$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/255bcba5-55dd-3923-af2d-4930657be6ab.roa File: 255bcba5-55dd-3923-af2d-4930657be6ab.roa (raw, json) Hash identifier: 3DpFkmOMwkwN1Chjmx1M6feXTC1JaFsSOjxhsV+wEBY= Subject key identifier: 39:97:2F:10:0B:D5:6B:65:63:78:9A:E4:1F:04:CE:0A:21:11:DE:BE Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071BFF9D7435FDF394427640 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/255bcba5-55dd-3923-af2d-4930657be6ab.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 108.162.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:ff:9d:74:35:fd:f3:94:42:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=233437ac-98ad-429e-8c71-f3b52d6966d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:96:80:d0:0b:6f:fe:37:1c:1a:d3:1c:3e:96: de:da:05:bf:13:0e:38:7a:f1:a5:6d:1f:c3:84:15: 55:3b:11:0c:64:a8:bf:e7:68:3a:8a:97:8a:9e:03: 32:22:45:4a:83:88:d1:c7:1a:84:f1:7d:66:c2:4d: 83:a5:df:99:5a:71:0e:5f:69:91:3a:7e:f6:69:d1: 65:b0:0f:fa:22:20:7b:e4:d2:00:cf:39:a4:e2:d6: 33:b3:33:63:d9:e3:35:9e:27:ab:50:45:07:2f:b1: 75:95:a3:b8:b6:c0:a1:86:2b:67:c7:fa:61:c4:51: d5:56:ad:0e:4c:c3:aa:85:3b:cd:53:76:40:ea:c0: f1:88:77:e5:8a:e0:d1:c7:c5:06:34:17:26:cb:90: 71:fe:cb:31:e9:ac:26:ab:cc:4e:26:05:48:57:2c: a0:a7:b0:45:21:e8:e5:95:90:56:84:c1:ad:63:78: c9:31:8d:8c:be:c0:0c:eb:de:57:51:c5:7a:23:32: a4:6f:fa:66:28:97:f8:43:95:f3:b3:4d:6d:ce:81: 75:b3:2b:1f:7e:87:fd:bd:a1:2c:b0:bf:de:c2:9c: 20:b6:00:14:65:ad:17:d7:1c:2d:ba:57:30:39:9b: d7:06:58:f8:74:23:af:ae:75:b1:a2:da:d9:22:a8: 59:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:97:2F:10:0B:D5:6B:65:63:78:9A:E4:1F:04:CE:0A:21:11:DE:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/255bcba5-55dd-3923-af2d-4930657be6ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bc:ab:31:fa:8a:5e:7e:c6:8f:35:09:84:4e:0a:bc:a5:bd:cf: 4e:19:e9:a2:45:56:86:e8:c3:df:33:90:61:49:b4:fa:a6:5f: 6f:d8:46:ac:ca:c2:43:28:06:93:ba:3b:6c:c0:62:53:12:d1: 9a:3b:58:ee:a0:a7:50:01:63:17:70:cf:7c:4f:8b:37:70:cb: da:7e:bb:0d:89:a4:06:ca:2a:60:2f:b4:c0:ee:f0:c4:cb:de: 43:dc:af:90:6d:59:af:3a:52:1f:87:02:ad:30:d4:3c:c1:d2: 52:13:a2:b7:c2:38:3b:bd:d2:a8:d2:85:1a:00:e4:55:59:8d: 62:12:e2:73:80:d5:5e:60:18:8d:6a:c1:87:4f:2a:85:3c:cb: f8:31:ce:cd:58:f6:a8:9c:9b:75:e4:dd:10:fe:22:1e:fe:eb: 19:fe:c7:e5:61:0f:33:78:4d:89:e7:5a:41:77:26:59:63:96: 12:1f:42:8e:ba:fb:19:f7:cc:56:b9:d0:e2:ba:c3:23:11:a6: 32:72:92:9c:96:b7:3e:1a:45:17:51:20:e2:5a:7d:00:ef:67: f8:63:42:0c:ee:29:76:45:20:49:e4:ad:af:72:6e:e5:c8:c5: 4a:f6:65:32:fa:d0:56:33:49:3d:d8:a3:d3:98:8c:bc:ca:76: 5f:23:31:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG/+ddDX985RCdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk MjMzNDM3YWMtOThhZC00MjllLThjNzEtZjNiNTJkNjk2NmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipaA0Atv/jccGtMcPpbe2gW/Ew44evGlbR/D hBVVOxEMZKi/52g6ipeKngMyIkVKg4jRxxqE8X1mwk2Dpd+ZWnEOX2mROn72adFl sA/6IiB75NIAzzmk4tYzszNj2eM1nierUEUHL7F1laO4tsChhitnx/phxFHVVq0O TMOqhTvNU3ZA6sDxiHfliuDRx8UGNBcmy5Bx/ssx6awmq8xOJgVIVyygp7BFIejl lZBWhMGtY3jJMY2MvsAM695XUcV6IzKkb/pmKJf4Q5Xzs01tzoF1sysffof9vaEs sL/ewpwgtgAUZa0X1xwtulcwOZvXBlj4dCOvrnWxotrZIqhZVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmXLxAL1WtlY3ia5B8EzgohEd6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMjU1YmNiYTUtNTVkZC0z OTIzLWFmMmQtNDkzMDY1N2JlNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALyrMfqKXn7GjzUJhE4KvKW9z04Z6aJFVobow98zkGFJtPqmX2/YRqzK wkMoBpO6O2zAYlMS0Zo7WO6gp1ABYxdwz3xPizdwy9p+uw2JpAbKKmAvtMDu8MTL 3kPcr5BtWa86Uh+HAq0w1DzB0lITorfCODu90qjShRoA5FVZjWIS4nOA1V5gGI1q wYdPKoU8y/gxzs1Y9qicm3Xk3RD+Ih7+6xn+x+VhDzN4TYnnWkF3JlljlhIfQo66 +xn3zFa50OK6wyMRpjJykpyWtz4aRRdRIOJafQDvZ/hjQgzuKXZFIEnkra9ybuXI xUr2ZTL60FYzST3Yo9OYjLzKdl8jMTo= -----END CERTIFICATE-----Generated at Sat Apr 5 07:41:37 2025 by rpki-client