$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa File: 3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa (raw, json) Hash identifier: Z7n3mnBqGYLxKbRabloGEiD/L+5PxjZahMeVHnxSDNg= Subject key identifier: 3F:8F:E5:CA:2E:69:26:3F:85:89:AD:7E:9C:DC:3C:1B:7D:70:B9:06 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584851A57527D781AE9985F0BC34 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa Signing time: Wed 25 Dec 2024 02:00:38 +0000 ROA not before: Wed 25 Dec 2024 02:00:38 +0000 ROA not after: Tue 25 Mar 2025 01:00:38 +0000 asID: 14618 IP address blocks: 158.115.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:a5:75:27:d7:81:ae:99:85:f0:bc:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Dec 25 02:00:38 2024 GMT Not After : Mar 25 01:00:38 2025 GMT Subject: CN=8d37f2ba-456a-4fe5-8c1d-9d4bdf1d8fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a5:a1:46:28:00:04:e5:27:6e:da:4f:dc:e2: c2:ae:d4:b2:5c:a4:71:ae:5f:9d:fc:bc:82:44:8e: 00:0d:a6:0a:2b:7b:82:1d:6e:30:26:3b:fa:17:20: a8:f9:0d:93:35:ab:6c:d2:a0:93:52:2a:a4:7f:0e: a3:bb:ca:38:9b:9e:57:41:60:46:38:c3:54:1e:3d: 4f:4d:79:f9:1f:1a:c4:3f:76:97:7d:be:72:14:1f: b9:6c:6a:4a:58:82:0e:e9:2d:7b:40:0d:9f:2e:84: 22:3d:e7:a4:b9:09:d4:1c:80:23:88:48:f7:77:d9: 3a:a5:51:10:c7:62:24:65:8c:d3:68:50:ee:3d:7b: 80:b7:d1:af:50:17:b3:7a:33:18:04:0e:30:ca:de: 50:49:8e:d4:5f:e0:11:57:02:d7:73:6c:d3:a8:d3: c5:95:95:3a:e8:80:c6:a6:00:48:6a:aa:2f:9b:ac: f6:83:07:0a:93:77:cc:4b:1d:c5:d8:41:15:ca:0f: 89:43:db:1c:83:18:a2:a3:7f:4b:a8:d5:1d:46:ac: 32:4d:9c:fb:c1:1d:49:a1:15:3b:33:55:de:cd:d6: d6:49:34:1a:fb:af:8b:d5:f5:02:95:7e:f3:52:28: 3b:84:fc:ce:04:a0:76:98:b5:53:d2:8b:8a:f2:0c: 44:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8F:E5:CA:2E:69:26:3F:85:89:AD:7E:9C:DC:3C:1B:7D:70:B9:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3949f9e2-9cb4-3f7e-9441-980330f7bf1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:ed:03:0f:3c:5d:c6:95:c9:b3:eb:cf:e6:11:f2:2d:79:26: fe:81:a3:1c:d0:71:28:db:fc:a6:ed:70:08:3d:86:f6:65:f1: e7:ad:f8:1a:3f:f2:a2:de:3b:6b:f6:de:56:df:f4:2d:dc:8f: 02:d6:64:9d:80:4e:e2:3c:6c:6a:ef:5e:89:e8:d9:e7:59:42: b9:1e:72:c6:ab:3f:a9:07:46:01:cd:ea:45:16:df:03:c3:72: 2d:2e:0f:4e:ce:6e:78:69:8c:2c:7d:df:1c:db:f7:25:3c:c8: 21:85:46:73:74:05:4d:2b:4c:5b:b5:b2:f1:02:7f:d6:1b:90: 1b:8e:37:f3:55:ed:cc:2f:39:35:00:b2:6e:93:9a:b0:4b:14: e7:78:be:4f:28:44:a7:79:e5:4c:0f:70:2e:39:f2:ef:a5:4b: 76:7d:de:97:65:c6:d5:bb:6f:8c:65:95:b4:1c:70:70:bb:08: f6:eb:f1:f2:2c:00:8c:5a:c1:3f:82:ec:65:cd:85:19:6a:ba: 15:65:af:2c:2c:4c:c5:9c:91:e4:7c:e5:b9:05:38:1a:fe:38: e3:83:06:ea:a9:2d:ca:3d:fa:4e:13:21:2d:98:c4:db:5b:9e: 73:2f:bd:32:1c:e0:7e:0c:0e:38:31:be:bc:f7:7f:e3:d1:89: 09:66:11:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpXUn14GumYXwvDQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk OGQzN2YyYmEtNDU2YS00ZmU1LThjMWQtOWQ0YmRmMWQ4ZmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhaWhRigABOUnbtpP3OLCrtSyXKRxrl+d/LyC RI4ADaYKK3uCHW4wJjv6FyCo+Q2TNats0qCTUiqkfw6ju8o4m55XQWBGOMNUHj1P TXn5HxrEP3aXfb5yFB+5bGpKWIIO6S17QA2fLoQiPeekuQnUHIAjiEj3d9k6pVEQ x2IkZYzTaFDuPXuAt9GvUBezejMYBA4wyt5QSY7UX+ARVwLXc2zTqNPFlZU66IDG pgBIaqovm6z2gwcKk3fMSx3F2EEVyg+JQ9scgxiio39LqNUdRqwyTZz7wR1JoRU7 M1XezdbWSTQa+6+L1fUClX7zUig7hPzOBKB2mLVT0ouK8gxEFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+P5couaSY/hYmtfpzcPBt9cLkGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMzk0OWY5ZTItOWNiNC0z ZjdlLTk0NDEtOTgwMzMwZjdiZjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADftAw88XcaVybPrz+YR8i15Jv6BoxzQcSjb/KbtcAg9hvZl8eet+Bo/ 8qLeO2v23lbf9C3cjwLWZJ2ATuI8bGrvXono2edZQrkecsarP6kHRgHN6kUW3wPD ci0uD07ObnhpjCx93xzb9yU8yCGFRnN0BU0rTFu1svECf9YbkBuON/NV7cwvOTUA sm6TmrBLFOd4vk8oRKd55UwPcC458u+lS3Z93pdlxtW7b4xllbQccHC7CPbr8fIs AIxawT+C7GXNhRlquhVlrywsTMWckeR85bkFOBr+OOODBuqpLco9+k4TIS2YxNtb nnMvvTIc4H4MDjgxvrz3f+PRiQlmEbg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:35 2025 by rpki-client