$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa File: 565178fb-511a-3ca3-a684-f9494640e395.roa (raw, json) Hash identifier: zXgbk9SroPkgL5p/DRko7uM93Q2y7ALI65fe39suMS4= Subject key identifier: 58:A2:81:CA:53:01:C1:6A:36:41:DB:11:19:0E:E9:12:4F:E3:83:D4 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584851A5799B63606E97BAA26C80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa Signing time: Wed 25 Dec 2024 02:00:38 +0000 ROA not before: Wed 25 Dec 2024 02:00:38 +0000 ROA not after: Tue 25 Mar 2025 01:00:38 +0000 asID: 16509 IP address blocks: 158.115.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:51:a5:79:9b:63:60:6e:97:ba:a2:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Dec 25 02:00:38 2024 GMT Not After : Mar 25 01:00:38 2025 GMT Subject: CN=05b538ee-254e-4547-ae89-74efaac3c565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:36:65:ee:0d:be:e1:bb:a8:62:b5:a6:00: 17:33:96:41:a8:b6:cb:1e:16:a7:30:c3:62:7b:1b: 85:df:6d:85:b6:0c:89:12:15:71:c6:92:b5:92:0a: e2:08:0c:d0:bd:32:1d:e4:1c:00:82:87:9a:2d:52: b3:d9:3d:c5:8d:3f:e0:b4:04:1c:aa:cb:7b:7c:3d: b6:89:78:94:10:43:b0:dc:f4:3d:12:83:a4:a9:6d: 19:d6:7e:a9:ff:1d:bd:bc:b9:c8:c8:8f:ef:60:f4: 57:f6:ca:85:26:89:81:b3:eb:b7:7d:5c:15:4c:7e: a4:9b:e3:e1:ae:24:89:41:df:81:18:f9:77:77:3e: a4:6c:71:7d:21:d1:09:6e:67:a2:7e:b1:d0:a5:11: 00:9c:80:a3:8b:5f:14:71:63:16:37:c4:5a:3b:e9: 14:d3:b4:29:66:24:75:26:e0:e7:45:6e:27:2f:22: f3:b9:3d:4c:9d:8e:85:e7:a2:c4:75:81:57:9b:b6: 59:0b:22:2b:9f:f9:b4:17:31:22:9c:89:f8:d0:a2: 2f:af:b7:8d:08:96:f6:bd:ac:43:b1:46:65:6b:bd: b8:f3:35:2e:2b:99:b7:69:b5:d6:67:2a:86:69:52: 26:58:f9:54:a0:99:d3:7c:40:1e:7c:8d:e5:b2:c7: 03:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A2:81:CA:53:01:C1:6A:36:41:DB:11:19:0E:E9:12:4F:E3:83:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:a7:1b:a6:6c:97:8c:47:66:af:d2:91:cc:54:9c:6a:91:53: cd:20:00:08:69:b4:85:58:88:9e:a6:4e:e6:5f:4a:71:ed:ec: 22:81:92:71:d9:31:3b:56:5b:c9:e5:da:36:ee:5b:79:45:2a: fd:e1:19:c0:84:e1:68:69:d2:dd:25:d3:0a:6f:d4:c1:24:a9: b7:ce:34:97:5a:6d:cf:36:8a:26:90:43:be:00:bd:83:fa:be: e9:a6:d0:e1:7d:ab:48:35:47:07:a2:30:89:a1:67:b0:be:54: 80:07:e2:c3:49:c3:ba:09:d9:6d:1c:e7:94:c4:20:af:d5:36: 28:fb:a9:ef:3a:7a:50:cc:78:d5:50:ec:67:38:95:5a:82:e0: f1:f7:86:68:3e:44:9e:df:b8:79:d0:37:78:29:30:03:1b:cb: 0a:ff:17:d1:71:25:3a:f1:19:0b:9f:4d:f1:06:98:d9:cb:1d: d5:02:9c:2d:3f:6f:d4:fd:08:41:80:f6:83:54:37:9f:9a:ee: 4c:6c:52:55:69:50:d5:51:75:64:a4:e2:2c:d7:e8:87:60:80: 80:ee:54:dc:9e:de:48:19:1c:a0:d6:ef:5c:56:67:83:9c:a3: bc:e1:35:55:4e:c4:a7:35:ed:3a:93:32:6d:1c:11:f9:da:d9: 59:f4:74:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhRpXmbY2Bul7qibIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MTIyNTAyMDAzOFoXDTI1MDMyNTAxMDAzOFowLzEtMCsGA1UEAxMk MDViNTM4ZWUtMjU0ZS00NTQ3LWFlODktNzRlZmFhYzNjNTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsU2Ze4NvuG7qGK1pgAXM5ZBqLbLHhanMMNi exuF322FtgyJEhVxxpK1kgriCAzQvTId5BwAgoeaLVKz2T3FjT/gtAQcqst7fD22 iXiUEEOw3PQ9EoOkqW0Z1n6p/x29vLnIyI/vYPRX9sqFJomBs+u3fVwVTH6km+Ph riSJQd+BGPl3dz6kbHF9IdEJbmeifrHQpREAnICji18UcWMWN8RaO+kU07QpZiR1 JuDnRW4nLyLzuT1MnY6F56LEdYFXm7ZZCyIrn/m0FzEinIn40KIvr7eNCJb2vaxD sUZla7248zUuK5m3abXWZyqGaVImWPlUoJnTfEAefI3lsscD1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiigcpTAcFqNkHbERkO6RJP44PUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNTY1MTc4ZmItNTExYS0z Y2EzLWE2ODQtZjk0OTQ2NDBlMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2nG6Zsl4xHZq/SkcxUnGqRU80gAAhptIVYiJ6mTuZfSnHt7CKBknHZ MTtWW8nl2jbuW3lFKv3hGcCE4Whp0t0l0wpv1MEkqbfONJdabc82iiaQQ74AvYP6 vumm0OF9q0g1RweiMImhZ7C+VIAH4sNJw7oJ2W0c55TEIK/VNij7qe86elDMeNVQ 7Gc4lVqC4PH3hmg+RJ7fuHnQN3gpMAMbywr/F9FxJTrxGQufTfEGmNnLHdUCnC0/ b9T9CEGA9oNUN5+a7kxsUlVpUNVRdWSk4izX6IdggIDuVNye3kgZHKDW71xWZ4Oc o7zhNVVOxKc17TqTMm0cEfna2Vn0dAo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:06 2025 by rpki-client