$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a888c4dc-3a60-3091-bcfd-1a575dd977a7.roa File: a888c4dc-3a60-3091-bcfd-1a575dd977a7.roa (raw, json) Hash identifier: kBbHQ1bogWbwn8fLG9WFPCVMDOnzWzKdMkJpj3h0R5E= Subject key identifier: 9F:DA:7F:75:49:C7:4A:AC:6B:21:C2:8D:FF:D7:D8:AE:43:2F:02:AF Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584962C84A8351FDDFD9F6B19F00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a888c4dc-3a60-3091-bcfd-1a575dd977a7.roa Signing time: Tue 01 Apr 2025 22:06:36 +0000 ROA not before: Tue 01 Apr 2025 22:06:36 +0000 ROA not after: Mon 30 Jun 2025 22:06:36 +0000 asID: 13335 IP address blocks: 162.159.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:62:c8:4a:83:51:fd:df:d9:f6:b1:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 1 22:06:36 2025 GMT Not After : Jun 30 22:06:36 2025 GMT Subject: CN=7fafd525-ac07-4964-99e1-2261c2f13f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c3:cd:29:bd:3c:ce:55:27:44:7b:9d:9f:e2: 3e:f7:04:1d:65:79:8b:6c:56:e0:ce:aa:19:dc:ab: ec:7f:16:aa:d8:22:5c:06:53:d5:f8:f1:2a:f6:23: 9b:3f:e9:72:0a:c3:0f:32:6f:35:da:2d:77:82:0d: 3e:50:4e:fd:d3:99:05:19:3b:5b:84:22:66:9e:60: 53:e1:fe:bd:43:63:16:eb:7f:55:83:ca:6a:31:ac: 96:c0:ec:7c:51:c0:3c:fa:38:34:3b:46:e3:67:13: 2a:f2:79:88:90:83:9c:ca:b0:9c:c8:2c:e9:08:e8: a9:8d:1e:f9:b4:04:3a:dd:b0:4c:f9:32:78:e5:8c: 38:69:93:4f:88:fb:ff:1f:87:70:03:a2:8d:0e:a7: a2:09:5d:72:5b:00:e5:ea:dd:b4:07:2f:2e:f1:e2: 7a:9e:c0:bb:40:cd:74:25:c1:80:b8:a0:61:58:8c: 13:69:0f:18:18:08:b6:7e:7e:5f:97:80:20:85:d3: 16:40:49:26:6d:cc:ad:ff:f2:f4:43:03:85:98:71: da:a4:9a:fd:d3:6f:f2:36:51:d3:df:d5:cf:cc:e6: 7e:94:ec:31:53:e0:04:10:5f:48:da:00:24:e6:f8: de:70:ca:6f:33:f6:84:14:c9:aa:38:d6:eb:24:0f: f1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:DA:7F:75:49:C7:4A:AC:6B:21:C2:8D:FF:D7:D8:AE:43:2F:02:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a888c4dc-3a60-3091-bcfd-1a575dd977a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:9b:46:a6:a3:2f:31:79:8a:10:95:f6:8a:69:e8:e6:d5:1a: 0d:23:9e:f6:de:34:c0:97:ec:1c:fb:fd:ac:ab:6c:77:2d:90: e6:42:41:84:0f:4e:ff:ef:00:ad:3d:fd:fc:6b:dd:98:e6:50: 35:e2:04:bb:95:fa:8b:ab:f5:ce:46:34:8b:14:1c:13:91:45: 91:51:7c:4b:d0:28:b3:6f:40:ce:51:8c:aa:db:06:65:17:e5: 55:7b:8e:ae:02:11:0b:86:8e:21:d5:93:db:d8:93:d4:ea:b3: 0e:92:26:ca:82:31:65:85:12:77:12:83:eb:3f:3d:28:b5:94: 11:d2:5d:ec:51:74:cd:74:06:4e:a1:91:4e:d0:e6:05:af:f6: 49:07:11:dc:d7:fc:f7:33:ae:ae:2b:74:39:90:e4:79:1c:9e: 66:f4:6f:07:20:94:72:21:0c:91:b8:7d:e5:d9:57:7c:e3:6c: 30:6e:82:1a:13:40:7d:bb:4d:15:3c:bd:87:10:8e:ba:68:91: 52:5c:bf:19:7b:15:a0:07:22:a6:78:5e:bd:f2:66:fe:77:3c: 56:83:32:c5:e5:0c:15:5c:85:68:91:cf:96:df:f2:d0:36:81: ef:57:c6:ee:6a:84:c4:fb:5b:8c:f4:d1:55:d4:26:fd:91:22: e7:ea:b8:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEliyEqDUf3f2faxnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQwMTIyMDYzNloXDTI1MDYzMDIyMDYzNlowLzEtMCsGA1UEAxMk N2ZhZmQ1MjUtYWMwNy00OTY0LTk5ZTEtMjI2MWMyZjEzZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMPNKb08zlUnRHudn+I+9wQdZXmLbFbgzqoZ 3Kvsfxaq2CJcBlPV+PEq9iObP+lyCsMPMm812i13gg0+UE7905kFGTtbhCJmnmBT 4f69Q2MW639Vg8pqMayWwOx8UcA8+jg0O0bjZxMq8nmIkIOcyrCcyCzpCOipjR75 tAQ63bBM+TJ45Yw4aZNPiPv/H4dwA6KNDqeiCV1yWwDl6t20By8u8eJ6nsC7QM10 JcGAuKBhWIwTaQ8YGAi2fn5fl4AghdMWQEkmbcyt//L0QwOFmHHapJr902/yNlHT 39XPzOZ+lOwxU+AEEF9I2gAk5vjecMpvM/aEFMmqONbrJA/xHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/af3VJx0qsayHCjf/X2K5DLwKvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTg4OGM0ZGMtM2E2MC0z MDkxLWJjZmQtMWE1NzVkZDk3N2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAybRqajLzF5ihCV9opp6ObVGg0jnvbeNMCX7Bz7/ayrbHctkOZCQYQP Tv/vAK09/fxr3ZjmUDXiBLuV+our9c5GNIsUHBORRZFRfEvQKLNvQM5RjKrbBmUX 5VV7jq4CEQuGjiHVk9vYk9Tqsw6SJsqCMWWFEncSg+s/PSi1lBHSXexRdM10Bk6h kU7Q5gWv9kkHEdzX/Pczrq4rdDmQ5Hkcnmb0bwcglHIhDJG4feXZV3zjbDBughoT QH27TRU8vYcQjrpokVJcvxl7FaAHIqZ4Xr3yZv53PFaDMsXlDBVchWiRz5bf8tA2 ge9Xxu5qhMT7W4z00VXUJv2RIufquKc= -----END CERTIFICATE-----Generated at Sat Apr 26 19:18:20 2025 by rpki-client