$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa File: 3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa (raw, json) Hash identifier: 6RznUwUYgbxK1Ev8CtLjXUIADPiNLf8qIZKkAPGD1OE= Subject key identifier: BE:D3:53:A5:9C:7C:9F:9A:0F:74:6F:57:E3:2D:E8:A4:5D:8A:00:F1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490881836489F04FC112436000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 162.158.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:83:64:89:f0:4f:c1:12:43:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=384b153a-63f5-47f9-9a6d-f653c65adb75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7d:25:d9:9c:0b:fb:5e:65:80:4d:70:86:0f: d8:19:ea:4c:0e:f7:21:da:77:a0:cc:17:2d:00:f0: 48:68:92:36:35:c7:73:47:6f:84:68:d6:c0:1a:49: 43:63:5a:83:32:0a:69:30:3d:d6:7e:93:f0:7d:ed: f1:c7:59:45:04:71:1a:d5:f3:48:4c:84:fe:c4:37: 72:26:0a:32:5d:88:b8:ee:96:cd:6d:07:35:fe:d5: b4:55:4d:4c:9d:cd:41:71:de:85:35:dc:19:b7:2f: f4:7c:53:ae:8a:ba:e3:4c:2c:b6:41:a4:aa:ab:3b: b6:f3:9e:f0:2a:2f:07:84:22:fc:cf:e8:c5:44:2b: 61:ef:f9:65:33:63:65:6b:85:80:3e:67:6b:31:ce: ed:05:60:f9:4f:e1:d4:15:ca:2b:b8:02:a7:22:c0: 70:90:1b:06:79:67:68:bb:e6:87:f9:e9:b5:ad:df: 68:00:bb:ac:5e:5c:57:89:33:20:64:04:89:90:b4: 06:82:3c:c7:17:a5:c2:53:f0:1e:a7:48:75:07:51: 73:26:32:e6:ee:a2:de:6c:53:de:77:b8:8f:58:d8: f0:2a:4e:70:d2:cd:f2:32:1e:56:78:fc:f7:ef:4b: dc:d4:fc:e5:af:d0:41:99:f3:b1:18:8a:8d:18:5a: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D3:53:A5:9C:7C:9F:9A:0F:74:6F:57:E3:2D:E8:A4:5D:8A:00:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3af3e7b5-1acc-38ec-b667-14532b7b5e10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:9c:ab:90:58:2b:98:4c:0a:29:d7:44:f5:c3:6d:ca:bb:b2: 9b:65:d9:99:ae:88:b2:16:9b:ef:3d:0a:d0:6e:a0:fe:92:ea: 22:4c:ab:62:f2:60:07:26:67:6c:ee:22:aa:62:53:0b:d7:f9: f9:6d:15:5d:62:f9:b9:5f:6d:fb:22:3f:cb:e0:d0:35:37:d6: 5f:0a:1b:52:48:12:0c:f2:76:76:04:16:cc:6b:1e:33:a1:cb: 3f:b9:82:b4:90:9d:40:4b:d6:5b:9b:c4:15:b7:6b:da:e5:8e: dc:cb:d9:86:e5:68:2d:8a:d9:55:32:fd:6d:85:87:04:a1:3d: 55:f9:ae:7d:5a:9f:d0:e6:88:b4:dc:67:cc:6c:85:fb:7c:14: 90:a8:fd:24:3b:f9:8b:54:83:c4:94:3e:da:84:c6:d3:d4:07: 99:1c:fb:3e:23:57:ec:cc:8c:85:61:a2:9e:33:90:7a:27:8c: cb:a6:e9:0c:d3:7e:04:66:1a:f0:10:51:dc:25:14:d5:e3:79: e6:b2:2b:6b:19:50:ee:e1:e7:95:4e:d0:8f:6a:76:66:13:38: 2f:47:3b:5f:62:99:28:b7:49:6d:c3:71:5f:23:18:9e:f2:c4: d6:19:e9:7b:0e:2a:5d:8e:27:68:ff:c9:28:6d:63:c6:e0:69: 66:11:06:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYNkifBPwRJDYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk Mzg0YjE1M2EtNjNmNS00N2Y5LTlhNmQtZjY1M2M2NWFkYjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX0l2ZwL+15lgE1whg/YGepMDvch2negzBct APBIaJI2NcdzR2+EaNbAGklDY1qDMgppMD3WfpPwfe3xx1lFBHEa1fNITIT+xDdy JgoyXYi47pbNbQc1/tW0VU1Mnc1Bcd6FNdwZty/0fFOuirrjTCy2QaSqqzu2857w Ki8HhCL8z+jFRCth7/llM2Nla4WAPmdrMc7tBWD5T+HUFcoruAKnIsBwkBsGeWdo u+aH+em1rd9oALusXlxXiTMgZASJkLQGgjzHF6XCU/Aep0h1B1FzJjLm7qLebFPe d7iPWNjwKk5w0s3yMh5WePz370vc1Pzlr9BBmfOxGIqNGFrA/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7TU6WcfJ+aD3RvV+Mt6KRdigDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2FmM2U3YjUtMWFjYy0z OGVjLWI2NjctMTQ1MzJiN2I1ZTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABecq5BYK5hMCinXRPXDbcq7sptl2ZmuiLIWm+89CtBuoP6S6iJMq2Ly YAcmZ2zuIqpiUwvX+fltFV1i+blfbfsiP8vg0DU31l8KG1JIEgzydnYEFsxrHjOh yz+5grSQnUBL1lubxBW3a9rljtzL2YblaC2K2VUy/W2FhwShPVX5rn1an9DmiLTc Z8xshft8FJCo/SQ7+YtUg8SUPtqExtPUB5kc+z4jV+zMjIVhop4zkHonjMum6QzT fgRmGvAQUdwlFNXjeeayK2sZUO7h55VO0I9qdmYTOC9HO19imSi3SW3DcV8jGJ7y xNYZ6XsOKl2OJ2j/yShtY8bgaWYRBjU= -----END CERTIFICATE-----Generated at Sat Apr 5 04:55:58 2025 by rpki-client