$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/adb6b5c5-9f32-3fda-bf50-fa62db788566.roa File: adb6b5c5-9f32-3fda-bf50-fa62db788566.roa (raw, json) Hash identifier: hZkKVsABYTd9+f7UPUSXUeneChY8cZY2xgyZNbk5V2I= Subject key identifier: B3:75:E6:3F:6C:8C:9D:3B:72:EB:F6:64:D1:60:B5:EC:A3:57:D1:C4 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818626E603B9E18D282380 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/adb6b5c5-9f32-3fda-bf50-fa62db788566.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 162.158.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:86:26:e6:03:b9:e1:8d:28:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=9993009b-7627-42c0-a9ee-3b7d3d8d0d68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b8:48:ba:7a:c7:7d:0f:e3:d2:d0:f6:93:d1: a4:13:c4:9c:e0:00:b5:a3:8e:3a:37:06:60:0e:77: 47:4d:a8:a3:53:19:f3:b1:84:1b:5e:ed:c6:31:29: 5c:be:b8:c1:cc:6a:2b:96:07:dc:98:ab:e1:37:75: df:1f:d4:ec:ea:2c:2d:d3:5a:09:d0:7a:a8:16:b0: 7d:90:c6:47:38:97:a0:37:7b:c4:5c:3d:8f:91:44: 89:2c:a9:28:26:23:11:a8:1d:12:e5:e6:1c:17:85: 1f:aa:40:97:a6:b2:1f:76:18:53:e6:ec:81:33:e7: 45:13:fe:21:bb:63:9a:3a:ca:50:bd:25:67:a6:24: 3a:7c:9a:79:4e:ef:5e:9e:cb:e4:35:8e:d6:92:ca: 6e:e7:4b:9c:17:9b:37:21:5a:a9:bb:a0:91:6d:dc: 59:e2:05:98:8c:2c:b9:44:7b:b0:61:75:61:52:81: 33:51:ba:63:b1:c2:ac:27:d3:58:0f:02:18:1f:2a: f3:1d:df:16:39:e3:e2:55:26:9f:10:63:50:ea:e3: 9a:f7:91:80:3a:49:e4:e1:21:e5:19:47:e8:7a:c7: 71:c8:27:7f:08:d5:17:26:e1:39:79:0f:58:d2:32: 77:cd:e8:8b:72:4e:0e:1d:87:7f:83:f7:3c:cb:b9: ed:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:75:E6:3F:6C:8C:9D:3B:72:EB:F6:64:D1:60:B5:EC:A3:57:D1:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/adb6b5c5-9f32-3fda-bf50-fa62db788566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:45:99:a5:bb:6d:ca:37:2e:ee:80:f5:3f:56:80:49:07:09: 12:24:07:2c:a8:a6:fd:cc:39:02:33:60:d5:44:b0:f6:41:8d: 5e:8b:7b:d4:2c:eb:91:7b:0f:e1:1e:5b:11:6f:f9:d2:82:17: ce:53:a7:5f:cc:fc:47:b3:d3:52:b6:28:09:85:05:2a:6e:6f: ce:76:69:75:79:34:88:6d:30:6d:50:f5:77:8f:87:4b:9b:77: 20:59:c9:2e:7e:cb:eb:15:63:ca:8d:d4:7b:ed:4f:09:5c:94: 4b:f1:6c:74:5e:73:7a:c5:78:9b:da:38:b8:7e:84:62:d3:65: d7:8d:d6:7d:90:4c:ce:ac:a1:af:f6:08:f0:f3:88:ce:3c:1b: 64:75:3b:45:9f:b2:36:11:79:00:81:cc:f5:ac:ec:66:c8:2b: 3c:fc:6d:22:ba:ae:50:4b:70:70:67:74:39:ea:32:0f:28:c7: a0:bb:f4:34:1c:df:86:e4:31:bc:ef:95:f6:3d:25:a8:dd:d4: 2b:f7:fd:45:4d:e6:d5:0d:47:13:18:de:17:ae:83:a6:0e:61: 6d:6e:bc:8e:55:d5:98:b6:16:87:3f:38:95:24:57:83:2f:18: 12:94:f4:69:5a:c9:d9:db:44:16:43:42:f0:9e:cf:23:fd:6b: e2:89:49:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYYm5gO54Y0oI4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk OTk5MzAwOWItNzYyNy00MmMwLWE5ZWUtM2I3ZDNkOGQwZDY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLhIunrHfQ/j0tD2k9GkE8Sc4AC1o446NwZg DndHTaijUxnzsYQbXu3GMSlcvrjBzGorlgfcmKvhN3XfH9Ts6iwt01oJ0HqoFrB9 kMZHOJegN3vEXD2PkUSJLKkoJiMRqB0S5eYcF4UfqkCXprIfdhhT5uyBM+dFE/4h u2OaOspQvSVnpiQ6fJp5Tu9ensvkNY7Wkspu50ucF5s3IVqpu6CRbdxZ4gWYjCy5 RHuwYXVhUoEzUbpjscKsJ9NYDwIYHyrzHd8WOePiVSafEGNQ6uOa95GAOknk4SHl GUfoesdxyCd/CNUXJuE5eQ9Y0jJ3zeiLck4OHYd/g/c8y7nt+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLN15j9sjJ07cuv2ZNFgteyjV9HEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWRiNmI1YzUtOWYzMi0z ZmRhLWJmNTAtZmE2MmRiNzg4NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop78MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpFmaW7bco3Lu6A9T9WgEkHCRIkByyopv3MOQIzYNVEsPZBjV6Le9Qs 65F7D+EeWxFv+dKCF85Tp1/M/Eez01K2KAmFBSpub852aXV5NIhtMG1Q9XePh0ub dyBZyS5+y+sVY8qN1HvtTwlclEvxbHRec3rFeJvaOLh+hGLTZdeN1n2QTM6soa/2 CPDziM48G2R1O0WfsjYReQCBzPWs7GbIKzz8bSK6rlBLcHBndDnqMg8ox6C79DQc 34bkMbzvlfY9Jajd1Cv3/UVN5tUNRxMY3heug6YOYW1uvI5V1Zi2Foc/OJUkV4Mv GBKU9GlaydnbRBZDQvCezyP9a+KJSRo= -----END CERTIFICATE-----Generated at Sat Apr 26 18:06:40 2025 by rpki-client