$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e0b07ae-6c47-3c19-9c07-f3c8e331803a.roa File: 4e0b07ae-6c47-3c19-9c07-f3c8e331803a.roa (raw, json) Hash identifier: Tp5SKlP+vHGcgRNQ2yA879NvTkSpq3xDGBCKbPzWjE8= Subject key identifier: F8:85:89:26:D0:B0:7B:55:10:51:47:E6:49:C9:3C:CA:C8:9F:A9:E1 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA98612CC81173B3D86800 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e0b07ae-6c47-3c19-9c07-f3c8e331803a.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 162.158.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 09 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:98:61:2c:c8:11:73:b3:d8:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=6cf1ae6a-2515-432d-9852-c9a9d44e4e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6b:04:57:b0:25:7d:43:e8:92:10:f8:5a:c0: 13:2b:95:ad:d5:15:0f:b6:f6:27:f3:ec:43:4c:0f: ee:43:92:a2:1a:7b:e0:7c:ee:34:4f:45:40:0d:71: 10:b7:b5:4b:2f:92:0f:f7:69:dc:62:00:bf:c8:b3: 1a:1a:64:f3:75:72:14:f2:22:22:30:73:ae:5e:d2: 48:de:d3:4f:a3:d5:f7:67:69:07:28:fe:e4:8e:32: 59:4e:21:a1:a9:7d:b9:e5:d0:c3:55:0e:ec:ea:1d: ae:68:47:fb:31:86:7b:45:b5:6b:d3:7b:9b:8e:b1: 62:21:5f:60:b3:12:e3:7b:41:80:cc:7d:db:b9:aa: f8:a2:d1:b5:c5:62:f5:58:09:26:cb:ea:f1:55:f9: c9:5b:62:88:d5:9d:87:29:bf:71:fa:90:29:e6:7d: e7:0e:55:c5:07:5c:1a:68:34:ce:75:01:b6:4a:70: e6:54:9e:01:26:05:89:51:d8:26:70:7f:d3:3a:95: 38:32:b4:21:71:3a:04:61:09:eb:90:27:ab:a7:fd: 7a:42:f0:85:a3:67:55:b3:ba:ba:bc:fc:ab:c7:da: ef:67:0c:21:65:5f:25:8c:74:d9:e2:00:e6:f6:a4: f4:95:6d:a1:b9:a5:dd:c5:f8:22:ee:ed:af:5a:8a: 0c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:85:89:26:D0:B0:7B:55:10:51:47:E6:49:C9:3C:CA:C8:9F:A9:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/4e0b07ae-6c47-3c19-9c07-f3c8e331803a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:9d:9e:68:79:b7:31:7c:84:05:60:3a:95:8f:4f:a4:60:12: 2a:5f:cb:c7:5e:77:d1:bb:f0:5c:61:fb:b0:7f:78:65:4d:a3: de:34:26:91:3d:08:78:3e:7f:f1:03:02:47:3e:70:2e:06:84: 9c:77:fa:a8:0d:69:5d:c3:bd:c3:f7:1c:25:db:68:de:d4:c3: 67:b4:72:6e:63:98:9c:e2:04:ae:61:da:65:7e:81:a9:3e:7f: 11:66:73:27:d1:dc:1d:4c:8b:8d:0f:9d:25:40:e7:d9:d3:d3: cf:ae:e1:ca:eb:8a:fe:0c:0a:ea:98:06:c4:b1:dc:04:f9:97: 3e:96:c0:f6:c5:7b:d2:e5:ec:ea:26:ec:93:78:28:a6:8b:f8: 59:13:77:03:27:1e:cc:90:66:6d:ff:1d:f1:55:61:54:0c:a3: c1:1a:59:d9:8a:a4:da:04:c5:e0:81:f4:3b:43:0e:2a:21:46: cb:f0:d1:1d:d3:61:c3:b2:be:69:d3:3f:b9:77:8b:72:ec:56: f7:0c:24:25:93:b2:83:b8:6b:a5:65:bb:5a:de:b5:0b:e2:52: 72:fb:88:e3:37:26:e8:f0:c3:3e:9e:87:0a:8c:28:b9:64:3e: 0c:3b:e8:76:2c:f5:2c:f0:0b:1d:5d:9c:77:46:71:2d:2a:b7: d8:6b:22:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnuphhLMgRc7PYaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk NmNmMWFlNmEtMjUxNS00MzJkLTk4NTItYzlhOWQ0NGU0ZTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWsEV7AlfUPokhD4WsATK5Wt1RUPtvYn8+xD TA/uQ5KiGnvgfO40T0VADXEQt7VLL5IP92ncYgC/yLMaGmTzdXIU8iIiMHOuXtJI 3tNPo9X3Z2kHKP7kjjJZTiGhqX255dDDVQ7s6h2uaEf7MYZ7RbVr03ubjrFiIV9g sxLje0GAzH3buar4otG1xWL1WAkmy+rxVfnJW2KI1Z2HKb9x+pAp5n3nDlXFB1wa aDTOdQG2SnDmVJ4BJgWJUdgmcH/TOpU4MrQhcToEYQnrkCerp/16QvCFo2dVs7q6 vPyrx9rvZwwhZV8ljHTZ4gDm9qT0lW2huaXdxfgi7u2vWooMpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPiFiSbQsHtVEFFH5knJPMrIn6nhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNGUwYjA3YWUtNmM0Ny0z YzE5LTljMDctZjNjOGUzMzE4MDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop54MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHidnmh5tzF8hAVgOpWPT6RgEipfy8ded9G78Fxh+7B/eGVNo940JpE9 CHg+f/EDAkc+cC4GhJx3+qgNaV3DvcP3HCXbaN7Uw2e0cm5jmJziBK5h2mV+gak+ fxFmcyfR3B1Mi40PnSVA59nT08+u4crriv4MCuqYBsSx3AT5lz6WwPbFe9Ll7Oom 7JN4KKaL+FkTdwMnHsyQZm3/HfFVYVQMo8EaWdmKpNoExeCB9DtDDiohRsvw0R3T YcOyvmnTP7l3i3LsVvcMJCWTsoO4a6Vlu1retQviUnL7iOM3Jujwwz6ehwqMKLlk Pgw76HYs9SzwCx1dnHdGcS0qt9hrIg8= -----END CERTIFICATE-----Generated at Fri Jun 6 16:47:54 2025 by rpki-client