$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bbfcf7da-b0de-3a63-b7c4-ede6b5e6a334.roa File: bbfcf7da-b0de-3a63-b7c4-ede6b5e6a334.roa (raw, json) Hash identifier: 5xzRtBfRpF/bmM8rltd9dytKSjbVj3hRtvVrGBxdzd0= Subject key identifier: C7:0D:7A:0E:81:2A:5D:AB:26:28:00:32:93:88:7E:32:2A:B0:53:41 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088189937DBE0BAE1C1A8680 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bbfcf7da-b0de-3a63-b7c4-ede6b5e6a334.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 162.159.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:89:93:7d:be:0b:ae:1c:1a:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=ec734e62-2237-47a0-9ffd-5bbd4e55d731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:a9:c6:ac:ea:b5:a7:d8:46:73:12:20:ef: 1a:39:f6:a0:af:9d:2b:f9:c1:47:99:fc:ed:93:57: a8:aa:33:74:e7:e0:0c:c4:73:8b:00:67:e6:7c:2d: a7:27:21:64:58:c9:73:08:1c:b2:5b:0e:df:fa:90: e8:f2:d2:47:48:22:71:32:c8:e1:23:1f:f5:b6:01: bd:b5:32:03:09:e3:19:ba:c0:c0:1f:df:54:3c:6f: 15:ec:6e:65:f0:af:b6:c8:b6:84:ba:3e:52:88:eb: 13:32:04:4c:23:16:ae:7b:8b:30:97:71:93:9b:5f: c2:ba:59:1e:15:a7:59:83:7b:3d:a6:e3:78:d8:3d: 18:b4:98:6d:ee:af:19:c2:30:83:49:1a:0e:af:fb: 2a:af:4c:43:7d:87:4a:d6:42:0d:9f:e7:53:ed:40: 37:3f:d7:6e:37:52:87:d3:45:46:b2:b2:18:b6:22: b2:c4:33:ae:2a:76:0f:c1:4a:f4:f1:db:45:72:b1: 26:58:1f:a7:02:d6:f2:2a:ff:23:f8:0d:f7:0a:1c: 30:6d:80:14:c0:fa:4e:09:b1:1a:c7:54:41:0f:67: 9f:1f:9d:76:07:46:fd:52:01:8e:e5:66:fe:8d:c3: b8:75:79:3b:a5:26:1e:7c:29:7e:3a:81:70:fc:fd: 61:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:0D:7A:0E:81:2A:5D:AB:26:28:00:32:93:88:7E:32:2A:B0:53:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bbfcf7da-b0de-3a63-b7c4-ede6b5e6a334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:6f:c6:f2:a4:7d:6b:c5:1a:6d:de:cf:82:0d:0d:6c:19:d1: dc:60:50:1d:a7:7d:12:68:f5:75:21:c6:cf:04:7a:df:38:5a: 4a:f3:34:eb:c6:24:df:bd:a0:5f:3b:a9:6c:24:5f:c0:e5:27: 61:c3:e4:35:9d:12:35:46:d0:6e:32:fe:e0:3b:d8:05:8f:a3: 79:6f:22:4b:15:4e:fe:e0:5a:10:68:98:df:df:88:a2:db:3a: fb:48:fe:d1:7c:78:24:43:ac:1e:85:63:fb:58:32:e4:30:08: 31:3b:97:2c:54:60:38:ba:c9:f3:54:bb:50:e2:75:4d:7c:95: 89:ad:51:0f:81:77:49:34:2c:f2:84:91:d2:62:8c:d1:9f:1c: c8:48:ba:d6:81:b1:60:fb:eb:4a:7a:7f:f9:95:cf:ee:55:03: ed:67:82:97:01:99:2c:5f:d5:7c:7a:11:f8:2f:de:77:33:86: 17:e5:48:05:db:40:40:8e:3e:e2:cc:6e:a3:43:39:6b:ff:45: 1c:52:f4:52:9a:b3:63:cb:71:25:be:da:86:2a:aa:1b:14:0c: 82:0b:30:ae:33:29:39:04:10:af:8b:c6:35:76:d5:d1:88:48: df:a7:fb:c1:3a:3b:8d:68:e6:3f:df:08:6f:ab:1b:c3:5d:77: 51:da:3e:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYmTfb4LrhwahoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZWM3MzRlNjItMjIzNy00N2EwLTlmZmQtNWJiZDRlNTVkNzMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4KpxqzqtafYRnMSIO8aOfagr50r+cFHmfzt k1eoqjN05+AMxHOLAGfmfC2nJyFkWMlzCByyWw7f+pDo8tJHSCJxMsjhIx/1tgG9 tTIDCeMZusDAH99UPG8V7G5l8K+2yLaEuj5SiOsTMgRMIxaue4swl3GTm1/Culke FadZg3s9puN42D0YtJht7q8ZwjCDSRoOr/sqr0xDfYdK1kINn+dT7UA3P9duN1KH 00VGsrIYtiKyxDOuKnYPwUr08dtFcrEmWB+nAtbyKv8j+A33ChwwbYAUwPpOCbEa x1RBD2efH512B0b9UgGO5Wb+jcO4dXk7pSYefCl+OoFw/P1h8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcNeg6BKl2rJigAMpOIfjIqsFNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmJmY2Y3ZGEtYjBkZS0z YTYzLWI3YzQtZWRlNmI1ZTZhMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5vxvKkfWvFGm3ez4INDWwZ0dxgUB2nfRJo9XUhxs8Eet84WkrzNOvG JN+9oF87qWwkX8DlJ2HD5DWdEjVG0G4y/uA72AWPo3lvIksVTv7gWhBomN/fiKLb OvtI/tF8eCRDrB6FY/tYMuQwCDE7lyxUYDi6yfNUu1DidU18lYmtUQ+Bd0k0LPKE kdJijNGfHMhIutaBsWD760p6f/mVz+5VA+1ngpcBmSxf1Xx6Efgv3nczhhflSAXb QECOPuLMbqNDOWv/RRxS9FKas2PLcSW+2oYqqhsUDIILMK4zKTkEEK+LxjV21dGI SN+n+8E6O41o5j/fCG+rG8Ndd1HaPnI= -----END CERTIFICATE-----Generated at Sat Apr 26 22:17:09 2025 by rpki-client