$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa File: 693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa (raw, json) Hash identifier: vht/JcW6sslsDDpGkO5Jo07uCeWatiS3Gxt4ZxWboT0= Subject key identifier: 7C:E9:14:DE:4C:ED:B0:4A:BB:FA:2A:D1:BF:83:5F:2C:50:93:AA:4C Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Certificate serial: 010D0C9F4328584A10353ED1AA1C253D592B4F00 Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 395831 IP address blocks: 158.115.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:3e:d1:aa:1c:25:3d:59:2b:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=cf714425-33cb-46a4-b22f-df9548f48fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8e:77:df:73:38:43:8d:89:ab:15:02:a6:67: 32:66:97:2e:e2:cd:1b:b1:72:4f:80:5e:87:28:f1: 1d:44:2f:95:36:d7:a5:78:fa:5e:23:4e:de:16:03: 54:52:b7:9f:67:71:08:7e:35:e9:80:cd:9f:73:73: c2:95:80:c6:25:7a:7f:cb:07:d9:d2:94:da:60:01: f3:e9:9f:ee:4e:b4:80:de:da:79:70:2d:ab:86:52: 75:98:f9:b1:55:b5:20:8c:d3:c1:a7:40:3f:c5:56: 73:5a:6c:fb:c4:51:9e:8d:b8:07:c5:03:45:bc:24: 1b:ee:1a:d5:89:2d:01:96:e2:33:ee:4e:7f:47:ec: a5:93:0d:f9:5c:e3:4a:04:44:fa:9c:5b:3e:a1:3e: 3a:fd:43:79:39:c2:d1:72:1c:eb:a6:ae:b6:59:85: a6:a6:b4:cb:d2:f5:a1:d3:76:f9:79:c3:0d:ff:3a: ca:c1:39:5b:4f:06:8a:43:69:83:3a:4f:21:4d:56: 6a:fd:40:33:4e:78:0b:f3:ee:9c:4b:0c:46:1a:16: a4:07:60:75:1f:02:4c:2b:b9:d1:30:0c:b9:39:85: be:e6:9d:03:43:fa:3c:1a:3c:de:14:d8:b9:60:da: 10:1a:54:ed:4b:4e:27:92:10:be:70:9e:3c:e7:a1: 9c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E9:14:DE:4C:ED:B0:4A:BB:FA:2A:D1:BF:83:5F:2C:50:93:AA:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/693a7f7c-ef92-3044-b13d-b2ec55d3212a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl X509v3 Authority Key Identifier: keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer sbgp-ipAddrBlock: critical IPv4: 158.115.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d5:bc:52:92:e1:ee:09:ab:f6:6e:57:f3:6a:68:44:00:4d: 17:53:38:9a:09:97:78:1a:49:84:8b:1d:f6:87:4c:34:7d:90: ac:0b:53:36:fa:53:c3:6a:60:ab:a5:8c:8e:dc:ca:fd:38:20: 7e:1e:29:c7:da:87:42:dd:2a:e9:c0:97:44:ca:b3:c3:55:5e: 66:cb:9a:28:b9:a1:6c:c7:4d:a5:d7:24:8d:bd:f7:63:84:ab: 9d:75:0e:f9:f4:39:77:80:fe:2a:70:89:51:44:4c:43:cb:07: e2:9b:a5:47:65:fa:64:32:72:df:5c:ee:51:54:58:9f:9d:d4: 82:3c:58:e3:4e:86:30:f5:c8:ac:75:5d:91:3d:d4:94:8a:6a: 20:a0:02:38:43:b7:ac:49:c5:b6:79:db:a6:fc:53:51:9c:30: 44:bc:c9:25:5b:e1:d3:da:7c:b8:32:7d:4b:f8:8b:7a:76:ae: 81:2f:a1:6e:46:68:41:9b:c9:cc:21:03:50:0b:7d:9b:ac:29: e0:be:3d:22:09:3a:88:a7:b8:cf:41:c4:2d:2f:f8:e8:0d:bd: 12:2a:1f:43:5a:ba:53:5c:48:81:58:3a:a6:53:74:a2:32:b3: 1d:d4:3e:41:eb:93:e2:bf:57:59:af:b6:e1:bb:ff:42:b2:de: bf:85:19:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNT7RqhwlPVkrTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4ZWRiNGItODQ3NC00NGRjLTg4NDEtMzBhNmM2NmYz M2Q3MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk Y2Y3MTQ0MjUtMzNjYi00NmE0LWIyMmYtZGY5NTQ4ZjQ4ZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApo5333M4Q42JqxUCpmcyZpcu4s0bsXJPgF6H KPEdRC+VNtelePpeI07eFgNUUrefZ3EIfjXpgM2fc3PClYDGJXp/ywfZ0pTaYAHz 6Z/uTrSA3tp5cC2rhlJ1mPmxVbUgjNPBp0A/xVZzWmz7xFGejbgHxQNFvCQb7hrV iS0BluIz7k5/R+ylkw35XONKBET6nFs+oT46/UN5OcLRchzrpq62WYWmprTL0vWh 03b5ecMN/zrKwTlbTwaKQ2mDOk8hTVZq/UAzTngL8+6cSwxGGhakB2B1HwJMK7nR MAy5OYW+5p0DQ/o8GjzeFNi5YNoQGlTtS04nkhC+cJ4856GcvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzpFN5M7bBKu/oq0b+DXyxQk6pMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NThl ZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2YzY2ZjMzZDcvNjkzYTdmN2MtZWY5Mi0z MDQ0LWIxM2QtYjJlYzU1ZDMyMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDU4ZWRiNGItODQ3NC00NGRjLTg4 NDEtMzBhNmM2NmYzM2Q3LzQ1OGVkYjRiLTg0NzQtNDRkYy04ODQxLTMwYTZjNjZm MzNkNy5jcmwwHwYDVR0jBBgwFoAUJFL4rUm+W1K5pv/CQSmRPufL8ZIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80NThlZGI0Yi04NDc0LTQ0ZGMtODg0MS0zMGE2 YzY2ZjMzZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnnOTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7VvFKS4e4Jq/ZuV/NqaEQATRdTOJoJl3gaSYSLHfaHTDR9kKwLUzb6 U8NqYKuljI7cyv04IH4eKcfah0LdKunAl0TKs8NVXmbLmii5oWzHTaXXJI2992OE q511Dvn0OXeA/ipwiVFETEPLB+KbpUdl+mQyct9c7lFUWJ+d1II8WONOhjD1yKx1 XZE91JSKaiCgAjhDt6xJxbZ526b8U1GcMES8ySVb4dPafLgyfUv4i3p2roEvoW5G aEGbycwhA1ALfZusKeC+PSIJOoinuM9BxC0v+OgNvRIqH0NaulNcSIFYOqZTdKIy sx3UPkHrk+K/V1mvtuG7/0Ky3r+FGfA= -----END CERTIFICATE-----Generated at Mon Jun 30 23:13:26 2025 by rpki-client