$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa File: c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa (raw, json) Hash identifier: 5nF6lKiib+TGBBFUFGa26NllK3cVff55SBeFEXK1dUo= Subject key identifier: 16:02:77:99:A6:24:CC:8C:12:8F:5F:6A:BA:0D:51:D2:7E:F7:10:29 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584E7204C6A112B48E3F12AFF000 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa Signing time: Thu 09 Jul 2026 21:00:11 +0000 ROA not before: Thu 09 Jul 2026 21:00:11 +0000 ROA not after: Wed 07 Oct 2026 21:00:11 +0000 asID: 395831 IP address blocks: 216.157.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:72:04:c6:a1:12:b4:8e:3f:12:af:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jul 9 21:00:11 2026 GMT Not After : Oct 7 21:00:11 2026 GMT Subject: CN=cbfe6b1f-bf81-4fd9-b574-4c50c17beb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d3:f7:2b:41:9d:f3:aa:a7:1c:b7:a1:5c:4b: 3f:f6:20:d7:66:df:50:4b:16:da:d9:fc:d1:81:46: f5:60:c7:80:d6:57:30:44:94:e6:f5:9a:88:9e:79: 7c:17:0f:b8:22:80:68:93:52:2a:97:f9:95:d5:12: 6f:32:78:76:3e:b1:d7:fa:99:c9:30:45:db:7d:d9: 65:1d:c5:39:24:6a:6c:43:18:6a:95:bf:c2:8e:a4: e2:ca:14:e4:fa:30:89:ac:1e:30:4d:9f:94:7a:5b: 2b:57:c7:2a:f5:4d:1d:3e:41:ee:7c:6a:3d:2c:28: 43:75:dc:85:c4:a2:fc:aa:b4:15:fb:e4:d0:0f:9d: fd:03:77:89:f9:44:fd:95:cf:fa:d2:20:e1:4e:57: e2:63:14:28:1b:8c:51:29:f3:99:52:da:e9:02:b4: 38:6f:8b:c3:91:2a:4c:98:de:2f:cd:98:d1:fd:5f: da:6b:d8:7d:59:89:c4:8e:6d:4e:f6:0d:a7:bd:08: dc:87:e5:e6:fc:da:d6:9b:c1:a0:91:a5:1a:e0:3e: 0c:f4:f6:b9:66:dc:25:70:1a:cd:89:92:c6:a0:38: df:25:50:eb:3f:78:cc:3e:99:3e:c9:08:0e:40:99: 20:58:db:f3:bc:cc:85:8c:82:79:83:7e:3e:2b:4d: fd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:02:77:99:A6:24:CC:8C:12:8F:5F:6A:BA:0D:51:D2:7E:F7:10:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:78:8e:c9:55:56:d5:c9:c8:de:fb:ab:ec:57:f0:b2:45:36: 72:d1:12:23:99:fc:70:ff:8c:4d:a8:0f:c4:5a:32:87:aa:42: 71:30:78:ab:26:b6:79:91:4b:b1:d6:42:80:15:34:98:16:8b: 67:6c:86:04:b1:7e:8f:d1:fe:c6:7f:d7:03:39:d1:e3:5f:7f: f3:30:81:32:b1:3b:f7:9d:04:38:54:c9:b6:19:54:e0:7c:7c: fd:87:ea:e8:39:9b:0e:bd:73:8c:f4:98:1d:b7:48:ea:be:36: 35:66:2d:56:5d:6c:10:0d:4b:da:ba:eb:48:08:fd:38:b6:89: b0:0a:8e:4b:19:e6:e7:d5:16:27:8f:52:d7:a7:b3:4b:0f:58: 4a:fb:9f:75:16:50:15:ac:87:63:65:3b:79:52:24:05:5a:3a: d3:3c:a5:48:0a:5a:e2:ac:69:9b:2c:e7:d4:7b:65:b7:d2:c4: e1:34:ea:cd:c5:e2:e1:52:e2:16:3b:88:f6:07:65:5f:71:fa: 91:fd:5a:98:39:85:3a:56:9c:00:f2:0d:0a:29:e9:0a:a1:84: 64:f4:08:86:71:45:0a:78:56:e5:9e:98:e1:4f:95:5e:fe:d8: d1:f7:83:7a:a5:8e:65:c7:6a:7b:c1:04:66:94:9a:b2:33:1a: f6:81:10:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5yBMahErSOPxKv8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDcwOTIxMDAxMVoXDTI2MTAwNzIxMDAxMVowLzEtMCsGA1UEAxMk Y2JmZTZiMWYtYmY4MS00ZmQ5LWI1NzQtNGM1MGMxN2JlYjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNP3K0Gd86qnHLehXEs/9iDXZt9QSxba2fzR gUb1YMeA1lcwRJTm9ZqInnl8Fw+4IoBok1Iql/mV1RJvMnh2PrHX+pnJMEXbfdll HcU5JGpsQxhqlb/CjqTiyhTk+jCJrB4wTZ+UelsrV8cq9U0dPkHufGo9LChDddyF xKL8qrQV++TQD539A3eJ+UT9lc/60iDhTlfiYxQoG4xRKfOZUtrpArQ4b4vDkSpM mN4vzZjR/V/aa9h9WYnEjm1O9g2nvQjch+Xm/NrWm8GgkaUa4D4M9Pa5ZtwlcBrN iZLGoDjfJVDrP3jMPpk+yQgOQJkgWNvzvMyFjIJ5g34+K0390wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYCd5mmJMyMEo9faroNUdJ+9xApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYzJmZDNmMWQtN2RmNy0z Y2UwLTkyMzAtN2FhNzAwY2RiNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABh4jslVVtXJyN77q+xX8LJFNnLREiOZ/HD/jE2oD8RaMoeqQnEweKsm tnmRS7HWQoAVNJgWi2dshgSxfo/R/sZ/1wM50eNff/MwgTKxO/edBDhUybYZVOB8 fP2H6ug5mw69c4z0mB23SOq+NjVmLVZdbBANS9q660gI/Ti2ibAKjksZ5ufVFieP Utens0sPWEr7n3UWUBWsh2NlO3lSJAVaOtM8pUgKWuKsaZss59R7ZbfSxOE06s3F 4uFS4hY7iPYHZV9x+pH9Wpg5hTpWnADyDQop6QqhhGT0CIZxRQp4VuWemOFPlV7+ 2NH3g3qljmXHanvBBGaUmrIzGvaBEIk= -----END CERTIFICATE-----Generated at Fri Jul 24 04:54:00 2026 by rpki-client