$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa File: c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa (raw, json) Hash identifier: 9O3WL5W05vWniNRaMSzSH6FUr1IWSk72tJSw+1zLJFo= Subject key identifier: 35:ED:BD:B3:83:B4:39:04:69:4F:7A:A3:BE:84:99:77:A3:B6:55:49 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584930DE6ACD6D20B838AE078C40 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 395831 IP address blocks: 216.157.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6a:cd:6d:20:b8:38:ae:07:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=60d7d0d5-fb35-436f-9086-2a744f2abe3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6c:5e:c2:93:b7:6d:c7:f7:64:e9:2a:c6:cb: fb:d5:f4:1e:33:2b:8a:21:f0:d3:92:c2:fd:12:71: fc:ae:59:47:a3:1b:01:ce:e7:d1:89:1d:25:4c:85: 10:db:96:ee:65:84:0c:a5:6c:7d:38:91:30:9e:d8: b6:cd:79:e3:36:8d:e9:0a:23:e5:2b:37:1c:08:a0: 81:85:4d:ac:15:78:0e:29:47:a5:77:0d:05:51:d1: 7e:96:20:0f:c1:ca:a1:28:51:e6:bf:23:0b:6c:bf: f9:8d:db:f3:fe:08:fa:18:67:a9:a7:b8:79:2a:06: 31:49:79:72:f2:9e:ac:b6:c5:26:6f:bb:8f:b7:a8: 45:c3:3a:3e:cd:b7:f2:cf:6a:0d:cb:b5:2d:78:4e: dd:66:00:ee:94:6b:84:91:fc:4e:ad:ae:4e:b3:00: 5a:0e:e3:9b:99:4c:7b:21:ef:3e:ed:ca:7e:0f:f6: 9d:6d:e9:98:62:ef:cb:cb:10:3a:91:10:7f:19:f7: 77:07:7b:ae:35:0c:99:78:96:3d:a9:39:9f:5d:5f: 0f:b6:82:e0:f0:26:52:25:2b:54:20:5a:60:ce:95: 54:35:6c:08:4f:bf:17:74:85:ac:d5:6a:02:eb:89: 66:b8:a4:10:ae:bb:e5:8a:13:7b:a8:25:93:4f:b9: 92:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:ED:BD:B3:83:B4:39:04:69:4F:7A:A3:BE:84:99:77:A3:B6:55:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c2fd3f1d-7df7-3ce0-9230-7aa700cdb64a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:c7:d3:b1:bc:52:fc:5e:99:26:cb:33:12:4c:94:3d:be:45: 80:e4:94:4e:e4:83:b9:dd:dd:49:ba:aa:42:9d:25:ac:2f:eb: 4c:ae:19:13:6b:c6:99:53:1a:a4:97:ce:d3:a6:f3:af:47:f4: e6:fc:60:0c:7e:d1:74:a7:5b:26:21:05:c8:ef:7d:b1:5a:a3: 2d:a0:d5:80:22:b5:4d:92:8b:7e:af:1b:44:9a:e7:b1:93:74: b4:3c:4c:0b:ed:9f:0e:08:af:a5:3f:04:b5:62:ca:fe:92:6b: 7a:23:f7:be:45:12:6a:16:d1:e9:9f:ce:7b:ed:7d:e2:68:ad: 99:66:81:70:a3:98:ed:e9:a4:8b:18:e0:d4:f1:2f:e9:f4:3b: fc:73:25:12:fd:85:87:20:34:53:ea:12:23:f0:8f:f9:a8:0f: ee:aa:27:76:15:96:dd:0e:6f:72:db:7b:93:73:73:b6:f3:d0: 44:00:74:90:a3:6e:dc:82:ce:90:0d:45:ce:7f:9a:0e:2b:66: f2:00:dd:9d:d9:ad:ea:7f:33:67:e4:15:59:23:a7:23:7b:cd: 1c:bf:10:5e:bd:76:af:5f:d2:02:87:b9:1c:e2:43:1e:d6:b0: 08:30:15:0f:d9:cf:6f:df:7b:a8:98:e2:fe:d8:b3:7d:56:12: 94:31:af:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mrNbSC4OK4HjEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk NjBkN2QwZDUtZmIzNS00MzZmLTkwODYtMmE3NDRmMmFiZTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmxewpO3bcf3ZOkqxsv71fQeMyuKIfDTksL9 EnH8rllHoxsBzufRiR0lTIUQ25buZYQMpWx9OJEwnti2zXnjNo3pCiPlKzccCKCB hU2sFXgOKUeldw0FUdF+liAPwcqhKFHmvyMLbL/5jdvz/gj6GGepp7h5KgYxSXly 8p6stsUmb7uPt6hFwzo+zbfyz2oNy7UteE7dZgDulGuEkfxOra5OswBaDuObmUx7 Ie8+7cp+D/adbemYYu/LyxA6kRB/Gfd3B3uuNQyZeJY9qTmfXV8PtoLg8CZSJStU IFpgzpVUNWwIT78XdIWs1WoC64lmuKQQrrvlihN7qCWTT7mSpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXtvbODtDkEaU96o76EmXejtlVJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYzJmZDNmMWQtN2RmNy0z Y2UwLTkyMzAtN2FhNzAwY2RiNjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ3H07G8UvxemSbLMxJMlD2+RYDklE7kg7nd3Um6qkKdJawv60yuGRNr xplTGqSXztOm869H9Ob8YAx+0XSnWyYhBcjvfbFaoy2g1YAitU2Si36vG0Sa57GT dLQ8TAvtnw4Ir6U/BLViyv6Sa3oj975FEmoW0emfznvtfeJorZlmgXCjmO3ppIsY 4NTxL+n0O/xzJRL9hYcgNFPqEiPwj/moD+6qJ3YVlt0Ob3Lbe5Nzc7bz0EQAdJCj btyCzpANRc5/mg4rZvIA3Z3Zrep/M2fkFVkjpyN7zRy/EF69dq9f0gKHuRziQx7W sAgwFQ/Zz2/fe6iY4v7Ys31WEpQxr/c= -----END CERTIFICATE-----Generated at Sat Apr 5 12:32:40 2025 by rpki-client