$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa File: 0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa (raw, json) Hash identifier: 9bGCa11slqICdwlTFXBUmdoqX57XWM8Yii6oI0sNZVY= Subject key identifier: A7:9B:76:F9:37:8D:74:A1:38:A6:78:C8:06:C8:00:B3:3D:CB:33:F6 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A03A544ECD2A080AE7A065B80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 14618 IP address blocks: 158.115.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:44:ec:d2:a0:80:ae:7a:06:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=136779b7-e07c-4f7c-a2b5-fd7c0a2c7f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:82:05:bb:e3:a3:63:7b:62:70:39:ff:0c:37: cd:1c:85:d4:b8:e4:c1:24:94:91:92:46:43:1a:e7: a9:5c:da:cb:63:d8:e8:69:0c:00:94:60:99:e2:f0: 81:b4:70:80:0e:73:f6:4c:67:cb:6a:34:7a:0d:14: d2:97:49:41:80:ca:f9:6e:bf:53:3e:98:d2:d9:e6: de:55:aa:3e:47:16:af:20:be:65:be:44:df:e2:8a: ca:d7:ee:04:58:af:92:da:65:7c:66:ea:1b:8d:10: 00:bf:4c:eb:f2:11:01:5a:67:2e:fa:98:46:85:55: e0:5a:25:94:9d:b3:c7:18:95:2d:9e:1a:10:e9:3a: c1:f1:68:cb:78:37:e3:a6:51:ec:c8:c8:df:3b:49: 69:5b:c3:0b:2d:bd:e5:dd:33:d5:01:ac:4e:65:86: d6:db:4f:97:19:1e:78:0c:03:08:d0:21:32:df:e8: d7:7f:db:a1:42:f6:da:56:c4:3a:fd:ce:18:b2:7f: 15:1d:36:9e:19:e3:5a:ce:17:6d:dd:99:0a:6a:bb: 7c:84:e6:4d:f8:2e:50:90:09:09:6b:e3:f9:2a:fd: 54:82:ae:62:7a:c8:ef:42:c2:6d:f5:18:53:33:01: f1:3d:14:2c:78:cd:a0:7e:f5:32:65:b1:e4:83:0e: 89:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:9B:76:F9:37:8D:74:A1:38:A6:78:C8:06:C8:00:B3:3D:CB:33:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/0495f8c9-74f9-35fa-b1ed-609f2ca7e573.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:c5:c7:6f:8e:21:9e:06:cd:8d:d0:60:13:7f:d2:9d:6e:9a: d5:d9:07:7b:82:31:0c:9c:03:98:91:d3:de:ff:e8:cc:9e:40: 61:c6:cd:49:cc:98:1f:28:7f:9a:03:ad:42:b1:5c:eb:1c:0e: a3:37:a9:e0:a6:20:18:88:12:fa:e8:0c:7d:e4:52:97:dc:85: 4f:90:d6:da:60:82:78:22:5d:b1:29:5a:cf:51:44:83:b2:13: 27:fd:e8:4b:5c:a1:d6:cd:cb:3a:f2:8f:54:11:01:e3:d8:2c: 33:82:b1:b4:7a:e0:6a:c6:cd:6c:f3:1b:be:02:2a:8b:8d:d3: b5:e8:96:b0:d0:97:15:54:f2:eb:0d:1a:cf:22:b7:d8:98:d6: 9b:02:95:ab:a6:af:87:14:fe:87:99:88:12:73:9a:8f:12:b5: f5:2f:99:62:7c:7d:ae:14:e2:8a:0c:99:f0:a4:c8:9b:d9:f9: 0f:54:65:a4:6c:14:89:9c:90:28:6e:ea:b7:e4:d3:e0:b5:f0: 56:78:86:34:c5:69:11:5b:53:3b:ad:8f:95:24:30:f4:62:5d: cf:2c:0a:53:a0:7a:0a:ba:9a:f9:1a:60:11:7e:d1:a7:b2:22: 28:e6:c1:da:92:8d:94:72:00:02:fe:64:44:97:e3:9d:97:da: 75:58:c9:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUTs0qCArnoGW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk MTM2Nzc5YjctZTA3Yy00ZjdjLWEyYjUtZmQ3YzBhMmM3ZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoIFu+OjY3ticDn/DDfNHIXUuOTBJJSRkkZD GuepXNrLY9joaQwAlGCZ4vCBtHCADnP2TGfLajR6DRTSl0lBgMr5br9TPpjS2ebe Vao+RxavIL5lvkTf4orK1+4EWK+S2mV8ZuobjRAAv0zr8hEBWmcu+phGhVXgWiWU nbPHGJUtnhoQ6TrB8WjLeDfjplHsyMjfO0lpW8MLLb3l3TPVAaxOZYbW20+XGR54 DAMI0CEy3+jXf9uhQvbaVsQ6/c4Ysn8VHTaeGeNazhdt3ZkKart8hOZN+C5QkAkJ a+P5Kv1Ugq5iesjvQsJt9RhTMwHxPRQseM2gfvUyZbHkgw6JvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKebdvk3jXShOKZ4yAbIALM9yzP2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMDQ5NWY4YzktNzRmOS0z NWZhLWIxZWQtNjA5ZjJjYTdlNTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3Fx2+OIZ4GzY3QYBN/0p1umtXZB3uCMQycA5iR097/6MyeQGHGzUnM mB8of5oDrUKxXOscDqM3qeCmIBiIEvroDH3kUpfchU+Q1tpggngiXbEpWs9RRIOy Eyf96EtcodbNyzryj1QRAePYLDOCsbR64GrGzWzzG74CKouN07XolrDQlxVU8usN Gs8it9iY1psClaumr4cU/oeZiBJzmo8StfUvmWJ8fa4U4ooMmfCkyJvZ+Q9UZaRs FImckChu6rfk0+C18FZ4hjTFaRFbUzutj5UkMPRiXc8sClOgegq6mvkaYBF+0aey IijmwdqSjZRyAAL+ZESX452X2nVYyVc= -----END CERTIFICATE-----Generated at Sun Jun 15 13:19:14 2025 by rpki-client