$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa File: dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa (raw, json) Hash identifier: kySRZz0taaNp3NrqsMEI06w9Aywyg1kI5HGQVU8yeLk= Subject key identifier: 05:07:46:E9:88:C8:27:01:1F:3B:DF:59:A4:6F:B9:F9:95:19:BD:34 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A10353C0B7D0AE3A7A04621C0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 14618 IP address blocks: 216.157.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:3c:0b:7d:0a:e3:a7:a0:46:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=72a271e3-3584-4d39-986f-e2f277d6dae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:7e:a5:4d:6c:a0:38:07:36:9e:e4:b3:ac: 0d:49:3f:aa:8a:b3:15:89:bd:52:c8:d0:66:32:98: a1:5a:1e:d8:f8:be:65:b9:67:0f:bb:5b:ed:e6:a7: f9:5e:62:ce:75:4b:bd:68:c2:f9:82:7a:a7:49:cf: 62:6f:42:96:0c:67:41:3f:8d:16:a6:87:bd:db:17: 5f:57:b2:1c:36:5a:fd:a3:c1:44:c5:ca:37:e3:c1: 12:e0:46:fa:67:e8:10:47:93:b3:67:f7:4e:26:cb: 33:f2:ce:d4:02:f3:31:e8:be:ba:a2:57:96:58:56: 25:bd:cf:af:ea:0a:b9:b1:e4:1c:66:fa:2c:34:98: 95:cb:09:24:7c:d6:69:66:87:68:c7:af:22:d5:21: a5:36:32:23:52:62:4b:e8:b8:87:ab:67:8a:18:f3: da:87:79:b4:6c:40:c9:16:ca:87:1c:93:3e:f8:ee: 15:2c:74:6b:97:81:da:45:77:60:3c:2e:0c:0d:f7: a4:81:7b:d4:88:c1:ee:77:d5:e6:1e:7b:71:f9:b1: ee:93:05:e5:d0:72:3c:73:19:56:68:5c:67:41:36: 82:ff:31:67:8e:e3:12:05:c6:f6:9a:82:7b:f2:ec: 40:00:64:00:2a:86:dd:75:84:03:a4:3d:eb:cf:8a: 70:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:07:46:E9:88:C8:27:01:1F:3B:DF:59:A4:6F:B9:F9:95:19:BD:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/dbaccf53-10d1-3f27-a036-29c22e6f8dd2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:33:79:a2:85:98:8b:3d:c3:07:de:7f:4f:c4:78:35:7c:cf: d7:d2:8e:92:7d:7a:a7:49:e5:57:ab:c9:20:eb:84:5d:ad:83: de:20:29:ee:40:7a:dc:06:e2:3b:e8:b2:93:85:2f:5a:92:53: 9a:8c:3b:db:37:12:5a:46:7b:cb:14:cc:8d:34:f1:64:a4:3d: 32:9b:e3:02:9d:c5:8e:56:46:e3:29:ed:fd:93:a2:bd:64:f4: e8:e5:d8:31:c8:17:6f:56:99:e8:4a:3b:47:33:37:4a:2e:13: ee:a7:37:48:ba:ab:63:bd:4b:ef:7b:31:44:99:97:78:91:d8: dc:c4:33:63:09:da:2c:0f:d2:07:85:58:38:da:12:24:be:ee: 5a:0e:bb:12:0b:71:c6:2c:2c:3e:37:99:dd:a3:42:bc:72:f0: 33:e5:7a:a3:39:e5:21:6a:0d:91:ad:8a:af:49:3b:9f:46:fb: 27:8e:43:9f:28:ea:a1:a0:66:22:6f:0a:6f:76:93:5f:02:11: 02:73:76:b2:52:04:08:11:e4:85:2b:f2:de:ad:07:b2:bc:be: 8d:a4:dd:c5:09:bc:fd:47:a2:99:bc:cb:27:72:ec:ec:43:bf: 2d:f3:4b:f3:84:e0:de:ea:d9:71:cc:27:5a:b8:56:d3:db:70: 10:79:42:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTwLfQrjp6BGIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk NzJhMjcxZTMtMzU4NC00ZDM5LTk4NmYtZTJmMjc3ZDZkYWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOp+pU1soDgHNp7ks6wNST+qirMVib1SyNBm MpihWh7Y+L5luWcPu1vt5qf5XmLOdUu9aML5gnqnSc9ib0KWDGdBP40Wpoe92xdf V7IcNlr9o8FExco348ES4Eb6Z+gQR5OzZ/dOJssz8s7UAvMx6L66oleWWFYlvc+v 6gq5seQcZvosNJiVywkkfNZpZodox68i1SGlNjIjUmJL6LiHq2eKGPPah3m0bEDJ FsqHHJM++O4VLHRrl4HaRXdgPC4MDfekgXvUiMHud9XmHntx+bHukwXl0HI8cxlW aFxnQTaC/zFnjuMSBcb2moJ78uxAAGQAKobddYQDpD3rz4pwJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUHRumIyCcBHzvfWaRvufmVGb00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvZGJhY2NmNTMtMTBkMS0z ZjI3LWEwMzYtMjljMjJlNmY4ZGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0zeaKFmIs9wwfef0/EeDV8z9fSjpJ9eqdJ5VerySDrhF2tg94gKe5A etwG4jvospOFL1qSU5qMO9s3ElpGe8sUzI008WSkPTKb4wKdxY5WRuMp7f2Tor1k 9Ojl2DHIF29WmehKO0czN0ouE+6nN0i6q2O9S+97MUSZl3iR2NzEM2MJ2iwP0geF WDjaEiS+7loOuxILccYsLD43md2jQrxy8DPleqM55SFqDZGtiq9JO59G+yeOQ58o 6qGgZiJvCm92k18CEQJzdrJSBAgR5IUr8t6tB7K8vo2k3cUJvP1Hopm8yydy7OxD vy3zS/OE4N7q2XHMJ1q4VtPbcBB5Qjo= -----END CERTIFICATE-----Generated at Sun Jun 15 09:13:10 2025 by rpki-client