$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa File: 880caa1d-47af-334b-8051-595434b22264.roa (raw, json) Hash identifier: RfaFTRjKf4YHb5fhuAd76CxJSzXMSMlvL1h2/bPyhhM= Subject key identifier: 04:B8:67:69:29:9A:D3:F5:53:5D:1D:A6:78:7E:73:7D:9B:BB:96:A6 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A119AA8F24307EBC2C5F46880 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa Signing time: Tue 03 Jun 2025 13:01:03 +0000 ROA not before: Tue 03 Jun 2025 13:01:03 +0000 ROA not after: Mon 01 Sep 2025 13:01:03 +0000 asID: 14618 IP address blocks: 158.115.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:11:9a:a8:f2:43:07:eb:c2:c5:f4:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jun 3 13:01:03 2025 GMT Not After : Sep 1 13:01:03 2025 GMT Subject: CN=0ee60f5a-fe2e-4736-805b-0b1c8a83456b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:82:f6:58:09:c6:7a:b6:bc:c5:46:22:f3:18: 60:29:9f:80:29:73:dc:9a:48:56:85:5c:c8:d7:83: cb:3c:6a:f1:d6:d8:ca:9f:0a:f6:b3:4b:d9:2e:92: bd:11:a4:8e:3b:0f:78:c8:0e:fd:03:69:76:09:ad: f0:11:af:bf:38:d0:eb:6d:c4:7f:4f:c4:b7:8c:34: 52:c3:0b:2f:d1:c0:fd:c4:f3:34:2a:d0:ab:8f:52: 85:fb:d2:a0:7b:fe:0a:06:06:67:2d:e1:45:7a:8a: 2d:b5:bd:ff:48:04:ef:c2:fb:bd:a8:46:89:b0:9c: a1:48:31:02:76:f6:84:cd:74:33:71:a4:5b:89:ab: 9f:54:cc:f3:28:f9:da:8e:82:b9:6d:56:89:ff:0d: 84:3e:81:4f:45:59:49:95:1f:d6:46:7f:39:98:fe: c7:0a:2f:79:c3:70:df:88:1a:91:87:41:f2:de:dc: 8d:42:55:ff:30:c9:ea:01:64:df:9a:ed:fa:67:04: ee:c5:76:82:9e:0a:90:b2:45:09:db:16:d3:b9:b7: 70:21:db:0c:15:ee:0e:85:04:c3:b0:a8:12:2d:e3: 11:65:9c:cb:08:7c:79:61:6d:8b:32:e9:09:e3:ae: 83:20:ee:2e:0b:e5:81:a2:8e:d7:ee:fe:b7:70:e8: 14:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B8:67:69:29:9A:D3:F5:53:5D:1D:A6:78:7E:73:7D:9B:BB:96:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:f7:14:9e:03:20:af:1a:a2:55:7f:ac:1b:e4:ae:ad:38:64: 4b:cd:22:25:55:db:6d:75:07:8a:9c:90:c2:6b:0b:6d:1f:36: c1:59:87:69:ad:70:f4:ab:ed:ba:c9:97:75:00:c4:d3:ea:00: 48:64:62:fa:98:64:f2:4e:16:c6:7d:71:cd:93:72:b1:e2:22: 49:a2:b3:10:9a:d9:4f:3f:d4:b0:1a:83:3d:c7:bf:6a:b7:5f: 66:e7:a1:4d:11:29:a4:56:bc:7a:28:89:82:cd:66:71:63:84: 31:d7:e1:b8:e7:f3:23:b1:72:02:eb:2b:14:c4:c3:f4:28:2d: 04:eb:d9:a9:85:6d:15:c3:27:61:aa:27:f8:91:4d:ff:6e:c5: 6b:9c:db:29:05:ee:09:2f:0f:12:f4:32:36:43:f4:3b:91:fe: 90:72:e2:47:21:eb:16:ae:1f:a1:32:1a:ce:30:2d:de:e6:9a: 41:81:e4:59:fe:f1:33:11:c1:2d:87:f3:d8:6f:06:8f:b0:c9: 57:07:f4:a3:04:e0:67:95:af:1e:59:40:c4:fa:36:36:18:7f: 4f:64:4a:bd:79:ad:ca:fa:49:6e:61:c2:06:cf:82:ab:eb:ac: 76:37:39:23:ae:67:89:8b:06:c9:ac:79:a5:1a:33:61:d4:20: 7c:80:27:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmqjyQwfrwsX0aIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk MGVlNjBmNWEtZmUyZS00NzM2LTgwNWItMGIxYzhhODM0NTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoL2WAnGera8xUYi8xhgKZ+AKXPcmkhWhVzI 14PLPGrx1tjKnwr2s0vZLpK9EaSOOw94yA79A2l2Ca3wEa+/ONDrbcR/T8S3jDRS wwsv0cD9xPM0KtCrj1KF+9Kge/4KBgZnLeFFeoottb3/SATvwvu9qEaJsJyhSDEC dvaEzXQzcaRbiaufVMzzKPnajoK5bVaJ/w2EPoFPRVlJlR/WRn85mP7HCi95w3Df iBqRh0Hy3tyNQlX/MMnqAWTfmu36ZwTuxXaCngqQskUJ2xbTubdwIdsMFe4OhQTD sKgSLeMRZZzLCHx5YW2LMukJ466DIO4uC+WBoo7X7v63cOgU3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS4Z2kpmtP1U10dpnh+c32bu5amMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvODgwY2FhMWQtNDdhZi0z MzRiLTgwNTEtNTk1NDM0YjIyMjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnONMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACj3FJ4DIK8aolV/rBvkrq04ZEvNIiVV2211B4qckMJrC20fNsFZh2mt cPSr7brJl3UAxNPqAEhkYvqYZPJOFsZ9cc2TcrHiIkmisxCa2U8/1LAagz3Hv2q3 X2bnoU0RKaRWvHooiYLNZnFjhDHX4bjn8yOxcgLrKxTEw/QoLQTr2amFbRXDJ2Gq J/iRTf9uxWuc2ykF7gkvDxL0MjZD9DuR/pBy4kch6xauH6EyGs4wLd7mmkGB5Fn+ 8TMRwS2H89hvBo+wyVcH9KME4GeVrx5ZQMT6NjYYf09kSr15rcr6SW5hwgbPgqvr rHY3OSOuZ4mLBsmseaUaM2HUIHyAJ8Y= -----END CERTIFICATE-----Generated at Mon Jun 16 20:08:14 2025 by rpki-client