$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c298c9b-7223-3d9c-bd3c-c1564b001d05.roa File: 5c298c9b-7223-3d9c-bd3c-c1564b001d05.roa (raw, json) Hash identifier: XA9ennwnwLXYXTXOSlSJhMuYjaiacSyP5poJH7w+/3g= Subject key identifier: DB:46:EB:6D:D6:7A:D7:48:A4:D0:DF:2F:BC:29:72:4E:2F:85:4C:04 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088182CA0E7B0D4F9AFAB700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c298c9b-7223-3d9c-bd3c-c1564b001d05.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 162.158.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:82:ca:0e:7b:0d:4f:9a:fa:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=cbe4142f-e226-4dff-ac8d-723ebccf5a0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:8a:1c:31:5c:96:c0:0b:b3:0f:82:cb:0a:fd: 16:e0:01:d5:86:99:66:8a:58:19:b9:e7:03:9c:90: 13:07:19:69:f7:5a:d0:79:b3:23:7a:4e:dc:49:0b: 6c:bd:f3:0a:c5:96:b7:f2:63:2e:a4:32:24:bb:2d: bc:86:8f:74:20:7f:2e:cb:22:6c:db:94:6f:2d:00: b7:af:f7:1f:96:fa:d1:8f:90:02:da:ae:d1:7b:10: 38:c1:7b:15:57:34:f2:ca:07:7c:9b:f3:8f:a2:5a: 4d:a0:e8:65:a5:8a:d7:99:77:53:52:ee:d2:1c:0f: ab:ea:5f:be:1d:7e:3f:1f:6b:70:b4:48:b1:fc:1a: 25:85:9f:dc:a7:00:51:98:8c:da:18:5d:5f:95:b7: 7c:ae:1b:e0:5d:fe:55:b8:86:d4:12:70:99:29:75: 2b:44:84:0c:bd:17:d7:a8:71:fc:49:e4:e7:03:61: e3:20:34:c7:04:90:5a:a8:ec:19:45:24:42:a3:cd: ac:fc:fd:dc:21:df:ca:0a:da:a7:05:d1:70:06:52: bc:43:f8:a2:2f:f2:33:23:1c:84:79:dc:11:59:5a: dd:71:df:9f:7b:81:a0:c8:9f:ba:a4:8b:5c:b1:ec: 4b:0e:ba:18:1c:e4:3c:36:b7:fd:8a:4d:64:66:70: 32:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:46:EB:6D:D6:7A:D7:48:A4:D0:DF:2F:BC:29:72:4E:2F:85:4C:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/5c298c9b-7223-3d9c-bd3c-c1564b001d05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:b4:90:06:32:42:8e:04:21:13:cc:bc:c4:2b:35:61:75:98: de:07:ff:e0:32:ab:27:21:22:a4:fa:1f:22:7e:7f:03:9d:01: 93:1d:48:50:e5:66:6f:fa:c6:01:5d:8b:b4:05:be:13:74:74: 05:48:07:7e:8a:df:34:14:9a:11:69:08:7a:b5:41:63:d9:d8: 52:96:07:fa:30:aa:8f:eb:e8:be:47:26:d9:09:48:f1:db:b9: c4:7f:4f:13:8b:70:5f:54:7c:31:78:9a:a7:f2:8a:78:28:6b: 01:cd:7f:46:5f:b8:ed:c2:17:83:f3:a9:1f:b8:1f:8a:51:0c: fb:e9:84:cc:57:5b:44:48:68:73:7d:5e:1e:0f:67:45:c6:e2: d2:69:eb:10:8f:c2:63:24:05:f6:e5:d9:95:1e:01:d0:ab:8d: 47:bc:ed:72:a2:4c:be:4c:62:f1:1e:b3:38:f0:4b:c4:71:80: 4c:d7:93:64:d5:11:47:87:34:d7:ee:07:13:0b:08:75:1c:e3: bf:c0:82:04:b3:a2:a2:00:fd:5c:cd:7d:29:7b:bd:11:64:d3: 3c:b9:3f:27:09:d1:96:bd:fd:53:0c:a6:7d:dd:be:69:6c:20: c5:5f:a4:83:4b:6e:1d:70:8f:b0:30:55:e5:78:2a:2c:4c:f0: a3:d8:f3:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYLKDnsNT5r6twAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk Y2JlNDE0MmYtZTIyNi00ZGZmLWFjOGQtNzIzZWJjY2Y1YTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoocMVyWwAuzD4LLCv0W4AHVhplmilgZuecD nJATBxlp91rQebMjek7cSQtsvfMKxZa38mMupDIkuy28ho90IH8uyyJs25RvLQC3 r/cflvrRj5AC2q7RexA4wXsVVzTyygd8m/OPolpNoOhlpYrXmXdTUu7SHA+r6l++ HX4/H2twtEix/BolhZ/cpwBRmIzaGF1flbd8rhvgXf5VuIbUEnCZKXUrRIQMvRfX qHH8SeTnA2HjIDTHBJBaqOwZRSRCo82s/P3cId/KCtqnBdFwBlK8Q/iiL/IzIxyE edwRWVrdcd+fe4GgyJ+6pItcsexLDroYHOQ8Nrf9ik1kZnAyUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtG623WetdIpNDfL7wpck4vhUwEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNWMyOThjOWItNzIyMy0z ZDljLWJkM2MtYzE1NjRiMDAxZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy0kAYyQo4EIRPMvMQrNWF1mN4H/+AyqychIqT6HyJ+fwOdAZMdSFDl Zm/6xgFdi7QFvhN0dAVIB36K3zQUmhFpCHq1QWPZ2FKWB/owqo/r6L5HJtkJSPHb ucR/TxOLcF9UfDF4mqfyingoawHNf0ZfuO3CF4PzqR+4H4pRDPvphMxXW0RIaHN9 Xh4PZ0XG4tJp6xCPwmMkBfbl2ZUeAdCrjUe87XKiTL5MYvEeszjwS8RxgEzXk2TV EUeHNNfuBxMLCHUc47/AggSzoqIA/VzNfSl7vRFk0zy5PycJ0Za9/VMMpn3dvmls IMVfpINLbh1wj7AwVeV4KixM8KPY87E= -----END CERTIFICATE-----Generated at Sat Apr 26 16:10:33 2025 by rpki-client