$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa File: bdfa307b-4d25-3d25-acdf-7c0672499955.roa (raw, json) Hash identifier: q4feRJ2bXWVn9ly2PLVHCjCnaADpnxwVDlKsL1NWDg4= Subject key identifier: 4A:EF:5E:C3:A8:A3:E3:65:EC:30:24:91:FA:AA:A2:EE:59:A1:76:DA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E655039B3BCD0551ABB90700 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 108.162.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 19 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:03:9b:3b:cd:05:51:ab:b9:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=c3500d59-84c3-4083-a426-47dae337a924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:f9:e6:35:99:cc:68:b8:06:dd:bc:06:54: bf:ee:37:b8:4f:7c:a0:9f:b7:e9:f8:ed:41:a8:6f: f2:33:c6:19:03:44:36:6b:3b:83:51:33:bb:11:da: aa:16:1f:c7:8d:64:ea:b0:75:e0:b3:35:ad:4b:7d: 2b:a1:bf:56:7b:c4:51:aa:21:f6:ab:cb:5a:38:9c: 10:7c:20:6d:f2:39:8c:e9:ea:bc:de:f5:62:d3:6e: 32:16:a3:59:cf:44:4f:20:f9:6d:4e:9d:c4:5f:ac: e6:63:e8:f3:69:40:c3:5d:80:bc:3a:b2:d7:be:41: 6b:d6:97:e5:70:9e:eb:08:7b:0f:24:85:87:1f:6e: 12:22:21:33:fa:1c:42:44:8c:ce:9c:ef:9a:48:fd: 49:2d:27:63:8b:5d:ea:b1:81:1b:41:9e:e3:34:cf: 25:8f:d5:88:53:b1:fe:16:88:d1:71:c6:04:2c:fd: c7:5c:82:4d:ac:34:95:44:33:5a:43:4a:5c:dd:f9: 2b:71:6f:a8:cf:f4:c9:7b:90:31:0e:3d:70:5e:fe: ce:76:2c:44:24:1b:0c:d8:d5:6d:8f:ca:b1:e1:78: 77:e9:30:58:fd:ff:0b:7c:b5:fa:48:2e:70:2d:b2: d3:8a:4e:33:db:bb:be:36:61:25:d8:58:19:ab:c3: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EF:5E:C3:A8:A3:E3:65:EC:30:24:91:FA:AA:A2:EE:59:A1:76:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/bdfa307b-4d25-3d25-acdf-7c0672499955.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:08:ec:f9:2c:89:ef:0d:19:ad:a4:49:78:8a:61:90:c0:e6: 4e:6a:7b:78:a5:25:aa:bc:e3:b4:63:06:b2:e4:dc:bc:26:39: 7c:cc:b0:43:74:02:2b:99:ec:2f:1f:f1:db:5f:c2:2d:43:1c: ce:ff:d8:4a:27:02:13:34:2c:c2:eb:7e:16:ed:a6:79:0c:5c: a0:0b:cb:1d:29:56:6b:ab:e3:df:c5:2d:e1:99:c1:e1:0c:0b: fa:d7:bc:dd:27:19:88:8e:4e:63:03:29:fb:f0:00:08:f8:bc: 4b:8b:9f:dd:30:83:d6:d9:bd:b2:b6:83:76:99:52:51:2d:7c: 43:87:03:7b:71:21:80:e7:37:a6:a4:98:77:fe:12:41:08:d2: 9b:99:71:2b:74:e3:dd:be:5b:65:66:6d:ed:da:1f:12:cf:33: 9c:4f:81:59:7d:e4:67:18:09:12:8d:fd:de:98:07:c2:8d:d2: 6c:5f:e1:24:b0:d8:63:b8:08:0d:3c:4e:5e:75:dc:7c:91:8a: ca:0f:41:4c:5b:d9:fe:77:90:a3:e9:b9:93:35:dd:27:d4:73: e4:fd:39:a5:a4:f8:39:26:69:37:20:57:53:34:0e:c7:77:d2: 8e:40:27:36:ef:f5:3c:13:35:02:a6:47:55:95:97:78:c2:f3: 1c:d5:90:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVQObO80FUau5BwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk YzM1MDBkNTktODRjMy00MDgzLWE0MjYtNDdkYWUzMzdhOTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaP55jWZzGi4Bt28BlS/7je4T3ygn7fp+O1B qG/yM8YZA0Q2azuDUTO7EdqqFh/HjWTqsHXgszWtS30rob9We8RRqiH2q8taOJwQ fCBt8jmM6eq83vVi024yFqNZz0RPIPltTp3EX6zmY+jzaUDDXYC8OrLXvkFr1pfl cJ7rCHsPJIWHH24SIiEz+hxCRIzOnO+aSP1JLSdji13qsYEbQZ7jNM8lj9WIU7H+ FojRccYELP3HXIJNrDSVRDNaQ0pc3fkrcW+oz/TJe5AxDj1wXv7OdixEJBsM2NVt j8qx4Xh36TBY/f8LfLX6SC5wLbLTik4z27u+NmEl2FgZq8M+dQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErvXsOoo+Nl7DAkkfqqou5ZoXbaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYmRmYTMwN2ItNGQyNS0z ZDI1LWFjZGYtN2MwNjcyNDk5OTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUI7Pksie8NGa2kSXiKYZDA5k5qe3ilJaq847RjBrLk3LwmOXzMsEN0 AiuZ7C8f8dtfwi1DHM7/2EonAhM0LMLrfhbtpnkMXKALyx0pVmur49/FLeGZweEM C/rXvN0nGYiOTmMDKfvwAAj4vEuLn90wg9bZvbK2g3aZUlEtfEOHA3txIYDnN6ak mHf+EkEI0puZcSt0492+W2Vmbe3aHxLPM5xPgVl95GcYCRKN/d6YB8KN0mxf4SSw 2GO4CA08Tl513HyRisoPQUxb2f53kKPpuZM13SfUc+T9OaWk+DkmaTcgV1M0Dsd3 0o5AJzbv9TwTNQKmR1WVl3jC8xzVkJU= -----END CERTIFICATE-----Generated at Tue Jun 17 07:19:16 2025 by rpki-client