$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27822e64-c2b3-36a0-ae8b-ce1130a700db.roa File: 27822e64-c2b3-36a0-ae8b-ce1130a700db.roa (raw, json) Hash identifier: f5U8WMvMEihQkaNHATBSpXkTmhgsh46yltexTgxs53M= Subject key identifier: 82:70:A8:5E:0E:C9:CA:54:6E:5D:DF:2A:3A:E4:DE:38:F9:61:00:04 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908817F9B47556A6EB896C800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27822e64-c2b3-36a0-ae8b-ce1130a700db.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 162.158.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:7f:9b:47:55:6a:6e:b8:96:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=ed72a021-7ca5-49e6-9096-515c64144f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:9a:1b:91:e5:24:fd:36:e0:6f:5f:31:f8:75: 07:bd:cc:ef:e3:61:6b:25:58:49:cb:d7:df:e8:44: a1:83:d4:8a:ad:fc:24:0c:47:fd:56:05:52:9a:1d: 56:7a:fe:fc:c4:43:be:29:32:f2:c2:64:3f:5c:57: f5:50:ee:21:e5:16:25:5c:c7:41:d8:ee:e3:19:24: a1:8f:b6:54:d3:61:1d:98:2d:f8:7c:4c:64:81:16: eb:04:e8:c9:84:d1:a0:dd:20:83:5a:ab:2a:90:cc: b7:95:c9:5d:f1:ac:2d:07:f1:2e:57:4c:de:71:ec: a1:35:5c:2c:76:94:ca:a4:e7:d4:d1:21:16:d8:ba: 8d:c8:06:77:80:ca:37:ba:f6:1f:49:3e:db:2b:72: e0:e3:45:26:ab:98:44:4f:ba:02:07:3e:b3:4e:95: 05:57:32:72:f3:5c:df:86:22:36:4d:c5:79:43:4b: 40:cc:66:c2:37:37:d7:b5:7e:f8:8c:4d:33:5b:9e: 1d:a0:8d:93:16:62:fd:bb:b7:3f:21:f1:c8:65:c7: a8:29:71:67:76:64:55:ed:eb:f2:0c:94:dc:08:66: 92:56:de:63:a4:a0:18:06:5a:ae:b5:e5:cc:e8:ff: 3a:1b:a0:6d:42:ee:cb:d6:6a:5f:26:31:c6:85:d9: c5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:70:A8:5E:0E:C9:CA:54:6E:5D:DF:2A:3A:E4:DE:38:F9:61:00:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/27822e64-c2b3-36a0-ae8b-ce1130a700db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:35:85:cb:b9:7c:68:4e:4a:a0:41:79:a0:3f:40:d9:df:da: 20:2f:6d:78:55:55:35:1f:d5:6c:d7:90:de:b3:62:7d:02:18: 4e:44:64:0e:4d:0c:c1:da:24:09:56:e7:7e:9b:e2:a5:a9:21: 2c:1c:ee:4f:f5:ea:06:6a:8f:0f:cd:af:4a:c1:bd:b7:53:35: 00:6b:2d:82:5c:68:9c:5a:a5:aa:1e:af:a7:51:4d:54:9c:c7: 2a:ca:61:89:d4:90:49:d0:a6:6b:d3:e6:4b:68:9d:0c:5a:4b: ed:06:74:35:40:05:b8:6c:45:ac:ed:f0:3e:40:fa:8a:ab:5c: f3:e0:41:ff:cd:fc:32:e4:37:bb:f9:6a:a7:48:1f:bc:ea:d0: 20:4a:06:5f:92:aa:66:bf:91:b3:1c:9a:bd:c3:a9:b3:4a:71: 61:7b:48:72:64:63:b8:e5:a0:7a:7a:c8:a3:70:87:5c:24:ac: da:9c:2b:f3:ff:c0:2c:9e:f5:39:94:f7:e6:9b:4e:97:64:9f: 8f:2f:55:eb:30:22:08:78:66:94:b6:cd:0d:ea:7d:00:04:1b: 0d:2d:70:7d:1f:29:55:94:d3:d7:f9:1d:d0:7f:d1:42:2a:a9: 72:a6:59:9e:b0:1e:e7:a4:41:c6:1d:31:96:08:78:54:27:55: fb:0d:3c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgX+bR1VqbriWyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZWQ3MmEwMjEtN2NhNS00OWU2LTkwOTYtNTE1YzY0MTQ0ZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpobkeUk/Tbgb18x+HUHvczv42FrJVhJy9ff 6EShg9SKrfwkDEf9VgVSmh1Wev78xEO+KTLywmQ/XFf1UO4h5RYlXMdB2O7jGSSh j7ZU02EdmC34fExkgRbrBOjJhNGg3SCDWqsqkMy3lcld8awtB/EuV0zeceyhNVws dpTKpOfU0SEW2LqNyAZ3gMo3uvYfST7bK3Lg40Umq5hET7oCBz6zTpUFVzJy81zf hiI2TcV5Q0tAzGbCNzfXtX74jE0zW54doI2TFmL9u7c/IfHIZceoKXFndmRV7evy DJTcCGaSVt5jpKAYBlquteXM6P86G6BtQu7L1mpfJjHGhdnFmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJwqF4OycpUbl3fKjrk3jj5YQAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjc4MjJlNjQtYzJiMy0z NmEwLWFlOGItY2UxMTMwYTcwMGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCop6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC41hcu5fGhOSqBBeaA/QNnf2iAvbXhVVTUf1WzXkN6zYn0CGE5EZA5N DMHaJAlW536b4qWpISwc7k/16gZqjw/Nr0rBvbdTNQBrLYJcaJxapaoer6dRTVSc xyrKYYnUkEnQpmvT5ktonQxaS+0GdDVABbhsRazt8D5A+oqrXPPgQf/N/DLkN7v5 aqdIH7zq0CBKBl+Sqma/kbMcmr3DqbNKcWF7SHJkY7jloHp6yKNwh1wkrNqcK/P/ wCye9TmU9+abTpdkn48vVeswIgh4ZpS2zQ3qfQAEGw0tcH0fKVWU09f5HdB/0UIq qXKmWZ6wHuekQcYdMZYIeFQnVfsNPAA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:11:24 2025 by rpki-client