$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa File: 0e27b779-c984-3088-944e-5d6cf8237999.roa (raw, json) Hash identifier: vfTqSXgX+0bnULHDOKBW+y9q3KTWkJ8GhQh0v7TV0zo= Subject key identifier: 5F:6B:1F:B5:D7:E0:95:B0:FE:BE:1E:9E:C7:4E:AB:0A:69:4F:5C:C2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285848FA8BECC0B80B6E57589A0280 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa Signing time: Sun 23 Feb 2025 14:00:51 +0000 ROA not before: Sun 23 Feb 2025 14:00:51 +0000 ROA not after: Sat 24 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 162.159.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fa:8b:ec:c0:b8:0b:6e:57:58:9a:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 23 14:00:51 2025 GMT Not After : May 24 13:00:51 2025 GMT Subject: CN=403b6213-c663-4b52-b42e-bec9ff5237d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4e:cd:ae:8e:85:9f:b6:3c:9a:76:6d:5b:86: e6:6b:a8:b9:70:2f:ae:e1:6a:ee:39:b8:d3:21:02: 12:6a:96:30:da:10:b7:f1:69:2d:fa:33:ab:8f:09: e7:8c:31:b7:16:49:76:96:16:eb:76:f8:3b:46:06: 80:22:b7:20:a5:5d:39:60:e5:68:36:cb:0c:72:a2: 75:99:50:b7:f1:80:55:9c:c1:da:6d:34:f7:a5:da: ad:c1:27:a7:1e:37:f5:15:30:e7:e6:b0:cb:47:23: a4:e3:a3:9c:41:58:9a:da:35:f4:50:cd:eb:78:35: c8:18:b0:9f:26:61:88:a3:c8:30:92:e5:54:44:6d: b9:25:0f:2b:ba:a9:58:91:f4:24:b8:f3:e2:ad:59: f7:91:c2:77:f7:24:7c:c4:58:bd:8f:a8:e0:23:be: 7a:4a:09:ee:b8:38:3d:a8:12:68:30:78:3a:55:96: ee:77:9d:02:6c:2c:bc:90:09:84:e5:73:18:b2:a5: 62:51:a4:60:a4:0f:97:ed:59:05:69:23:88:4b:40: 87:b1:cc:8e:5c:8c:d9:ee:03:43:bd:c6:1c:bd:6d: b1:a5:da:82:2f:a1:4e:23:11:19:54:55:25:e6:33: c9:e7:a1:07:cc:ea:55:bc:e1:fc:89:10:80:82:c2: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:6B:1F:B5:D7:E0:95:B0:FE:BE:1E:9E:C7:4E:AB:0A:69:4F:5C:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/0e27b779-c984-3088-944e-5d6cf8237999.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8b:3a:10:e1:b7:22:46:1f:7a:7f:96:71:e7:90:bc:b2:30: c7:90:67:bb:93:64:db:d8:57:47:65:f0:76:c8:37:ed:27:26: f6:12:3a:58:23:32:a7:ac:5c:26:a3:c7:ca:26:40:70:10:14: 57:8c:8b:27:4c:00:92:c2:22:b6:19:ca:b3:14:64:fb:ce:d2: 3d:34:4b:5c:4b:26:39:fe:b3:08:f2:dc:3d:1d:72:da:33:54: 47:79:a8:db:4c:53:a2:05:65:df:f8:73:83:e3:25:08:4c:f9: 5b:52:d4:c2:34:f8:d1:f0:32:cb:83:db:fa:6f:3d:dd:69:d7: 4e:e1:e7:78:fa:73:20:e0:7b:b2:d5:35:1d:2a:62:2f:02:14: 45:1f:b8:08:93:1c:58:8d:e4:15:f7:8f:1f:25:9c:9a:13:f9: 71:ce:d9:bc:04:1a:10:73:d6:61:4b:04:5f:cd:a1:28:88:3f: a2:1c:9d:75:ab:c2:c6:b1:18:6e:9b:30:1c:39:7c:7f:0c:82: 53:82:06:7b:ce:07:2e:ec:a4:c7:12:85:5f:f7:81:f8:9e:6e: a4:35:15:95:0e:f7:48:bf:fc:cf:33:e9:bc:e9:c7:c1:eb:e5: a9:32:c9:67:d0:67:6f:5d:06:02:c2:e9:16:57:fd:b0:52:44: d2:97:71:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj6i+zAuAtuV1iaAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyMzE0MDA1MVoXDTI1MDUyNDEzMDA1MVowLzEtMCsGA1UEAxMk NDAzYjYyMTMtYzY2My00YjUyLWI0MmUtYmVjOWZmNTIzN2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk7Nro6Fn7Y8mnZtW4bma6i5cC+u4WruObjT IQISapYw2hC38Wkt+jOrjwnnjDG3Fkl2lhbrdvg7RgaAIrcgpV05YOVoNssMcqJ1 mVC38YBVnMHabTT3pdqtwSenHjf1FTDn5rDLRyOk46OcQVia2jX0UM3reDXIGLCf JmGIo8gwkuVURG25JQ8ruqlYkfQkuPPirVn3kcJ39yR8xFi9j6jgI756SgnuuDg9 qBJoMHg6VZbud50CbCy8kAmE5XMYsqViUaRgpA+X7VkFaSOIS0CHscyOXIzZ7gND vcYcvW2xpdqCL6FOIxEZVFUl5jPJ56EHzOpVvOH8iRCAgsLhjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9rH7XX4JWw/r4ensdOqwppT1zCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMGUyN2I3NzktYzk4NC0z MDg4LTk0NGUtNWQ2Y2Y4MjM3OTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEop8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESLOhDhtyJGH3p/lnHnkLyyMMeQZ7uTZNvYV0dl8HbIN+0nJvYSOlgj MqesXCajx8omQHAQFFeMiydMAJLCIrYZyrMUZPvO0j00S1xLJjn+swjy3D0dctoz VEd5qNtMU6IFZd/4c4PjJQhM+VtS1MI0+NHwMsuD2/pvPd1p107h53j6cyDge7LV NR0qYi8CFEUfuAiTHFiN5BX3jx8lnJoT+XHO2bwEGhBz1mFLBF/NoSiIP6IcnXWr wsaxGG6bMBw5fH8MglOCBnvOBy7spMcShV/3gfiebqQ1FZUO90i//M8z6bzpx8Hr 5akyyWfQZ29dBgLC6RZX/bBSRNKXcbE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:27:11 2025 by rpki-client