$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa File: f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa (raw, json) Hash identifier: xoe8Xu4UKEa8Vc2n9np/ch/P6PQKhv2IRGXA+XjmgJg= Subject key identifier: 6E:B1:6A:EE:92:E8:D4:C4:17:07:2B:70:14:DD:F2:B4:E5:6A:39:AB Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584930DE6D82CAA3B381BE72D280 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 158.115.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6d:82:ca:a3:b3:81:be:72:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=3aeb4c2a-1266-4759-8365-5d91e8eca50e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:48:ba:ea:8a:87:f0:99:5e:3f:c2:26:49:27: 70:22:49:49:db:08:4a:51:60:99:22:cc:9a:c0:22: b3:b0:58:34:e6:96:c3:ed:39:8b:fa:62:00:a9:b5: de:80:6b:c7:e5:d7:29:9e:72:ef:d2:36:68:69:b2: 8b:a9:5e:8a:da:6a:3f:71:76:c8:d7:c2:a2:95:c4: 11:1b:60:36:5c:6c:2a:e3:77:d6:f6:67:5a:b6:a0: a6:ab:ec:76:f3:32:14:66:00:b0:df:58:f4:81:ee: c4:79:7a:f8:b2:93:79:64:72:99:03:9d:c0:5f:3e: 78:32:99:1f:56:0c:68:9c:99:e8:57:94:c5:24:a2: 29:69:a7:02:f0:0d:55:87:97:0f:7c:de:63:1a:1d: 0d:7f:45:fe:4c:ae:7a:45:f5:13:da:13:12:48:c4: 6b:6d:bd:89:0c:22:71:58:79:b3:cf:55:8c:f6:16: 09:9a:c6:cb:e8:b4:e5:a7:77:45:fc:a6:01:88:15: 98:14:05:02:12:cd:c9:57:b4:ea:20:d9:ad:d1:75: 6a:13:5f:a4:67:bf:f6:d3:26:99:c9:b8:35:6e:7d: 4d:a8:3f:7a:1f:cb:b6:9d:1c:21:bf:bd:7e:41:c6: a7:98:74:e1:b9:b4:eb:bb:ff:bb:79:a0:93:9f:48: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B1:6A:EE:92:E8:D4:C4:17:07:2B:70:14:DD:F2:B4:E5:6A:39:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/f8d6e978-2d3f-3d04-bfb8-37fc655761cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:39:dd:ca:70:cf:60:06:35:c8:99:48:dc:6e:49:ea:40:f1: 25:13:16:78:9d:58:ac:7a:a5:f1:8e:2e:8b:78:68:48:6b:65: fc:f6:52:7c:e2:bd:6d:27:89:2f:e5:78:6c:f7:ab:ef:7b:97: 89:4d:46:77:0c:39:6d:0c:45:84:0f:cd:89:ca:76:35:22:e7: e6:36:6c:3a:82:58:5d:0c:66:83:60:5c:19:8a:de:c5:52:fb: cf:3f:3c:67:71:c7:f5:54:3a:2f:88:d3:00:01:53:b4:e0:1d: c3:9c:48:9c:1c:5b:c1:8e:f3:e4:a2:75:e5:97:13:77:71:00: 54:e2:43:ff:e6:4a:e8:56:10:78:41:f8:66:a2:88:cf:74:46: 93:f3:f4:d7:71:74:f7:38:8b:33:f5:48:8f:73:10:b4:e5:e0: 62:a1:51:73:19:47:50:65:a6:50:7b:bd:b5:cb:45:77:3c:ec: 43:50:c6:65:ed:db:68:7c:58:40:db:e3:69:54:61:4c:91:05: 34:38:dc:c2:62:e9:14:ba:15:2b:af:a7:4c:63:8a:2f:84:e9: 7f:ac:9e:fc:e3:c5:67:65:ec:ca:c2:20:03:a4:b1:eb:e5:ba: f6:a4:fc:88:ed:28:fe:62:fb:c3:0f:e5:c3:d3:6b:f4:ee:13: c6:d7:e1:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3m2CyqOzgb5y0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk M2FlYjRjMmEtMTI2Ni00NzU5LTgzNjUtNWQ5MWU4ZWNhNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuki66oqH8JleP8ImSSdwIklJ2whKUWCZIsya wCKzsFg05pbD7TmL+mIAqbXegGvH5dcpnnLv0jZoabKLqV6K2mo/cXbI18KilcQR G2A2XGwq43fW9mdatqCmq+x28zIUZgCw31j0ge7EeXr4spN5ZHKZA53AXz54Mpkf VgxonJnoV5TFJKIpaacC8A1Vh5cPfN5jGh0Nf0X+TK56RfUT2hMSSMRrbb2JDCJx WHmzz1WM9hYJmsbL6LTlp3dF/KYBiBWYFAUCEs3JV7TqINmt0XVqE1+kZ7/20yaZ ybg1bn1NqD96H8u2nRwhv71+QcanmHThubTru/+7eaCTn0i9bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6xau6S6NTEFwcrcBTd8rTlajmrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZjhkNmU5NzgtMmQzZi0z ZDA0LWJmYjgtMzdmYzY1NTc2MWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFI53cpwz2AGNciZSNxuSepA8SUTFnidWKx6pfGOLot4aEhrZfz2Unzi vW0niS/leGz3q+97l4lNRncMOW0MRYQPzYnKdjUi5+Y2bDqCWF0MZoNgXBmK3sVS +88/PGdxx/VUOi+I0wABU7TgHcOcSJwcW8GO8+SideWXE3dxAFTiQ//mSuhWEHhB +GaiiM90RpPz9NdxdPc4izP1SI9zELTl4GKhUXMZR1BlplB7vbXLRXc87ENQxmXt 22h8WEDb42lUYUyRBTQ43MJi6RS6FSuvp0xjii+E6X+snvzjxWdl7MrCIAOksevl uvak/IjtKP5i+8MP5cPTa/TuE8bX4eY= -----END CERTIFICATE-----Generated at Sat Apr 5 11:00:29 2025 by rpki-client