$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8a29797-4ba1-323a-8d94-035c3523d1f7.roa File: a8a29797-4ba1-323a-8d94-035c3523d1f7.roa (raw, json) Hash identifier: 2LsnUxRn2CDXv6B047xf0pFU0p4gpAYjY+S7Eto1qA0= Subject key identifier: B8:F5:2D:B5:7D:10:1A:32:64:D6:63:30:F7:FA:FE:86:CC:8B:64:67 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E6550DCC537B71874F3D78E0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8a29797-4ba1-323a-8d94-035c3523d1f7.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 162.158.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:0d:cc:53:7b:71:87:4f:3d:78:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=e4ddb11a-302f-456a-ac25-23e3256332bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:90:39:15:3f:64:9c:d7:20:ba:1b:d2:27:bc: a6:d5:f7:45:61:3d:23:40:f1:e0:45:43:4e:4c:7a: e8:89:f3:fd:d0:3b:5b:47:00:fc:6a:5d:df:b5:89: 10:8b:ef:dc:d0:93:10:33:4d:f0:53:f1:57:a2:04: 1d:93:78:63:f1:af:f3:13:0b:43:d8:85:df:73:1d: 34:8d:7d:6e:f1:ec:84:47:2d:c4:47:09:39:15:b1: 1d:9c:de:ec:55:4f:f0:5b:1e:58:ff:a1:16:32:29: 8d:61:dd:4a:c3:cf:ef:04:95:a2:cf:9e:66:c2:17: 38:99:7c:14:1a:c6:39:e6:bb:1b:2a:78:1b:b7:d6: 1b:78:b5:17:23:d1:a8:ce:07:66:55:e6:7d:e8:d5: bb:4a:db:0b:12:4e:6e:b6:95:50:61:a4:7c:ea:52: 1f:67:1f:18:fe:5e:6b:fc:6a:4b:83:74:5a:29:ac: c4:e6:41:3f:bf:dd:7f:c1:a0:db:2d:11:1e:0e:22: 02:6d:27:22:fc:dd:e9:7f:d0:93:ee:8a:43:6f:02: 88:b4:5e:39:24:77:51:ec:c5:91:41:89:33:96:05: da:fb:b4:46:4d:da:84:23:ec:b0:9c:71:84:d1:7a: c0:48:b9:02:fc:07:fe:12:69:43:29:b9:5a:4c:99: 56:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F5:2D:B5:7D:10:1A:32:64:D6:63:30:F7:FA:FE:86:CC:8B:64:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a8a29797-4ba1-323a-8d94-035c3523d1f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:8e:76:26:92:58:dc:c7:cb:8d:4b:7e:d4:18:f4:74:dd:9d: 78:f4:f5:e5:5c:c8:4b:51:79:cd:16:ce:25:06:62:32:14:76: 0d:d9:7c:6c:22:0f:d2:39:4a:33:a5:5c:92:91:e7:e6:44:7e: 09:db:50:0c:f2:cb:0f:d8:a7:0a:a8:7f:01:b1:40:14:d6:c7: 82:fa:b0:a5:3a:4f:b7:29:37:52:ff:bd:f5:f4:27:e7:38:7e: 0a:0d:13:19:c2:58:91:42:0c:40:fc:5e:b5:28:07:0d:11:fc: 93:5b:09:e4:32:bc:cb:a9:d7:3e:33:6c:9f:9c:b1:e5:bc:02: 59:9a:24:b6:a2:8f:97:ee:29:65:27:2b:80:b6:be:a0:db:3d: 5a:6c:27:c3:12:11:62:0d:95:45:f9:d4:32:0b:27:9a:f2:63: 1e:3a:49:41:8d:22:30:9e:6e:da:0e:2e:bb:e9:5d:c1:4f:fc: 7c:b6:e7:ea:63:ea:3f:57:91:af:3a:e4:42:4b:82:4b:54:36: 7e:33:be:e2:bd:3d:00:eb:e0:91:d2:07:49:3d:dc:39:5c:34: 7f:dc:99:52:dc:77:dd:1a:bd:27:59:54:3e:04:94:07:3c:74: 81:61:0e:67:33:1f:81:ac:fa:a6:34:00:58:5e:19:ea:33:51: e4:7f:56:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQ3MU3txh089eOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk ZTRkZGIxMWEtMzAyZi00NTZhLWFjMjUtMjNlMzI1NjMzMmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5A5FT9knNcguhvSJ7ym1fdFYT0jQPHgRUNO THroifP90DtbRwD8al3ftYkQi+/c0JMQM03wU/FXogQdk3hj8a/zEwtD2IXfcx00 jX1u8eyERy3ERwk5FbEdnN7sVU/wWx5Y/6EWMimNYd1Kw8/vBJWiz55mwhc4mXwU GsY55rsbKngbt9YbeLUXI9GozgdmVeZ96NW7StsLEk5utpVQYaR86lIfZx8Y/l5r /GpLg3RaKazE5kE/v91/waDbLREeDiICbSci/N3pf9CT7opDbwKItF45JHdR7MWR QYkzlgXa+7RGTdqEI+ywnHGE0XrASLkC/Af+EmlDKblaTJlWYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLj1LbV9EBoyZNZjMPf6/obMi2RnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYThhMjk3OTctNGJhMS0z MjNhLThkOTQtMDM1YzM1MjNkMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGOdiaSWNzHy41LftQY9HTdnXj09eVcyEtRec0WziUGYjIUdg3ZfGwi D9I5SjOlXJKR5+ZEfgnbUAzyyw/YpwqofwGxQBTWx4L6sKU6T7cpN1L/vfX0J+c4 fgoNExnCWJFCDED8XrUoBw0R/JNbCeQyvMup1z4zbJ+cseW8AlmaJLaij5fuKWUn K4C2vqDbPVpsJ8MSEWINlUX51DILJ5ryYx46SUGNIjCebtoOLrvpXcFP/Hy25+pj 6j9Xka865EJLgktUNn4zvuK9PQDr4JHSB0k93DlcNH/cmVLcd90avSdZVD4ElAc8 dIFhDmczH4Gs+qY0AFheGeozUeR/VvY= -----END CERTIFICATE-----Generated at Mon Jun 16 17:06:45 2025 by rpki-client