$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/c24e6a3a-c40a-3eac-bef2-a8039c545265.roa File: c24e6a3a-c40a-3eac-bef2-a8039c545265.roa (raw, json) Hash identifier: qhm4XjRmpojAq5k8htoCGcsoDP+QkAOrQOTnqqAL4Ck= Subject key identifier: 6B:4F:7B:6F:1A:57:00:3C:01:FA:79:84:6B:69:8F:E5:90:21:B0:D9 Certificate issuer: /CN=458adead-fc85-4377-ae8f-70e00c42b223 Certificate serial: 010D0C9F43285849D594DEB5E183F70220A67C80 Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/c24e6a3a-c40a-3eac-bef2-a8039c545265.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 14618 IP address blocks: 157.248.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:de:b5:e1:83:f7:02:20:a6:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=ea43312e-b0a3-49e2-879b-79e32de52cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:28:26:5c:b7:8d:ef:48:6e:e6:4c:00:5f:ca: db:88:a8:f8:9c:be:a2:e7:41:29:01:46:f6:ab:6d: 7b:e9:6f:38:b9:22:11:f0:02:cc:71:9d:f2:53:f6: 04:94:ff:41:41:07:09:04:34:e0:bc:94:12:ed:89: 5b:d2:ff:85:1e:e3:39:7a:27:81:75:9a:fd:4a:81: 50:d3:df:c8:62:1f:d6:fa:58:4a:e7:ba:c8:07:7d: 47:55:34:d9:76:14:fc:16:14:76:0f:6f:0e:d0:42: dd:d8:a8:23:75:e5:85:3a:8b:05:01:44:21:b7:29: 9b:4c:3c:f9:d7:eb:f9:92:4e:59:1d:67:0f:9f:bc: de:55:24:ee:41:74:29:6b:30:98:94:b6:c5:1e:c7: aa:bd:b7:8f:11:b9:27:e8:60:1b:4a:de:f2:34:2e: 59:8b:0d:38:8a:ee:4e:9d:dc:d5:7c:2c:6b:58:ec: 96:0c:0b:71:de:47:1d:1e:8a:2e:95:84:6a:15:c2: 53:d7:ac:b8:d7:77:ad:08:2d:1b:c9:d2:80:f7:7c: 0f:66:28:3f:ec:31:c8:b7:5e:c6:91:b3:84:65:d4: 37:41:2f:99:6e:df:88:ed:54:54:4e:aa:fe:34:45: ec:53:43:15:7a:66:a7:4b:c4:11:43:8e:fe:2a:9e: 91:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4F:7B:6F:1A:57:00:3C:01:FA:79:84:6B:69:8F:E5:90:21:B0:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/c24e6a3a-c40a-3eac-bef2-a8039c545265.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl X509v3 Authority Key Identifier: keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer sbgp-ipAddrBlock: critical IPv4: 157.248.214.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:8d:0f:72:42:ab:bb:19:40:0d:8b:d8:c4:85:94:3e:2d:48: 4d:53:fc:cd:24:79:16:9b:a0:0d:62:2f:1a:b3:e1:a8:70:4c: 14:a5:bb:28:e3:4a:04:26:6a:d1:61:c9:60:46:1e:0b:78:8a: d8:3b:48:a0:16:d7:ca:1e:5d:92:c0:85:38:dc:53:ca:9a:a6: 83:c0:b7:0b:6b:fc:5a:b5:b5:99:49:f6:df:d0:e1:10:f5:b7: 78:64:02:77:0c:b0:bc:8b:45:f2:9e:85:ab:a4:3a:43:2b:9d: 25:ee:39:47:95:3a:3e:e0:4b:6c:c0:35:48:4b:00:66:a2:e7: da:c9:e1:c2:5f:40:17:99:d6:b7:5b:7b:8d:0d:43:71:27:bc: 07:71:ee:7f:a3:e4:84:4a:60:18:bf:e2:c7:21:36:fe:fb:b1: 85:d8:cb:ef:b1:ce:bd:01:89:fd:33:11:71:d4:d7:de:19:b6: ca:49:97:31:c8:d9:72:78:f4:6d:c1:9e:a5:44:20:77:62:e3: ec:8f:0a:9e:39:0a:20:ef:6e:f7:54:db:63:c6:01:c8:8f:85: 0d:fc:78:d9:3f:23:95:62:59:5a:7e:2e:66:17:e4:47:49:a2: ec:1c:15:06:7d:63:ce:da:bf:22:98:52:01:67:50:75:bd:e4: 1a:d9:69:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlN614YP3AiCmfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4YWRlYWQtZmM4NS00Mzc3LWFlOGYtNzBlMDBjNDJi MjIzMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk ZWE0MzMxMmUtYjBhMy00OWUyLTg3OWItNzllMzJkZTUyY2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ygmXLeN70hu5kwAX8rbiKj4nL6i50EpAUb2 q2176W84uSIR8ALMcZ3yU/YElP9BQQcJBDTgvJQS7Ylb0v+FHuM5eieBdZr9SoFQ 09/IYh/W+lhK57rIB31HVTTZdhT8FhR2D28O0ELd2KgjdeWFOosFAUQhtymbTDz5 1+v5kk5ZHWcPn7zeVSTuQXQpazCYlLbFHseqvbePEbkn6GAbSt7yNC5Ziw04iu5O ndzVfCxrWOyWDAtx3kcdHooulYRqFcJT16y413etCC0bydKA93wPZig/7DHIt17G kbOEZdQ3QS+Zbt+I7VRUTqr+NEXsU0MVemanS8QRQ47+Kp6RtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtPe28aVwA8Afp5hGtpj+WQIbDZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NThh ZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUwMGM0MmIyMjMvYzI0ZTZhM2EtYzQwYS0z ZWFjLWJlZjItYTgwMzljNTQ1MjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU4YWRlYWQtZmM4NS00Mzc3LWFl OGYtNzBlMDBjNDJiMjIzLzQ1OGFkZWFkLWZjODUtNDM3Ny1hZThmLTcwZTAwYzQy YjIyMy5jcmwwHwYDVR0jBBgwFoAUgFwvkgT+eRfx4bKa4aKlQkaLRQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NThhZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUw MGM0MmIyMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnfjWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKWND3JCq7sZQA2L2MSFlD4tSE1T/M0keRaboA1iLxqz4ahwTBSluyjj SgQmatFhyWBGHgt4itg7SKAW18oeXZLAhTjcU8qapoPAtwtr/Fq1tZlJ9t/Q4RD1 t3hkAncMsLyLRfKehaukOkMrnSXuOUeVOj7gS2zANUhLAGai59rJ4cJfQBeZ1rdb e40NQ3EnvAdx7n+j5IRKYBi/4schNv77sYXYy++xzr0Bif0zEXHU194ZtspJlzHI 2XJ49G3BnqVEIHdi4+yPCp45CiDvbvdU22PGAciPhQ38eNk/I5ViWVp+LmYX5EdJ ouwcFQZ9Y87avyKYUgFnUHW95BrZabg= -----END CERTIFICATE-----Generated at Sun Jun 15 13:03:10 2025 by rpki-client