$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa File: 1cafc32e-37ff-3be5-8b34-b31586912636.roa (raw, json) Hash identifier: 1M9AejATfBgkRk/lzIhqllXjeJ1KKOmo6XtHtCibJJo= Subject key identifier: F4:A0:30:19:11:A1:3B:31:A8:DE:72:4E:6B:9B:B9:D0:A4:E8:A1:76 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F43285849BB0F6F2E77E178F935E5FAC0 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa Signing time: Sat 03 May 2025 13:01:01 +0000 ROA not before: Sat 03 May 2025 13:01:01 +0000 ROA not after: Fri 01 Aug 2025 13:01:01 +0000 asID: 16509 IP address blocks: 158.115.157.0/24 maxlen: 24 2606:7bc0:1092::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bb:0f:6f:2e:77:e1:78:f9:35:e5:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: May 3 13:01:01 2025 GMT Not After : Aug 1 13:01:01 2025 GMT Subject: CN=01a8d040-794f-4b96-a00c-39293ba3437d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e3:d2:36:f9:1d:09:e7:d8:40:27:f8:39:35: 15:8f:f3:4b:16:7c:39:76:e6:41:88:ce:76:45:1c: 45:22:82:bf:d0:89:99:0e:46:83:38:9c:5d:4d:3e: 4a:83:1b:a3:fa:07:32:83:9a:e3:42:58:bf:6c:7d: dc:0a:5d:d3:48:d8:6a:41:ed:75:71:90:92:c3:38: ac:f0:01:c2:2d:68:ff:d4:ac:f0:14:62:70:79:2d: cb:da:42:b7:ad:86:1e:6c:d2:0e:e3:e9:76:7e:85: df:d9:99:cc:10:7a:b5:db:ca:72:e5:1b:b9:8f:3e: fa:95:eb:f6:d2:a3:e1:04:81:d0:e0:38:dd:51:74: bb:45:17:75:8a:ea:ba:b2:e4:a0:9c:66:5c:e5:4f: 3f:67:c7:16:c1:31:78:62:24:ba:3d:63:5c:63:aa: 34:73:d0:f7:40:3b:31:c0:32:12:c2:5d:b1:3a:fc: 89:9b:64:9a:97:ea:c3:22:2a:a8:bd:1f:37:e7:17: f4:2a:75:ef:49:71:b3:b3:ce:7d:17:20:a0:2f:f5: 74:71:5b:f7:6b:24:76:5d:1c:dd:39:f8:8c:9e:50: 6b:8f:13:3e:28:aa:7e:7f:1d:dd:1d:cc:f3:17:5a: 3f:88:20:7a:bb:ba:b7:7a:6f:85:31:17:2f:a0:21: 11:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A0:30:19:11:A1:3B:31:A8:DE:72:4E:6B:9B:B9:D0:A4:E8:A1:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/1cafc32e-37ff-3be5-8b34-b31586912636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.157.0/24 IPv6: 2606:7bc0:1092::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:3e:bc:88:f1:5c:10:be:c3:f7:1e:1b:1e:df:22:4a:e6:29: f5:14:36:c9:f2:b5:06:2f:e9:9d:4d:ad:ca:ac:7d:5f:b1:28: 02:e6:27:33:8c:5f:82:8c:f4:e3:2e:59:58:07:b1:52:07:37: f5:42:28:c2:63:15:e1:9b:f3:01:30:b9:9d:f0:88:1e:1d:8f: b3:e4:9a:25:d0:91:53:ae:8d:2c:43:93:26:71:12:43:f7:0a: 14:2b:f2:d7:f8:80:e6:3a:2d:64:59:3f:8f:e0:f4:82:8b:ab: ac:0f:a5:b8:d7:82:9c:bc:64:fd:81:18:80:2e:7a:d1:eb:42: d0:69:0f:2a:7e:ae:2c:80:e0:eb:e2:a2:a6:a8:d3:a3:e9:a0: 8c:9b:07:c6:9f:8e:2a:37:8b:bd:fe:4b:81:f5:d9:77:66:00: f0:30:cc:04:92:dd:bc:07:5f:0d:24:9d:26:90:63:28:89:c6: 6f:03:0c:39:c0:9f:8c:70:31:f9:92:6a:bf:57:43:2a:83:3d: 73:21:84:fa:44:cd:ad:cf:33:69:b2:03:c6:e4:5c:47:9c:20: 7a:b8:e3:2e:b4:4c:8a:26:7f:87:9d:dc:f0:81:4c:f5:d6:22: 91:07:11:ef:f0:46:01:6c:db:85:9b:76:5d:a4:6b:de:fb:cf: 2d:f3:f6:4e -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEm7D28ud+F4+TXl+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk MDFhOGQwNDAtNzk0Zi00Yjk2LWEwMGMtMzkyOTNiYTM0MzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+PSNvkdCefYQCf4OTUVj/NLFnw5duZBiM52 RRxFIoK/0ImZDkaDOJxdTT5Kgxuj+gcyg5rjQli/bH3cCl3TSNhqQe11cZCSwzis 8AHCLWj/1KzwFGJweS3L2kK3rYYebNIO4+l2foXf2ZnMEHq128py5Ru5jz76lev2 0qPhBIHQ4DjdUXS7RRd1iuq6suSgnGZc5U8/Z8cWwTF4YiS6PWNcY6o0c9D3QDsx wDISwl2xOvyJm2Sal+rDIiqovR835xf0KnXvSXGzs859FyCgL/V0cVv3ayR2XRzd OfiMnlBrjxM+KKp+fx3dHczzF1o/iCB6u7q3em+FMRcvoCER6wIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFPSgMBkRoTsxqN5yTmubudCk6KF2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvMWNhZmMzMmUtMzdmZi0z YmU1LThiMzQtYjMxNTg2OTEyNjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnnOdMA8E AgACMAkDBwAmBnvAEJIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAFj68iPFcEL7D9x4bHt8iSuYp9RQ2yfK1 Bi/pnU2tyqx9X7EoAuYnM4xfgoz04y5ZWAexUgc39UIowmMV4ZvzATC5nfCIHh2P s+SaJdCRU66NLEOTJnESQ/cKFCvy1/iA5jotZFk/j+D0gourrA+luNeCnLxk/YEY gC560etC0GkPKn6uLIDg6+KipqjTo+mgjJsHxp+OKjeLvf5LgfXZd2YA8DDMBJLd vAdfDSSdJpBjKInGbwMMOcCfjHAx+ZJqv1dDKoM9cyGE+kTNrc8zabIDxuRcR5wg erjjLrRMiiZ/h53c8IFM9dYikQcR7/BGAWzbhZt2XaRr3vvPLfP2Tg== -----END CERTIFICATE-----Generated at Sun May 11 11:08:14 2025 by rpki-client