$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a5c5b016-cf10-329d-abb7-002e0ccfb803.roa File: a5c5b016-cf10-329d-abb7-002e0ccfb803.roa (raw, json) Hash identifier: v3kD+1tCUFasHJvkRa5fojggsfmTEUIWJnLKUrta8H4= Subject key identifier: 31:D2:CF:37:45:39:74:47:F0:9E:A4:A6:86:4A:E9:6C:42:82:C3:AA Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F43285848A99626D18E1E3BEF0E942A80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a5c5b016-cf10-329d-abb7-002e0ccfb803.roa Signing time: Sat 25 Jan 2025 14:00:52 +0000 ROA not before: Sat 25 Jan 2025 14:00:52 +0000 ROA not after: Fri 25 Apr 2025 13:00:52 +0000 asID: 395831 IP address blocks: 158.115.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a9:96:26:d1:8e:1e:3b:ef:0e:94:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jan 25 14:00:52 2025 GMT Not After : Apr 25 13:00:52 2025 GMT Subject: CN=2c43bcfb-735b-4c06-a9d8-299211caef16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:be:c9:c9:77:07:db:47:57:92:93:c1:25:81: 21:00:c6:fa:c3:55:5e:44:7b:a5:f8:96:fc:55:10: c4:8e:fe:3a:b0:d2:b8:6a:ae:c1:0d:a7:a8:e5:24: b6:4d:4e:48:90:b9:eb:f9:0c:1a:30:a8:52:d2:72: cc:a0:fe:14:1f:6b:b3:9a:59:5a:e5:71:37:9e:c0: 2d:3a:69:65:d8:10:2b:c3:17:71:d6:cd:51:f9:5d: 83:bd:87:91:3a:7f:a7:59:4b:06:66:fc:2e:5b:6c: 0d:99:04:85:7c:5a:33:d8:95:4a:22:b8:26:de:0d: da:7b:07:2c:3f:44:2e:7a:b7:57:15:c4:51:7f:3c: d0:92:be:64:8f:48:6f:23:03:49:f3:97:b9:76:6d: b5:27:81:e7:93:60:93:56:35:87:a5:c4:6c:cf:cb: 2b:5e:5c:0a:da:05:1a:a2:94:54:51:22:0b:5c:45: f7:ac:1c:0e:6e:71:9d:bf:05:2b:9e:11:a9:0f:81: c2:0e:5d:16:08:61:fc:46:fa:e3:15:d5:6c:7f:be: 10:66:22:26:22:fb:9f:a8:56:de:77:32:55:51:aa: d5:27:c9:e6:7f:17:1c:41:b7:20:0c:3d:ac:02:a9: d4:a9:76:d4:21:7e:00:21:48:a9:65:b2:91:5e:38: c0:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:D2:CF:37:45:39:74:47:F0:9E:A4:A6:86:4A:E9:6C:42:82:C3:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/a5c5b016-cf10-329d-abb7-002e0ccfb803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:74:f4:e2:19:fa:13:2d:89:d5:b0:ae:3d:25:69:e0:4c:0b: 39:78:fe:35:8b:04:42:4c:b1:bb:b6:b4:c1:de:fd:23:b5:44: 62:59:59:dc:e4:cf:94:aa:bb:35:93:b2:d4:5d:37:ac:cf:c1: 8d:da:46:30:25:e4:11:20:78:8e:4f:e5:e2:fe:78:56:98:70: 35:26:13:3a:e9:72:fe:b4:ee:9c:06:37:09:fb:f4:68:63:04: 61:dd:19:f3:f8:de:43:6c:03:c9:d7:1e:54:40:e1:a6:2a:1e: b6:2a:83:a4:58:60:7b:3e:a4:a3:29:32:00:1e:7d:92:3e:9c: 18:39:92:17:ae:e0:4a:0c:ed:ef:40:7e:0e:6f:cf:94:ee:8e: a5:b9:1b:0b:3b:dd:60:4c:39:bf:a2:59:57:60:3b:e9:40:1f: 4b:30:5e:65:a6:d1:8b:3a:0f:17:5d:2d:53:06:f6:16:41:bf: ac:93:7c:7a:06:2e:0a:e9:2a:80:2a:53:59:db:4f:61:f7:f9: 6f:92:4f:7a:47:c1:49:4a:f4:04:4c:d1:d5:29:2b:9f:82:8f: 06:7c:7f:ce:e7:ed:87:58:05:20:60:53:0e:ac:74:21:5e:a0: 1d:e2:46:77:4f:a0:f5:66:74:12:44:da:93:48:ee:6f:ce:9c: fc:50:30:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiplibRjh477w6UKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDEyNTE0MDA1MloXDTI1MDQyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmM0M2JjZmItNzM1Yi00YzA2LWE5ZDgtMjk5MjExY2FlZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b7JyXcH20dXkpPBJYEhAMb6w1VeRHul+Jb8 VRDEjv46sNK4aq7BDaeo5SS2TU5IkLnr+QwaMKhS0nLMoP4UH2uzmlla5XE3nsAt Omll2BArwxdx1s1R+V2DvYeROn+nWUsGZvwuW2wNmQSFfFoz2JVKIrgm3g3aewcs P0QuerdXFcRRfzzQkr5kj0hvIwNJ85e5dm21J4Hnk2CTVjWHpcRsz8srXlwK2gUa opRUUSILXEX3rBwObnGdvwUrnhGpD4HCDl0WCGH8RvrjFdVsf74QZiImIvufqFbe dzJVUarVJ8nmfxccQbcgDD2sAqnUqXbUIX4AIUipZbKRXjjA0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHSzzdFOXRH8J6kpoZK6WxCgsOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYTVjNWIwMTYtY2YxMC0z MjlkLWFiYjctMDAyZTBjY2ZiODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJx09OIZ+hMtidWwrj0laeBMCzl4/jWLBEJMsbu2tMHe/SO1RGJZWdzk z5SquzWTstRdN6zPwY3aRjAl5BEgeI5P5eL+eFaYcDUmEzrpcv607pwGNwn79Ghj BGHdGfP43kNsA8nXHlRA4aYqHrYqg6RYYHs+pKMpMgAefZI+nBg5kheu4EoM7e9A fg5vz5TujqW5Gws73WBMOb+iWVdgO+lAH0swXmWm0Ys6DxddLVMG9hZBv6yTfHoG LgrpKoAqU1nbT2H3+W+ST3pHwUlK9ARM0dUpK5+CjwZ8f87n7YdYBSBgUw6sdCFe oB3iRndPoPVmdBJE2pNI7m/OnPxQMK8= -----END CERTIFICATE-----Generated at Sat Apr 5 12:34:42 2025 by rpki-client