$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa File: dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa (raw, json) Hash identifier: upoQwtu5cvFJTgF1bpdJk/JdCH0AhmylKXZHnqGqs7o= Subject key identifier: 8E:C4:B3:31:97:BE:94:6A:FE:6D:9F:F9:14:83:C7:D2:B0:4B:A3:80 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584D91C00373EA2115571B8D71C0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 14618 IP address blocks: 216.157.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:03:73:ea:21:15:57:1b:8d:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=e8dcb353-1a51-4dc1-8c76-972606a347e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c3:39:87:f9:29:6e:5e:bb:d1:81:cd:2a:c1: 38:bc:2b:d5:f3:bf:c8:1f:5e:4b:bc:a5:2f:ba:00: 12:59:c5:c1:f2:ab:b5:72:7c:ff:34:a7:70:d3:50: 34:f3:08:5a:df:30:f1:9e:11:65:2b:62:69:a3:d3: 09:e9:45:12:ae:6e:01:5c:71:90:7f:bf:1a:4d:57: 11:69:ba:a4:e5:f6:23:08:85:13:5a:fa:bf:97:74: 82:63:5d:64:74:bd:0d:ec:2b:b9:9d:3d:24:bd:bb: 67:36:4a:70:a3:16:66:77:0b:dd:84:0d:14:e8:06: 01:66:d0:0f:85:0d:51:b9:79:3c:a4:46:eb:fe:91: 9c:75:3c:c2:cf:cf:83:03:a7:1a:b3:04:32:d0:a0: ee:f1:eb:ba:c9:37:f5:26:a3:25:6e:02:69:ec:40: bd:bf:9c:e1:36:41:33:e9:63:fa:70:10:47:59:14: ee:d6:71:17:5c:bc:fe:e9:1a:4a:1a:40:a8:b1:77: b1:2b:59:dd:0f:08:6e:57:c3:2c:87:b5:80:29:53: fc:b2:52:bf:d2:5b:2a:d5:d0:ef:fb:9e:a4:96:82: b1:61:17:5c:a2:cd:0b:11:bd:c5:89:52:0e:09:3d: 29:46:fb:5c:8b:1c:0e:7b:67:d8:8d:30:1a:1b:fb: 0d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:C4:B3:31:97:BE:94:6A:FE:6D:9F:F9:14:83:C7:D2:B0:4B:A3:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:91:0e:cd:6f:d7:10:77:a9:ff:af:3f:c9:92:a0:7b:bf:6e: 4a:be:25:f7:bd:54:76:04:2a:a3:e1:d5:bf:e6:8b:16:37:ad: b7:4e:1d:1c:36:d8:bc:01:81:5c:17:73:d5:ff:85:7f:d1:95: d8:f6:07:b3:01:68:c5:14:15:52:f9:7f:af:2d:d0:9f:b8:b7: cf:68:3a:f2:38:3b:e8:8d:1a:20:63:fe:91:29:3f:50:82:c2: 62:30:75:95:62:9c:9e:bb:b7:20:ca:97:42:54:f8:8d:63:e1: 5b:50:4e:0e:5d:42:30:65:78:67:06:e1:b0:44:0b:38:de:a4: 6f:20:3a:d4:c9:87:72:33:7e:28:be:1a:c2:f8:69:92:dd:35: a0:e7:d5:37:8f:f8:37:ee:ba:02:23:64:9a:74:8d:94:14:42: 75:96:5d:bf:a0:f3:e2:52:41:35:e5:51:fb:52:7b:12:9f:1e: bf:21:f5:46:bc:f1:53:90:55:9e:6a:26:72:be:96:2e:c7:4f: 6a:3c:89:ef:a5:b5:aa:2d:39:35:99:b4:a2:2f:8a:da:73:e7: b7:00:56:ab:9f:b1:88:67:4c:40:bf:35:a5:3f:df:ba:c2:61: bc:9c:29:07:fd:05:15:83:e7:01:0b:23:93:1e:4d:17:76:bd: 25:58:63:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwANz6iEVVxuNccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk ZThkY2IzNTMtMWE1MS00ZGMxLThjNzYtOTcyNjA2YTM0N2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssM5h/kpbl670YHNKsE4vCvV87/IH15LvKUv ugASWcXB8qu1cnz/NKdw01A08wha3zDxnhFlK2Jpo9MJ6UUSrm4BXHGQf78aTVcR abqk5fYjCIUTWvq/l3SCY11kdL0N7Cu5nT0kvbtnNkpwoxZmdwvdhA0U6AYBZtAP hQ1RuXk8pEbr/pGcdTzCz8+DA6caswQy0KDu8eu6yTf1JqMlbgJp7EC9v5zhNkEz 6WP6cBBHWRTu1nEXXLz+6RpKGkCosXexK1ndDwhuV8Msh7WAKVP8slK/0lsq1dDv +56kloKxYRdcos0LEb3FiVIOCT0pRvtcixwOe2fYjTAaG/sNEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7EszGXvpRq/m2f+RSDx9KwS6OAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZGJhY2NmNTMtMTBkMS0z ZjI3LWEwMzYtMjljMjJlNmY4ZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqRDs1v1xB3qf+vP8mSoHu/bkq+Jfe9VHYEKqPh1b/mixY3rbdOHRw2 2LwBgVwXc9X/hX/Rldj2B7MBaMUUFVL5f68t0J+4t89oOvI4O+iNGiBj/pEpP1CC wmIwdZVinJ67tyDKl0JU+I1j4VtQTg5dQjBleGcG4bBECzjepG8gOtTJh3Izfii+ GsL4aZLdNaDn1TeP+DfuugIjZJp0jZQUQnWWXb+g8+JSQTXlUftSexKfHr8h9Ua8 8VOQVZ5qJnK+li7HT2o8ie+ltaotOTWZtKIvitpz57cAVqufsYhnTEC/NaU/37rC YbycKQf9BRWD5wELI5MeTRd2vSVYY4A= -----END CERTIFICATE-----Generated at Wed May 13 11:05:18 2026 by rpki-client