$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa File: 87954fed-dfd7-33f5-b195-f52a604ac05c.roa (raw, json) Hash identifier: ISknKDYI9n/+zpNjqJakZAfq2ZCG2nuQeNIT6GmSXWg= Subject key identifier: 7B:4D:AE:FB:76:01:A5:0F:87:26:54:77:92:57:85:FC:30:B7:A2:52 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A103541478A402B6B7BCB1AD8 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 395831 IP address blocks: 216.157.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:41:47:8a:40:2b:6b:7b:cb:1a:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=7f12b777-4f75-45c9-987e-a975778bb40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2c:dc:3a:f0:ec:d1:38:f7:e4:f4:da:03:fc: 44:76:73:b5:48:8c:04:5f:4d:4e:45:22:6e:e0:26: 46:e8:c0:c4:ea:d1:56:a8:7f:73:4b:2f:f9:39:1a: a3:18:5e:d3:5f:ea:0c:19:f4:de:3e:41:6f:28:0a: ee:c7:69:23:36:a9:aa:25:f7:ec:4a:dd:a3:57:77: 05:cc:80:b0:85:c0:a8:6b:95:55:58:38:af:0d:55: ee:c8:87:4e:6b:ea:f7:3e:39:b7:86:ab:81:a0:74: 90:9c:75:51:3f:14:d9:ac:53:93:ef:fa:34:5b:75: 52:65:ed:15:ce:fb:5c:61:12:b0:94:24:04:63:9b: 39:24:79:f9:2b:a5:af:c2:d6:44:ae:25:d9:75:e4: 98:e4:3c:61:8b:cf:da:87:3b:c5:96:dd:e3:14:92: 08:07:4e:07:c5:22:35:47:ef:e6:2e:56:95:89:4d: 39:17:cf:34:62:92:0d:5e:84:6c:85:e1:9c:52:56: 05:99:ed:51:46:fd:b9:60:7b:0d:4a:03:ac:30:3b: d3:22:f6:6a:4e:52:dc:34:7c:2f:15:49:0c:98:b6: f2:47:4d:bd:ca:09:81:21:e4:9b:09:f5:09:cb:17: 5d:4c:df:22:a9:71:57:70:2b:26:df:02:23:c3:c7: 56:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4D:AE:FB:76:01:A5:0F:87:26:54:77:92:57:85:FC:30:B7:A2:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/87954fed-dfd7-33f5-b195-f52a604ac05c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:df:b5:01:58:c7:fb:cc:6d:3b:44:aa:3a:62:8a:64:ae:32: 3f:17:9f:f0:9e:09:74:bb:1b:67:12:ad:0a:16:cc:54:5a:a2: 06:8a:6a:3a:cf:ba:c2:84:8b:30:67:d5:1f:80:fc:56:9c:81: 67:b5:d5:35:dd:6a:b1:04:74:44:e5:e9:40:4a:5c:5e:b6:0d: f7:26:ff:7a:b2:08:86:f0:97:d9:74:e1:9e:d6:33:d6:e3:83: ad:da:7b:41:0a:00:91:69:b7:64:c9:1c:53:8a:b6:f1:2a:6d: 17:41:45:b8:04:73:9f:70:16:c0:93:3f:71:8c:46:5b:5c:bb: 26:c1:09:84:40:21:b6:6b:c1:3f:76:da:41:db:64:fc:49:76: ec:e4:90:23:be:a4:7d:af:0b:ea:53:d0:48:2d:c3:5c:71:31: d7:66:f5:4a:01:35:42:5b:d2:39:fe:ed:74:5c:f7:19:ff:c7: 20:16:1d:c9:ef:0a:b3:31:ff:a3:8d:31:ad:8d:2f:7c:1a:e4: 99:0f:5d:a4:c8:2d:a9:dc:71:85:43:3b:81:b6:7a:52:34:d9: 9d:8a:39:cc:69:e2:2e:b3:e4:88:51:53:72:f9:71:ea:65:8c: 67:99:b2:41:10:1e:89:f8:02:e2:5c:e3:94:58:74:ab:c2:4e: cb:b8:cf:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUFHikAra3vLGtgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk N2YxMmI3NzctNGY3NS00NWM5LTk4N2UtYTk3NTc3OGJiNDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyzcOvDs0Tj35PTaA/xEdnO1SIwEX01ORSJu 4CZG6MDE6tFWqH9zSy/5ORqjGF7TX+oMGfTePkFvKArux2kjNqmqJffsSt2jV3cF zICwhcCoa5VVWDivDVXuyIdOa+r3Pjm3hquBoHSQnHVRPxTZrFOT7/o0W3VSZe0V zvtcYRKwlCQEY5s5JHn5K6WvwtZEriXZdeSY5Dxhi8/ahzvFlt3jFJIIB04HxSI1 R+/mLlaViU05F880YpINXoRsheGcUlYFme1RRv25YHsNSgOsMDvTIvZqTlLcNHwv FUkMmLbyR029ygmBIeSbCfUJyxddTN8iqXFXcCsm3wIjw8dWPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtNrvt2AaUPhyZUd5JXhfwwt6JSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvODc5NTRmZWQtZGZkNy0z M2Y1LWIxOTUtZjUyYTYwNGFjMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjftQFYx/vMbTtEqjpiimSuMj8Xn/CeCXS7G2cSrQoWzFRaogaKajrP usKEizBn1R+A/FacgWe11TXdarEEdETl6UBKXF62Dfcm/3qyCIbwl9l04Z7WM9bj g63ae0EKAJFpt2TJHFOKtvEqbRdBRbgEc59wFsCTP3GMRltcuybBCYRAIbZrwT92 2kHbZPxJduzkkCO+pH2vC+pT0Egtw1xxMddm9UoBNUJb0jn+7XRc9xn/xyAWHcnv CrMx/6ONMa2NL3wa5JkPXaTILanccYVDO4G2elI02Z2KOcxp4i6z5IhRU3L5cepl jGeZskEQHon4AuJc45RYdKvCTsu4z40= -----END CERTIFICATE-----Generated at Sun Jun 15 17:58:32 2025 by rpki-client