$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa File: 880caa1d-47af-334b-8051-595434b22264.roa (raw, json) Hash identifier: 3+JZ0IceQO2CTeouUxp9wdxquuEvpKtupsSpbSNgaj8= Subject key identifier: 67:8F:ED:19:65:4E:14:35:9C:40:21:AA:91:BD:ED:6B:EB:32:3A:0A Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F432858493243D8752DC8323AC24B6180 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 158.115.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:d8:75:2d:c8:32:3a:c2:4b:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=bc89f706-65be-4fdd-bdb7-42b6bb4dfdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:33:59:68:e5:da:b4:8d:d8:e7:3d:b4:2a: 82:70:0e:e8:e6:d2:6e:fd:f3:67:1a:f8:8f:eb:0d: 12:6c:ef:69:ab:c9:34:d3:a4:8b:7b:4d:95:e5:a7: eb:79:72:5f:15:78:52:9b:14:1e:12:68:a7:47:51: 79:6c:c6:99:16:de:ee:43:c5:e0:d3:0f:86:39:74: e9:6b:f3:7f:00:ca:e0:28:e9:1d:0b:4c:23:b9:cd: 1b:a6:14:6c:e0:24:98:d4:25:fc:d0:66:7c:63:3a: e7:db:f9:52:84:bd:31:f7:71:be:81:36:06:50:d5: ee:ac:86:23:bf:91:66:d8:8e:fb:5d:9d:cd:9f:a9: 10:fa:c8:3d:4c:34:8f:29:81:d6:de:d3:81:d6:7d: 59:ca:9d:53:9e:ba:a2:e7:f8:3f:0e:4f:03:c4:10: 88:2a:d8:77:54:95:49:58:bd:10:dc:37:33:dc:cf: f3:82:6e:7a:ae:e0:b5:87:2e:9e:76:7d:07:8b:2a: ff:91:de:89:14:e8:ff:42:22:ae:b1:13:c2:1d:9f: 11:5b:89:0b:9c:61:c3:b8:53:63:8b:c4:9c:96:5d: de:11:7e:88:0d:f7:8e:cf:a1:f8:b6:3b:16:d9:da: 7e:01:e8:82:71:c7:03:88:02:c3:01:b9:80:c5:a7: d0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:8F:ED:19:65:4E:14:35:9C:40:21:AA:91:BD:ED:6B:EB:32:3A:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/880caa1d-47af-334b-8051-595434b22264.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:fe:e4:06:a0:86:33:6c:62:0b:4b:1e:b5:94:28:4c:ad:49: f2:54:40:c3:e0:d3:43:d4:7a:f1:30:18:6c:f3:6a:11:0e:e2: 5b:82:13:38:5f:ab:51:9f:9d:43:d3:f9:1e:81:29:c9:43:bd: f2:97:bf:05:1b:d9:3f:47:fb:85:80:3e:7a:38:5b:85:bc:dc: b3:78:48:c4:b9:ef:84:af:6e:5d:e0:83:43:3f:98:92:8e:b3: 9f:e9:43:c0:b8:99:a8:03:1e:da:e6:ed:ec:81:30:21:b8:77: e0:91:a8:3f:e6:ab:70:5f:48:13:56:d0:1c:74:53:73:a4:ab: e5:a8:73:4a:23:21:e8:6e:f5:67:34:43:b6:23:30:08:f6:89: 43:25:e5:db:e7:11:82:cc:63:0a:8b:45:ba:04:08:d1:6a:93: b8:1d:3a:8b:a6:c4:02:53:50:e0:a0:4f:db:9e:fd:94:55:3b: c3:bf:99:e9:d2:8d:35:1c:ff:fc:33:b4:95:df:e6:89:2a:54: 29:ad:29:a3:33:38:c4:36:8d:a1:57:25:8a:d4:c9:3d:19:ae: 11:62:97:ec:4c:35:15:80:5b:84:d3:7a:b5:9e:a2:9c:b5:04: f9:e5:9c:58:c9:de:79:0d:a2:a1:6b:a0:64:81:40:19:62:fa: eb:4d:35:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ9h1LcgyOsJLYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk YmM4OWY3MDYtNjViZS00ZmRkLWJkYjctNDJiNmJiNGRmZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxkzWWjl2rSN2Oc9tCqCcA7o5tJu/fNnGviP 6w0SbO9pq8k006SLe02V5afreXJfFXhSmxQeEminR1F5bMaZFt7uQ8Xg0w+GOXTp a/N/AMrgKOkdC0wjuc0bphRs4CSY1CX80GZ8Yzrn2/lShL0x93G+gTYGUNXurIYj v5Fm2I77XZ3Nn6kQ+sg9TDSPKYHW3tOB1n1Zyp1Tnrqi5/g/Dk8DxBCIKth3VJVJ WL0Q3Dcz3M/zgm56ruC1hy6edn0Hiyr/kd6JFOj/QiKusRPCHZ8RW4kLnGHDuFNj i8Scll3eEX6IDfeOz6H4tjsW2dp+AeiCcccDiALDAbmAxafQEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGeP7RllThQ1nEAhqpG97WvrMjoKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvODgwY2FhMWQtNDdhZi0z MzRiLTgwNTEtNTk1NDM0YjIyMjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnONMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv+5AaghjNsYgtLHrWUKEytSfJUQMPg00PUevEwGGzzahEO4luCEzhf q1GfnUPT+R6BKclDvfKXvwUb2T9H+4WAPno4W4W83LN4SMS574Svbl3gg0M/mJKO s5/pQ8C4magDHtrm7eyBMCG4d+CRqD/mq3BfSBNW0Bx0U3Okq+Woc0ojIehu9Wc0 Q7YjMAj2iUMl5dvnEYLMYwqLRboECNFqk7gdOoumxAJTUOCgT9ue/ZRVO8O/menS jTUc//wztJXf5okqVCmtKaMzOMQ2jaFXJYrUyT0ZrhFil+xMNRWAW4TTerWeopy1 BPnlnFjJ3nkNoqFroGSBQBli+utNNfk= -----END CERTIFICATE-----Generated at Sat Apr 26 13:30:08 2025 by rpki-client