$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c05d3f2d-405a-3f1a-9835-8b720a096f92.roa File: c05d3f2d-405a-3f1a-9835-8b720a096f92.roa (raw, json) Hash identifier: k+DW86ezzMTrvn6O1g5NuAPhuCSP+hBe8cGm/S+0CuA= Subject key identifier: FE:DF:FC:E3:37:FC:FD:D7:2C:A1:96:50:9D:F0:C5:9D:0C:0C:F2:9E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858498614B7F8B94249D5927E8600 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c05d3f2d-405a-3f1a-9835-8b720a096f92.roa Signing time: Mon 14 Apr 2025 13:33:53 +0000 ROA not before: Mon 14 Apr 2025 13:33:53 +0000 ROA not after: Sun 13 Jul 2025 13:33:53 +0000 asID: 13335 IP address blocks: 162.159.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:86:14:b7:f8:b9:42:49:d5:92:7e:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Apr 14 13:33:53 2025 GMT Not After : Jul 13 13:33:53 2025 GMT Subject: CN=a4cc8c25-d786-453b-aa56-2f19063d2cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5e:66:52:0b:a0:3a:cb:29:3d:4f:d8:bb:d4: f4:e4:76:d4:c2:cd:e3:a8:41:4e:fc:89:23:40:3e: 42:74:85:72:70:c1:f4:b3:f6:13:d5:63:6a:0d:56: 07:db:62:77:b9:24:c4:2c:8a:18:93:5c:c5:2f:d3: 87:06:11:0a:8e:ec:94:dd:e8:37:e8:4b:41:23:a7: cd:31:8e:7b:fa:8d:e6:b4:15:e7:f6:18:ba:69:41: bb:a6:71:98:71:b0:27:ab:ef:5e:de:81:f5:c2:94: 5f:3b:4e:6f:87:76:96:7f:6c:de:45:c2:88:3a:26: 25:d6:69:45:80:e5:47:cd:dd:8a:4e:ef:52:26:80: 41:50:3f:60:c3:76:b0:8a:72:75:38:ee:a9:b0:53: dd:a6:b8:a2:94:fe:2c:68:3e:ff:37:cc:cc:cf:c4: 40:ea:af:e3:e1:b1:9b:c5:0f:1a:b3:ef:b4:d9:14: ce:56:90:b8:d5:e7:4d:38:2b:a0:ff:d9:5d:da:5d: f2:ad:4d:c7:d1:e0:e9:81:5b:4e:b1:6a:23:98:75: c0:c2:b3:db:97:62:64:fb:78:bf:a4:77:a4:ef:e0: 62:10:90:2c:c5:fa:70:b7:8a:0f:54:c0:c6:e4:68: 61:f5:c5:c0:a7:bd:1e:9e:58:b0:7d:95:3a:34:62: e2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DF:FC:E3:37:FC:FD:D7:2C:A1:96:50:9D:F0:C5:9D:0C:0C:F2:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c05d3f2d-405a-3f1a-9835-8b720a096f92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:c0:71:29:c0:f2:8a:9d:4d:55:b2:35:91:ab:aa:12:02:c2: 37:4b:2a:93:2c:6d:a4:54:5e:8e:e9:cc:b8:39:b1:2f:4c:df: 17:d5:73:16:53:58:f8:ac:6e:92:1d:27:c1:e2:47:3e:68:c1: 58:bb:9b:6c:12:06:54:3a:65:ff:3f:0f:40:d6:2b:5c:51:ff: 6f:6b:1f:93:9c:ca:0a:7c:74:48:62:47:b9:e9:79:e8:68:ec: ab:72:7a:97:8f:ac:06:6e:fe:5f:79:9f:28:6f:72:f8:69:13: 8f:eb:55:7b:91:05:ad:08:df:5f:94:b9:7e:96:93:c4:54:81: 8d:e8:f5:4a:bc:fe:4a:37:9c:9c:a6:15:1e:d5:8e:1a:10:c0: 5f:bb:0f:db:80:87:43:fb:ef:e6:a2:2e:51:b6:f3:d4:73:53: 72:a7:00:6b:37:e7:df:15:24:f3:5e:58:ae:f4:2c:78:07:92: 9f:db:c0:59:5d:01:22:da:78:03:3b:40:89:0b:4b:6f:fe:9a: e2:d3:4a:b6:af:04:c5:f7:68:08:bf:a7:76:69:4e:50:4e:ac: 67:fc:db:b9:c9:d9:1a:a7:8d:6c:51:68:b7:8e:da:f9:be:32: 2e:ac:fa:64:03:b6:7a:df:0a:4e:bf:6e:a9:3e:3e:1a:82:00: fd:49:42:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGFLf4uUJJ1ZJ+hgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDQxNDEzMzM1M1oXDTI1MDcxMzEzMzM1M1owLzEtMCsGA1UEAxMk YTRjYzhjMjUtZDc4Ni00NTNiLWFhNTYtMmYxOTA2M2QyY2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l5mUgugOsspPU/Yu9T05HbUws3jqEFO/Ikj QD5CdIVycMH0s/YT1WNqDVYH22J3uSTELIoYk1zFL9OHBhEKjuyU3eg36EtBI6fN MY57+o3mtBXn9hi6aUG7pnGYcbAnq+9e3oH1wpRfO05vh3aWf2zeRcKIOiYl1mlF gOVHzd2KTu9SJoBBUD9gw3awinJ1OO6psFPdpriilP4saD7/N8zMz8RA6q/j4bGb xQ8as++02RTOVpC41edNOCug/9ld2l3yrU3H0eDpgVtOsWojmHXAwrPbl2Jk+3i/ pHek7+BiEJAsxfpwt4oPVMDG5Ghh9cXAp70enliwfZU6NGLiKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7f/OM3/P3XLKGWUJ3wxZ0MDPKeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzA1ZDNmMmQtNDA1YS0z ZjFhLTk4MzUtOGI3MjBhMDk2ZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop/WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALTAcSnA8oqdTVWyNZGrqhICwjdLKpMsbaRUXo7pzLg5sS9M3xfVcxZT WPisbpIdJ8HiRz5owVi7m2wSBlQ6Zf8/D0DWK1xR/29rH5Ocygp8dEhiR7npeeho 7KtyepePrAZu/l95nyhvcvhpE4/rVXuRBa0I31+UuX6Wk8RUgY3o9Uq8/ko3nJym FR7VjhoQwF+7D9uAh0P77+aiLlG289RzU3KnAGs3598VJPNeWK70LHgHkp/bwFld ASLaeAM7QIkLS2/+muLTSravBMX3aAi/p3ZpTlBOrGf827nJ2RqnjWxRaLeO2vm+ Mi6s+mQDtnrfCk6/bqk+PhqCAP1JQqo= -----END CERTIFICATE-----Generated at Sat Apr 26 16:38:05 2025 by rpki-client