$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa File: 1cafc32e-37ff-3be5-8b34-b31586912636.roa (raw, json) Hash identifier: EiH6j3vdoHIu5BU3ipV1dJA7WOZQABKgAppCXcPowDM= Subject key identifier: 0C:0B:AF:FC:7D:E5:3E:41:9C:5D:A3:C1:83:9E:F4:DC:0D:29:DA:75 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A9A662DF6780ACEC3A0840F90 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa Signing time: Tue 22 Jul 2025 13:01:03 +0000 ROA not before: Tue 22 Jul 2025 13:01:03 +0000 ROA not after: Mon 20 Oct 2025 13:01:03 +0000 asID: 16509 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9a:66:2d:f6:78:0a:ce:c3:a0:84:0f:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jul 22 13:01:03 2025 GMT Not After : Oct 20 13:01:03 2025 GMT Subject: CN=c31aa5ba-c48d-4ce7-ba7f-30cefb43c236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b1:03:5a:de:7a:33:70:10:ff:12:5c:ba:a1: 45:cd:d6:50:a5:a0:dd:30:8e:7d:58:7c:79:1a:0f: 1b:2f:c0:40:7a:4b:f0:2a:31:93:d5:64:f4:ce:4a: 2e:8b:7f:03:57:08:d7:f8:17:33:07:fe:a9:31:b5: 5f:31:47:62:70:3e:86:e2:d8:6a:d7:ff:5d:8d:42: 93:14:60:51:83:c1:5d:80:4f:ba:5f:d5:13:1f:ff: a1:7f:1f:82:b5:bc:89:b2:51:de:e6:81:f1:22:29: d8:dd:6a:09:fc:0b:82:a5:0a:67:94:4e:f4:46:1e: 9b:13:05:85:c1:1b:f0:9a:55:0d:38:3d:41:93:cf: 3a:2f:b4:7c:2a:26:c4:46:92:bd:b1:5e:6d:bf:2e: ed:17:0b:58:5e:bf:cc:6c:28:f1:14:4b:ff:b2:1a: d7:67:95:aa:e8:a7:cb:fd:6a:fa:ad:0e:f2:87:c7: 8a:a8:cb:f5:fe:ba:0e:7f:de:02:5a:57:81:de:bb: 23:f1:2e:04:da:b0:0b:1c:8a:99:61:b3:50:94:65: 00:f0:ac:42:28:1c:9b:85:ad:0b:2c:db:a4:47:38: 98:30:ff:0f:88:88:22:e9:3f:26:c7:48:cb:b8:2e: 3d:b3:ac:10:56:17:16:b1:a0:74:af:e8:df:1d:5d: 9d:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0B:AF:FC:7D:E5:3E:41:9C:5D:A3:C1:83:9E:F4:DC:0D:29:DA:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:eb:8e:1f:5f:32:52:43:9e:3e:fd:ef:4e:bd:bf:02:b3:7e: de:03:fe:87:3c:c7:fd:14:9b:0a:82:1b:e9:d8:ee:89:e8:2f: 5b:c4:1d:dd:43:9d:e3:9e:df:3a:02:1e:d2:3a:e5:d5:fe:60: 15:59:6c:4d:4e:2a:3d:bb:f6:53:53:63:3a:25:f3:bb:0f:52: f4:b2:0c:ee:71:96:33:fb:64:6d:68:d2:f7:11:01:01:35:f0: 81:31:db:14:9e:be:14:d9:49:fe:c3:b6:0c:73:be:bc:12:ea: 55:3c:a0:31:2f:d0:a3:2a:39:6e:6c:ae:6b:d6:5d:5e:1e:5b: 81:20:0a:57:bf:3a:7f:a6:2e:53:74:23:e7:9f:7f:65:8d:f7: 46:0f:2a:10:c2:6d:a5:df:44:58:9f:a1:8a:65:dc:ca:cb:21: 07:a9:14:8e:17:4c:48:80:41:93:56:d8:8f:af:92:4b:8e:e7: b6:b4:14:67:cc:a9:da:0c:f7:98:d7:0d:2a:b0:5c:ad:d7:39: a5:98:af:ad:93:77:75:8e:f4:75:4c:e7:80:db:9f:19:5a:68: 6f:fd:d3:14:26:b1:e6:8e:e0:44:c1:7d:0f:1e:28:12:5e:f6: 07:1c:7f:57:ab:76:75:1d:ff:06:dc:0a:88:0b:6f:ef:2e:c1: 75:51:b7:5b -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEqaZi32eArOw6CED5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDcyMjEzMDEwM1oXDTI1MTAyMDEzMDEwM1owLzEtMCsGA1UEAxMk YzMxYWE1YmEtYzQ4ZC00Y2U3LWJhN2YtMzBjZWZiNDNjMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rEDWt56M3AQ/xJcuqFFzdZQpaDdMI59WHx5 Gg8bL8BAekvwKjGT1WT0zkoui38DVwjX+BczB/6pMbVfMUdicD6G4thq1/9djUKT FGBRg8FdgE+6X9UTH/+hfx+CtbyJslHe5oHxIinY3WoJ/AuCpQpnlE70Rh6bEwWF wRvwmlUNOD1Bk886L7R8KibERpK9sV5tvy7tFwtYXr/MbCjxFEv/shrXZ5Wq6KfL /Wr6rQ7yh8eKqMv1/roOf94CWleB3rsj8S4E2rALHIqZYbNQlGUA8KxCKBybha0L LNukRziYMP8PiIgi6T8mx0jLuC49s6wQVhcWsaB0r+jfHV2drwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFAwLr/x95T5BnF2jwYOe9NwNKdp1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMWNhZmMzMmUtMzdmZi0z YmU1LThiMzQtYjMxNTg2OTEyNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADeuOH18yUkOePv3vTr2/ArN+3gP+hzzH /RSbCoIb6djuiegvW8Qd3UOd457fOgIe0jrl1f5gFVlsTU4qPbv2U1NjOiXzuw9S 9LIM7nGWM/tkbWjS9xEBATXwgTHbFJ6+FNlJ/sO2DHO+vBLqVTygMS/Qoyo5bmyu a9ZdXh5bgSAKV786f6YuU3Qj559/ZY33Rg8qEMJtpd9EWJ+himXcysshB6kUjhdM SIBBk1bYj6+SS47ntrQUZ8yp2gz3mNcNKrBcrdc5pZivrZN3dY70dUzngNufGVpo b/3TFCax5o7gRMF9Dx4oEl72Bxx/V6t2dR3/BtwKiAtv7y7BdVG3Ww== -----END CERTIFICATE-----Generated at Thu Aug 7 04:44:41 2025 by rpki-client