$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/398a5675-15e2-37d8-877d-1a37cab83003.roa File: 398a5675-15e2-37d8-877d-1a37cab83003.roa (raw, json) Hash identifier: jjU/z5hmClrMeYvG3C/GHbbU/1hszAaIgh0wJBc12AA= Subject key identifier: 9D:A8:80:69:0E:69:06:8F:BE:EA:7E:87:3A:C3:7F:E2:DF:26:A7:4E Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490881887A2069D0996CC96A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/398a5675-15e2-37d8-877d-1a37cab83003.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 162.159.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:88:7a:20:69:d0:99:6c:c9:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=d4f69258-9546-4ee2-8108-61e739ebda55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:73:58:d1:d7:ce:74:0b:5e:ad:1d:25:ff:dd: c3:36:80:3c:8c:4a:39:d7:5e:24:9d:92:d9:cd:38: d4:1f:84:14:da:70:82:9b:00:53:0a:3d:06:56:1c: ed:75:8b:4a:7c:dc:1c:1d:25:9b:9b:d4:5b:91:8f: 7c:13:2f:23:4e:4c:cd:6b:12:13:8f:4e:c3:d7:ae: f1:9c:52:a1:e8:ab:65:6d:0d:81:f5:34:21:10:88: fa:b3:76:e2:a6:88:66:60:85:1e:7e:c0:cd:2f:a8: 78:6d:95:26:cc:4f:d0:c9:d7:be:04:3f:0f:e2:53: 63:cf:fb:4e:c7:58:f7:bc:d1:e3:05:39:ba:f7:4a: e3:a3:3d:30:47:2e:8d:e3:eb:73:85:4d:4e:ef:6c: ed:c4:1c:c7:51:f5:13:a8:e2:e9:1e:39:29:b1:f6: 54:b1:b1:3e:0b:e8:7a:c8:a7:cb:50:ff:2f:fc:6f: 99:e3:1f:78:64:35:bb:37:8d:6f:b1:53:52:df:82: d6:b1:aa:02:49:40:6a:36:ad:a0:11:ab:6d:0f:83: 61:c0:ea:89:57:ad:a2:8d:79:01:0e:19:d4:d9:87: 54:0b:e2:c2:85:7d:67:2a:81:65:72:da:8a:ef:43: c1:20:55:88:94:3a:ac:32:85:0f:17:2d:7f:03:cb: 4e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A8:80:69:0E:69:06:8F:BE:EA:7E:87:3A:C3:7F:E2:DF:26:A7:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/398a5675-15e2-37d8-877d-1a37cab83003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:fe:67:47:43:bd:68:6c:a2:f3:1a:bd:49:6f:40:96:2c:35: a5:16:04:14:dd:e2:1a:cc:a6:54:b2:c8:df:d2:f8:2c:6f:ef: f2:2b:7a:d3:e5:81:26:40:70:a0:9f:dc:ca:8d:36:3f:14:a1: e7:3d:24:db:c4:64:4f:fb:5d:b3:23:ed:73:b7:d9:2b:d7:4c: a5:f6:76:df:f5:b9:7b:36:e7:e8:e2:ac:a3:99:0b:74:34:b5: c6:2f:9e:23:11:06:67:a4:e6:81:45:30:25:fc:7f:51:c4:98: f7:24:a2:61:d8:05:6b:8f:dc:4a:55:56:8e:8e:ee:3a:7c:9d: 05:32:ac:ea:ae:a0:48:12:47:5f:03:89:df:eb:9e:fa:65:5e: 22:c1:a7:1b:f8:e9:c0:3f:b5:94:5c:dd:98:59:4c:3c:53:e7: 14:f3:ed:c9:b6:d3:99:0c:1c:ce:d6:5a:f4:e5:09:4a:bc:6d: 4b:4f:5e:3e:d6:58:bb:86:af:39:8f:c1:fa:c6:31:ab:e8:36: 09:b2:11:2e:81:cd:eb:1c:c1:c7:3a:ec:f5:96:1f:7c:84:60: 8d:a5:28:7d:70:54:88:f6:cf:60:38:26:5c:14:be:22:0c:70: 11:73:24:1b:e1:d0:d9:60:99:02:17:b7:75:13:f8:46:c4:3e: 9f:70:7f:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYh6IGnQmWzJagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZDRmNjkyNTgtOTU0Ni00ZWUyLTgxMDgtNjFlNzM5ZWJkYTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHNY0dfOdAterR0l/93DNoA8jEo5114knZLZ zTjUH4QU2nCCmwBTCj0GVhztdYtKfNwcHSWbm9RbkY98Ey8jTkzNaxITj07D167x nFKh6KtlbQ2B9TQhEIj6s3bipohmYIUefsDNL6h4bZUmzE/Qyde+BD8P4lNjz/tO x1j3vNHjBTm690rjoz0wRy6N4+tzhU1O72ztxBzHUfUTqOLpHjkpsfZUsbE+C+h6 yKfLUP8v/G+Z4x94ZDW7N41vsVNS34LWsaoCSUBqNq2gEattD4NhwOqJV62ijXkB DhnU2YdUC+LChX1nKoFlctqK70PBIFWIlDqsMoUPFy1/A8tONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2ogGkOaQaPvup+hzrDf+LfJqdOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMzk4YTU2NzUtMTVlMi0z N2Q4LTg3N2QtMWEzN2NhYjgzMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEop9AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADD+Z0dDvWhsovMavUlvQJYsNaUWBBTd4hrMplSyyN/S+Cxv7/IretPl gSZAcKCf3MqNNj8Uoec9JNvEZE/7XbMj7XO32SvXTKX2dt/1uXs25+jirKOZC3Q0 tcYvniMRBmek5oFFMCX8f1HEmPckomHYBWuP3EpVVo6O7jp8nQUyrOquoEgSR18D id/rnvplXiLBpxv46cA/tZRc3ZhZTDxT5xTz7cm205kMHM7WWvTlCUq8bUtPXj7W WLuGrzmPwfrGMavoNgmyES6Bzescwcc67PWWH3yEYI2lKH1wVIj2z2A4JlwUviIM cBFzJBvh0NlgmQIXt3UT+EbEPp9wf9c= -----END CERTIFICATE-----Generated at Thu Apr 10 19:30:44 2025 by rpki-client