$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa File: 09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa (raw, json) Hash identifier: LGXaHlaiJyPTsM/yzjzSm6ENQ0HoU/3jUoJQLSjCGTo= Subject key identifier: 63:94:F1:C8:D9:2F:CD:E2:2A:5A:1C:91:2D:04:7F:47:17:66:66:E9 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584908818083D606AEC8ADF07E00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 162.158.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:80:83:d6:06:ae:c8:ad:f0:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=989caa66-e46d-40ff-9342-f33da3c732c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:53:3c:93:a7:0d:ad:6b:d2:e0:7d:1c:87:e6: 92:b6:d6:99:29:8f:ba:0b:3f:36:a8:ef:38:e4:ef: 22:3e:17:1b:66:1a:ca:a0:fd:ac:3b:85:85:45:d4: ee:33:ae:d1:99:d4:b7:52:b3:b2:34:6b:21:4f:ee: 37:a7:aa:e5:5d:70:70:58:ad:2a:c6:7b:6e:99:ad: 96:ab:71:0b:bb:21:04:d1:dd:64:ed:7f:cc:c6:e9: d4:b9:a5:d1:55:a8:9b:56:cd:71:10:52:08:9f:fc: 75:eb:4e:b2:41:b1:45:4d:93:a3:d3:72:36:8a:23: 58:10:ad:9b:b2:89:d6:88:78:41:b9:a1:a5:5a:92: 6b:64:ba:0f:34:2c:cd:ad:50:4e:2d:49:ff:8c:f7: 5b:4f:bf:be:b9:b6:c4:ed:0e:f3:5c:8d:0d:78:bf: d5:c3:27:ab:91:9c:fe:d0:6c:d8:c4:f7:6c:03:16: f9:19:60:77:2c:c3:05:f6:d0:e3:64:36:38:05:21: 45:18:c8:f1:f5:59:d0:23:fc:32:f5:19:1a:64:be: 94:d2:50:2c:5f:b1:1f:de:2f:2b:e3:21:68:1f:67: 03:8d:2d:86:f7:c3:de:25:3e:ca:26:89:e7:03:43: e1:0e:26:75:79:b4:27:89:6d:ee:2c:08:3c:ba:da: b7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:94:F1:C8:D9:2F:CD:E2:2A:5A:1C:91:2D:04:7F:47:17:66:66:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/09baa7be-9ccb-321e-a5dc-4ca7fd01b1be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:56:51:27:10:c2:da:bf:89:d6:a3:45:cf:37:fa:3d:9e:9b: a9:85:31:aa:d7:12:e3:84:4b:2a:bd:f1:ab:f7:33:22:d0:ef: 0b:fa:dc:28:4d:19:67:86:a3:8b:dc:5a:79:3a:2e:0d:0c:fc: ba:a9:30:3e:98:f5:09:79:12:07:fa:a6:1a:2a:31:6b:73:96: 76:cf:f5:e4:e2:f0:7d:6e:dd:b0:86:ac:f9:81:25:21:28:e6: e1:d5:c8:c2:a4:3f:a6:90:30:4c:ac:32:ef:af:11:14:c1:bb: 14:b3:e5:1d:55:e0:50:24:e1:7b:1b:69:39:8e:c2:7d:6e:8e: 7c:98:a6:65:88:c3:bc:86:2b:f4:eb:d9:88:6f:35:5d:e9:da: c0:2d:2c:06:b7:86:a0:70:13:c9:41:b5:ba:6f:9b:65:50:83: 3d:68:5a:8d:4c:71:eb:f3:f5:8b:5e:55:33:d7:61:7b:0f:e2: 2a:23:1c:1e:97:e6:46:1a:b8:5c:4c:15:75:2f:c6:0e:11:ca: b9:23:35:f7:84:a7:96:54:d5:0c:50:7a:c0:5f:2d:eb:c2:2d: 73:bc:54:1e:ae:f4:8b:dd:0a:33:02:4a:84:f6:47:3a:f5:06: a5:1c:05:c6:a5:70:42:9f:6a:b1:5a:16:48:b0:dc:97:8b:dd: e7:7c:2a:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYCD1gauyK3wfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk OTg5Y2FhNjYtZTQ2ZC00MGZmLTkzNDItZjMzZGEzYzczMmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1M8k6cNrWvS4H0ch+aSttaZKY+6Cz82qO84 5O8iPhcbZhrKoP2sO4WFRdTuM67RmdS3UrOyNGshT+43p6rlXXBwWK0qxntuma2W q3ELuyEE0d1k7X/MxunUuaXRVaibVs1xEFIIn/x1606yQbFFTZOj03I2iiNYEK2b sonWiHhBuaGlWpJrZLoPNCzNrVBOLUn/jPdbT7++ubbE7Q7zXI0NeL/VwyerkZz+ 0GzYxPdsAxb5GWB3LMMF9tDjZDY4BSFFGMjx9VnQI/wy9RkaZL6U0lAsX7Ef3i8r 4yFoH2cDjS2G98PeJT7KJonnA0PhDiZ1ebQniW3uLAg8utq3xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOU8cjZL83iKlockS0Ef0cXZmbpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDliYWE3YmUtOWNjYi0z MjFlLWE1ZGMtNGNhN2ZkMDFiMWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVWUScQwtq/idajRc83+j2em6mFMarXEuOESyq98av3MyLQ7wv63ChN GWeGo4vcWnk6Lg0M/LqpMD6Y9Ql5Egf6phoqMWtzlnbP9eTi8H1u3bCGrPmBJSEo 5uHVyMKkP6aQMEysMu+vERTBuxSz5R1V4FAk4XsbaTmOwn1ujnyYpmWIw7yGK/Tr 2YhvNV3p2sAtLAa3hqBwE8lBtbpvm2VQgz1oWo1Mcevz9YteVTPXYXsP4iojHB6X 5kYauFxMFXUvxg4RyrkjNfeEp5ZU1QxQesBfLevCLXO8VB6u9IvdCjMCSoT2Rzr1 BqUcBcalcEKfarFaFkiw3JeL3ed8Klc= -----END CERTIFICATE-----Generated at Sat Apr 5 07:38:54 2025 by rpki-client