$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa File: 3e297adb-169e-3352-bbb2-8260355bfd1a.roa (raw, json) Hash identifier: 4ggX9M5FxUW6m4XSq3HVDS9xwmtp40lF0uSrGpA+Ayw= Subject key identifier: 11:54:DC:C8:05:C4:1A:9C:B4:5F:29:00:85:F7:60:5C:B4:20:F7:95 Certificate issuer: /CN=458adead-fc85-4377-ae8f-70e00c42b223 Certificate serial: 010D0C9F43285849AD1A0914B91C28F80FEF7400 Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 16509 IP address blocks: 157.248.218.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:09:14:b9:1c:28:f8:0f:ef:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223 Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=c50bc4d9-eabe-4d0e-9c7b-26c44ad187c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:11:eb:e5:bb:21:60:0e:00:bd:8a:63:99:eb: 91:be:c2:be:60:fc:20:5d:e1:67:89:b4:75:fd:be: 6e:17:9e:31:05:ad:e7:f1:45:00:93:e1:e2:67:e2: 01:a2:fd:c1:fb:17:fa:b8:dc:cc:17:2f:1b:ae:76: 02:e9:23:85:96:48:4c:13:3c:4e:58:eb:a1:ee:60: 21:e3:88:7c:e5:ff:30:5f:a6:df:68:24:cc:bf:f6: d7:f2:3b:23:3c:ce:c1:03:e8:68:d0:15:c6:4d:b4: e6:f4:10:94:ec:c0:cb:f4:32:b7:ae:e3:62:41:56: 55:62:78:60:20:05:c1:72:ca:0c:9e:53:5d:03:a9: ac:74:95:74:79:bd:98:68:a6:be:73:60:0e:50:18: 64:ef:59:fc:29:ec:5c:de:84:01:4f:20:d8:9e:06: 84:ae:7a:ce:5d:71:71:69:8c:f0:f9:44:b4:29:28: 33:3d:12:39:d7:43:06:c9:56:7d:b2:ad:89:0d:d3: 56:fb:4e:99:14:69:0c:51:f0:4e:a4:ec:7f:df:89: bf:d8:8a:0f:df:56:83:17:3e:e3:2c:b0:2e:90:cb: 2e:25:11:d1:65:68:02:ae:53:26:2b:29:61:9c:12: 1a:d4:70:f5:88:73:fb:7b:26:89:a3:19:cc:57:72: 17:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:54:DC:C8:05:C4:1A:9C:B4:5F:29:00:85:F7:60:5C:B4:20:F7:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl X509v3 Authority Key Identifier: keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer sbgp-ipAddrBlock: critical IPv4: 157.248.218.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:75:38:48:dc:66:9d:5a:af:97:44:e7:28:d3:5d:9c:cc:2b: ff:71:e6:5b:d1:67:2f:92:12:25:ae:c1:d3:6f:56:bc:e8:99: 9a:06:9d:1a:fd:8d:b6:d3:80:cb:65:4c:e1:cc:ad:0d:f9:80: d9:81:6e:bd:79:e1:b4:71:5f:ba:d4:89:23:2f:d1:ae:21:a7: 93:5b:61:e1:82:46:e9:b5:44:92:6e:2f:09:99:50:f0:22:c5: 40:2d:bc:98:5c:44:a6:57:82:3e:fc:f6:1a:c8:1d:43:44:6d: ef:eb:b9:bb:df:0e:c9:8e:d4:73:d9:43:d5:1a:0b:fe:2d:d0: 3a:75:49:e6:8c:c3:6e:b7:ca:7c:71:46:7a:4b:ea:d8:8a:e9: 38:22:27:97:17:36:be:e2:0f:a4:c9:d0:28:1a:fb:66:4a:f8: 0a:1d:0b:f2:cf:c6:1d:bf:b3:a3:3c:4a:0f:e3:b0:b3:cb:6c: da:ac:df:51:ec:d7:9d:c9:0b:1f:52:56:c7:41:a0:7d:12:8b: 01:3e:d1:c3:fe:82:75:3f:17:e1:73:bb:0f:b1:a8:8e:25:2c: 9e:73:70:dc:21:22:87:86:36:ca:be:25:d1:d8:eb:16:91:b5: b0:26:6c:5a:7a:36:a0:35:02:8b:e3:3d:8a:b1:43:ba:39:2c: db:f4:f5:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGgkUuRwo+A/vdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDU4YWRlYWQtZmM4NS00Mzc3LWFlOGYtNzBlMDBjNDJi MjIzMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk YzUwYmM0ZDktZWFiZS00ZDBlLTljN2ItMjZjNDRhZDE4N2MyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRHr5bshYA4AvYpjmeuRvsK+YPwgXeFnibR1 /b5uF54xBa3n8UUAk+HiZ+IBov3B+xf6uNzMFy8brnYC6SOFlkhMEzxOWOuh7mAh 44h85f8wX6bfaCTMv/bX8jsjPM7BA+ho0BXGTbTm9BCU7MDL9DK3ruNiQVZVYnhg IAXBcsoMnlNdA6msdJV0eb2YaKa+c2AOUBhk71n8Kexc3oQBTyDYngaErnrOXXFx aYzw+US0KSgzPRI510MGyVZ9sq2JDdNW+06ZFGkMUfBOpOx/34m/2IoP31aDFz7j LLAukMsuJRHRZWgCrlMmKylhnBIa1HD1iHP7eyaJoxnMV3IXCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFU3MgFxBqctF8pAIX3YFy0IPeVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NThh ZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUwMGM0MmIyMjMvM2UyOTdhZGItMTY5ZS0z MzUyLWJiYjItODI2MDM1NWJmZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU4YWRlYWQtZmM4NS00Mzc3LWFl OGYtNzBlMDBjNDJiMjIzLzQ1OGFkZWFkLWZjODUtNDM3Ny1hZThmLTcwZTAwYzQy YjIyMy5jcmwwHwYDVR0jBBgwFoAUgFwvkgT+eRfx4bKa4aKlQkaLRQowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80NThhZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUw MGM0MmIyMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnfjaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ51OEjcZp1ar5dE5yjTXZzMK/9x5lvRZy+SEiWuwdNvVrzomZoGnRr9 jbbTgMtlTOHMrQ35gNmBbr154bRxX7rUiSMv0a4hp5NbYeGCRum1RJJuLwmZUPAi xUAtvJhcRKZXgj789hrIHUNEbe/rubvfDsmO1HPZQ9UaC/4t0Dp1SeaMw263ynxx RnpL6tiK6TgiJ5cXNr7iD6TJ0Cga+2ZK+AodC/LPxh2/s6M8Sg/jsLPLbNqs31Hs 153JCx9SVsdBoH0SiwE+0cP+gnU/F+Fzuw+xqI4lLJ5zcNwhIoeGNsq+JdHY6xaR tbAmbFp6NqA1AovjPYqxQ7o5LNv09WM= -----END CERTIFICATE-----Generated at Tue May 13 10:33:40 2025 by rpki-client