$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa File: 3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa (raw, json) Hash identifier: M0kviFNMJW8v6lx4W/8+3VJ8icAA4UL8U8Ze+Lr/zsI= Subject key identifier: 22:73:4F:6B:CB:AB:C0:1D:42:F8:50:FA:7E:46:8C:E6:B0:C1:DF:8C Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F43285849BB0F70FB3FC450BF2E81B940 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 14618 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:70:fb:3f:c4:50:bf:2e:81:b9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=9a13a1c9-144c-4cb4-977b-80781773c19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:83:0a:51:f2:56:ca:97:06:af:24:05:a7:e8: 76:76:67:25:42:8b:5a:21:e6:80:dd:b7:12:27:a2: fd:11:ce:a8:a1:cf:52:e1:97:91:df:43:b2:4c:49: 36:8b:40:0b:6d:07:6f:c4:6e:bb:6e:54:57:b8:c9: 82:43:d4:4a:e2:18:28:87:36:a3:a5:0c:da:96:2e: 29:45:1c:e1:4b:51:e1:32:d2:39:d2:71:9a:ae:3c: 64:76:ff:68:99:04:da:d5:0c:d2:ef:8c:89:36:e8: 67:cd:d7:b5:d3:2d:19:b4:7c:5c:24:6a:2b:17:45: af:9b:57:11:a1:b1:95:79:10:9f:7b:97:a5:2c:7d: 0c:36:a2:db:a0:94:dd:c5:ad:55:c3:32:e9:6a:14: d6:85:c8:c2:fd:0c:7d:7e:fc:7c:d2:73:d8:6f:19: 0c:2a:9b:74:37:e1:1a:7a:3a:95:0e:f3:36:98:78: 7d:6a:45:28:9f:c7:79:59:9a:7c:6c:3b:d2:e7:db: 79:54:ca:ab:ac:7f:b6:0f:f3:cc:23:59:10:af:04: be:2f:07:d7:61:0c:22:1d:50:96:d5:39:45:03:3d: ff:74:41:be:96:32:d2:6f:15:57:a3:52:42:63:46: 9a:d9:84:76:96:d1:cf:0a:d0:a1:b2:1a:3b:6c:54: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:73:4F:6B:CB:AB:C0:1D:42:F8:50:FA:7E:46:8C:E6:B0:C1:DF:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3a4e0a18-d0f8-3be6-8953-5fd8263fd117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a7:74:9e:49:27:43:0c:c0:16:b9:e3:7c:db:05:bb:ef:7c: 66:db:59:7b:72:43:b9:13:82:65:6b:d6:ea:52:9d:9e:44:07: 30:ef:e8:f5:a4:d6:27:65:e6:11:f2:64:28:bc:d4:49:25:41: b6:56:66:12:2a:e0:ca:49:b0:21:a6:8c:23:1d:6b:ee:d5:77: c1:40:e7:c2:5e:92:b2:fe:1f:78:ab:63:63:4c:c7:07:43:b4: fd:b4:d7:9c:53:da:20:38:87:5d:0f:f2:34:4e:85:a6:61:c7: 02:1d:4b:6c:70:02:fa:17:0e:a6:a0:0f:d3:16:8c:50:2b:d7: 56:51:34:a9:fc:b4:be:39:22:aa:3e:c5:17:b9:20:67:46:dd: 52:de:e2:c1:2e:c8:0c:5e:13:31:c1:ce:e2:71:7e:7b:a0:aa: 91:17:88:bb:d0:69:a0:d2:a6:e8:6a:5e:68:90:01:ea:68:78: fa:5d:4c:14:5b:23:aa:96:52:7c:1d:09:22:17:0e:29:88:71: 02:82:71:7b:f1:13:88:15:e9:b3:b9:d2:78:f6:5a:5f:2e:47: ff:a1:64:0a:32:96:6a:02:dd:94:32:2a:12:0c:77:aa:c0:37: ab:14:ff:fc:30:c5:b8:5c:79:fc:c2:07:fa:0c:66:c4:a8:7e: b6:f3:88:f3 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEm7D3D7P8RQvy6BuUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk OWExM2ExYzktMTQ0Yy00Y2I0LTk3N2ItODA3ODE3NzNjMTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYMKUfJWypcGryQFp+h2dmclQotaIeaA3bcS J6L9Ec6ooc9S4ZeR30OyTEk2i0ALbQdvxG67blRXuMmCQ9RK4hgohzajpQzali4p RRzhS1HhMtI50nGarjxkdv9omQTa1QzS74yJNuhnzde10y0ZtHxcJGorF0Wvm1cR obGVeRCfe5elLH0MNqLboJTdxa1VwzLpahTWhcjC/Qx9fvx80nPYbxkMKpt0N+Ea ejqVDvM2mHh9akUon8d5WZp8bDvS59t5VMqrrH+2D/PMI1kQrwS+LwfXYQwiHVCW 1TlFAz3/dEG+ljLSbxVXo1JCY0aa2YR2ltHPCtChsho7bFRMUQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCJzT2vLq8AdQvhQ+n5GjOawwd+MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvM2E0ZTBhMTgtZDBmOC0z YmU2LTg5NTMtNWZkODI2M2ZkMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFad0nkknQwzAFrnjfNsFu+98ZttZe3JD uROCZWvW6lKdnkQHMO/o9aTWJ2XmEfJkKLzUSSVBtlZmEirgykmwIaaMIx1r7tV3 wUDnwl6Ssv4feKtjY0zHB0O0/bTXnFPaIDiHXQ/yNE6FpmHHAh1LbHAC+hcOpqAP 0xaMUCvXVlE0qfy0vjkiqj7FF7kgZ0bdUt7iwS7IDF4TMcHO4nF+e6CqkReIu9Bp oNKm6GpeaJAB6mh4+l1MFFsjqpZSfB0JIhcOKYhxAoJxe/ETiBXps7nSePZaXy5H /6FkCjKWagLdlDIqEgx3qsA3qxT//DDFuFx5/MIH+gxmxKh+tvOI8w== -----END CERTIFICATE-----Generated at Sun Jun 15 13:01:08 2025 by rpki-client