$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b154c6a-ed22-34c2-912f-d4083b7c1dda.roa File: 2b154c6a-ed22-34c2-912f-d4083b7c1dda.roa (raw, json) Hash identifier: Z1lL0MQuH1RBeUTakKtv2c4JBm5qJWc+CS2UHmRTmNI= Subject key identifier: 29:47:52:14:6B:18:21:BE:57:8B:4D:80:3D:66:24:3B:82:D0:AA:8C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858473B1C17C1D09FBB4EBEC54BA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b154c6a-ed22-34c2-912f-d4083b7c1dda.roa Signing time: Sun 15 Sep 2024 12:00:00 +0000 ROA not before: Sun 15 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 395747 IP address blocks: 162.158.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:3b:1c:17:c1:d0:9f:bb:4e:be:c5:4b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 15 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=3e9bb8b8-eff1-4564-b77d-484132eb4b60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:05:57:7a:21:1d:05:f7:a5:dd:e8:b7:39:48: 15:3d:74:b2:03:f7:37:88:b9:6c:db:fe:05:08:4f: 12:6f:9d:ea:e6:c1:85:bc:3d:40:94:bf:7e:aa:ff: a9:08:2e:4c:c7:71:83:cd:65:b5:6e:55:d8:44:b8: c2:34:15:b5:28:b8:12:71:76:a2:de:3d:9c:36:0c: bf:6e:c2:ad:a6:4b:1c:7e:c3:d4:9a:c3:99:cb:2f: f9:8f:63:2e:0f:f6:2a:1a:cb:fb:cf:f1:d0:51:5e: f3:3a:7e:1c:75:7a:b4:0e:e8:f1:b4:5d:a3:16:b4: 27:17:f7:15:60:96:d9:af:ca:ef:0d:65:50:a0:b4: 9b:98:1f:12:63:90:7e:0a:1b:ab:9a:8e:bf:11:79: 27:63:7e:ee:78:f8:ca:b1:5f:6c:ee:28:7f:0b:cf: 05:7e:3e:bb:15:d1:b1:8e:2c:e5:28:06:86:b0:70: bd:01:f4:38:61:1b:f5:29:3d:30:14:97:35:4c:18: 13:6b:69:fb:31:9e:fb:54:39:b8:83:3f:d5:e2:3f: a3:4a:b6:89:92:ac:45:61:43:8f:cc:3b:b6:f1:a2: c0:c2:9c:3c:e3:97:61:ab:75:99:6c:bb:b2:51:51: 43:f3:de:96:e0:00:67:36:1f:bb:43:40:f4:75:fc: f7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:47:52:14:6B:18:21:BE:57:8B:4D:80:3D:66:24:3B:82:D0:AA:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2b154c6a-ed22-34c2-912f-d4083b7c1dda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:14:8a:06:1a:ac:06:6d:cf:2c:e1:26:8b:33:af:67:94:1b: e9:78:08:37:03:47:58:8b:dd:86:1f:10:74:01:52:0a:ad:d7: 65:86:db:db:da:c3:49:4d:1d:b4:5f:0d:1a:92:89:fa:32:86: 73:9a:f3:67:5f:17:d4:16:a8:d5:90:34:02:dd:12:c2:f5:58: 4d:1f:ea:2a:3b:56:6e:fc:94:2b:b1:2b:34:b3:ee:1e:e8:b1: a9:70:49:fe:4f:3a:c5:29:88:26:7e:fc:f4:79:ca:fa:c7:e9: 83:ec:c6:c8:fa:05:42:39:a6:15:9f:72:71:ba:89:82:09:52: cd:e0:d3:ad:f0:43:37:54:3e:62:26:ba:66:15:fa:63:36:ad: 91:78:8f:1d:67:4f:6d:d1:bc:ad:82:37:99:28:9a:9e:52:74: 65:10:bb:41:5a:0d:56:70:bc:54:7d:9f:55:69:0d:56:af:10: 78:2d:99:4f:b7:d3:b5:78:71:41:59:64:86:22:61:6f:84:7a: 73:f8:6f:5c:27:e0:a6:f1:b0:82:99:a7:e8:50:fa:f5:30:b1: e8:27:6a:23:d8:4a:ab:4f:0f:53:06:05:ab:04:d0:15:4a:c7: 4b:e2:e9:fe:8f:7a:63:e2:b4:a5:1b:88:ab:08:39:0e:fd:65: 55:ac:a1:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEc7HBfB0J+7Tr7FS6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkxNTEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk M2U5YmI4YjgtZWZmMS00NTY0LWI3N2QtNDg0MTMyZWI0YjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQVXeiEdBfel3ei3OUgVPXSyA/c3iLls2/4F CE8Sb53q5sGFvD1AlL9+qv+pCC5Mx3GDzWW1blXYRLjCNBW1KLgScXai3j2cNgy/ bsKtpkscfsPUmsOZyy/5j2MuD/YqGsv7z/HQUV7zOn4cdXq0DujxtF2jFrQnF/cV YJbZr8rvDWVQoLSbmB8SY5B+Churmo6/EXknY37uePjKsV9s7ih/C88Ffj67FdGx jizlKAaGsHC9AfQ4YRv1KT0wFJc1TBgTa2n7MZ77VDm4gz/V4j+jSraJkqxFYUOP zDu28aLAwpw845dhq3WZbLuyUVFD896W4ABnNh+7Q0D0dfz34QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClHUhRrGCG+V4tNgD1mJDuC0KqMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmIxNTRjNmEtZWQyMi0z NGMyLTkxMmYtZDQwODNiN2MxZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop45MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAUigYarAZtzyzhJoszr2eUG+l4CDcDR1iL3YYfEHQBUgqt12WG29va w0lNHbRfDRqSifoyhnOa82dfF9QWqNWQNALdEsL1WE0f6io7Vm78lCuxKzSz7h7o salwSf5POsUpiCZ+/PR5yvrH6YPsxsj6BUI5phWfcnG6iYIJUs3g063wQzdUPmIm umYV+mM2rZF4jx1nT23RvK2CN5komp5SdGUQu0FaDVZwvFR9n1VpDVavEHgtmU+3 07V4cUFZZIYiYW+EenP4b1wn4KbxsIKZp+hQ+vUwsegnaiPYSqtPD1MGBasE0BVK x0vi6f6PemPitKUbiKsIOQ79ZVWsoVk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:02 2025 by rpki-client