$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2861afee-4a16-35c0-8206-af8c038a41b1.roa File: 2861afee-4a16-35c0-8206-af8c038a41b1.roa (raw, json) Hash identifier: jJ2KL1VVq7gcczLZ+GHMKFEopFrJwRf26GB2wslI9VA= Subject key identifier: 5F:E0:E8:39:65:FC:62:8D:6D:19:E6:A8:72:09:49:E9:47:33:08:8D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908817EADCCDC2A9AC5714180 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2861afee-4a16-35c0-8206-af8c038a41b1.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 162.158.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:7e:ad:cc:dc:2a:9a:c5:71:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=63e7f8df-09aa-4c6b-8398-eafdfda066f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6b:a0:7f:99:f6:75:7c:01:7c:bd:b8:c8:38: 5d:24:07:c1:87:fc:a3:bc:5f:f2:1a:dd:58:fa:4a: 4c:5f:61:81:b7:03:27:ff:0c:d6:9c:5e:08:37:83: d8:9c:c8:02:5c:20:78:c7:96:1d:73:10:e8:84:05: 0c:88:36:8e:fd:0e:7d:ba:44:c5:50:15:be:b8:aa: 98:82:eb:bb:18:25:9f:50:a3:65:27:26:78:22:f0: 40:88:8f:ce:e1:d6:7c:43:70:1a:f0:03:35:6a:a5: ef:79:dd:b0:55:6e:87:2d:81:cc:ae:f7:46:db:0a: 88:ff:46:09:db:ad:7a:f7:d3:3c:ec:b3:93:1e:e3: cf:16:e3:71:03:ee:52:ec:14:30:c7:aa:ea:6e:52: 1a:bc:06:b0:39:74:70:97:08:a3:a4:e4:62:7d:63: e6:db:cf:2b:a2:74:f9:02:16:e6:d3:6f:0a:31:ab: 89:e7:7c:01:5e:2c:31:9d:53:87:66:71:a3:8f:4f: 76:1e:fc:03:f3:da:68:0d:e0:78:28:e1:74:4d:a6: ed:e1:74:be:ec:a1:03:2f:de:82:cd:32:17:19:dd: 01:74:60:ec:bf:77:bb:95:8f:82:21:1e:5b:89:18: 66:57:9a:3d:08:e3:8d:05:2f:e4:ee:42:09:52:cf: 79:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:E0:E8:39:65:FC:62:8D:6D:19:E6:A8:72:09:49:E9:47:33:08:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2861afee-4a16-35c0-8206-af8c038a41b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:3e:ce:4b:2d:de:bd:67:3c:96:18:22:fb:57:24:cc:b8:83: b9:70:5a:66:2b:01:92:4a:57:60:52:55:28:5c:b7:e3:9f:d2: a6:32:b1:3a:58:49:e8:c6:dd:a1:54:84:6c:d9:e9:11:a0:ba: 8f:17:8d:ab:85:78:62:57:6a:0e:82:84:98:3b:33:fb:2e:94: 8d:0b:a6:6b:25:45:2f:ab:82:be:6c:1c:05:28:42:ab:ac:39: d9:73:f5:7d:10:33:07:93:fc:cd:ff:4c:4c:0a:7f:54:16:ac: 2b:54:3d:08:14:29:c2:48:e9:e6:2e:f6:b1:61:d9:c8:57:c2: e0:fa:de:11:d7:a0:1d:4e:65:19:8a:10:11:c9:1a:09:b0:c3: c8:0f:b8:3e:ae:0f:bf:51:48:33:10:ea:1c:52:82:f1:2c:4f: f0:39:25:2c:05:a0:b4:29:e7:43:a6:3c:8c:cb:ee:a4:bd:36: a1:eb:a3:8e:ef:67:3b:d4:01:7f:e7:ad:6a:b9:81:c7:84:76: c7:6c:30:3b:d5:2d:1d:36:2b:c3:8e:74:67:1c:3c:e9:66:fa: d8:df:a6:97:9f:54:76:73:86:84:cf:9f:0f:37:fb:bd:26:5f: 0c:eb:40:33:de:a9:a0:7c:ef:6b:ab:02:25:25:f5:f3:cb:52: b6:91:41:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgX6tzNwqmsVxQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NjNlN2Y4ZGYtMDlhYS00YzZiLTgzOTgtZWFmZGZkYTA2NmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mugf5n2dXwBfL24yDhdJAfBh/yjvF/yGt1Y +kpMX2GBtwMn/wzWnF4IN4PYnMgCXCB4x5YdcxDohAUMiDaO/Q59ukTFUBW+uKqY guu7GCWfUKNlJyZ4IvBAiI/O4dZ8Q3Aa8AM1aqXved2wVW6HLYHMrvdG2wqI/0YJ 261699M87LOTHuPPFuNxA+5S7BQwx6rqblIavAawOXRwlwijpORifWPm288ronT5 Ahbm028KMauJ53wBXiwxnVOHZnGjj092HvwD89poDeB4KOF0Tabt4XS+7KEDL96C zTIXGd0BdGDsv3e7lY+CIR5biRhmV5o9COONBS/k7kIJUs95PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/g6Dll/GKNbRnmqHIJSelHMwiNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjg2MWFmZWUtNGExNi0z NWMwLTgyMDYtYWY4YzAzOGE0MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop53MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJI+zkst3r1nPJYYIvtXJMy4g7lwWmYrAZJKV2BSVShct+Of0qYysTpY SejG3aFUhGzZ6RGguo8XjauFeGJXag6ChJg7M/sulI0LpmslRS+rgr5sHAUoQqus Odlz9X0QMweT/M3/TEwKf1QWrCtUPQgUKcJI6eYu9rFh2chXwuD63hHXoB1OZRmK EBHJGgmww8gPuD6uD79RSDMQ6hxSgvEsT/A5JSwFoLQp50OmPIzL7qS9NqHro47v ZzvUAX/nrWq5gceEdsdsMDvVLR02K8OOdGccPOlm+tjfppefVHZzhoTPnw83+70m XwzrQDPeqaB872urAiUl9fPLUraRQXA= -----END CERTIFICATE-----Generated at Sat Apr 26 16:27:17 2025 by rpki-client