$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa File: 880caa1d-47af-334b-8051-595434b22264.roa (raw, json) Hash identifier: WdBBYzQJp9/IocByqblHSqx+rukICuU4q2B5Lfllnl4= Subject key identifier: 27:8A:86:C6:BB:9F:00:79:47:E9:3D:1D:DB:D1:1E:3D:7A:F5:B3:BB Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F43285848530AE6A89CC878FE5A3E6AC0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 14618 IP address blocks: 158.115.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:e6:a8:9c:c8:78:fe:5a:3e:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=9573cc72-1de3-4c47-beb5-94025633b939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:40:ce:66:1c:c3:39:f7:ab:0d:04:d3:9d:5e: 71:8f:9c:68:3d:a1:24:91:0e:23:b6:99:48:10:69: 72:3d:21:a5:ff:37:05:e2:2a:5c:7b:d6:21:d6:6f: 84:ec:63:8d:f5:97:84:16:f9:9d:f6:ac:47:9b:24: d0:cb:87:e6:42:30:ed:b7:01:12:f2:a0:89:70:ce: 98:be:8f:bc:30:c6:14:4c:83:f2:87:19:f4:66:1c: c3:9b:0e:04:e3:dc:b0:29:5c:16:d9:85:6f:51:0f: f4:d0:14:53:0b:26:a4:d7:68:db:04:ae:2d:87:ba: 81:c4:e0:43:ab:fb:4a:3d:54:45:a4:d1:fc:0f:71: 60:51:b2:08:d6:05:d1:d4:64:88:04:e3:f5:c4:12: 37:39:e5:d5:f9:68:66:cb:fa:7b:f7:6b:00:1b:05: 83:ca:e1:c9:43:96:f2:d5:9f:d5:b6:37:94:3c:fa: 63:44:7d:7b:b3:8f:b4:75:50:69:c6:a3:ae:b8:dc: 79:b9:fa:a7:16:ab:35:e7:fc:e6:c5:38:01:d9:2f: 7d:b6:31:68:c8:f5:62:32:df:83:30:ca:08:f1:17: 28:82:ea:89:53:eb:30:f4:b8:d3:17:39:e6:f5:6a: a4:81:05:fc:13:aa:ff:41:29:13:f5:2e:ac:35:c4: 92:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8A:86:C6:BB:9F:00:79:47:E9:3D:1D:DB:D1:1E:3D:7A:F5:B3:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:d8:1a:e3:42:5f:a4:72:3b:28:b9:c9:b9:59:9d:07:83:b5: cd:af:08:69:74:7f:67:91:65:ed:cc:11:80:f7:cf:fc:41:11: cf:78:2a:ba:f0:0e:dd:9a:f9:86:a0:2a:2d:60:0d:61:e0:45: f3:e0:08:24:ac:8b:5b:1e:de:46:eb:a4:92:31:71:65:b2:07: db:57:a1:ba:7b:ba:3d:66:92:0a:4a:47:cc:19:e7:8b:95:c6: c8:0b:86:52:c6:69:10:98:b9:2e:b1:9f:54:f9:b4:30:3c:20: 91:d8:0c:2b:5d:6b:34:ed:dd:f2:5c:f3:ff:ae:34:be:50:2b: c0:15:35:ad:81:0a:45:73:b4:68:f3:2c:1a:2c:7c:14:31:a6: 76:b6:38:a2:e8:e1:8a:d6:e2:48:a5:e0:ca:05:0d:29:98:60: cd:2f:11:77:3f:4a:81:9b:13:a1:c1:ec:8c:b8:30:2a:34:45: bd:e3:65:15:13:f5:85:bd:ab:75:ba:c8:a1:2a:d3:9c:6b:0f: 50:f8:b5:89:f1:30:8a:3d:43:9b:58:f9:f1:3d:dc:54:7d:06: 76:5e:68:3f:c2:8b:c2:f2:49:b7:71:98:64:ed:77:0d:6c:31: a2:64:95:ef:68:2a:f7:62:1f:09:2c:47:e3:44:25:5b:4f:f4: c0:e4:e4:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCuaonMh4/lo+asAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk OTU3M2NjNzItMWRlMy00YzQ3LWJlYjUtOTQwMjU2MzNiOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEDOZhzDOferDQTTnV5xj5xoPaEkkQ4jtplI EGlyPSGl/zcF4ipce9Yh1m+E7GON9ZeEFvmd9qxHmyTQy4fmQjDttwES8qCJcM6Y vo+8MMYUTIPyhxn0ZhzDmw4E49ywKVwW2YVvUQ/00BRTCyak12jbBK4th7qBxOBD q/tKPVRFpNH8D3FgUbII1gXR1GSIBOP1xBI3OeXV+Whmy/p792sAGwWDyuHJQ5by 1Z/VtjeUPPpjRH17s4+0dVBpxqOuuNx5ufqnFqs15/zmxTgB2S99tjFoyPViMt+D MMoI8RcoguqJU+sw9LjTFznm9WqkgQX8E6r/QSkT9S6sNcSSAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeKhsa7nwB5R+k9HdvRHj169bO7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvODgwY2FhMWQtNDdhZi0z MzRiLTgwNTEtNTk1NDM0YjIyMjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnONMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrYGuNCX6RyOyi5yblZnQeDtc2vCGl0f2eRZe3MEYD3z/xBEc94Krrw Dt2a+YagKi1gDWHgRfPgCCSsi1se3kbrpJIxcWWyB9tXobp7uj1mkgpKR8wZ54uV xsgLhlLGaRCYuS6xn1T5tDA8IJHYDCtdazTt3fJc8/+uNL5QK8AVNa2BCkVztGjz LBosfBQxpna2OKLo4YrW4kil4MoFDSmYYM0vEXc/SoGbE6HB7Iy4MCo0Rb3jZRUT 9YW9q3W6yKEq05xrD1D4tYnxMIo9Q5tY+fE93FR9BnZeaD/Ci8LySbdxmGTtdw1s MaJkle9oKvdiHwksR+NEJVtP9MDk5GQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:02 2025 by rpki-client