$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa File: 7ad28868-3583-3dc2-9e44-d9421298441e.roa (raw, json) Hash identifier: 7zHM1ksJ4bXLMX7kMrLzmquaT0eoNv27ag31oA47jxo= Subject key identifier: 22:04:B6:B8:8A:04:E7:49:0A:CB:1C:90:53:5D:5B:A8:9F:86:9C:85 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A119AA8DF45868B3E5FB6D740 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 395831 IP address blocks: 158.115.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:a8:df:45:86:8b:3e:5f:b6:d7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=79441923-384a-403c-9680-7a89499dc535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3a:81:c0:83:00:8e:1c:83:4b:45:37:4f:34: c8:a3:c1:d3:f0:08:c9:03:7c:13:54:3a:1a:ea:92: 2c:f2:c7:d2:1e:78:77:19:e6:f0:c9:67:53:c9:f2: 86:03:59:f9:92:e2:6f:d1:c9:18:c6:08:3e:48:dc: 96:9d:b1:9f:39:18:df:dd:0b:6a:f2:b0:69:ec:0c: 72:a0:1a:02:d8:28:d2:c0:54:4f:93:ed:5f:c7:a8: c2:b7:08:25:96:35:5c:ea:ae:84:a6:b5:14:6b:d1: 2f:d5:14:6b:8b:39:2d:9a:00:42:f2:d1:bc:44:bc: fd:ed:58:c6:cd:fb:97:9c:8b:97:b8:50:90:a1:a1: 15:49:e6:92:79:4d:9d:6c:b8:51:9a:66:46:3c:b6: 27:32:90:38:81:5c:b2:b8:c4:44:6d:aa:fa:35:d7: 26:ac:7a:c8:7c:3b:94:88:48:93:ca:69:72:85:0e: 0d:81:ef:23:aa:5e:2b:ec:6d:ed:e5:33:88:01:cf: 42:44:4f:ce:17:a2:02:fd:f4:73:96:05:d1:d4:a9: b8:52:56:2c:76:ea:e7:25:0a:16:68:a0:05:b2:0c: 85:dd:76:1d:47:64:a6:c3:b5:3e:3f:04:07:98:29: 9f:cd:74:6f:d2:a1:59:17:a4:ec:11:86:be:47:31: bc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:04:B6:B8:8A:04:E7:49:0A:CB:1C:90:53:5D:5B:A8:9F:86:9C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/7ad28868-3583-3dc2-9e44-d9421298441e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:06:2f:aa:85:05:1c:18:71:bc:cf:a6:c4:b4:82:82:67:40: c0:90:87:2d:c8:27:63:f9:a2:c9:c7:19:64:93:a3:51:fc:91: c4:5e:c8:cc:f1:9e:70:23:7f:3a:4e:b3:0a:74:4d:5b:56:ad: bc:46:20:e9:ce:10:10:62:1a:72:93:70:c5:61:06:8c:a0:ad: 30:7f:a0:a1:05:cd:78:cb:e9:28:74:e1:10:72:1d:e0:a9:34: 4d:20:dd:fd:0d:b7:b6:ae:50:a7:70:7e:f3:23:77:09:ed:15: ac:59:03:61:2e:fb:fd:f6:5a:00:26:89:19:03:7b:39:67:f3: 2e:0e:ff:a3:24:f6:aa:6d:10:ba:ff:32:ca:d4:1e:5c:36:f8: bb:d3:c4:56:bf:29:46:1e:8b:73:34:d4:a4:fe:52:ca:a8:2b: 83:8c:71:8f:19:b4:be:ee:09:42:92:6c:56:46:14:09:64:73: e9:65:e2:bb:2c:2d:34:b1:92:86:ff:05:25:6f:7d:ca:78:61: 9d:e0:17:ff:2b:cb:6e:99:26:79:81:44:60:01:0a:38:80:74: 2f:02:41:62:9d:eb:b5:93:ae:96:9b:4b:f8:b7:0d:03:f0:3f: f3:03:c4:4b:5d:c3:f0:1e:1e:b1:2b:88:d6:7d:23:07:bf:f1: 43:c5:26:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmqjfRYaLPl+210AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk Nzk0NDE5MjMtMzg0YS00MDNjLTk2ODAtN2E4OTQ5OWRjNTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzqBwIMAjhyDS0U3TzTIo8HT8AjJA3wTVDoa 6pIs8sfSHnh3GebwyWdTyfKGA1n5kuJv0ckYxgg+SNyWnbGfORjf3Qtq8rBp7Axy oBoC2CjSwFRPk+1fx6jCtwglljVc6q6EprUUa9Ev1RRrizktmgBC8tG8RLz97VjG zfuXnIuXuFCQoaEVSeaSeU2dbLhRmmZGPLYnMpA4gVyyuMREbar6NdcmrHrIfDuU iEiTymlyhQ4Nge8jql4r7G3t5TOIAc9CRE/OF6IC/fRzlgXR1Km4UlYsdurnJQoW aKAFsgyF3XYdR2Smw7U+PwQHmCmfzXRv0qFZF6TsEYa+RzG8FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIEtriKBOdJCssckFNdW6ifhpyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvN2FkMjg4NjgtMzU4My0z ZGMyLTllNDQtZDk0MjEyOTg0NDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcGL6qFBRwYcbzPpsS0goJnQMCQhy3IJ2P5osnHGWSTo1H8kcReyMzx nnAjfzpOswp0TVtWrbxGIOnOEBBiGnKTcMVhBoygrTB/oKEFzXjL6Sh04RByHeCp NE0g3f0Nt7auUKdwfvMjdwntFaxZA2Eu+/32WgAmiRkDezln8y4O/6Mk9qptELr/ MsrUHlw2+LvTxFa/KUYei3M01KT+UsqoK4OMcY8ZtL7uCUKSbFZGFAlkc+ll4rss LTSxkob/BSVvfcp4YZ3gF/8ry26ZJnmBRGABCjiAdC8CQWKd67WTrpabS/i3DQPw P/MDxEtdw/AeHrEriNZ9Iwe/8UPFJsk= -----END CERTIFICATE-----Generated at Tue Jun 17 04:44:14 2025 by rpki-client