$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa File: 2613f3f7-60d2-3644-87f5-381f608c7546.roa (raw, json) Hash identifier: Y0Hu2LxCntMF7GsaR2u5N0uqC+0bgZfWnfqUsmVn2ow= Subject key identifier: CA:F6:A6:57:61:ED:04:21:55:20:83:2E:EE:ED:C3:D9:B5:21:BB:13 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584930DE6AC06965E67D6A9AD180 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 216.157.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6a:c0:69:65:e6:7d:6a:9a:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=804ca54d-1e69-45d7-9feb-f939ea790837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:98:a1:e4:8f:bc:12:33:ff:03:c0:1b:05:36: 3f:e4:58:39:f5:6d:0b:03:ef:e9:ac:95:30:2d:ce: ff:76:f7:59:c0:93:94:c2:6e:70:67:49:e4:2f:20: ca:89:02:4b:58:39:e5:fc:a3:73:ec:a5:cc:c6:75: 67:82:f5:70:0c:81:b2:74:10:2b:c4:c2:31:dd:25: b0:5b:17:17:43:f5:af:79:6d:b9:13:8e:b3:f3:23: 95:a2:33:2d:3c:eb:85:79:23:78:c2:90:6a:f8:9b: e9:54:ff:6f:0c:dd:95:5c:1e:c7:27:2d:8b:04:1c: ee:0f:04:93:6a:b9:92:38:40:f7:ad:ee:c0:fa:89: 83:a5:b8:37:3e:20:50:ca:6e:68:a7:8b:2f:65:89: 1e:77:9a:9b:b5:fc:93:92:58:8a:c7:1e:f8:2b:0c: 78:d3:3e:9b:3b:24:e0:c9:8b:75:28:13:bd:3a:f9: 71:3a:10:96:8b:ca:3c:36:72:b8:e3:83:e8:cd:fd: ac:14:af:52:05:4f:dc:a0:83:ad:cd:7f:f8:d2:f5: 47:57:b4:91:30:3b:f7:cb:55:28:23:38:43:dd:33: ee:f9:f5:f3:80:9a:4a:02:be:f7:d0:ba:3b:13:ba: 48:03:ff:3d:fb:65:87:8d:0f:18:10:92:32:0c:b5: 96:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F6:A6:57:61:ED:04:21:55:20:83:2E:EE:ED:C3:D9:B5:21:BB:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/2613f3f7-60d2-3644-87f5-381f608c7546.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:07:a7:07:22:11:7a:ac:c5:29:b8:a7:f1:9b:64:37:3e:9f: e5:05:b1:24:d0:ac:98:36:a2:2f:11:39:5f:bb:9a:b7:e0:49: 66:63:23:e6:5e:e5:e9:53:97:5b:a6:86:f8:a4:98:81:40:32: 58:03:56:4c:12:b8:11:de:da:33:6d:17:71:c9:7f:d2:f8:22: 38:5a:d5:52:64:e7:51:ab:fc:58:08:45:47:f8:29:ce:0a:48: 9b:15:3a:6b:70:fc:fa:31:53:3f:04:eb:87:76:80:a2:cf:71: 5b:fd:f8:70:5f:b5:61:e7:b1:ac:03:c4:75:41:71:f7:55:87: 2d:5c:e5:cc:eb:01:02:23:42:08:7b:3c:ec:8c:fc:11:50:6f: 70:2b:aa:da:ba:ba:c0:cb:5a:7f:3d:00:d4:78:ee:7b:b3:f2: ba:52:96:29:03:f1:9a:28:3a:f2:b9:cf:d0:2d:48:98:22:5d: 8a:2c:b2:54:64:88:be:4d:99:6f:f6:f3:8f:51:06:ea:35:58: 19:bc:1c:69:24:8a:da:ae:06:37:47:8a:bc:13:bf:18:4e:da: 1e:1d:7f:a5:1a:1a:93:8c:54:62:cc:60:fb:86:09:e0:a5:28: 67:1f:f4:79:39:ba:33:78:c7:1e:e6:26:71:9b:40:a3:a3:ae: ab:38:23:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3mrAaWXmfWqa0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk ODA0Y2E1NGQtMWU2OS00NWQ3LTlmZWItZjkzOWVhNzkwODM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZih5I+8EjP/A8AbBTY/5Fg59W0LA+/prJUw Lc7/dvdZwJOUwm5wZ0nkLyDKiQJLWDnl/KNz7KXMxnVngvVwDIGydBArxMIx3SWw WxcXQ/WveW25E46z8yOVojMtPOuFeSN4wpBq+JvpVP9vDN2VXB7HJy2LBBzuDwST armSOED3re7A+omDpbg3PiBQym5op4svZYked5qbtfyTkliKxx74Kwx40z6bOyTg yYt1KBO9OvlxOhCWi8o8NnK444Pozf2sFK9SBU/coIOtzX/40vVHV7SRMDv3y1Uo IzhD3TPu+fXzgJpKAr730Lo7E7pIA/89+2WHjQ8YEJIyDLWWNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr2pldh7QQhVSCDLu7tw9m1IbsTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMjYxM2YzZjctNjBkMi0z NjQ0LTg3ZjUtMzgxZjYwOGM3NTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACMHpwciEXqsxSm4p/GbZDc+n+UFsSTQrJg2oi8ROV+7mrfgSWZjI+Ze 5elTl1umhvikmIFAMlgDVkwSuBHe2jNtF3HJf9L4Ijha1VJk51Gr/FgIRUf4Kc4K SJsVOmtw/PoxUz8E64d2gKLPcVv9+HBftWHnsawDxHVBcfdVhy1c5czrAQIjQgh7 POyM/BFQb3Arqtq6usDLWn89ANR47nuz8rpSlikD8ZooOvK5z9AtSJgiXYosslRk iL5NmW/2849RBuo1WBm8HGkkitquBjdHirwTvxhO2h4df6UaGpOMVGLMYPuGCeCl KGcf9Hk5ujN4xx7mJnGbQKOjrqs4I0k= -----END CERTIFICATE-----Generated at Sat Apr 26 16:12:32 2025 by rpki-client