$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/130d4b40-e7ab-31dd-99c4-f31fb87c4770.roa File: 130d4b40-e7ab-31dd-99c4-f31fb87c4770.roa (raw, json) Hash identifier: TkQXA5SvR4BEk42Ew8Bc+A3HQFA6TzuRmuuRwc+Snlw= Subject key identifier: CA:BA:37:64:0D:D9:57:72:35:AA:FC:F4:EA:2B:E6:36:4C:0D:D1:7E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088186983552DF5EC20F7C00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/130d4b40-e7ab-31dd-99c4-f31fb87c4770.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 162.159.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:86:98:35:52:df:5e:c2:0f:7c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=ff60ad5b-0b24-4a3e-85af-a467cc2f8ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3e:18:6a:2f:21:e5:64:d3:0b:b3:d3:89:79: 6c:b8:a9:49:b8:f2:62:5f:d2:1c:f2:3e:d0:7a:35: bb:d8:26:f3:bc:27:c4:7e:e2:1f:c9:5c:73:66:2a: 44:74:5f:cb:08:04:06:3e:07:93:6d:5c:3d:31:33: 31:73:e3:39:10:d9:23:c4:80:4a:1b:63:32:f4:74: 15:05:af:49:97:39:bc:1f:e9:23:c6:98:4a:1e:49: 4c:ac:1f:07:5b:be:14:6c:f4:1f:13:b5:35:e5:0b: 8a:c7:27:cc:53:9e:a8:8b:35:40:92:88:1d:ae:79: 79:79:1d:50:97:6f:d8:4b:c5:58:35:30:8d:87:f3: 05:f0:ba:80:8b:ab:61:4f:36:50:89:f1:f1:1e:70: 21:cd:8b:6c:8e:fa:14:fd:34:41:ad:03:07:3c:39: 38:4f:ca:79:91:be:76:41:15:dc:8f:d5:b6:b4:e6: c8:90:9b:ae:0e:36:c7:05:9c:b3:ad:48:92:db:e6: 9c:bb:e9:80:04:da:52:4f:bd:11:42:aa:f1:d8:5c: 99:21:91:17:99:bc:87:73:88:73:d5:74:3f:7d:8b: 8a:1b:47:0b:9b:e1:d7:4f:f9:42:4f:3d:52:59:1a: 56:51:f6:c0:8f:57:99:7d:9f:28:e7:0d:5e:5f:64: 67:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:BA:37:64:0D:D9:57:72:35:AA:FC:F4:EA:2B:E6:36:4C:0D:D1:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/130d4b40-e7ab-31dd-99c4-f31fb87c4770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:21:68:90:86:34:cf:f0:81:c5:f6:81:e1:dd:e9:c3:7e:70: 76:e6:dd:a3:6d:9e:ff:3b:ea:24:e4:61:b5:5c:7f:89:cc:ad: 44:81:34:9d:4c:e0:6c:98:54:f4:be:b7:6a:9d:91:a9:dd:4f: 45:ff:16:9c:a8:8b:8c:4e:77:f8:a2:3c:c2:d8:19:d4:85:d5: 9c:a0:d8:68:92:16:8c:87:56:94:bb:4d:14:a6:4e:9b:5f:55: db:ef:fc:b0:e0:31:83:0d:8e:bb:a6:6e:16:3f:01:6b:dc:39: 12:1e:21:bc:73:8c:92:71:01:36:01:43:73:c1:d5:d5:87:a4: 34:1b:04:12:1b:e9:18:d4:57:9b:19:e4:33:bc:de:99:94:1e: f7:dd:84:52:fd:0d:c2:3b:f3:f4:34:da:51:9c:78:9c:0f:21: 53:a0:ed:70:62:d2:dd:e5:3a:16:fd:f4:1c:13:da:42:e9:ef: 72:5e:62:a5:47:db:1d:b5:6b:ad:62:fa:15:96:88:ef:79:56: 0f:b4:dc:1b:3f:0f:40:e7:dd:97:47:57:77:6e:3e:d3:70:d6: 79:5d:c3:7f:34:57:60:d1:a8:76:cc:13:46:07:9e:99:37:b0: 4a:f4:65:de:55:d7:02:9a:47:f7:f5:c9:df:39:12:f8:1c:f4: 39:b1:5e:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYaYNVLfXsIPfAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZmY2MGFkNWItMGIyNC00YTNlLTg1YWYtYTQ2N2NjMmY4Y2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj4Yai8h5WTTC7PTiXlsuKlJuPJiX9Ic8j7Q ejW72CbzvCfEfuIfyVxzZipEdF/LCAQGPgeTbVw9MTMxc+M5ENkjxIBKG2My9HQV Ba9Jlzm8H+kjxphKHklMrB8HW74UbPQfE7U15QuKxyfMU56oizVAkogdrnl5eR1Q l2/YS8VYNTCNh/MF8LqAi6thTzZQifHxHnAhzYtsjvoU/TRBrQMHPDk4T8p5kb52 QRXcj9W2tObIkJuuDjbHBZyzrUiS2+acu+mABNpST70RQqrx2FyZIZEXmbyHc4hz 1XQ/fYuKG0cLm+HXT/lCTz1SWRpWUfbAj1eZfZ8o5w1eX2RnKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMq6N2QN2VdyNar89Oor5jZMDdF+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMTMwZDRiNDAtZTdhYi0z MWRkLTk5YzQtZjMxZmI4N2M0NzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop8DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADshaJCGNM/wgcX2geHd6cN+cHbm3aNtnv876iTkYbVcf4nMrUSBNJ1M 4GyYVPS+t2qdkandT0X/Fpyoi4xOd/iiPMLYGdSF1Zyg2GiSFoyHVpS7TRSmTptf Vdvv/LDgMYMNjrumbhY/AWvcORIeIbxzjJJxATYBQ3PB1dWHpDQbBBIb6RjUV5sZ 5DO83pmUHvfdhFL9DcI78/Q02lGceJwPIVOg7XBi0t3lOhb99BwT2kLp73JeYqVH 2x21a61i+hWWiO95Vg+03Bs/D0Dn3ZdHV3duPtNw1nldw380V2DRqHbME0YHnpk3 sEr0Zd5V1wKaR/f1yd85Evgc9DmxXoM= -----END CERTIFICATE-----Generated at Sat Apr 5 07:48:58 2025 by rpki-client