$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/12dcc1a0-0575-3221-92eb-413f6f6f2106.roa File: 12dcc1a0-0575-3221-92eb-413f6f6f2106.roa (raw, json) Hash identifier: 1Lf7xVj478Zqp502cyD1yE6+s//lJpEhGfldy4QCyhY= Subject key identifier: 40:1C:85:EC:F3:2B:EA:53:D3:40:A4:7B:17:21:AC:F7:BE:0F:E5:AB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088187D80ABC8916E3252580 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/12dcc1a0-0575-3221-92eb-413f6f6f2106.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 162.159.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:87:d8:0a:bc:89:16:e3:25:25:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=2b151dd2-4e9b-4e29-b8ba-7861e9d30a21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8e:a7:98:61:c6:50:4a:46:99:64:bb:91:e2: 2d:90:44:12:c5:dd:f5:ab:9d:50:92:f0:03:d7:c4: b4:83:66:53:56:1a:14:a0:c9:86:f2:1b:43:24:13: 12:2f:7a:97:e7:20:a3:4c:e9:b0:ad:45:d7:fb:04: b9:4c:b4:c8:49:7d:5d:7e:5a:e7:c7:d3:62:0c:99: 8e:bd:d2:72:80:8f:a3:9e:9c:0f:39:20:63:69:8c: 51:30:c4:66:76:c3:56:38:b3:28:d6:ea:36:ed:66: aa:c0:a3:54:e2:b1:a8:94:8e:f7:86:ce:6e:ea:69: 83:b0:d5:2d:95:f4:a8:48:32:9d:69:19:63:68:09: f6:ff:aa:90:27:05:1b:88:fc:4a:d3:39:78:f5:0e: 88:a6:3f:9d:dc:00:f5:cd:58:9d:2b:cd:c4:b5:71: d1:20:0b:42:8d:cb:b8:9a:69:87:6a:71:43:58:04: 18:67:82:7d:04:e8:39:6d:93:a6:6e:1f:4b:fd:92: 17:8d:d3:86:db:c7:09:ac:d9:ae:ff:de:f0:ba:16: ae:04:5a:bf:fd:de:d9:5b:e5:c4:75:09:6d:ee:21: 25:42:93:e1:04:66:f3:c4:2e:3b:50:7b:e6:f4:e1: 62:d5:16:0f:eb:3e:ff:c0:1f:1d:a0:ae:e7:38:6b: e5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1C:85:EC:F3:2B:EA:53:D3:40:A4:7B:17:21:AC:F7:BE:0F:E5:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/12dcc1a0-0575-3221-92eb-413f6f6f2106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:77:16:98:36:64:8f:06:2a:e8:f2:15:88:32:cc:66:66:29: 0f:f5:cb:74:a9:5c:d9:cf:5a:33:27:8d:d0:53:7b:bb:3d:3c: 07:b2:57:48:6f:c9:72:3a:8b:4b:77:4a:33:93:a0:0d:43:cc: 86:64:84:82:98:bc:98:e2:5f:c9:b9:7a:71:9f:3b:90:41:20: 36:bf:10:74:56:ae:0e:1e:0a:43:e7:5b:6b:d5:79:9c:9d:af: b9:a7:90:58:1a:88:b1:27:64:79:9f:cc:b0:8e:7a:ad:11:ba: dc:6a:f0:d8:fa:9c:d7:ac:f6:73:b8:82:c7:26:f6:f7:1a:60: 7e:dd:f5:69:95:55:82:ed:b7:79:c6:ba:c2:91:71:a8:4d:e5: aa:fa:d8:84:e8:df:5c:fc:6b:c6:b3:2b:c4:e7:91:2e:06:5b: f1:5e:d9:3e:09:61:59:e0:0c:cc:5b:85:fb:30:9e:2b:a9:16: c1:a7:00:43:35:95:8b:91:5f:61:ae:86:1d:29:df:1f:c3:7e: 9c:1b:a3:81:84:5e:bd:67:d4:73:76:d7:15:6e:e3:61:42:e5: e5:8e:ef:3a:20:15:d2:0e:43:ae:97:fc:ec:16:3b:1d:e2:18: 44:b6:cc:b0:6c:e6:30:67:b6:98:5a:2f:3d:85:cd:8f:ae:f6: 9a:62:b7:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYfYCryJFuMlJYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MmIxNTFkZDItNGU5Yi00ZTI5LWI4YmEtNzg2MWU5ZDMwYTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn46nmGHGUEpGmWS7keItkEQSxd31q51QkvAD 18S0g2ZTVhoUoMmG8htDJBMSL3qX5yCjTOmwrUXX+wS5TLTISX1dflrnx9NiDJmO vdJygI+jnpwPOSBjaYxRMMRmdsNWOLMo1uo27WaqwKNU4rGolI73hs5u6mmDsNUt lfSoSDKdaRljaAn2/6qQJwUbiPxK0zl49Q6Ipj+d3AD1zVidK83EtXHRIAtCjcu4 mmmHanFDWAQYZ4J9BOg5bZOmbh9L/ZIXjdOG28cJrNmu/97wuhauBFq//d7ZW+XE dQlt7iElQpPhBGbzxC47UHvm9OFi1RYP6z7/wB8doK7nOGvlSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAchezzK+pT00CkexchrPe+D+WrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTJkY2MxYTAtMDU3NS0z MjIxLTkyZWItNDEzZjZmNmYyMTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEop8gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK53Fpg2ZI8GKujyFYgyzGZmKQ/1y3SpXNnPWjMnjdBTe7s9PAeyV0hv yXI6i0t3SjOToA1DzIZkhIKYvJjiX8m5enGfO5BBIDa/EHRWrg4eCkPnW2vVeZyd r7mnkFgaiLEnZHmfzLCOeq0Rutxq8Nj6nNes9nO4gscm9vcaYH7d9WmVVYLtt3nG usKRcahN5ar62ITo31z8a8azK8TnkS4GW/Fe2T4JYVngDMxbhfswniupFsGnAEM1 lYuRX2Guhh0p3x/Dfpwbo4GEXr1n1HN21xVu42FC5eWO7zogFdIOQ66X/OwWOx3i GES2zLBs5jBntphaLz2FzY+u9ppit1g= -----END CERTIFICATE-----Generated at Sat Apr 5 10:13:26 2025 by rpki-client