$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c11ee4ee-47af-3a13-b0f3-3a19f78fc97d.roa File: c11ee4ee-47af-3a13-b0f3-3a19f78fc97d.roa (raw, json) Hash identifier: 5qw57f4epjAtFxWz7ZUjJnYCTIXoxPpBnGRIT8DSRuY= Subject key identifier: 1F:A0:57:02:F0:32:1F:C2:CE:EF:7D:C8:C9:CE:64:9A:64:A6:6E:CB Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584988CF27200578D74DED67DC00 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c11ee4ee-47af-3a13-b0f3-3a19f78fc97d.roa Signing time: Tue 15 Apr 2025 13:00:59 +0000 ROA not before: Tue 15 Apr 2025 13:00:59 +0000 ROA not after: Mon 14 Jul 2025 13:00:59 +0000 asID: 14618 IP address blocks: 158.115.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:88:cf:27:20:05:78:d7:4d:ed:67:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Apr 15 13:00:59 2025 GMT Not After : Jul 14 13:00:59 2025 GMT Subject: CN=3cd5d0c3-8284-4b6b-aa2a-f8124cb05b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:33:4e:11:17:c5:12:1e:d0:72:b0:5d:f4:e3: 21:6c:23:4f:74:42:56:09:39:11:dc:05:a0:59:94: 7a:66:cc:12:c5:f3:c4:0d:6b:e8:63:5f:17:65:1d: 81:b9:66:d8:82:b2:83:96:42:3f:4b:4e:41:97:a5: b0:37:95:22:e3:2f:e0:ad:de:05:43:24:ca:80:50: 1f:93:90:c2:f2:b7:39:2c:23:3b:9e:4d:0a:2b:ac: 46:f3:2a:3b:e8:c1:3f:99:76:9d:fe:17:b0:5f:7e: 31:73:d3:ea:ad:0a:a9:ef:10:e3:0c:54:7e:8e:5a: 74:fd:c8:9f:fa:bb:4c:cb:bc:12:24:28:02:ba:b9: 86:59:ba:fe:27:df:69:58:19:6e:7a:bc:2c:46:c6: be:a3:80:33:d6:2d:db:a5:c0:75:73:b7:c3:a8:de: 0c:9f:f3:9e:8d:19:37:5f:f1:b6:8d:10:c9:b4:4b: 2c:fd:87:d0:e8:bb:ef:72:3d:5b:fc:3e:37:33:11: 45:0c:b1:63:2a:79:cb:ec:20:87:43:e1:84:08:ea: fd:13:38:37:8f:d4:5d:01:be:38:bb:8b:46:3f:ea: ab:e0:ef:4a:a0:00:e3:a9:58:20:bb:50:c5:08:0d: 47:05:d3:81:c2:99:0d:d5:ad:f4:5b:bd:17:c0:63: 0d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:A0:57:02:F0:32:1F:C2:CE:EF:7D:C8:C9:CE:64:9A:64:A6:6E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/c11ee4ee-47af-3a13-b0f3-3a19f78fc97d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:fc:d1:f4:9a:d2:1e:20:ef:13:c0:3d:41:11:d0:56:b8:fd: d9:c5:e9:1b:62:46:8c:65:8a:52:e6:6f:84:97:e2:c6:64:00: 42:24:aa:6c:9d:39:29:70:97:ea:66:f6:d4:e2:cc:35:f9:a5: e0:38:d5:0b:4e:4b:7e:7b:db:dd:35:da:8d:88:e7:c4:96:cb: f6:a1:28:79:05:a9:22:83:5b:06:a2:ed:5d:ec:a2:69:72:af: 08:8e:c6:1a:7a:fc:29:72:4b:d4:ec:cf:45:31:59:6c:73:a0: 93:0e:81:fc:ef:f7:89:c8:8a:81:63:e0:a0:27:9a:60:95:49: 6f:f1:8d:46:2f:52:3d:9e:f9:12:30:a8:ea:d0:41:54:3e:ed: bb:2c:3c:90:4b:31:1e:17:bf:40:7b:73:68:09:f6:58:2e:60: c6:4d:d6:55:1c:39:68:a8:99:7e:a7:94:80:9c:9b:c6:07:8d: ee:94:f1:6d:0b:09:d2:97:4a:09:77:3d:e8:70:ac:48:f1:99: 55:bc:8a:6d:21:9a:32:3b:47:eb:95:2e:1c:e8:90:2d:61:ba: ed:9d:b2:7b:c7:66:52:73:a5:ca:c6:5d:3f:b2:42:1a:c3:9e: 7a:bb:79:ba:f5:6f:be:00:bc:33:66:69:ae:5a:f0:e2:5d:2b: 9c:18:69:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmIzycgBXjXTe1n3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDQxNTEzMDA1OVoXDTI1MDcxNDEzMDA1OVowLzEtMCsGA1UEAxMk M2NkNWQwYzMtODI4NC00YjZiLWFhMmEtZjgxMjRjYjA1YjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTNOERfFEh7QcrBd9OMhbCNPdEJWCTkR3AWg WZR6ZswSxfPEDWvoY18XZR2BuWbYgrKDlkI/S05Bl6WwN5Ui4y/grd4FQyTKgFAf k5DC8rc5LCM7nk0KK6xG8yo76ME/mXad/hewX34xc9PqrQqp7xDjDFR+jlp0/cif +rtMy7wSJCgCurmGWbr+J99pWBluerwsRsa+o4Az1i3bpcB1c7fDqN4Mn/OejRk3 X/G2jRDJtEss/YfQ6Lvvcj1b/D43MxFFDLFjKnnL7CCHQ+GECOr9Ezg3j9RdAb44 u4tGP+qr4O9KoADjqVggu1DFCA1HBdOBwpkN1a30W70XwGMNxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+gVwLwMh/Czu99yMnOZJpkpm7LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvYzExZWU0ZWUtNDdhZi0z YTEzLWIwZjMtM2ExOWY3OGZjOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/80fSa0h4g7xPAPUER0Fa4/dnF6RtiRoxlilLmb4SX4sZkAEIkqmyd OSlwl+pm9tTizDX5peA41QtOS35729012o2I58SWy/ahKHkFqSKDWwai7V3somly rwiOxhp6/ClyS9Tsz0UxWWxzoJMOgfzv94nIioFj4KAnmmCVSW/xjUYvUj2e+RIw qOrQQVQ+7bssPJBLMR4Xv0B7c2gJ9lguYMZN1lUcOWiomX6nlICcm8YHje6U8W0L CdKXSgl3PehwrEjxmVW8im0hmjI7R+uVLhzokC1huu2dsnvHZlJzpcrGXT+yQhrD nnq7ebr1b74AvDNmaa5a8OJdK5wYaec= -----END CERTIFICATE-----Generated at Sat Apr 26 13:17:56 2025 by rpki-client