$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72145abc-4c03-3ed7-9d90-a0f07982e6d8.roa File: 72145abc-4c03-3ed7-9d90-a0f07982e6d8.roa (raw, json) Hash identifier: PCKkBBrJj8QklXbqjBECvnNkqYxEkTZzw9E381VQmL4= Subject key identifier: E1:80:77:0A:42:4A:D3:1A:E0:22:55:C4:A8:B0:23:B5:97:14:6E:D2 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071C02A7E3D438ECA4884F80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72145abc-4c03-3ed7-9d90-a0f07982e6d8.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 108.162.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1c:02:a7:e3:d4:38:ec:a4:88:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=c800aa57-2a5d-44e2-b0ea-73916e9cda30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:14:28:7e:21:94:c1:ad:00:6f:fb:b2:b6:ca: 9a:46:de:4e:4e:bb:8b:4b:47:5d:28:b6:f8:6c:74: 7e:50:28:e8:2d:a7:00:83:b3:bf:53:45:96:06:82: 48:eb:a2:2b:80:d4:d2:23:4f:95:12:f2:8a:c3:1a: 51:da:f2:87:05:9e:1e:48:7b:9a:6e:53:5b:5f:de: a2:f6:af:31:c4:81:22:b5:38:d6:b1:05:d0:47:f2: f0:26:2f:28:a6:a0:f4:54:91:27:b4:48:62:f1:3c: d3:c9:7d:c5:d7:af:78:cc:58:2d:6b:81:15:e1:f9: 3c:d3:2f:f7:1a:74:46:10:3f:05:b6:01:14:9c:95: da:84:d9:92:c4:c3:86:42:d5:32:50:e0:47:09:e5: 15:cf:08:cb:da:12:11:25:df:59:c6:1d:88:8c:01: d0:5e:27:b9:cc:41:4d:27:e2:20:36:c7:2d:f3:75: fa:a1:b7:90:ef:7c:71:a0:5c:98:95:ab:51:e2:3f: e4:d0:08:1d:f9:81:6b:11:ca:66:a2:3b:d2:0c:a2: 5e:91:9c:13:5e:0d:6d:92:47:0d:85:9a:6f:9a:b2: 6d:f5:37:49:04:04:fb:c5:bb:32:e3:e3:c9:ac:8a: d1:55:38:9d:66:79:17:36:ee:fa:2f:09:77:72:d3: 5e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:80:77:0A:42:4A:D3:1A:E0:22:55:C4:A8:B0:23:B5:97:14:6E:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/72145abc-4c03-3ed7-9d90-a0f07982e6d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:6c:a4:29:6c:f5:d9:a3:07:b1:b4:24:85:a4:e3:03:66:20: a1:e9:67:05:40:1f:33:ee:9f:65:40:8c:3f:30:7e:f3:7d:db: c0:9b:55:dc:8b:c2:66:a9:c9:0a:5a:85:8f:b3:4a:df:a6:ba: 67:52:a5:4c:b7:3b:63:f7:54:73:76:4a:9b:1a:79:21:f8:a2: 65:a9:df:8e:1f:51:c7:e5:84:57:3f:6b:5f:97:67:98:dd:e0: 1b:00:44:82:b0:94:a5:ad:f2:93:98:1b:79:a0:0d:72:f5:19: 1b:e5:cf:2d:23:ba:71:57:a0:e9:36:18:e7:69:98:99:c8:e2: 04:a4:bb:b4:cb:21:42:64:83:2c:a9:34:e8:38:e9:71:01:eb: 05:73:e2:9a:c7:11:5d:b7:4c:07:98:fc:0a:73:87:9c:7e:bf: 77:1d:73:99:8a:8d:94:13:3f:1f:84:18:e0:af:19:04:67:4b: e7:2c:fd:0c:b9:a2:9d:59:01:8c:9e:86:31:90:42:2d:a4:ca: b1:fd:5a:b2:f8:4d:19:c4:45:7b:b0:8b:39:68:b4:9d:1c:f6: f6:ae:3b:ba:18:e2:2d:f3:9a:a2:92:ae:60:18:31:66:f1:6d: 9e:bd:a6:ef:22:90:7f:4d:54:d8:fd:c8:a0:b9:0e:0d:91:e3: 6a:f3:44:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAKn49Q47KSIT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk YzgwMGFhNTctMmE1ZC00NGUyLWIwZWEtNzM5MTZlOWNkYTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihQofiGUwa0Ab/uytsqaRt5OTruLS0ddKLb4 bHR+UCjoLacAg7O/U0WWBoJI66IrgNTSI0+VEvKKwxpR2vKHBZ4eSHuablNbX96i 9q8xxIEitTjWsQXQR/LwJi8opqD0VJEntEhi8TzTyX3F1694zFgta4EV4fk80y/3 GnRGED8FtgEUnJXahNmSxMOGQtUyUOBHCeUVzwjL2hIRJd9Zxh2IjAHQXie5zEFN J+IgNsct83X6obeQ73xxoFyYlatR4j/k0Agd+YFrEcpmojvSDKJekZwTXg1tkkcN hZpvmrJt9TdJBAT7xbsy4+PJrIrRVTidZnkXNu76Lwl3ctNe9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGAdwpCStMa4CJVxKiwI7WXFG7SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNzIxNDVhYmMtNGMwMy0z ZWQ3LTlkOTAtYTBmMDc5ODJlNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlspCls9dmjB7G0JIWk4wNmIKHpZwVAHzPun2VAjD8wfvN928CbVdyL wmapyQpahY+zSt+mumdSpUy3O2P3VHN2SpsaeSH4omWp344fUcflhFc/a1+XZ5jd 4BsARIKwlKWt8pOYG3mgDXL1GRvlzy0junFXoOk2GOdpmJnI4gSku7TLIUJkgyyp NOg46XEB6wVz4prHEV23TAeY/Apzh5x+v3cdc5mKjZQTPx+EGOCvGQRnS+cs/Qy5 op1ZAYyehjGQQi2kyrH9WrL4TRnERXuwizlotJ0c9vauO7oY4i3zmqKSrmAYMWbx bZ69pu8ikH9NVNj9yKC5Dg2R42rzRCk= -----END CERTIFICATE-----Generated at Sat Apr 5 09:52:20 2025 by rpki-client