$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5b6a634-bc52-39b8-876d-0b94104de19b.roa File: d5b6a634-bc52-39b8-876d-0b94104de19b.roa (raw, json) Hash identifier: oy9ALRdHyxUWfDv0Pl0DacAU5UHuOvUT0qDx9300who= Subject key identifier: 67:7A:D5:48:E9:8A:90:10:8F:2A:5B:5B:B4:2D:A8:71:44:4E:C2:85 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F432858493243DC7BBAA51A891F5B9C80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5b6a634-bc52-39b8-876d-0b94104de19b.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 395831 IP address blocks: 158.115.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:dc:7b:ba:a5:1a:89:1f:5b:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=25e6e89b-4c70-43f9-9071-46ace854d237 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:21:02:c4:d1:df:aa:07:46:2d:d6:80:09:f8: 35:8d:0f:3c:90:21:e4:25:29:1e:78:e4:fd:19:6b: 17:27:e0:78:bc:88:39:ad:8a:d5:48:65:f3:03:7f: 58:6a:4b:a7:f0:3e:ce:6a:85:bc:48:e0:68:9f:ab: 93:a9:89:ac:3e:b5:d9:e8:90:0e:07:44:be:df:11: 48:74:de:08:84:6a:e4:d1:d9:59:02:3b:22:69:60: ba:ae:e5:b5:73:ad:04:6c:90:10:ce:93:4f:65:bf: bc:c4:98:90:88:46:7e:a9:3d:48:ab:02:35:17:5c: 2f:0c:01:35:98:9d:91:3c:76:47:94:8e:69:46:e9: aa:94:25:c1:82:3a:8a:af:39:c4:90:5d:c4:d1:05: 09:a7:5b:13:33:45:db:ca:fa:87:92:b0:89:81:25: ea:f9:03:b2:3a:2b:37:b0:c9:af:f6:b1:bf:67:bd: 7b:72:33:c9:ee:91:88:36:2b:72:fe:40:e8:fb:fe: 45:07:12:ca:fb:65:c7:7d:3c:d0:ae:75:7e:da:61: eb:08:9b:98:2c:eb:07:cf:0d:31:5f:72:1d:d5:ff: b3:0d:c4:1d:ee:fb:2c:05:33:dc:a5:9c:81:55:99: a0:0f:9c:4f:7d:1c:db:99:c1:e2:8d:96:d4:b5:8f: f1:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7A:D5:48:E9:8A:90:10:8F:2A:5B:5B:B4:2D:A8:71:44:4E:C2:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/d5b6a634-bc52-39b8-876d-0b94104de19b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:14:f4:e8:04:f3:d8:54:01:2c:c1:d3:16:be:ce:70:4b:09: 22:20:e3:24:10:5b:a1:45:34:37:66:24:a5:8e:bb:3b:5e:08: 96:44:2e:11:54:45:53:a2:1d:ea:5e:ab:db:71:2f:45:eb:e8: b1:ea:d2:be:61:04:0a:19:73:d9:84:1b:bb:53:67:97:3f:1b: 37:17:3c:dc:6c:86:d7:98:ff:c2:75:21:44:ea:87:b4:6e:fe: a9:27:fe:d7:4c:b7:42:7b:b5:75:3a:df:97:d3:64:cf:83:60: ad:d0:cf:a1:22:d4:6b:4c:5a:1e:e6:5c:ea:96:92:28:6c:ef: 23:48:a9:87:82:44:d6:16:67:33:f7:3f:86:b4:65:23:99:fe: 85:8b:63:54:e4:b0:5f:ca:67:bf:f2:74:21:db:30:59:76:83: ef:12:f5:2e:e6:79:d7:5d:a0:ee:7b:ee:ac:08:17:aa:11:11: 89:f6:36:58:08:04:aa:29:6b:03:ba:ec:58:0e:0e:43:fa:a9: 31:4b:f9:ad:a0:6b:71:9c:fd:e0:c9:d7:82:41:b1:d1:b0:97: 2b:8b:39:eb:c2:dd:c9:5f:c3:95:45:12:fb:02:a1:c2:a7:17: 50:88:62:2f:ad:b1:a2:0a:d7:76:06:6d:66:cb:38:ba:2d:16: ae:33:61:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ9x7uqUaiR9bnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk MjVlNmU4OWItNGM3MC00M2Y5LTkwNzEtNDZhY2U4NTRkMjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSECxNHfqgdGLdaACfg1jQ88kCHkJSkeeOT9 GWsXJ+B4vIg5rYrVSGXzA39Yakun8D7OaoW8SOBon6uTqYmsPrXZ6JAOB0S+3xFI dN4IhGrk0dlZAjsiaWC6ruW1c60EbJAQzpNPZb+8xJiQiEZ+qT1IqwI1F1wvDAE1 mJ2RPHZHlI5pRumqlCXBgjqKrznEkF3E0QUJp1sTM0XbyvqHkrCJgSXq+QOyOis3 sMmv9rG/Z717cjPJ7pGINity/kDo+/5FBxLK+2XHfTzQrnV+2mHrCJuYLOsHzw0x X3Id1f+zDcQd7vssBTPcpZyBVZmgD5xPfRzbmcHijZbUtY/xZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGd61UjpipAQjypbW7QtqHFETsKFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZDViNmE2MzQtYmM1Mi0z OWI4LTg3NmQtMGI5NDEwNGRlMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnONMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoU9OgE89hUASzB0xa+znBLCSIg4yQQW6FFNDdmJKWOuzteCJZELhFU RVOiHepeq9txL0Xr6LHq0r5hBAoZc9mEG7tTZ5c/GzcXPNxshteY/8J1IUTqh7Ru /qkn/tdMt0J7tXU635fTZM+DYK3Qz6Ei1GtMWh7mXOqWkihs7yNIqYeCRNYWZzP3 P4a0ZSOZ/oWLY1TksF/KZ7/ydCHbMFl2g+8S9S7medddoO577qwIF6oREYn2NlgI BKopawO67FgODkP6qTFL+a2ga3Gc/eDJ14JBsdGwlyuLOevC3clfw5VFEvsCocKn F1CIYi+tsaIK13YGbWbLOLotFq4zYQY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:37:14 2025 by rpki-client