$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa File: 6b69b583-d314-3cbc-92db-88a1fc81de8f.roa (raw, json) Hash identifier: iEPH7XBQ0CoRaHyrfyKwuhFVhkxSfXHc7WdzMeEz7VQ= Subject key identifier: 60:DA:D2:FB:1E:B2:DC:B6:4E:C3:6A:F4:B2:EB:30:0D:FC:24:98:F5 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A6826016B0C614FC106D73F80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa Signing time: Fri 04 Jul 2025 13:01:06 +0000 ROA not before: Fri 04 Jul 2025 13:01:06 +0000 ROA not after: Thu 02 Oct 2025 13:01:06 +0000 asID: 395831 IP address blocks: 158.115.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:68:26:01:6b:0c:61:4f:c1:06:d7:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jul 4 13:01:06 2025 GMT Not After : Oct 2 13:01:06 2025 GMT Subject: CN=f474795c-f23a-4556-b242-e9f059d39ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:02:3c:35:26:25:8b:f1:96:aa:24:7f:c1:e2: 0d:97:d7:dc:82:17:08:69:85:1f:a2:e9:df:e6:21: 78:91:7d:7c:16:25:be:3d:63:11:ca:96:70:68:4d: 7a:4a:15:79:a8:1f:26:9f:f4:da:fe:e1:54:a9:b2: a3:51:fb:64:33:61:22:9b:db:96:0c:69:0b:97:d9: 87:db:2b:65:51:3e:e6:f0:fa:53:9a:c7:82:3c:01: 77:8d:57:79:ba:1c:ef:43:53:5d:6b:f4:02:8c:6b: 1f:b6:ef:31:9a:00:8c:58:45:25:de:0c:df:85:0f: 3b:66:35:65:a7:21:a8:df:5d:09:d7:c1:1a:f7:82: 53:d2:09:14:d8:59:a2:82:c3:36:fd:d6:f0:38:38: 4d:df:ed:1b:bb:07:03:c4:c6:fb:ac:ea:9b:eb:87: cf:e1:5e:ab:f5:a1:66:39:9f:34:ee:dc:e8:92:35: 3b:43:da:6e:b8:e7:d1:a3:d8:86:17:22:19:90:5b: fb:a6:76:0a:1b:f9:c1:c8:11:94:54:8b:03:e6:60: 66:8d:ab:eb:af:92:a9:47:f4:a8:5d:b6:cc:b6:ba: 22:ab:0a:92:00:64:af:bd:11:ce:87:e6:67:8e:c1: 7a:4c:33:da:61:31:21:98:c4:53:66:2f:82:79:3a: 66:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DA:D2:FB:1E:B2:DC:B6:4E:C3:6A:F4:B2:EB:30:0D:FC:24:98:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/6b69b583-d314-3cbc-92db-88a1fc81de8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:88:32:e6:55:3f:b9:c1:44:76:56:23:ac:76:b5:cd:91:0d: 92:30:e1:d8:de:fa:c7:b2:95:9c:d3:da:cb:aa:4f:db:e5:1c: 87:ae:4f:b5:77:a2:ac:f6:b7:bd:7d:b8:6b:6e:eb:30:6f:82: ea:48:2b:23:20:14:b9:0c:ff:f8:06:4c:93:84:e0:1e:c3:3b: b3:65:e5:17:c3:2d:99:77:65:3f:78:c7:01:96:76:2f:40:8e: 89:8d:5d:f7:b1:8f:e2:43:9a:82:c7:ea:5a:3a:7a:ce:a3:0f: 57:10:af:a6:bb:84:a1:f1:82:e1:56:82:06:92:c8:50:d3:2b: c1:27:48:bd:d2:07:91:1e:bc:6e:46:15:cf:5f:6f:05:4f:a4: 3d:ef:3d:76:ad:34:9d:8e:92:52:1d:9b:f0:ec:6f:41:16:06: bb:3a:42:50:4c:dc:46:6c:08:27:fb:1f:47:38:ae:05:9a:33: 5b:3e:1c:78:f4:36:4a:ce:25:28:f2:4c:2f:69:3f:53:92:4b: 78:4b:85:30:b4:6e:89:39:f2:3c:d6:50:3c:a7:6b:9f:ec:cc: 1c:c5:ea:81:12:8c:75:93:8e:e3:e3:da:72:30:4b:e2:88:37: 89:bc:68:e6:53:7a:90:1d:d4:1b:b7:8d:76:b5:06:44:f5:ba: fc:fd:58:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJgFrDGFPwQbXP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk ZjQ3NDc5NWMtZjIzYS00NTU2LWIyNDItZTlmMDU5ZDM5ZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwI8NSYli/GWqiR/weINl9fcghcIaYUfounf 5iF4kX18FiW+PWMRypZwaE16ShV5qB8mn/Ta/uFUqbKjUftkM2Eim9uWDGkLl9mH 2ytlUT7m8PpTmseCPAF3jVd5uhzvQ1Nda/QCjGsftu8xmgCMWEUl3gzfhQ87ZjVl pyGo310J18Ea94JT0gkU2FmigsM2/dbwODhN3+0buwcDxMb7rOqb64fP4V6r9aFm OZ807tzokjU7Q9puuOfRo9iGFyIZkFv7pnYKG/nByBGUVIsD5mBmjavrr5KpR/So XbbMtroiqwqSAGSvvRHOh+ZnjsF6TDPaYTEhmMRTZi+CeTpmeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDa0vsesty2TsNq9LLrMA38JJj1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNmI2OWI1ODMtZDMxNC0z Y2JjLTkyZGItODhhMWZjODFkZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGIMuZVP7nBRHZWI6x2tc2RDZIw4dje+seylZzT2suqT9vlHIeuT7V3 oqz2t719uGtu6zBvgupIKyMgFLkM//gGTJOE4B7DO7Nl5RfDLZl3ZT94xwGWdi9A jomNXfexj+JDmoLH6lo6es6jD1cQr6a7hKHxguFWggaSyFDTK8EnSL3SB5EevG5G Fc9fbwVPpD3vPXatNJ2OklIdm/Dsb0EWBrs6QlBM3EZsCCf7H0c4rgWaM1s+HHj0 NkrOJSjyTC9pP1OSS3hLhTC0bok58jzWUDyna5/szBzF6oESjHWTjuPj2nIwS+KI N4m8aOZTepAd1Bu3jXa1BkT1uvz9WDA= -----END CERTIFICATE-----Generated at Mon Aug 4 22:15:37 2025 by rpki-client