$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5b6a634-bc52-39b8-876d-0b94104de19b.roa File: d5b6a634-bc52-39b8-876d-0b94104de19b.roa (raw, json) Hash identifier: 98oO5lCZzdB5ac2I8UuaQLB0AHfHJA52raShgCpjeH8= Subject key identifier: EB:FC:66:EF:15:AD:23:68:E8:8F:5F:B1:5A:32:1A:C2:2E:30:99:18 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584AF2567C2672A655D1078A7A80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5b6a634-bc52-39b8-876d-0b94104de19b.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 395831 IP address blocks: 158.115.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:7c:26:72:a6:55:d1:07:8a:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=5b0b9547-56d1-41e2-97ad-c9e442822eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a6:f5:f1:e0:d6:26:65:16:0d:2c:2b:8e:75: 43:e4:4d:32:8a:67:1a:e4:78:fa:8c:b8:d9:8b:7a: 90:b8:e8:af:92:ae:10:87:53:0e:d7:05:e7:42:11: 45:e6:9f:f6:00:d9:96:8e:fc:98:e3:95:9d:40:6c: cb:41:4e:f2:cf:9b:d6:f0:34:27:42:70:a8:b0:2c: 9d:7f:b9:8c:6e:b8:51:b2:9e:ac:9e:f5:fb:79:97: 7d:57:7c:1c:e1:f5:af:5e:9b:6c:6b:46:73:69:55: a4:6a:f7:c0:31:3c:bf:4d:4d:59:e1:fb:8e:14:22: 7a:51:66:4e:4c:0d:6a:d7:68:c9:9f:89:7f:98:ae: 02:35:c9:05:b3:4a:a6:71:d1:a9:04:e0:ec:01:d1: 2b:49:53:8c:d7:6b:21:69:77:bb:a0:dd:ed:9a:e1: 5e:f1:2a:10:3e:0e:79:49:f0:a0:b0:86:3d:f8:b5: 31:75:74:2d:21:02:5b:cd:8b:9f:39:fc:0a:65:be: 4c:c5:70:40:43:ce:f2:e5:84:db:7b:c5:e2:c9:d1: ba:8a:fd:eb:c0:a2:54:c1:00:6a:f4:ca:56:80:49: 95:dc:4e:d9:b6:83:03:c2:33:16:00:0b:bd:e5:55: 17:09:11:00:63:aa:a8:16:3c:53:7c:41:9e:09:18: be:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FC:66:EF:15:AD:23:68:E8:8F:5F:B1:5A:32:1A:C2:2E:30:99:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5b6a634-bc52-39b8-876d-0b94104de19b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:64:54:dd:6a:9f:cd:5e:96:2b:73:31:7d:9b:71:e3:b4:b1: 21:5c:47:0a:1e:bf:9a:81:ec:85:3c:af:03:ab:42:42:82:78: 80:47:d8:37:0f:76:ea:d2:4f:41:43:97:8f:85:ee:6b:f6:91: 86:2d:05:f3:7e:89:b7:22:9a:aa:e9:b4:e1:e3:57:5a:9b:40: 73:1f:ad:b8:da:21:48:b4:c0:bd:8c:0d:16:85:49:71:1f:71: d3:63:2c:1e:78:10:f3:8c:56:e0:a7:9f:b0:6a:ae:42:3f:d4: f5:ad:6f:a9:61:53:30:c4:b0:65:ff:19:dd:3b:c7:c5:b7:e6: 77:1c:d2:63:2b:bc:85:76:cd:6b:99:55:df:cd:dd:68:88:c0: 8f:6c:c5:88:98:d4:55:98:52:3b:8b:f4:ea:a7:47:0b:f2:90: 10:ab:31:37:6d:8f:56:77:c0:02:e1:8d:90:93:c5:57:22:c7: 81:f5:20:4d:2a:1a:ed:ea:70:15:11:92:09:66:23:9f:1d:c7: 0c:c8:d2:4a:e3:ca:a7:f2:26:c1:ff:fc:d4:a2:7d:a3:2b:65: 40:e5:51:2b:d1:10:bc:e4:cd:20:95:bd:d4:e7:11:dd:5c:a3: 5b:30:91:ec:70:f3:f3:8b:99:ff:8a:82:25:9f:ad:b3:e2:f5: b3:95:31:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVnwmcqZV0QeKeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk NWIwYjk1NDctNTZkMS00MWUyLTk3YWQtYzllNDQyODIyZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxab18eDWJmUWDSwrjnVD5E0yimca5Hj6jLjZ i3qQuOivkq4Qh1MO1wXnQhFF5p/2ANmWjvyY45WdQGzLQU7yz5vW8DQnQnCosCyd f7mMbrhRsp6snvX7eZd9V3wc4fWvXptsa0ZzaVWkavfAMTy/TU1Z4fuOFCJ6UWZO TA1q12jJn4l/mK4CNckFs0qmcdGpBODsAdErSVOM12shaXe7oN3tmuFe8SoQPg55 SfCgsIY9+LUxdXQtIQJbzYufOfwKZb5MxXBAQ87y5YTbe8XiydG6iv3rwKJUwQBq 9MpWgEmV3E7ZtoMDwjMWAAu95VUXCREAY6qoFjxTfEGeCRi+8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOv8Zu8VrSNo6I9fsVoyGsIuMJkYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZDViNmE2MzQtYmM1Mi0z OWI4LTg3NmQtMGI5NDEwNGRlMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnONMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlkVN1qn81elitzMX2bceO0sSFcRwoev5qB7IU8rwOrQkKCeIBH2DcP durST0FDl4+F7mv2kYYtBfN+ibcimqrptOHjV1qbQHMfrbjaIUi0wL2MDRaFSXEf cdNjLB54EPOMVuCnn7BqrkI/1PWtb6lhUzDEsGX/Gd07x8W35ncc0mMrvIV2zWuZ Vd/N3WiIwI9sxYiY1FWYUjuL9OqnRwvykBCrMTdtj1Z3wALhjZCTxVcix4H1IE0q Gu3qcBURkglmI58dxwzI0krjyqfyJsH//NSifaMrZUDlUSvRELzkzSCVvdTnEd1c o1swkexw8/OLmf+KgiWfrbPi9bOVMVc= -----END CERTIFICATE-----Generated at Sat Aug 23 13:14:23 2025 by rpki-client