$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa File: 1cafc32e-37ff-3be5-8b34-b31586912636.roa (raw, json) Hash identifier: wIJnR84DYv6M9qzP/hSKU02Tzbjs0ndP6RMHIH3lwK8= Subject key identifier: 9E:E3:20:D6:41:C2:D4:7F:9D:55:FF:90:33:C9:C2:C0:BB:17:41:3F Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F43285848DBD665E5FB4E11FAD6E7ACF0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa Signing time: Wed 12 Feb 2025 14:00:53 +0000 ROA not before: Wed 12 Feb 2025 14:00:53 +0000 ROA not after: Tue 13 May 2025 13:00:53 +0000 asID: 16509 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:db:d6:65:e5:fb:4e:11:fa:d6:e7:ac:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Feb 12 14:00:53 2025 GMT Not After : May 13 13:00:53 2025 GMT Subject: CN=0b492e39-d0db-43dd-b910-a4f1d40c9092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:83:85:55:d2:a9:21:77:73:2d:6e:59:fc: a5:2d:0c:a6:6f:38:b4:32:ad:c9:cb:85:95:5d:a0: ec:27:ed:67:0f:c7:4d:bc:62:f5:93:bb:6d:19:d4: a3:df:a8:9a:69:1f:f5:55:de:f5:fd:b2:46:53:7d: ca:8e:0c:72:6b:ac:0c:76:c0:9c:10:4d:a2:a7:f3: 79:7f:dd:5a:59:6e:f1:a6:01:ac:a4:51:96:d7:0b: de:55:6f:88:bb:17:45:7f:da:8d:f7:4e:09:4b:b2: 83:12:7f:14:d5:ff:c3:f1:37:4e:e3:e1:0d:4d:a6: 30:f2:ad:71:a0:db:32:4f:d2:76:71:b0:ac:f4:be: 09:b3:f4:f8:5c:86:f2:5a:05:2d:28:09:75:3c:c7: d6:c4:b3:2b:b3:c2:8a:b3:a5:bc:34:64:8b:f9:3c: 04:99:54:85:6c:c5:7d:76:bb:43:09:0a:ef:57:2f: 0c:03:77:66:93:b9:8d:a1:5a:b1:34:2a:ab:a3:9b: d5:3e:43:2e:12:d0:8e:14:b3:bb:0e:a0:14:fb:db: 0e:82:dc:96:83:d7:36:3c:93:a9:b4:80:26:fd:ec: fa:83:d2:d0:4e:8b:fe:a7:7d:63:e9:73:e5:10:2c: f3:4c:31:67:02:71:44:a5:3a:0b:dd:70:f2:b6:84: 21:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E3:20:D6:41:C2:D4:7F:9D:55:FF:90:33:C9:C2:C0:BB:17:41:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ae:dd:33:9c:94:bb:4d:25:97:06:00:a7:ea:66:22:fb:26: 4f:49:0b:27:96:0f:f9:4a:78:8d:ad:10:66:23:3b:6f:64:48: f7:5f:bd:08:a0:15:c6:fd:0c:5a:42:b5:06:22:8a:0c:6c:4f: 56:d2:c6:32:ad:a6:0b:58:45:8d:cc:bd:40:31:70:e2:4c:72: a3:d3:bc:54:b7:0a:76:e7:65:96:5d:f5:7d:cf:c6:bb:97:9a: 92:d9:0e:fe:c2:cd:86:ee:36:2d:8f:2a:a8:2e:19:a1:96:71: 7b:1b:66:42:15:e7:89:a5:08:66:d9:05:1c:e5:50:fe:17:16: 0a:28:7f:4f:81:84:fa:9b:6b:25:5e:f7:b1:75:51:12:2a:68: 3b:59:50:e3:a8:c0:e4:0a:d5:1f:ea:31:ee:78:61:b3:4c:27: c8:ff:ce:8c:a1:f2:32:9e:90:c3:a7:26:8e:2e:11:d1:75:06: 6e:6d:08:c9:3a:55:e2:33:56:28:55:ee:da:71:ae:64:33:7d: fd:ca:ba:5e:b4:ca:47:20:ac:21:e6:b1:bd:fe:08:e6:0c:56: 81:71:cd:71:41:1a:e9:be:34:77:3d:24:e2:0c:24:80:85:6b: 27:e2:61:a0:75:bd:4e:91:46:3e:c4:7d:48:d9:cf:4d:ff:4e: f9:71:68:29 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEjb1mXl+04R+tbnrPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDIxMjE0MDA1M1oXDTI1MDUxMzEzMDA1M1owLzEtMCsGA1UEAxMk MGI0OTJlMzktZDBkYi00M2RkLWI5MTAtYTRmMWQ0MGM5MDkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAteyDhVXSqSF3cy1uWfylLQymbzi0Mq3Jy4WV XaDsJ+1nD8dNvGL1k7ttGdSj36iaaR/1Vd71/bJGU33Kjgxya6wMdsCcEE2ip/N5 f91aWW7xpgGspFGW1wveVW+IuxdFf9qN904JS7KDEn8U1f/D8TdO4+ENTaYw8q1x oNsyT9J2cbCs9L4Js/T4XIbyWgUtKAl1PMfWxLMrs8KKs6W8NGSL+TwEmVSFbMV9 drtDCQrvVy8MA3dmk7mNoVqxNCqro5vVPkMuEtCOFLO7DqAU+9sOgtyWg9c2PJOp tIAm/ez6g9LQTov+p31j6XPlECzzTDFnAnFEpToL3XDytoQhhwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFJ7jINZBwtR/nVX/kDPJwsC7F0E/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMWNhZmMzMmUtMzdmZi0z YmU1LThiMzQtYjMxNTg2OTEyNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEADK7dM5yUu00llwYAp+pmIvsmT0kLJ5YP +Up4ja0QZiM7b2RI91+9CKAVxv0MWkK1BiKKDGxPVtLGMq2mC1hFjcy9QDFw4kxy o9O8VLcKdudlll31fc/Gu5eaktkO/sLNhu42LY8qqC4ZoZZxextmQhXniaUIZtkF HOVQ/hcWCih/T4GE+ptrJV73sXVREipoO1lQ46jA5ArVH+ox7nhhs0wnyP/OjKHy Mp6Qw6cmji4R0XUGbm0IyTpV4jNWKFXu2nGuZDN9/cq6XrTKRyCsIeaxvf4I5gxW gXHNcUEa6b40dz0k4gwkgIVrJ+JhoHW9TpFGPsR9SNnPTf9O+XFoKQ== -----END CERTIFICATE-----Generated at Sat Apr 26 16:35:37 2025 by rpki-client