$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa File: 4e23e5df-ddab-3213-b067-9016783a3f0a.roa (raw, json) Hash identifier: RCMo/GkVQ7m1I839e9+m5j9TKpEqjXnRaCknYkBHDew= Subject key identifier: 6B:C8:95:00:3A:63:AC:34:12:39:3E:D7:A9:57:15:3A:00:77:16:D5 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584851A577A2A5A05A9B6C124EE0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa Signing time: Wed 25 Dec 2024 02:00:38 +0000 ROA not before: Wed 25 Dec 2024 02:00:38 +0000 ROA not after: Tue 25 Mar 2025 01:00:38 +0000 asID: 16509 IP address blocks: 216.157.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:a5:77:a2:a5:a0:5a:9b:6c:12:4e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Dec 25 02:00:38 2024 GMT Not After : Mar 25 01:00:38 2025 GMT Subject: CN=d6e0b641-832a-4f49-a60a-ecf0041e9525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:27:5d:b2:31:b6:78:37:2d:ec:6d:ed:c7:96: db:6e:46:57:c2:f3:db:24:bb:f8:32:10:6a:66:d5: 93:36:7c:3e:43:a2:ae:04:b3:92:72:f9:ff:7a:ec: 81:e5:53:64:ce:aa:c8:ec:c3:d4:1f:32:a1:93:b5: f0:5d:c3:3d:8e:98:a8:74:e5:d4:51:45:75:ba:b1: 99:a1:d1:cb:c3:bf:6f:56:2d:2e:2d:78:b0:98:34: 11:55:cb:49:db:ce:c4:bb:a6:71:6c:b7:74:57:0c: ad:00:66:ac:11:3c:a9:74:b5:ce:24:af:13:3f:b5: 0a:06:fc:f9:6b:ff:b6:59:df:b7:a0:15:c6:c3:08: 84:c0:2d:53:d8:59:51:43:7f:f0:fb:b6:7d:92:eb: 76:da:49:dc:e7:73:e4:b0:58:14:fe:e4:cc:d7:4f: d2:53:4a:60:de:70:17:b2:29:72:67:c2:ba:d3:64: 04:80:3f:04:1c:93:bc:8e:fd:db:c8:71:af:64:99: 58:7a:5d:3a:5e:f7:4b:73:da:6a:55:bf:ed:c8:b4: 52:a7:39:c5:e7:5e:3f:41:02:72:f5:27:dc:1f:af: 61:bc:7c:ed:46:95:ef:19:b0:5d:6f:69:25:21:de: c2:ee:72:bc:ac:60:1e:8c:c5:12:c6:49:2e:bf:42: 2d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C8:95:00:3A:63:AC:34:12:39:3E:D7:A9:57:15:3A:00:77:16:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a8:52:f1:84:74:26:4c:db:b9:85:15:f7:8b:88:a2:8b:d1: a8:03:32:cd:f0:14:27:f5:01:27:1c:61:3e:e5:e9:39:2a:df: 41:d6:71:97:c3:ea:62:08:70:6c:db:24:e7:bd:6e:1c:f9:fb: 86:80:0c:1b:b5:89:75:77:03:98:0c:22:6c:12:78:5c:85:c3: 1b:e3:53:54:5f:97:8b:1b:02:d5:5d:05:90:5e:fa:e5:46:b8: 68:dd:f2:17:81:7d:ae:71:82:36:af:d7:88:10:13:c0:3d:f2: 14:db:2b:bf:98:85:70:5b:36:13:dd:00:c8:f5:e6:04:65:53: 4e:12:a1:c9:85:56:4a:48:9e:a4:9e:72:4a:1f:32:04:e6:68: c1:53:0a:e8:fe:48:ff:45:5a:70:14:38:9f:ee:04:55:34:88: 0f:94:2a:39:16:ad:a1:ae:c8:04:0a:63:48:3c:c5:8f:ec:07: c7:aa:21:31:63:74:7f:b9:6a:69:94:03:75:01:2c:05:12:16: 6a:4f:4f:86:2c:5e:78:13:da:ab:01:a8:0f:b3:20:aa:c4:39: 5e:55:f0:23:c7:1a:f4:b6:fb:2e:f5:68:17:6b:3f:34:dd:1e: 14:84:91:a3:db:6a:c8:47:6a:dd:09:ae:05:5d:a7:4c:6a:1e: 1e:d0:7f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpXeipaBam2wSTuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk ZDZlMGI2NDEtODMyYS00ZjQ5LWE2MGEtZWNmMDA0MWU5NTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliddsjG2eDct7G3tx5bbbkZXwvPbJLv4MhBq ZtWTNnw+Q6KuBLOScvn/euyB5VNkzqrI7MPUHzKhk7XwXcM9jpiodOXUUUV1urGZ odHLw79vVi0uLXiwmDQRVctJ287Eu6ZxbLd0VwytAGasETypdLXOJK8TP7UKBvz5 a/+2Wd+3oBXGwwiEwC1T2FlRQ3/w+7Z9kut22knc53PksFgU/uTM10/SU0pg3nAX silyZ8K602QEgD8EHJO8jv3byHGvZJlYel06XvdLc9pqVb/tyLRSpznF514/QQJy 9SfcH69hvHztRpXvGbBdb2klId7C7nK8rGAejMUSxkkuv0It/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvIlQA6Y6w0Ejk+16lXFToAdxbVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNGUyM2U1ZGYtZGRhYi0z MjEzLWIwNjctOTAxNjc4M2EzZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaoUvGEdCZM27mFFfeLiKKL0agDMs3wFCf1ASccYT7l6Tkq30HWcZfD 6mIIcGzbJOe9bhz5+4aADBu1iXV3A5gMImwSeFyFwxvjU1Rfl4sbAtVdBZBe+uVG uGjd8heBfa5xgjav14gQE8A98hTbK7+YhXBbNhPdAMj15gRlU04SocmFVkpInqSe ckofMgTmaMFTCuj+SP9FWnAUOJ/uBFU0iA+UKjkWraGuyAQKY0g8xY/sB8eqITFj dH+5ammUA3UBLAUSFmpPT4YsXngT2qsBqA+zIKrEOV5V8CPHGvS2+y71aBdrPzTd HhSEkaPbashHat0JrgVdp0xqHh7Qf7c= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:16 2025 by rpki-client