$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5d5a019f-4ad8-3f99-aec0-5d8a3583cf27.roa File: 5d5a019f-4ad8-3f99-aec0-5d8a3583cf27.roa (raw, json) Hash identifier: u7ToYbxsWfGSuJHtyMbdmMHkvyiQRzMQ39z3lWUSWcM= Subject key identifier: 91:03:6B:64:1B:F9:4A:B5:A1:84:6A:6A:95:1D:DC:49:2B:3E:24:43 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584930DE6D3D5F337383F8070060 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5d5a019f-4ad8-3f99-aec0-5d8a3583cf27.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 158.115.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6d:3d:5f:33:73:83:f8:07:00:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=5c4bd00c-2f12-4d2c-b3da-fd0c1c4835ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7e:85:cf:dc:a4:50:94:8c:90:9d:7a:bc:42: 88:88:f4:f2:af:f0:bc:83:78:8e:a4:e4:0d:be:a7: a9:3c:df:d1:a1:d7:a7:1e:b0:db:11:8d:0b:68:c6: b5:e7:22:3c:08:4a:e6:0d:4d:4b:e5:1c:04:24:57: 00:a4:6d:d8:2e:01:48:36:eb:8f:00:7f:07:07:79: bd:9f:6b:d5:2a:60:8c:6f:16:7a:a6:d0:f9:ad:4d: 55:ff:e8:c7:6e:4d:ba:d4:ef:fc:83:59:36:7b:95: e8:df:79:23:9d:25:4e:cc:3f:8b:81:1c:6c:fd:75: bd:42:61:a8:23:40:4c:49:4f:b8:04:ac:36:26:0f: 3b:8b:12:21:c7:ac:c3:d6:95:48:48:86:8d:d1:9e: d4:64:d9:c1:1a:b3:ed:81:87:58:9b:68:28:51:95: c3:bd:e2:52:d2:90:4a:14:56:8a:8d:b5:8e:05:2d: 61:80:0e:bd:01:ad:53:89:13:c9:46:5e:96:e2:5c: 4e:d8:68:21:1f:a1:56:b0:98:7e:4e:f0:ad:eb:33: 5d:87:4e:32:c5:1a:fc:80:23:23:39:05:24:3a:ea: e0:d3:47:90:e6:ea:79:24:a5:c7:e0:bf:49:54:c3: c7:4e:d7:be:32:2a:8f:f8:d3:e8:ce:78:3f:89:96: 65:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:03:6B:64:1B:F9:4A:B5:A1:84:6A:6A:95:1D:DC:49:2B:3E:24:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5d5a019f-4ad8-3f99-aec0-5d8a3583cf27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:27:4c:61:39:72:19:9e:a6:03:5b:d5:26:c7:b1:ad:51:a7: 95:ee:01:cf:cb:2b:10:d0:08:6c:73:b6:b2:c6:68:e6:f7:f6: bf:14:14:1c:1e:60:6d:b0:6b:50:9a:4d:4d:61:df:67:42:80: fb:5a:34:3b:db:85:59:02:ad:12:7a:d1:06:ed:9e:8e:49:e3: fa:d8:c8:16:0d:66:e3:b0:7e:e6:0b:fd:6d:92:e5:46:18:a0: b9:73:47:4c:03:1c:88:3b:a6:ec:7c:b5:72:4f:6f:34:06:4b: fd:01:ab:ad:60:df:11:67:1f:71:5b:20:5f:22:1c:71:a1:51: 60:ee:de:30:4f:83:7d:f0:dc:a2:af:e6:00:88:47:fe:e5:93: f3:92:f2:23:33:24:4c:01:03:55:85:fc:af:af:38:49:80:d9: 36:db:da:28:65:54:c9:be:7f:22:20:87:08:49:d9:36:c9:28: 57:38:d4:23:2f:48:6d:f3:cc:87:84:a9:2d:d3:3f:73:0b:24: d8:3f:c0:ba:da:29:b6:1c:a6:68:e2:c0:2b:58:7b:43:d0:75: 72:fa:8e:69:e4:c3:72:5c:77:ec:57:9b:1d:5e:e7:b2:1f:47: b9:f5:59:2d:f3:57:a9:26:9f:6f:60:84:a9:b7:5d:5b:e0:7c: 13:07:2a:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3m09XzNzg/gHAGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk NWM0YmQwMGMtMmYxMi00ZDJjLWIzZGEtZmQwYzFjNDgzNWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln6Fz9ykUJSMkJ16vEKIiPTyr/C8g3iOpOQN vqepPN/RodenHrDbEY0LaMa15yI8CErmDU1L5RwEJFcApG3YLgFINuuPAH8HB3m9 n2vVKmCMbxZ6ptD5rU1V/+jHbk261O/8g1k2e5Xo33kjnSVOzD+LgRxs/XW9QmGo I0BMSU+4BKw2Jg87ixIhx6zD1pVISIaN0Z7UZNnBGrPtgYdYm2goUZXDveJS0pBK FFaKjbWOBS1hgA69Aa1TiRPJRl6W4lxO2GghH6FWsJh+TvCt6zNdh04yxRr8gCMj OQUkOurg00eQ5up5JKXH4L9JVMPHTte+MiqP+NPozng/iZZlKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEDa2Qb+Uq1oYRqapUd3EkrPiRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNWQ1YTAxOWYtNGFkOC0z Zjk5LWFlYzAtNWQ4YTM1ODNjZjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG8nTGE5chmepgNb1SbHsa1Rp5XuAc/LKxDQCGxztrLGaOb39r8UFBwe YG2wa1CaTU1h32dCgPtaNDvbhVkCrRJ60Qbtno5J4/rYyBYNZuOwfuYL/W2S5UYY oLlzR0wDHIg7pux8tXJPbzQGS/0Bq61g3xFnH3FbIF8iHHGhUWDu3jBPg33w3KKv 5gCIR/7lk/OS8iMzJEwBA1WF/K+vOEmA2Tbb2ihlVMm+fyIghwhJ2TbJKFc41CMv SG3zzIeEqS3TP3MLJNg/wLraKbYcpmjiwCtYe0PQdXL6jmnkw3Jcd+xXmx1e57If R7n1WS3zV6kmn29ghKm3XVvgfBMHKl8= -----END CERTIFICATE-----Generated at Fri Apr 4 23:34:11 2025 by rpki-client