+ys+yz8ey2MgXt/YEuFCLbCGRmodtU+0uNbzA9obRLtpsC9m32RM 88TF8nh8po6x/SRjUvDKvGoQ8qGWzncdLTcd6bpmAqQgpCL0Wt5KJgGkKOd8kWjq M2Sdlj2hZ16A9+nSpX74RRVbpqAiBjqDZQjWCSuUXPjhBbIQUXb/Amet+M7yAZCS 8by+mf1wjl3Rh1G1pDFjjx5Tm/OoldNTS14FyvmeBFgHSspxi0XxH9Z01T22sG8j TTYzeHbz+wPIZwC+YAVUKkaVWyof7xX3RXbcv0f0hN5ycJ7wZ3fwzO5k5eXqRhnf +x2UkKYox1kmXJA5/wo2+7ijMuIQdc4= -----END CERTIFICATE-----Generated at Wed May 13 13:15:15 2026 by rpki-client