$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c39d1a8f-c720-39df-a632-0715be7fdcc5.roa File: c39d1a8f-c720-39df-a632-0715be7fdcc5.roa (raw, json) Hash identifier: qtLOp+FYEIMockfdfbJCAMrdke/BraQyGYJO+fSeFd8= Subject key identifier: BD:E1:C2:44:5C:A3:64:55:29:6A:57:7C:E2:D7:54:BD:26:DA:5C:8C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490881828278F1CF4A48CAFE80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c39d1a8f-c720-39df-a632-0715be7fdcc5.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 162.158.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:82:82:78:f1:cf:4a:48:ca:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=67db4a77-1633-4431-ac01-c23a3575d8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:9b:63:54:cf:4e:98:fd:64:73:fa:3e:f4: 2d:42:97:22:8d:01:7b:99:27:79:57:fd:44:a2:79: 38:f8:bc:68:fd:23:ef:7c:2a:b0:aa:9f:37:86:fb: f5:07:fa:e2:f2:3a:84:05:7e:86:f3:81:0b:72:63: 3a:31:05:cf:64:3f:0f:a6:67:ab:d2:20:b2:6c:5c: 4b:ab:f6:f3:6c:41:9e:5d:41:6a:42:87:d0:8b:cf: b2:df:85:62:24:b9:12:17:b1:77:14:fc:1f:be:bb: e3:36:ca:ad:dc:22:74:94:7a:4f:e2:1f:5c:27:a2: cc:56:63:29:32:93:2c:7b:a2:88:02:3c:93:e1:cf: 56:c6:c6:75:10:f2:6b:33:63:7c:ad:8d:63:b3:0a: 47:18:32:73:38:0c:cd:49:aa:4c:87:4a:a5:16:e9: aa:43:79:fd:6b:be:5c:9b:16:3c:f0:60:cb:1a:33: 01:b0:ea:bf:97:30:0a:70:1c:d1:92:35:16:9c:7f: 24:21:2b:80:f4:3b:ee:2a:44:df:5b:cf:73:0f:32: 14:59:a8:b6:5e:ff:11:8c:44:d6:94:42:f1:18:b8: ff:6b:f1:21:3e:a5:45:7c:81:28:9d:bd:56:0f:9f: 2c:92:fe:8c:95:2c:e5:db:45:37:92:77:51:ea:95: e2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E1:C2:44:5C:A3:64:55:29:6A:57:7C:E2:D7:54:BD:26:DA:5C:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c39d1a8f-c720-39df-a632-0715be7fdcc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:95:e3:1b:2c:e4:37:48:6c:9d:0f:07:f8:f4:eb:b5:14:1f: f4:3d:1a:22:95:1d:8d:28:66:29:f4:45:0d:91:24:d3:03:09: 2d:86:f1:80:3c:ce:b6:83:99:16:f3:ef:98:82:ca:00:95:13: 3d:b7:b4:16:51:82:07:42:68:2d:6d:15:a1:05:e6:d4:67:61: 56:f9:35:15:8d:5b:88:3d:49:9f:9f:f3:54:25:d8:c6:9e:d1: 78:9c:e0:c1:b3:e2:fe:58:68:b1:aa:f3:50:29:b1:0a:cd:2a: 33:9a:e4:34:44:b8:70:7d:6e:e1:df:16:3f:e0:68:14:aa:79: b5:52:df:2f:9d:bc:d3:a1:2d:a4:25:8f:d3:2a:89:2b:bc:a2: 62:07:34:48:bc:1f:8e:d2:81:05:24:40:a9:0d:33:36:d7:67: 67:bb:65:e6:f6:f0:73:9b:49:4f:ce:d4:e1:2e:82:bd:2f:cc: c9:73:86:c3:1d:16:a9:1a:51:6f:b0:d2:9c:23:60:e8:31:4e: db:a3:87:ef:7a:f5:47:1a:3e:09:f5:c9:7b:47:65:c1:44:8f: 86:3b:b0:fd:d8:ba:c2:1c:33:eb:7a:1f:91:07:1b:88:af:4d: 51:d2:44:6b:d5:b4:ad:af:04:6b:1c:48:cf:84:a3:b6:d4:e0: 55:1a:3b:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYKCePHPSkjK/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NjdkYjRhNzctMTYzMy00NDMxLWFjMDEtYzIzYTM1NzVkOGEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDWbY1TPTpj9ZHP6PvQtQpcijQF7mSd5V/1E onk4+Lxo/SPvfCqwqp83hvv1B/ri8jqEBX6G84ELcmM6MQXPZD8Ppmer0iCybFxL q/bzbEGeXUFqQofQi8+y34ViJLkSF7F3FPwfvrvjNsqt3CJ0lHpP4h9cJ6LMVmMp MpMse6KIAjyT4c9WxsZ1EPJrM2N8rY1jswpHGDJzOAzNSapMh0qlFumqQ3n9a75c mxY88GDLGjMBsOq/lzAKcBzRkjUWnH8kISuA9DvuKkTfW89zDzIUWai2Xv8RjETW lELxGLj/a/EhPqVFfIEonb1WD58skv6MlSzl20U3kndR6pXirwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3hwkRco2RVKWpXfOLXVL0m2lyMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzM5ZDFhOGYtYzcyMC0z OWRmLWE2MzItMDcxNWJlN2ZkY2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeV4xss5DdIbJ0PB/j067UUH/Q9GiKVHY0oZin0RQ2RJNMDCS2G8YA8 zraDmRbz75iCygCVEz23tBZRggdCaC1tFaEF5tRnYVb5NRWNW4g9SZ+f81Ql2Mae 0Xic4MGz4v5YaLGq81ApsQrNKjOa5DREuHB9buHfFj/gaBSqebVS3y+dvNOhLaQl j9MqiSu8omIHNEi8H47SgQUkQKkNMzbXZ2e7Zeb28HObSU/O1OEugr0vzMlzhsMd FqkaUW+w0pwjYOgxTtujh+969UcaPgn1yXtHZcFEj4Y7sP3YusIcM+t6H5EHG4iv TVHSRGvVtK2vBGscSM+Eo7bU4FUaOwU= -----END CERTIFICATE-----Generated at Sun Apr 27 07:52:58 2025 by rpki-client