$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa File: 4e23e5df-ddab-3213-b067-9016783a3f0a.roa (raw, json) Hash identifier: rjOsTz/Fn5J6W5HAuoGcpfaiIIVQdnY7R9kFlgCC+aM= Subject key identifier: D8:A0:95:6E:ED:FB:EF:73:5F:ED:E1:74:6C:A0:72:BC:E8:7D:59:A7 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584930DE6FD9CD26BE1787634840 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 216.157.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:6f:d9:cd:26:be:17:87:63:48:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=88b8ba6c-d204-4f55-a9eb-ddc10c5ca57e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f6:a3:7a:65:8f:ca:3a:d5:be:8d:fd:31:1f: 0e:bb:02:81:0f:0e:8b:4d:92:c9:9a:9f:7d:83:4f: f7:aa:76:fb:eb:26:5f:19:df:04:34:16:a7:8f:5f: bb:ed:11:a2:f2:8b:72:57:e7:3e:b1:ed:b1:67:c3: e5:c0:40:6c:c1:b4:48:1e:3c:b1:60:97:f0:e9:0b: 75:8e:c3:71:79:7f:30:d2:84:f4:92:f8:38:4c:1b: 37:05:2c:88:ab:0d:f2:7d:64:93:54:8e:60:d7:53: e2:80:6c:b6:03:d8:b2:4b:4c:8f:d7:3d:57:ec:a1: a2:f4:c5:15:41:65:37:5b:c9:99:0e:2b:54:2a:82: f9:35:c6:bc:a3:4a:2b:23:9e:d2:5b:6c:46:d7:53: 31:17:d7:fa:ad:d8:b1:bf:0e:ba:1a:1b:76:f4:c2: 74:7a:88:7b:c6:06:fa:55:a9:be:04:7b:6a:c3:4a: 9b:a3:a9:1d:83:54:08:c9:1d:65:e2:9b:92:6b:f0: 5e:ae:f3:ef:6b:5a:a3:c2:e4:d2:79:d4:ff:a3:86: 07:4e:b5:95:fc:7f:ab:6f:de:34:e3:ec:96:76:97: b7:fe:9b:26:33:0c:66:a7:87:0b:f0:96:b2:1d:5e: 47:5b:3b:c9:0d:85:12:a9:40:f4:bd:ba:f9:00:6a: 06:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A0:95:6E:ED:FB:EF:73:5F:ED:E1:74:6C:A0:72:BC:E8:7D:59:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:7a:19:0c:69:b2:42:30:93:69:86:80:d9:9e:63:78:d6:a5: 7b:a9:ff:b6:02:7b:d3:26:ec:b9:89:1a:c9:5d:27:7b:49:16: 2a:6a:73:24:b1:a0:3f:b0:4e:39:14:07:f6:ae:51:c5:59:d2: 69:93:74:a2:6c:65:1f:35:37:24:d8:41:73:a3:c1:dc:d8:a3: 58:ae:ea:77:53:65:f3:16:ca:55:a0:3b:57:da:b4:03:01:50: ec:2e:bc:93:6a:a2:0b:81:11:56:19:87:7e:be:9a:2e:eb:e0: 4d:5e:cc:a3:aa:f0:6d:95:99:6a:2c:f7:51:50:0d:f6:e5:95: f8:b6:15:57:29:42:06:f7:a9:70:54:62:77:ad:3e:db:fe:0a: 08:78:dc:f5:39:ad:b8:8a:eb:08:6e:ce:71:22:63:5e:70:f2: d8:c2:98:dc:72:2c:3d:3b:3f:cd:9b:fb:74:59:ba:db:04:0e: 93:b7:d3:61:8c:69:22:87:d1:80:33:ce:3e:cb:55:e6:e1:17: de:4c:47:0e:56:be:5d:5b:9c:af:5b:14:13:34:05:0d:48:d8: aa:c5:56:52:6a:cf:b7:80:2f:cc:0c:a8:0a:d7:b3:bc:f7:d6: 75:92:54:89:0f:eb:f7:31:c1:14:d1:05:d9:a0:be:e8:1d:55: 97:0f:84:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3m/ZzSa+F4djSEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk ODhiOGJhNmMtZDIwNC00ZjU1LWE5ZWItZGRjMTBjNWNhNTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvajemWPyjrVvo39MR8OuwKBDw6LTZLJmp99 g0/3qnb76yZfGd8ENBanj1+77RGi8otyV+c+se2xZ8PlwEBswbRIHjyxYJfw6Qt1 jsNxeX8w0oT0kvg4TBs3BSyIqw3yfWSTVI5g11PigGy2A9iyS0yP1z1X7KGi9MUV QWU3W8mZDitUKoL5Nca8o0orI57SW2xG11MxF9f6rdixvw66Ght29MJ0eoh7xgb6 Vam+BHtqw0qbo6kdg1QIyR1l4puSa/BervPva1qjwuTSedT/o4YHTrWV/H+rb940 4+yWdpe3/psmMwxmp4cL8JayHV5HWzvJDYUSqUD0vbr5AGoGbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNiglW7t++9zX+3hdGygcrzofVmnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNGUyM2U1ZGYtZGRhYi0z MjEzLWIwNjctOTAxNjc4M2EzZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAt6GQxpskIwk2mGgNmeY3jWpXup/7YCe9Mm7LmJGsldJ3tJFipqcySx oD+wTjkUB/auUcVZ0mmTdKJsZR81NyTYQXOjwdzYo1iu6ndTZfMWylWgO1fatAMB UOwuvJNqoguBEVYZh36+mi7r4E1ezKOq8G2VmWos91FQDfbllfi2FVcpQgb3qXBU YnetPtv+Cgh43PU5rbiK6whuznEiY15w8tjCmNxyLD07P82b+3RZutsEDpO302GM aSKH0YAzzj7LVebhF95MRw5Wvl1bnK9bFBM0BQ1I2KrFVlJqz7eAL8wMqArXs7z3 1nWSVIkP6/cxwRTRBdmgvugdVZcPhKI= -----END CERTIFICATE-----Generated at Sat Apr 26 20:20:44 2025 by rpki-client