$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f2d47f3-0eba-3002-b5a1-1d951661c329.roa File: 2f2d47f3-0eba-3002-b5a1-1d951661c329.roa (raw, json) Hash identifier: EDOu56r/5rP9KWY387uTOGmnVWowiQ2q1ZM/nIRU/Yo= Subject key identifier: A2:EB:0F:BC:F8:40:5F:9E:52:96:9E:0D:A4:71:CD:4E:8A:6A:B2:01 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071C08F6D5F62F4479798200 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f2d47f3-0eba-3002-b5a1-1d951661c329.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 162.158.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1c:08:f6:d5:f6:2f:44:79:79:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=0fe76210-0794-4c7f-a7d3-fb22ff92b3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8d:11:07:b8:ba:ea:fd:db:82:59:60:bd:04: 6e:4f:cb:14:85:27:a0:0c:41:2b:68:61:65:7e:2c: 08:55:d7:bd:c5:6d:f6:a8:6d:1f:55:a5:25:26:30: 42:e3:7a:70:bd:04:ed:de:4b:09:02:1e:12:9f:b3: 57:ae:21:9f:4d:d2:f7:8f:6d:7b:46:f9:75:4b:38: 33:d8:5e:ec:6f:b0:91:81:a1:a0:8d:53:fa:99:ef: 9f:7f:95:1a:7e:37:f2:fa:0a:25:f6:1b:7c:e4:23: 83:bf:45:1b:7f:e7:d2:65:1b:33:4e:1b:50:ff:3e: 6a:81:72:a2:5b:e7:05:a8:94:4f:54:33:de:9f:41: a0:36:7b:9e:68:91:6c:99:d6:56:20:09:49:e7:6e: a9:49:31:9b:48:5b:44:ee:5b:e8:30:c4:57:f6:e4: c1:d1:28:91:05:03:c0:a8:8e:da:aa:1f:08:89:ba: e3:50:7a:32:24:e1:4f:ca:65:69:72:be:3e:fc:99: d5:cf:0e:d6:70:8b:82:b5:36:4b:64:94:64:d6:77: 45:a6:f3:17:66:f6:c8:a5:92:ba:5e:7a:87:5f:16: 5f:69:82:d1:1c:18:70:3f:4f:e0:d3:43:c8:06:a4: 74:32:bd:24:b4:4b:92:0e:3e:e2:76:50:61:a7:2c: c1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EB:0F:BC:F8:40:5F:9E:52:96:9E:0D:A4:71:CD:4E:8A:6A:B2:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/2f2d47f3-0eba-3002-b5a1-1d951661c329.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:f2:e8:f0:ed:9a:49:14:e0:6b:f2:17:71:19:06:c6:10:86: 48:bd:7a:0c:08:7e:4f:3f:d3:a1:62:9f:7a:21:3d:51:02:10: 42:47:ca:33:cd:92:7c:bb:4e:96:38:54:42:dd:78:4e:17:29: 47:c1:31:58:34:b4:72:18:64:b0:53:d8:54:51:74:15:c8:60: 6e:79:66:6c:39:f1:2a:3f:ea:c3:63:b1:d3:7d:80:bd:e0:9d: ff:40:0e:27:79:c6:f1:54:c9:12:60:1d:d1:9a:76:8b:79:a2: 4d:25:3b:25:dd:7a:09:d8:6e:ec:96:4c:d4:30:af:fb:b2:81: 79:92:26:b1:6a:2d:47:e3:93:25:2c:32:88:ab:ca:9b:44:61: 04:3b:15:dc:89:de:c8:3e:73:92:0f:16:ca:ff:66:48:fc:0d: 98:9b:b8:20:26:f7:c2:53:14:df:99:6d:fd:b9:01:e1:90:24: 6b:e7:73:90:e6:a8:29:5f:bf:35:e6:ce:7d:1a:ea:d2:c0:58: 4a:ec:a6:87:ff:40:7b:84:ad:7e:cd:13:3b:61:89:db:04:85: 39:c9:16:a3:a6:3c:57:d4:39:25:0f:9c:cb:74:fe:49:e6:66: 79:13:04:3e:d5:a3:2f:c0:2e:ee:d1:86:db:65:31:01:43:b9: 99:8f:b6:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAj21fYvRHl5ggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk MGZlNzYyMTAtMDc5NC00YzdmLWE3ZDMtZmIyMmZmOTJiM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgI0RB7i66v3bgllgvQRuT8sUhSegDEEraGFl fiwIVde9xW32qG0fVaUlJjBC43pwvQTt3ksJAh4Sn7NXriGfTdL3j217Rvl1Szgz 2F7sb7CRgaGgjVP6me+ff5Uafjfy+gol9ht85CODv0Ubf+fSZRszThtQ/z5qgXKi W+cFqJRPVDPen0GgNnueaJFsmdZWIAlJ526pSTGbSFtE7lvoMMRX9uTB0SiRBQPA qI7aqh8IibrjUHoyJOFPymVpcr4+/JnVzw7WcIuCtTZLZJRk1ndFpvMXZvbIpZK6 XnqHXxZfaYLRHBhwP0/g00PIBqR0Mr0ktEuSDj7idlBhpyzB5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLrD7z4QF+eUpaeDaRxzU6KarIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMmYyZDQ3ZjMtMGViYS0z MDAyLWI1YTEtMWQ5NTE2NjFjMzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop4mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALfy6PDtmkkU4GvyF3EZBsYQhki9egwIfk8/06Fin3ohPVECEEJHyjPN kny7TpY4VELdeE4XKUfBMVg0tHIYZLBT2FRRdBXIYG55Zmw58So/6sNjsdN9gL3g nf9ADid5xvFUyRJgHdGadot5ok0lOyXdegnYbuyWTNQwr/uygXmSJrFqLUfjkyUs MoiryptEYQQ7FdyJ3sg+c5IPFsr/Zkj8DZibuCAm98JTFN+Zbf25AeGQJGvnc5Dm qClfvzXmzn0a6tLAWErspof/QHuErX7NEzthidsEhTnJFqOmPFfUOSUPnMt0/knm ZnkTBD7Voy/ALu7RhttlMQFDuZmPtvc= -----END CERTIFICATE-----Generated at Sat Apr 5 09:59:50 2025 by rpki-client