$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa File: 5c304d34-8950-35d5-acec-d2d13773b41a.roa (raw, json) Hash identifier: vcCPtts0Hu8u7UoMjIihI/xt7j+4fsgQSaFveUjg5z0= Subject key identifier: 6B:09:BC:70:D8:C6:0D:34:5C:F2:E8:60:6D:9E:32:49:AA:05:F5:53 Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A348020A42AD10399B35D9680 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 16509 IP address blocks: 216.157.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:20:a4:2a:d1:03:99:b3:5d:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=894e6d97-e153-45f8-b0ed-43cf2bbedb05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:5f:eb:6a:00:96:de:d7:90:7d:ca:16:a7:30: 9b:9e:49:1e:bc:16:d6:05:ba:30:9b:78:2d:7b:20: a6:cc:05:78:e3:eb:2c:5a:8d:5e:f5:32:da:55:65: 5e:cb:f5:b7:34:b7:01:6c:f2:65:29:c7:8b:8a:03: ec:f5:99:e5:7b:6a:94:bb:66:10:01:e8:71:60:96: 70:91:3d:35:e0:65:79:98:2d:1e:3c:af:57:e5:f6: 13:3c:9b:d6:bf:55:d9:7e:b7:81:7b:fb:28:05:e9: d6:1f:55:77:5d:44:60:1a:99:5b:bd:2b:80:be:97: 33:4f:0f:16:dc:c3:79:cc:f1:55:39:06:69:9f:62: 4a:49:bf:2c:05:77:ce:ba:59:45:3f:44:75:8d:d4: e6:3a:82:75:26:b3:59:2a:75:c7:dd:92:65:59:b7: 39:12:f5:df:6b:ba:1c:68:64:f1:56:9a:02:3e:66: d6:82:0a:48:72:28:6b:06:d6:85:92:bd:61:cf:cb: fe:6c:65:ee:6a:89:37:87:31:0c:ef:44:71:21:ab: 9d:9f:13:42:5a:6a:77:fd:6f:6e:9c:38:34:36:7b: b9:e2:4f:f1:a6:9c:91:da:cd:fe:af:be:ec:e1:e1: 89:8f:46:d6:37:50:9f:56:8e:41:fb:0c:c5:c6:d7: 68:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:09:BC:70:D8:C6:0D:34:5C:F2:E8:60:6D:9E:32:49:AA:05:F5:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/5c304d34-8950-35d5-acec-d2d13773b41a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 216.157.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:ac:ea:3f:28:ac:9f:af:75:10:79:e3:21:76:3c:e6:94:24: 29:f8:95:f4:c6:4e:94:0a:b0:5d:19:e8:de:e7:37:c8:8d:a9: 91:40:c3:2f:3d:4f:e6:2c:f4:98:82:37:e7:39:49:5c:d3:14: 06:a0:dd:ae:40:af:8e:56:09:ed:a3:e8:3f:35:1a:e1:95:75: e3:d0:76:60:1d:43:3c:42:26:6e:9d:03:ac:ba:49:93:38:c6: 61:94:0d:03:8c:54:8c:2d:02:0b:a3:af:49:0b:a0:d6:96:24: bd:91:1e:b0:cb:37:78:03:86:a1:55:14:5f:ce:eb:da:ee:ed: 82:49:75:cb:d4:01:ab:83:c0:f7:92:17:a3:6b:f9:c7:41:c2: a8:d1:53:1d:de:bf:cc:28:c5:f8:22:63:1e:9d:5d:e7:4f:21: a5:61:6a:d4:ab:46:82:aa:0b:54:c8:8f:ad:da:e6:b3:b5:bf: 21:7b:e9:03:f4:b9:67:d7:ec:f8:31:30:e5:37:39:d7:9e:e0: 26:89:ae:ab:cc:3b:fe:c5:b6:2e:9a:31:1f:d9:56:eb:70:6e: 50:78:78:8e:fe:8d:f6:1a:00:98:af:65:47:dd:91:66:3b:b2: 6b:18:3e:91:c2:88:13:7b:4d:a2:84:5d:65:ba:dd:1e:79:45: 34:0a:7d:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gCCkKtEDmbNdloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk ODk0ZTZkOTctZTE1My00NWY4LWIwZWQtNDNjZjJiYmVkYjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV/ragCW3teQfcoWpzCbnkkevBbWBbowm3gt eyCmzAV44+ssWo1e9TLaVWVey/W3NLcBbPJlKceLigPs9Znle2qUu2YQAehxYJZw kT014GV5mC0ePK9X5fYTPJvWv1XZfreBe/soBenWH1V3XURgGplbvSuAvpczTw8W 3MN5zPFVOQZpn2JKSb8sBXfOullFP0R1jdTmOoJ1JrNZKnXH3ZJlWbc5EvXfa7oc aGTxVpoCPmbWggpIcihrBtaFkr1hz8v+bGXuaok3hzEM70RxIaudnxNCWmp3/W9u nDg0Nnu54k/xppyR2s3+r77s4eGJj0bWN1CfVo5B+wzFxtdoyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsJvHDYxg00XPLoYG2eMkmqBfVTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNWMzMDRkMzQtODk1MC0z NWQ1LWFjZWMtZDJkMTM3NzNiNDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J2CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECs6j8orJ+vdRB54yF2POaUJCn4lfTGTpQKsF0Z6N7nN8iNqZFAwy89 T+Ys9JiCN+c5SVzTFAag3a5Ar45WCe2j6D81GuGVdePQdmAdQzxCJm6dA6y6SZM4 xmGUDQOMVIwtAgujr0kLoNaWJL2RHrDLN3gDhqFVFF/O69ru7YJJdcvUAauDwPeS F6Nr+cdBwqjRUx3ev8woxfgiYx6dXedPIaVhatSrRoKqC1TIj63a5rO1vyF76QP0 uWfX7PgxMOU3Odee4CaJrqvMO/7Fti6aMR/ZVutwblB4eI7+jfYaAJivZUfdkWY7 smsYPpHCiBN7TaKEXWW63R55RTQKfTA= -----END CERTIFICATE-----Generated at Mon Jun 30 15:04:17 2025 by rpki-client