$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/016fb4fc-1ea0-3c11-b81a-51302a692f25.roa File: 016fb4fc-1ea0-3c11-b81a-51302a692f25.roa (raw, json) Hash identifier: JfabBRyEY+XNPArYtwNOr83rYLMCaDJxEh5hpdEXp0A= Subject key identifier: 9A:89:52:36:24:04:BF:5E:95:8E:F0:0E:6D:B2:5C:4F:D8:ED:90:EA Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584832F024C5152FF2DB095BB880 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/016fb4fc-1ea0-3c11-b81a-51302a692f25.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 395747 IP address blocks: 108.162.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:24:c5:15:2f:f2:db:09:5b:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=aa2e2718-c775-4c2e-8d13-fdf1faad6793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e0:eb:74:f6:9a:7c:08:8e:92:23:63:cc:19: 65:d5:e8:6e:fa:3b:b0:04:86:40:2d:a3:01:5d:be: ac:60:22:6e:24:0d:25:31:58:5d:89:79:db:8c:c0: 65:bd:b9:45:ba:08:87:01:2f:f3:cb:70:c0:7a:7c: 24:f3:42:25:5d:90:58:e9:3f:9b:b0:dc:79:08:bf: 48:b1:cd:be:8c:ff:98:5d:fe:70:0d:47:29:a1:97: 1e:7e:a3:b8:85:eb:c1:7b:b6:46:7a:c1:29:80:be: fd:8e:23:77:7d:10:f2:44:76:63:9b:88:7e:a1:d4: 95:11:b2:a3:39:e8:45:1c:f4:2e:73:e7:22:03:79: b8:dc:2b:1b:9e:d5:2a:d5:b5:ed:fb:65:3b:a8:94: 5d:a1:1c:0f:67:11:dd:e3:7b:f4:62:70:8a:23:c6: 8d:f9:85:64:e8:03:ed:82:93:ac:44:3c:21:d5:4e: 59:00:9a:ac:6a:cc:a3:5b:8e:33:d3:9c:fe:ef:94: f6:d4:91:85:9b:fa:11:c3:26:68:42:9e:17:3d:51: 61:6c:a6:a2:fc:93:01:e0:cf:07:fa:05:2a:61:63: 8f:5e:f2:92:7d:d1:20:53:03:7e:8b:ce:66:47:21: 9b:df:c8:a1:d2:63:e0:bc:11:2f:5f:6d:e6:c2:25: f8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:89:52:36:24:04:BF:5E:95:8E:F0:0E:6D:B2:5C:4F:D8:ED:90:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/016fb4fc-1ea0-3c11-b81a-51302a692f25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:b9:0a:fe:c4:ed:98:24:63:cc:18:6e:23:97:94:cd:00:83: 18:a5:4c:d9:09:25:0a:5a:32:dc:59:b7:e9:d5:0d:2a:a7:b1: 3d:cf:a5:30:11:eb:de:b7:14:49:8b:db:8b:d7:fe:c4:6d:88: b2:81:40:29:ce:91:4b:3e:e5:fb:b3:c5:ed:df:56:1d:87:a0: 9d:d7:42:a0:0e:37:d6:da:27:1e:a6:66:f5:cb:6c:b6:e4:83: 6a:cd:e2:be:9b:ea:14:5e:b6:df:8d:73:c0:ff:dc:4c:b4:c7: 3a:f2:a3:09:f0:6e:02:2f:5f:f4:2f:f3:28:48:61:f4:99:9f: d0:c4:cd:71:63:11:b4:7f:ea:b8:e8:26:ea:5e:e1:5e:6e:c0: a2:33:09:b2:e8:45:b7:81:db:e3:b9:05:73:86:ce:b6:c7:07: 13:fe:4c:8f:b6:4e:4a:aa:a2:4e:3c:f9:45:1f:ac:f2:1d:70: 04:b9:5f:44:17:4c:28:96:24:e4:f7:0f:b6:80:6c:5d:69:6d: 58:89:91:62:d3:6c:48:36:2c:33:e1:fd:95:47:e7:ea:40:31: 03:11:ea:bf:e7:c4:40:a5:d0:d8:e0:34:f4:00:16:4b:59:97: 76:86:53:f5:8f:6b:c5:9f:58:ed:2c:47:a3:cc:ed:76:f2:25: 15:f1:89:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8CTFFS/y2wlbuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk YWEyZTI3MTgtYzc3NS00YzJlLThkMTMtZmRmMWZhYWQ2NzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtODrdPaafAiOkiNjzBll1ehu+juwBIZALaMB Xb6sYCJuJA0lMVhdiXnbjMBlvblFugiHAS/zy3DAenwk80IlXZBY6T+bsNx5CL9I sc2+jP+YXf5wDUcpoZcefqO4hevBe7ZGesEpgL79jiN3fRDyRHZjm4h+odSVEbKj OehFHPQuc+ciA3m43CsbntUq1bXt+2U7qJRdoRwPZxHd43v0YnCKI8aN+YVk6APt gpOsRDwh1U5ZAJqsasyjW44z05z+75T21JGFm/oRwyZoQp4XPVFhbKai/JMB4M8H +gUqYWOPXvKSfdEgUwN+i85mRyGb38ih0mPgvBEvX23mwiX4+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJqJUjYkBL9elY7wDm2yXE/Y7ZDqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDE2ZmI0ZmMtMWVhMC0z YzExLWI4MWEtNTEzMDJhNjkyZjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKu5Cv7E7ZgkY8wYbiOXlM0AgxilTNkJJQpaMtxZt+nVDSqnsT3PpTAR 6963FEmL24vX/sRtiLKBQCnOkUs+5fuzxe3fVh2HoJ3XQqAON9baJx6mZvXLbLbk g2rN4r6b6hRett+Nc8D/3Ey0xzryownwbgIvX/Qv8yhIYfSZn9DEzXFjEbR/6rjo Jupe4V5uwKIzCbLoRbeB2+O5BXOGzrbHBxP+TI+2Tkqqok48+UUfrPIdcAS5X0QX TCiWJOT3D7aAbF1pbViJkWLTbEg2LDPh/ZVH5+pAMQMR6r/nxECl0NjgNPQAFktZ l3aGU/WPa8WfWO0sR6PM7XbyJRXxiQA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:05 2025 by rpki-client