$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa File: 4e23e5df-ddab-3213-b067-9016783a3f0a.roa (raw, json) Hash identifier: JJqzaDdtaCtFS9cgWz90evFPjdOqSzjoj2eWrjQ60i8= Subject key identifier: 77:BB:85:C5:2E:D2:7C:17:3E:89:83:D8:82:88:00:73:37:DC:DE:B2 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A10354136C85D70E664D68200 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 16509 IP address blocks: 216.157.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:41:36:c8:5d:70:e6:64:d6:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=4ec2170a-d504-4a0c-9835-7e9ffd58c2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:da:b2:e8:bc:d7:f4:c7:d9:e3:fd:28:54: e9:2a:77:ce:4e:3d:f0:91:67:1b:38:46:b1:cb:8f: 24:41:9e:b8:19:39:dc:57:a2:b1:ef:0c:f7:43:2d: dd:c2:22:cd:37:c0:2c:70:fe:52:e1:ec:a7:d3:8c: f8:66:e4:54:93:3d:76:bc:b1:a7:d3:b8:77:ba:78: e5:7e:6a:ff:38:89:56:a4:6a:29:f2:35:84:b7:48: a4:b5:9b:32:6f:59:c9:fb:16:74:99:5b:ac:f7:b6: b8:59:4e:36:ec:21:57:3c:6c:f5:58:95:a1:c5:ae: df:16:7a:ed:f0:32:a0:be:dc:5d:74:84:93:71:8e: 93:f0:9b:f8:49:a8:2b:38:11:43:ca:d0:ec:3d:55: 77:c8:9a:97:db:86:d9:02:b8:60:92:c0:82:c6:ea: 74:de:e1:7a:70:e4:6a:89:72:ab:1a:a3:35:3d:63: fb:2f:f3:ad:24:33:fb:92:af:7f:30:9a:63:c7:45: 3f:f3:bb:e3:ba:1b:0c:3b:ca:15:79:42:f5:f9:8b: c5:44:e0:fd:b0:a4:bb:21:f2:32:cb:c1:4b:54:00: 57:aa:a8:94:88:00:7c:f1:1c:ef:e7:4f:83:c2:86: df:7e:1d:c3:d6:94:64:15:02:2f:b6:6e:6f:d8:db: 38:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:BB:85:C5:2E:D2:7C:17:3E:89:83:D8:82:88:00:73:37:DC:DE:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/4e23e5df-ddab-3213-b067-9016783a3f0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ac:0b:7e:f0:52:64:8b:d6:25:20:5a:d6:97:ec:1d:0d:7d: cb:ac:12:60:9c:ed:7d:c3:b3:59:c8:1e:88:44:77:50:9c:1a: 47:fe:d0:09:66:28:43:90:1a:3e:3d:35:86:f9:4a:4d:cd:7c: 15:49:85:b2:4d:7c:b5:bb:a0:24:35:f1:72:b2:6e:3a:b6:7b: 12:64:cd:8d:e2:cd:0d:f2:b6:b6:dd:1e:da:5d:e3:25:82:b0: a0:81:d7:27:10:a9:4d:d6:38:82:d3:8a:db:b8:c1:00:b4:c6: c6:87:70:e6:3e:e2:6b:be:a5:9f:85:f4:3e:3c:d6:14:f2:09: ae:32:6a:30:94:af:12:ff:24:0a:8e:a3:6d:41:58:e7:e1:48: 82:6f:b6:41:13:ef:d5:fd:28:0a:9e:9e:62:70:48:5e:95:ee: 15:17:cd:ff:f0:7e:44:90:23:44:a8:cb:62:36:d0:f1:f6:10: 85:59:74:79:75:bc:b8:1a:99:c9:0e:5a:22:08:31:af:8c:79: c5:09:4e:31:e3:c6:81:a9:45:36:89:e3:7c:a8:2d:9f:b7:be: db:97:c2:1b:9f:20:a9:6b:35:35:81:30:be:33:a9:06:6f:99: ff:17:6a:97:63:46:b5:83:75:25:74:17:d1:23:ed:51:40:01: c9:70:7a:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUE2yF1w5mTWggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NGVjMjE3MGEtZDUwNC00YTBjLTk4MzUtN2U5ZmZkNThjMmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWnasui81/TH2eP9KFTpKnfOTj3wkWcbOEax y48kQZ64GTncV6Kx7wz3Qy3dwiLNN8AscP5S4eyn04z4ZuRUkz12vLGn07h3unjl fmr/OIlWpGop8jWEt0iktZsyb1nJ+xZ0mVus97a4WU427CFXPGz1WJWhxa7fFnrt 8DKgvtxddISTcY6T8Jv4SagrOBFDytDsPVV3yJqX24bZArhgksCCxup03uF6cORq iXKrGqM1PWP7L/OtJDP7kq9/MJpjx0U/87vjuhsMO8oVeUL1+YvFROD9sKS7IfIy y8FLVABXqqiUiAB88Rzv50+Dwobffh3D1pRkFQIvtm5v2Ns4gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHe7hcUu0nwXPomD2IKIAHM33N6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNGUyM2U1ZGYtZGRhYi0z MjEzLWIwNjctOTAxNjc4M2EzZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2sC37wUmSL1iUgWtaX7B0NfcusEmCc7X3Ds1nIHohEd1CcGkf+0Alm KEOQGj49NYb5Sk3NfBVJhbJNfLW7oCQ18XKybjq2exJkzY3izQ3ytrbdHtpd4yWC sKCB1ycQqU3WOILTitu4wQC0xsaHcOY+4mu+pZ+F9D481hTyCa4yajCUrxL/JAqO o21BWOfhSIJvtkET79X9KAqenmJwSF6V7hUXzf/wfkSQI0Soy2I20PH2EIVZdHl1 vLgamckOWiIIMa+MecUJTjHjxoGpRTaJ43yoLZ+3vtuXwhufIKlrNTWBML4zqQZv mf8XapdjRrWDdSV0F9Ej7VFAAclweks= -----END CERTIFICATE-----Generated at Sat Jun 14 06:27:09 2025 by rpki-client