$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa File: dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa (raw, json) Hash identifier: m35KB7X+pWXxCK2BTJ+/qnG0ww+2E5SBJCqlRi6h0nw= Subject key identifier: 87:F6:EE:9C:7E:EE:87:81:67:E5:43:68:86:04:F5:99:E7:9A:9E:EB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6CB4E507545E55BC668BA Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 162.158.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:cb:4e:50:75:45:e5:5b:c6:68:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=1494108d-d6b6-46fb-a15d-b1a192d47f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:22:2e:9c:5d:dc:14:84:df:c3:f6:6c:9c: 7d:a8:f0:35:0a:e8:85:9e:47:25:76:f6:80:62:ea: 77:30:a1:9d:ee:7f:d7:78:a3:68:55:4c:ae:94:60: bf:3a:87:8e:97:41:6e:b0:55:54:bb:be:ea:20:21: 01:5c:2b:1e:48:18:85:d9:29:66:60:0e:f2:13:78: 00:55:eb:1e:38:54:73:77:c7:94:d3:4f:33:7c:0d: 99:cf:7e:0d:a9:38:41:76:f8:22:10:d4:aa:c4:4f: 79:a6:7c:b1:43:7a:34:db:53:9b:a3:4a:94:2b:f9: 31:55:a6:66:2f:2c:cb:00:01:40:d9:25:e5:cd:ca: 38:38:a8:1d:1c:bb:4c:42:94:4a:e7:f9:62:a4:00: 05:26:fd:98:fe:6e:33:e6:cb:c4:3f:5e:c1:4e:44: 0d:72:86:76:60:34:56:83:46:6f:55:40:67:62:e6: 37:38:30:a2:30:98:83:1a:68:20:d9:76:3f:61:23: 37:09:11:2c:2c:02:a6:ba:f6:b9:0d:a3:c6:db:21: 1e:61:7d:53:66:db:e3:95:bb:85:45:24:fa:20:08: e3:46:fc:e2:e7:7a:2c:d0:15:58:33:fc:7d:12:20: e0:67:12:41:d7:c3:10:d9:e3:02:08:88:da:b9:e2: 09:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F6:EE:9C:7E:EE:87:81:67:E5:43:68:86:04:F5:99:E7:9A:9E:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/dd2f8f1e-4f87-3845-8180-1cf640cccbe3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:87:54:37:41:07:dc:6e:b4:24:2c:e0:aa:fd:ba:08:d8:79: de:14:2f:c4:3b:ed:25:79:64:cb:c9:ef:dd:f8:2e:4a:ef:20: e7:97:ae:a3:e6:94:8c:7a:13:ab:6f:fb:c4:8c:20:3d:87:83: 19:ab:64:bc:0b:b2:d3:19:91:08:a4:06:0f:07:e4:21:db:b6: 2c:d7:dc:9a:63:86:b5:0e:a9:b2:65:f0:96:35:9b:7f:da:26: ed:76:09:cc:58:28:ab:ad:26:a4:c6:39:89:00:00:95:b1:1e: 3b:28:c8:37:27:7e:c3:3b:5e:3a:0f:a4:dc:8b:4d:29:8a:b6: f6:d4:3e:93:89:85:eb:eb:fa:61:b7:b2:ad:ca:f1:81:50:af: 86:8e:6f:9c:69:d1:35:e8:98:fa:bd:72:57:cc:18:97:eb:d5: 12:b2:2a:f3:90:0c:dd:09:03:8e:a4:cd:c3:a7:5d:01:ac:5c: 35:d2:50:93:66:30:e5:14:ea:d0:84:b2:9b:6c:c8:0e:22:8e: d9:20:0e:b7:b9:c6:74:67:72:50:60:d5:94:d1:2e:ae:2b:82: f7:ef:90:a3:ce:43:1e:29:60:3a:7f:6a:69:a4:21:2c:5b:a0: ba:45:a4:46:a8:d6:d2:de:d6:7b:47:1a:c4:38:d3:09:e9:ad: 6b:02:2e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtstOUHVF5VvGaLowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk MTQ5NDEwOGQtZDZiNi00NmZiLWExNWQtYjFhMTkyZDQ3ZjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsYiLpxd3BSE38P2bJx9qPA1CuiFnkcldvaA Yup3MKGd7n/XeKNoVUyulGC/OoeOl0FusFVUu77qICEBXCseSBiF2SlmYA7yE3gA VeseOFRzd8eU008zfA2Zz34NqThBdvgiENSqxE95pnyxQ3o021Obo0qUK/kxVaZm LyzLAAFA2SXlzco4OKgdHLtMQpRK5/lipAAFJv2Y/m4z5svEP17BTkQNcoZ2YDRW g0ZvVUBnYuY3ODCiMJiDGmgg2XY/YSM3CREsLAKmuva5DaPG2yEeYX1TZtvjlbuF RST6IAjjRvzi53os0BVYM/x9EiDgZxJB18MQ2eMCCIjaueIJdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIf27px+7oeBZ+VDaIYE9Znnmp7rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGQyZjhmMWUtNGY4Ny0z ODQ1LTgxODAtMWNmNjQwY2NjYmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop69MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuHVDdBB9xutCQs4Kr9ugjYed4UL8Q77SV5ZMvJ7934LkrvIOeXrqPm lIx6E6tv+8SMID2HgxmrZLwLstMZkQikBg8H5CHbtizX3JpjhrUOqbJl8JY1m3/a Ju12CcxYKKutJqTGOYkAAJWxHjsoyDcnfsM7XjoPpNyLTSmKtvbUPpOJhevr+mG3 sq3K8YFQr4aOb5xp0TXomPq9clfMGJfr1RKyKvOQDN0JA46kzcOnXQGsXDXSUJNm MOUU6tCEsptsyA4ijtkgDre5xnRnclBg1ZTRLq4rgvfvkKPOQx4pYDp/ammkISxb oLpFpEao1tLe1ntHGsQ40wnprWsCLgI= -----END CERTIFICATE-----Generated at Tue Apr 29 09:01:31 2025 by rpki-client