$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bada390-cb2f-331a-956b-3827978dd770.roa File: 4bada390-cb2f-331a-956b-3827978dd770.roa (raw, json) Hash identifier: d1OeBobw8AJptnigNKNe4DkfsBR5h/Ucy0Lc3KrKGR4= Subject key identifier: A9:2E:1C:CC:D7:84:06:E8:76:98:63:63:6F:4D:79:3B:4F:7A:5E:5C Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858490881860DF18D943990C3D000 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bada390-cb2f-331a-956b-3827978dd770.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 162.158.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:86:0d:f1:8d:94:39:90:c3:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=75c05b88-59f7-4961-8d15-5827bb0de193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:9d:d0:2b:92:2b:1d:7b:eb:8a:85:bc:b3:f8: 87:e3:e5:77:2f:ac:8d:49:60:20:80:b9:ba:7c:c2: 8c:b6:21:a1:11:e6:61:c2:01:7d:1b:1f:1f:42:ba: 44:8a:5f:7b:bb:af:64:49:73:77:e6:07:c7:e6:76: 18:90:85:e0:b3:46:76:92:50:a0:7b:f3:6a:12:6b: df:3b:70:85:ba:65:29:c3:8e:b5:83:f3:8e:ed:8f: a1:11:03:58:0a:3b:1d:04:0a:8b:83:a4:f1:16:bf: 4d:15:50:f4:7b:42:ec:17:66:ee:46:28:f4:49:58: 8e:26:74:12:66:a6:37:6b:8f:fc:12:4c:b2:c9:5d: 02:d4:1c:f6:b6:fb:46:69:b5:cc:ae:fd:dd:d6:59: be:70:aa:a1:41:f0:4b:76:83:c7:00:4e:62:b5:6f: c0:b6:de:05:e6:2c:ed:9c:1a:10:b5:c2:70:2d:2d: e7:80:a0:6e:2e:dc:19:ca:a6:31:62:c9:48:84:b6: 1b:c3:a9:f9:94:bd:fc:4c:79:d6:33:2f:e5:40:aa: 28:22:dc:46:b3:f6:ee:1f:84:fb:b7:a5:25:9a:ee: 56:f6:78:17:a0:2e:cf:c5:ba:7e:8f:5b:f9:72:85: 14:0e:8c:52:85:72:48:ad:0b:b2:80:b2:88:52:67: b3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2E:1C:CC:D7:84:06:E8:76:98:63:63:6F:4D:79:3B:4F:7A:5E:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4bada390-cb2f-331a-956b-3827978dd770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f0:14:c6:46:32:1d:5e:6f:c9:96:a7:d0:bb:a3:8a:cd:87: de:33:d8:16:e5:66:5d:9d:88:d6:35:0c:c2:06:8c:a5:76:99: 30:32:f3:86:6e:8e:ac:9e:ad:8b:6a:28:2f:f6:c9:9e:08:61: 9d:74:1f:19:56:3f:8c:fd:d5:27:b1:60:95:9a:57:13:a5:30: 1c:9e:73:95:94:77:3a:06:74:21:0d:e0:43:0c:dc:b8:d7:d3: 88:88:b4:ef:eb:17:67:58:93:fd:0a:ef:5c:47:89:c6:8b:30: f1:df:b2:0f:4d:e4:f4:9c:81:78:a1:a6:2a:7c:d5:2d:66:4c: 3c:65:c7:55:c1:e9:3f:27:e4:8e:28:f2:21:51:6a:ad:ba:d1: b8:c0:43:c3:ee:82:e8:96:55:de:09:95:d0:fa:a8:9a:99:d7: 01:d5:fa:22:6e:7b:a0:5d:d2:ac:6b:fa:c4:2a:af:67:39:ae: 22:a6:34:66:60:1d:b3:e0:b6:4c:78:ae:8b:de:76:b3:3e:a0: 94:8b:ae:85:61:c8:38:1f:09:f6:9b:7b:30:2a:5a:a9:31:26: 96:79:10:1e:ee:b6:19:45:ff:24:1c:f5:6b:37:6e:9c:f4:98: 17:c2:38:46:8e:fd:0a:eb:de:1e:05:83:78:12:87:f6:7d:f8: 7c:c5:8f:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYYN8Y2UOZDD0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk NzVjMDViODgtNTlmNy00OTYxLThkMTUtNTgyN2JiMGRlMTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5p3QK5IrHXvrioW8s/iH4+V3L6yNSWAggLm6 fMKMtiGhEeZhwgF9Gx8fQrpEil97u69kSXN35gfH5nYYkIXgs0Z2klCge/NqEmvf O3CFumUpw461g/OO7Y+hEQNYCjsdBAqLg6TxFr9NFVD0e0LsF2buRij0SViOJnQS ZqY3a4/8EkyyyV0C1Bz2tvtGabXMrv3d1lm+cKqhQfBLdoPHAE5itW/Att4F5izt nBoQtcJwLS3ngKBuLtwZyqYxYslIhLYbw6n5lL38THnWMy/lQKooItxGs/buH4T7 t6Ulmu5W9ngXoC7Pxbp+j1v5coUUDoxShXJIrQuygLKIUmezPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKkuHMzXhAbodphjY29NeTtPel5cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGJhZGEzOTAtY2IyZi0z MzFhLTk1NmItMzgyNzk3OGRkNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop75MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTwFMZGMh1eb8mWp9C7o4rNh94z2BblZl2diNY1DMIGjKV2mTAy84Zu jqyerYtqKC/2yZ4IYZ10HxlWP4z91SexYJWaVxOlMByec5WUdzoGdCEN4EMM3LjX 04iItO/rF2dYk/0K71xHicaLMPHfsg9N5PScgXihpip81S1mTDxlx1XB6T8n5I4o 8iFRaq260bjAQ8PuguiWVd4JldD6qJqZ1wHV+iJue6Bd0qxr+sQqr2c5riKmNGZg HbPgtkx4rovedrM+oJSLroVhyDgfCfabezAqWqkxJpZ5EB7uthlF/yQc9Ws3bpz0 mBfCOEaO/Qrr3h4Fg3gSh/Z9+HzFj7Y= -----END CERTIFICATE-----Generated at Sat Apr 5 08:06:54 2025 by rpki-client