$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa File: 3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa (raw, json) Hash identifier: 4MBTLs2gToQkzn26ngBhTJ4dL9fpyVqYnR9mKlveBVs= Subject key identifier: 6E:7F:03:A5:A1:CA:14:3B:82:D4:E0:80:E8:1B:D2:FA:0A:9F:DB:80 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F432858455B92EEAA743243C368BB5580 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa Signing time: Thu 28 Mar 2024 13:00:36 +0000 ROA not before: Thu 28 Mar 2024 13:00:36 +0000 ROA not after: Wed 26 Jun 2024 13:00:36 +0000 asID: 14618 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:5b:92:ee:aa:74:32:43:c3:68:bb:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 28 13:00:36 2024 GMT Not After : Jun 26 13:00:36 2024 GMT Subject: CN=bedf6ffe-4f47-4782-af6c-295780666558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:15:21:7b:be:14:a5:a6:c6:77:0f:21:1f:c2: b8:c4:e5:26:3e:ae:29:44:0b:d9:b3:73:0d:d3:57: 90:72:f5:82:5f:41:26:46:7b:46:3e:1e:2c:8e:8e: dd:77:98:42:5c:0e:73:42:06:b6:97:3c:cb:63:e9: 1f:80:b9:97:49:17:6c:c1:11:30:d5:2d:31:e5:ad: 00:86:db:77:ec:65:91:07:49:cb:1f:50:99:7f:8e: a0:ad:e9:d7:bc:95:1f:d0:fc:b7:85:bd:41:be:e9: 6d:19:0f:b2:0b:e8:06:83:a6:d9:27:7b:d1:f7:6d: ae:28:2a:06:2f:b2:e4:58:d6:63:3e:f9:f9:4c:a9: cb:60:b8:ba:3f:59:0b:e6:ad:4d:37:fd:07:4d:26: a8:15:5c:3d:5e:b8:3d:46:e7:8a:bc:fc:00:93:5b: 43:21:7d:6a:6e:8d:0b:a8:c5:00:0e:10:44:49:99: f8:e8:14:93:f8:ca:24:e5:74:19:e9:f6:16:8a:16: 4f:7d:5b:f3:07:d4:85:03:2b:ae:ad:01:08:2a:69: 0f:dd:ef:f4:fc:ce:7e:fa:f7:a1:b1:7c:4e:fc:d9: 8c:1b:26:20:25:44:ec:9a:7e:28:72:a9:12:06:8b: b3:a2:1a:a9:8f:09:34:3c:59:cc:03:af:f3:fd:dc: 3e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7F:03:A5:A1:CA:14:3B:82:D4:E0:80:E8:1B:D2:FA:0A:9F:DB:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:7b:af:88:21:da:16:b8:63:29:aa:c3:c7:9f:4b:75:6a:fa: 4b:bb:4d:5e:c4:fe:9a:e5:89:e5:5b:4f:6f:df:bc:48:60:df: 89:f6:11:32:c2:d7:45:be:53:48:a5:88:dd:bf:32:c9:5a:89: f4:99:fa:fe:07:c5:a6:f1:8b:d5:d1:a4:4f:da:4e:17:10:bd: 98:5e:00:40:dc:6e:d7:5c:c9:b4:39:c8:e6:df:f6:cb:62:30: 43:9f:bd:c6:4f:48:42:52:d9:7c:43:15:47:0e:e4:e2:41:51: b0:e1:06:7d:9d:72:4b:0d:62:f5:dc:0d:23:ee:46:ce:c9:bc: 44:49:67:78:c4:7c:84:7d:ed:92:35:ab:2f:ee:de:9a:31:e1: fe:17:f5:4f:23:ef:ab:96:16:ee:4a:88:6c:eb:4d:f5:22:a1: 63:66:db:53:98:70:39:16:d0:29:f4:04:c6:dd:ff:a4:72:1d: 67:5f:e4:2e:8d:23:71:88:d3:61:32:c3:45:98:4a:09:87:dc: 2f:38:e5:54:9f:3c:70:53:24:b5:8a:aa:5b:e8:28:1c:9a:8b: 37:36:a8:b4:7e:21:b9:99:28:30:64:a7:4c:f8:e5:c7:14:29: d7:d0:b1:20:2b:00:89:aa:34:a0:86:bd:c7:f3:39:ad:ee:33: 58:03:94:b2 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEVbku6qdDJDw2i7VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MDMyODEzMDAzNloXDTI0MDYyNjEzMDAzNlowLzEtMCsGA1UEAxMk YmVkZjZmZmUtNGY0Ny00NzgyLWFmNmMtMjk1NzgwNjY2NTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBUhe74UpabGdw8hH8K4xOUmPq4pRAvZs3MN 01eQcvWCX0EmRntGPh4sjo7dd5hCXA5zQga2lzzLY+kfgLmXSRdswREw1S0x5a0A htt37GWRB0nLH1CZf46grenXvJUf0Py3hb1BvultGQ+yC+gGg6bZJ3vR922uKCoG L7LkWNZjPvn5TKnLYLi6P1kL5q1NN/0HTSaoFVw9Xrg9RueKvPwAk1tDIX1qbo0L qMUADhBESZn46BST+Mok5XQZ6fYWihZPfVvzB9SFAyuurQEIKmkP3e/0/M5++veh sXxO/NmMGyYgJUTsmn4ocqkSBouzohqpjwk0PFnMA6/z/dw+cQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFG5/A6WhyhQ7gtTggOgb0voKn9uAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvM2E0ZTBhMTgtZDBmOC0z YmU2LTg5NTMtNWZkODI2M2ZkMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAP3uviCHaFrhjKarDx59LdWr6S7tNXsT+ muWJ5VtPb9+8SGDfifYRMsLXRb5TSKWI3b8yyVqJ9Jn6/gfFpvGL1dGkT9pOFxC9 mF4AQNxu11zJtDnI5t/2y2IwQ5+9xk9IQlLZfEMVRw7k4kFRsOEGfZ1ySw1i9dwN I+5Gzsm8RElneMR8hH3tkjWrL+7emjHh/hf1TyPvq5YW7kqIbOtN9SKhY2bbU5hw ORbQKfQExt3/pHIdZ1/kLo0jcYjTYTLDRZhKCYfcLzjlVJ88cFMktYqqW+goHJqL NzaotH4huZkoMGSnTPjlxxQp19CxICsAiao0oIa9x/M5re4zWAOUsg== -----END CERTIFICATE-----Generated at Wed May 1 23:04:07 2024 by rpki-client on console-ams.rpki-client.org