$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa File: 38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa (raw, json) Hash identifier: DfNhTYWknSrnNs3g685wi0IZ1yc1L36Yqk7UF6dTq5Q= Subject key identifier: 5E:9D:C7:FC:4E:D8:9A:80:FE:1D:9D:14:94:FB:17:39:2D:5E:05:95 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6C05DDC8280D680C83900 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 172.64.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:c0:5d:dc:82:80:d6:80:c8:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=087f23dc-3524-41da-9908-b2ca378ec1f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5f:4b:d4:b9:27:b1:18:0c:2c:49:44:39:cf: 05:43:37:cd:69:31:a8:14:c1:ee:62:3b:2a:7b:0a: 08:bf:5c:b0:11:6c:cd:67:8e:39:46:b9:c3:5a:f5: b6:1a:ba:86:fb:e3:b5:61:fa:dc:fd:93:36:7d:c8: 58:c5:b5:f3:6a:e8:12:2b:64:c1:be:f3:85:36:66: c7:df:c9:19:5f:e7:42:ca:1c:da:8b:4a:3f:bb:85: bb:cf:cf:6c:39:1c:d8:91:b2:c1:bf:99:4d:d2:0a: 1a:73:82:3c:d7:93:66:67:ec:09:83:b9:24:bd:e3: 5e:83:8b:7d:d0:3d:e8:b6:97:45:b2:c0:5e:c7:31: 5d:6f:9a:0f:31:74:77:6f:f1:8c:76:c1:0c:9d:09: da:27:4c:9d:a9:dd:8b:94:c2:8e:65:fe:20:43:ff: 54:3b:96:da:40:68:a1:5e:5f:7b:c8:82:5d:f1:46: 17:52:ad:a8:2e:c4:08:ce:10:72:a7:3c:a9:f5:75: e8:d1:b1:ba:9d:51:4c:1d:a2:f8:20:14:be:0f:2f: 4e:a9:b0:81:d8:9a:61:18:cc:f3:fa:6c:5b:58:6d: 41:1e:8a:42:13:01:5e:80:e0:51:78:68:e0:3f:dc: 1b:e7:b1:6f:6a:f4:41:ba:e0:75:fd:ad:13:e7:25: b1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9D:C7:FC:4E:D8:9A:80:FE:1D:9D:14:94:FB:17:39:2D:5E:05:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/38f04789-bbe7-3d34-8d74-0ee8e1e83360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 172.64.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e3:ef:ad:a2:d4:7c:cc:2a:e0:0d:f9:33:4b:62:2d:f8:ab: 03:d4:66:84:7d:d3:fc:c0:0d:9d:eb:1e:8a:a5:11:30:86:09: 46:8e:d2:93:d5:6a:86:47:97:92:ef:34:63:4c:a0:35:81:75: fc:3a:69:78:d0:94:96:9e:bb:80:1a:cf:1b:04:c4:23:fb:b4: 87:e9:41:61:59:22:f4:eb:44:a4:fc:f7:c7:cc:9b:ea:9b:04: 2b:20:37:d4:2e:6d:96:6e:55:01:ef:41:e7:a8:7f:57:6c:d5: 75:ed:83:a0:d5:f7:2b:a1:a4:83:3a:75:f1:ec:89:60:50:f0: b7:0e:43:88:03:4c:e2:c5:42:ff:88:22:4e:66:2e:32:be:07: 9b:27:b2:ff:f6:d5:f0:cb:a4:c5:80:52:4c:13:b9:40:d6:e3: b9:fc:09:52:47:2c:96:7c:fc:cb:8d:18:77:fb:2d:f6:1b:a9: 1d:95:ee:8a:c6:39:0c:67:d4:96:73:a4:fa:42:de:e9:60:0b: 95:25:d2:61:ff:90:ad:d5:a2:da:eb:76:c9:3c:cb:ad:f8:72: 7f:10:62:52:2e:59:45:36:cb:5b:63:c4:59:76:72:9d:bf:eb: e8:8e:8a:45:79:03:98:97:eb:d4:c2:77:25:1c:d3:a0:bb:2f: 2e:12:a7:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsBd3IKA1oDIOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MDg3ZjIzZGMtMzUyNC00MWRhLTk5MDgtYjJjYTM3OGVjMWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV9L1LknsRgMLElEOc8FQzfNaTGoFMHuYjsq ewoIv1ywEWzNZ445RrnDWvW2GrqG++O1Yfrc/ZM2fchYxbXzaugSK2TBvvOFNmbH 38kZX+dCyhzai0o/u4W7z89sORzYkbLBv5lN0goac4I815NmZ+wJg7kkveNeg4t9 0D3otpdFssBexzFdb5oPMXR3b/GMdsEMnQnaJ0ydqd2LlMKOZf4gQ/9UO5baQGih Xl97yIJd8UYXUq2oLsQIzhBypzyp9XXo0bG6nVFMHaL4IBS+Dy9OqbCB2JphGMzz +mxbWG1BHopCEwFegOBReGjgP9wb57FvavRBuuB1/a0T5yWxhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6dx/xO2JqA/h2dFJT7FzktXgWVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzhmMDQ3ODktYmJlNy0z ZDM0LThkNzQtMGVlOGUxZTgzMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArECfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjj762i1HzMKuAN+TNLYi34qwPUZoR90/zADZ3rHoqlETCGCUaO0pPV aoZHl5LvNGNMoDWBdfw6aXjQlJaeu4AazxsExCP7tIfpQWFZIvTrRKT898fMm+qb BCsgN9QubZZuVQHvQeeof1ds1XXtg6DV9yuhpIM6dfHsiWBQ8LcOQ4gDTOLFQv+I Ik5mLjK+B5snsv/21fDLpMWAUkwTuUDW47n8CVJHLJZ8/MuNGHf7LfYbqR2V7orG OQxn1JZzpPpC3ulgC5Ul0mH/kK3Votrrdsk8y634cn8QYlIuWUU2y1tjxFl2cp2/ 6+iOikV5A5iX69TCdyUc06C7Ly4Spyg= -----END CERTIFICATE-----Generated at Sat Apr 26 18:11:13 2025 by rpki-client