$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa File: 565178fb-511a-3ca3-a684-f9494640e395.roa (raw, json) Hash identifier: etQSsyFc1ZSWzmumbQIPsrqzUuOG35lc1ua9cClq4qE= Subject key identifier: F4:C2:DD:2C:B6:98:DF:57:FF:0C:C1:B4:36:4D:48:C8:95:CC:F2:7F Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584930DE71A1B485FAA8453EC540 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa Signing time: Sat 15 Mar 2025 01:00:39 +0000 ROA not before: Sat 15 Mar 2025 01:00:39 +0000 ROA not after: Fri 13 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 158.115.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:30:de:71:a1:b4:85:fa:a8:45:3e:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 15 01:00:39 2025 GMT Not After : Jun 13 01:00:39 2025 GMT Subject: CN=14cafc12-cd0f-4ba5-a31c-cd16a5d7815f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:92:60:69:8b:8d:6b:28:38:3d:a7:f8:f8: 84:6d:49:e9:ce:d9:51:e2:76:18:d7:06:d3:57:4b: d7:30:18:a4:f1:97:1e:6e:ae:ed:a9:04:fb:4b:4e: bd:33:4e:8e:b1:da:bd:39:f1:03:c8:9b:4d:19:8e: eb:14:d7:70:79:a6:71:13:1c:62:c4:3f:37:e5:c7: aa:b4:48:45:66:ea:5f:4d:9c:ea:7c:2b:f7:2b:22: 24:d7:8f:12:20:16:d9:8b:e6:30:b8:ea:d2:0e:b4: 78:3e:54:47:70:2d:c4:d3:ec:6b:c1:9a:04:91:cb: 91:9b:12:7c:16:1c:7b:8c:e8:df:a6:c7:4d:c7:ef: 21:ac:3f:6d:c9:26:7a:c3:e1:75:11:79:e1:ce:18: fa:62:26:c1:a1:7b:22:90:6a:2c:6b:57:16:d6:78: f6:a1:7b:2f:ae:4d:7a:3d:d8:8f:e5:90:3d:c5:5b: f3:da:28:6f:8f:ec:2b:4c:b1:da:50:e3:5a:e4:87: c8:ad:cf:47:1d:8c:c7:c4:43:21:81:6f:bd:79:97: c7:b2:6b:09:ca:4c:3d:0c:64:fc:25:d7:31:3b:1b: e1:57:c4:84:3a:b9:92:90:5a:1b:63:ce:32:5c:d8: e2:4a:1e:ba:7f:ee:33:e6:b5:1e:4d:5d:f7:09:d8: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C2:DD:2C:B6:98:DF:57:FF:0C:C1:B4:36:4D:48:C8:95:CC:F2:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/565178fb-511a-3ca3-a684-f9494640e395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:48:ae:ce:fd:35:6b:fa:1f:2c:5e:01:88:90:6b:02:10:bb: fb:fa:97:1f:e4:04:9c:5e:c3:73:12:7c:5e:86:87:69:e4:85: 67:7c:eb:36:22:c3:e2:7a:a4:cb:51:21:0a:42:c8:0d:80:f6: 99:c0:ad:aa:f1:f9:16:4b:74:6b:7c:7d:3c:d7:c6:8a:b0:5d: ae:c5:8a:24:5e:10:b2:e0:7d:85:de:13:4d:36:3a:14:d6:52: c4:47:bd:c1:ac:bf:b6:6a:b8:14:11:89:94:65:8a:a4:eb:51: 81:04:1f:0d:89:8c:65:99:17:a2:b6:03:8a:de:70:20:a8:d4: f6:86:61:0d:fa:96:67:76:c4:dc:72:c6:99:56:9d:1d:f7:9d: 9d:f2:55:fb:a1:ed:36:ee:40:d9:04:91:a4:d5:69:07:73:18: 0b:96:85:91:0b:cb:aa:51:ed:8a:a6:10:66:36:1b:43:28:81: 25:aa:e3:70:87:ea:05:b2:ff:bd:14:83:fa:38:14:38:93:7b: 4b:07:5b:05:ce:75:7f:ac:25:a4:ee:7d:ae:5e:f4:ea:0c:03: 23:5e:cd:fd:e1:9d:9c:0a:0b:f8:32:a0:58:52:68:02:dd:02: 6f:f0:17:25:d3:8e:a1:9a:a1:f3:01:b3:46:e6:2d:18:71:b6: ef:e7:cf:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkw3nGhtIX6qEU+xUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDMxNTAxMDAzOVoXDTI1MDYxMzAxMDAzOVowLzEtMCsGA1UEAxMk MTRjYWZjMTItY2QwZi00YmE1LWEzMWMtY2QxNmE1ZDc4MTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVeSYGmLjWsoOD2n+PiEbUnpztlR4nYY1wbT V0vXMBik8Zcebq7tqQT7S069M06Osdq9OfEDyJtNGY7rFNdweaZxExxixD835ceq tEhFZupfTZzqfCv3KyIk148SIBbZi+YwuOrSDrR4PlRHcC3E0+xrwZoEkcuRmxJ8 Fhx7jOjfpsdNx+8hrD9tySZ6w+F1EXnhzhj6YibBoXsikGosa1cW1nj2oXsvrk16 PdiP5ZA9xVvz2ihvj+wrTLHaUONa5IfIrc9HHYzHxEMhgW+9eZfHsmsJykw9DGT8 JdcxOxvhV8SEOrmSkFobY84yXNjiSh66f+4z5rUeTV33Cdhq7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTC3Sy2mN9X/wzBtDZNSMiVzPJ/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNTY1MTc4ZmItNTExYS0z Y2EzLWE2ODQtZjk0OTQ2NDBlMzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpIrs79NWv6HyxeAYiQawIQu/v6lx/kBJxew3MSfF6Gh2nkhWd86zYi w+J6pMtRIQpCyA2A9pnArarx+RZLdGt8fTzXxoqwXa7FiiReELLgfYXeE002OhTW UsRHvcGsv7ZquBQRiZRliqTrUYEEHw2JjGWZF6K2A4recCCo1PaGYQ36lmd2xNxy xplWnR33nZ3yVfuh7TbuQNkEkaTVaQdzGAuWhZELy6pR7YqmEGY2G0MogSWq43CH 6gWy/70Ug/o4FDiTe0sHWwXOdX+sJaTufa5e9OoMAyNezf3hnZwKC/gyoFhSaALd Am/wFyXTjqGaofMBs0bmLRhxtu/nz14= -----END CERTIFICATE-----Generated at Sat Apr 26 14:56:11 2025 by rpki-client