$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa File: b3daaa82-df38-3308-8f74-538c1b1500bb.roa (raw, json) Hash identifier: nPtUpayaiSvH8TVRd9Td3e3e4Ttf9hXX2FGhN1IEQJM= Subject key identifier: C8:7E:0D:FC:F7:7B:BB:4A:E4:49:23:54:73:5F:D3:2E:C4:D1:E6:5D Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A10353F07551E5BA66A3F8C80 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 395831 IP address blocks: 158.115.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:3f:07:55:1e:5b:a6:6a:3f:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=4bdf5009-8d81-4ef2-88ed-ee39cbe7b645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cc:62:ba:f1:ed:dd:be:86:a6:33:54:e7:d4: 6c:88:40:42:b9:f3:44:1d:2b:9a:45:dc:c0:ce:61: 09:ec:ed:de:e5:cb:45:cd:3c:ea:fd:21:67:e9:56: 16:a6:38:76:b9:ad:c8:3b:d9:e0:68:0d:6d:81:03: b5:9d:8c:a6:fe:6d:fd:0e:b9:9f:a1:a3:7b:ad:18: 55:ba:d6:3a:ad:7b:74:30:7e:19:ba:f5:f6:b0:16: a5:e7:cb:68:78:d3:bd:3b:7c:5f:60:81:b2:c3:24: d4:62:a2:8a:32:67:82:68:9d:3b:93:8b:90:ab:c0: b7:db:55:0e:92:a4:68:b3:0e:54:94:48:5b:68:33: c2:c3:bf:96:a9:0e:d3:b8:6e:bd:43:5a:3a:41:c2: 60:41:5a:6a:c5:52:06:3b:db:7f:a3:34:10:02:91: 4f:b8:7b:2c:ca:73:b9:ab:a0:13:b1:89:73:30:7c: 5a:0b:c2:a6:b2:30:1a:2f:a2:4b:29:51:d2:d6:b0: 9d:65:7e:a2:e8:02:2a:35:2c:4a:73:6c:f1:57:0d: 0a:3d:c2:6c:64:ec:a9:08:81:c4:ce:0f:2b:a2:92: 5e:e1:c8:78:9e:12:7b:6d:3c:d5:a2:d8:0a:68:bf: 4b:1e:e2:4a:53:7c:db:36:9a:72:ec:07:06:da:12: d5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7E:0D:FC:F7:7B:BB:4A:E4:49:23:54:73:5F:D3:2E:C4:D1:E6:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/b3daaa82-df38-3308-8f74-538c1b1500bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:18:81:25:09:e4:cf:a5:69:5e:8a:2c:bf:71:35:2c:bc:46: e8:06:38:49:44:64:b7:59:fb:03:c2:ab:d8:ec:d9:14:97:47: ec:43:ed:6c:24:9a:65:bd:f1:0e:21:9f:0f:1f:0e:ff:29:e5: aa:e3:c0:3d:71:56:ac:f3:6b:94:60:dc:ae:84:c7:f1:58:4e: ef:a4:c5:54:53:1e:4b:ad:20:ad:7b:c9:05:58:06:88:03:78: ba:03:a4:ce:e6:84:b2:c6:82:1b:f1:01:85:2e:13:22:a2:8e: 6f:ed:ff:fa:17:e3:6e:14:4f:53:81:96:b5:1f:f5:be:a5:d1: 26:87:9f:27:c4:2c:d3:e7:76:68:4d:46:8a:7a:bd:ff:94:08: ba:95:3f:b0:f0:d4:5a:55:4c:13:fa:1d:06:69:c9:52:fc:fe: eb:6c:b3:64:43:3f:12:21:39:53:1c:4b:89:7e:01:bb:9f:ae: ee:c0:52:b0:77:b1:b2:0e:2f:e7:f2:41:a1:b7:52:f5:66:f9: ef:fb:3b:8a:5a:ee:e8:95:33:58:03:50:2e:1e:01:f0:6b:1d: 43:9b:20:53:45:47:c5:b8:ba:aa:db:8c:5a:e5:df:c5:a1:c7: 2a:6c:03:58:97:11:0a:e2:86:f2:5e:52:9c:b7:6f:11:70:78: 6b:d0:cd:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNT8HVR5bpmo/jIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NGJkZjUwMDktOGQ4MS00ZWYyLTg4ZWQtZWUzOWNiZTdiNjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8xiuvHt3b6GpjNU59RsiEBCufNEHSuaRdzA zmEJ7O3e5ctFzTzq/SFn6VYWpjh2ua3IO9ngaA1tgQO1nYym/m39DrmfoaN7rRhV utY6rXt0MH4ZuvX2sBal58toeNO9O3xfYIGywyTUYqKKMmeCaJ07k4uQq8C321UO kqRosw5UlEhbaDPCw7+WqQ7TuG69Q1o6QcJgQVpqxVIGO9t/ozQQApFPuHssynO5 q6ATsYlzMHxaC8KmsjAaL6JLKVHS1rCdZX6i6AIqNSxKc2zxVw0KPcJsZOypCIHE zg8ropJe4ch4nhJ7bTzVotgKaL9LHuJKU3zbNppy7AcG2hLV/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMh+Dfz3e7tK5EkjVHNf0y7E0eZdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYjNkYWFhODItZGYzOC0z MzA4LThmNzQtNTM4YzFiMTUwMGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAYgSUJ5M+laV6KLL9xNSy8RugGOElEZLdZ+wPCq9js2RSXR+xD7Wwk mmW98Q4hnw8fDv8p5arjwD1xVqzza5Rg3K6Ex/FYTu+kxVRTHkutIK17yQVYBogD eLoDpM7mhLLGghvxAYUuEyKijm/t//oX424UT1OBlrUf9b6l0SaHnyfELNPndmhN Rop6vf+UCLqVP7Dw1FpVTBP6HQZpyVL8/utss2RDPxIhOVMcS4l+Abufru7AUrB3 sbIOL+fyQaG3UvVm+e/7O4pa7uiVM1gDUC4eAfBrHUObIFNFR8W4uqrbjFrl38Wh xypsA1iXEQrihvJeUpy3bxFweGvQzdk= -----END CERTIFICATE-----Generated at Sun Jun 15 17:26:46 2025 by rpki-client