$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/878412f5-6e05-3921-ac5b-69bbe1e1142d.roa File: 878412f5-6e05-3921-ac5b-69bbe1e1142d.roa (raw, json) Hash identifier: +APXI5JZ8IE5JmuIM/vv0vuVzWBpgFBdeQ/qb5dV6rY= Subject key identifier: 2A:7B:4A:CA:D4:DE:AF:43:B4:CD:01:76:7E:8D:F8:97:3D:1C:A8:BB Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F4328584905B6CB1EA399651155C88C80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/878412f5-6e05-3921-ac5b-69bbe1e1142d.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 13335 IP address blocks: 162.158.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:cb:1e:a3:99:65:11:55:c8:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=de71fd2e-f4a1-4774-9db8-64811df6f47e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:32:76:31:73:06:dd:a4:5b:83:ae:8c:3f:39: 99:20:14:49:53:09:b6:ac:5a:6a:6a:3f:10:b9:56: a1:d2:07:0e:14:15:a5:94:43:23:c0:9b:bb:e9:79: 9e:a1:ca:ab:fc:50:4d:e4:20:de:42:12:41:c7:0e: 8c:dd:9f:13:b2:0e:bc:90:3e:66:86:c3:68:a5:7c: 0b:4c:28:38:e9:43:32:10:58:6c:12:35:11:85:7a: cf:ea:bd:ce:f9:a0:2b:c5:d2:a8:09:cb:27:69:d6: cc:58:3f:98:94:3a:5e:6b:98:be:9a:df:c1:46:fb: 11:e7:46:9f:e5:91:bd:34:aa:13:cc:83:f6:1d:d6: 09:11:42:eb:91:a3:74:0c:bc:fb:aa:e0:ee:0c:a3: 42:6f:ad:83:7a:56:e8:bc:8d:5f:5f:45:6c:77:07: 0b:f8:50:5c:39:b7:76:ed:8e:ec:b0:20:e0:5d:33: 79:da:3c:48:79:7c:0c:f9:00:ee:d1:cd:04:9f:82: 16:bc:d8:16:dd:b2:5d:55:7b:a7:59:07:a2:fa:78: ce:e8:f4:2e:84:05:fb:a5:69:59:4d:00:6b:8f:eb: 2d:e6:12:d0:7a:9c:fe:83:16:83:73:4f:7d:c3:4d: 1d:a7:07:b4:d9:5d:5c:12:98:bc:a3:45:82:88:bb: d9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:7B:4A:CA:D4:DE:AF:43:B4:CD:01:76:7E:8D:F8:97:3D:1C:A8:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/878412f5-6e05-3921-ac5b-69bbe1e1142d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d8:ce:b9:49:87:38:16:b5:22:27:e4:ad:b7:9a:b4:35:c4: 87:b8:f4:9e:df:86:ba:4e:f6:71:ef:31:9c:6a:51:d5:b4:63: 62:7e:a0:54:20:b0:5a:af:7c:63:cb:6c:5f:97:b3:ce:3b:69: 59:77:70:56:53:6d:ed:26:d1:f9:cb:2f:98:1d:93:0d:03:c0: 69:36:80:c8:51:83:ca:32:68:68:46:29:13:17:91:93:4f:5a: 16:1f:8c:2f:96:52:3d:87:27:aa:2f:17:95:31:f2:ea:76:9f: 0e:0c:40:8c:09:ab:f9:19:3f:8e:d6:0f:1f:95:5a:64:c3:00: 4a:57:b6:6b:92:3b:75:0d:5a:b4:1a:77:7d:7d:bc:3e:c1:bb: 43:be:41:12:56:09:f1:bf:85:f1:9a:48:e7:bd:6c:a9:03:38: 74:b1:76:b5:bb:dc:95:0c:1c:a5:ee:44:66:26:b2:1f:b7:3a: be:7e:83:3d:8c:10:0f:75:0b:8e:85:05:ff:4a:96:17:f4:2e: ca:6e:24:22:1f:84:24:c3:fe:98:cf:a2:95:2e:09:f0:42:9c: bf:9d:12:21:17:59:43:5a:bd:2c:0b:73:73:40:c8:2e:10:63: 72:64:8f:5b:99:a8:01:c5:21:bd:e9:67:f2:df:6f:d4:0b:56: 50:37:57:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtsseo5llEVXIjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk ZGU3MWZkMmUtZjRhMS00Nzc0LTlkYjgtNjQ4MTFkZjZmNDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTJ2MXMG3aRbg66MPzmZIBRJUwm2rFpqaj8Q uVah0gcOFBWllEMjwJu76Xmeocqr/FBN5CDeQhJBxw6M3Z8Tsg68kD5mhsNopXwL TCg46UMyEFhsEjURhXrP6r3O+aArxdKoCcsnadbMWD+YlDpea5i+mt/BRvsR50af 5ZG9NKoTzIP2HdYJEULrkaN0DLz7quDuDKNCb62DelbovI1fX0VsdwcL+FBcObd2 7Y7ssCDgXTN52jxIeXwM+QDu0c0En4IWvNgW3bJdVXunWQei+njO6PQuhAX7pWlZ TQBrj+st5hLQepz+gxaDc099w00dpwe02V1cEpi8o0WCiLvZfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCp7SsrU3q9DtM0Bdn6N+Jc9HKi7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvODc4NDEyZjUtNmUwNS0z OTIxLWFjNWItNjliYmUxZTExNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop6KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjYzrlJhzgWtSIn5K23mrQ1xIe49J7fhrpO9nHvMZxqUdW0Y2J+oFQg sFqvfGPLbF+Xs847aVl3cFZTbe0m0fnLL5gdkw0DwGk2gMhRg8oyaGhGKRMXkZNP WhYfjC+WUj2HJ6ovF5Ux8up2nw4MQIwJq/kZP47WDx+VWmTDAEpXtmuSO3UNWrQa d319vD7Bu0O+QRJWCfG/hfGaSOe9bKkDOHSxdrW73JUMHKXuRGYmsh+3Or5+gz2M EA91C46FBf9Klhf0LspuJCIfhCTD/pjPopUuCfBCnL+dEiEXWUNavSwLc3NAyC4Q Y3Jkj1uZqAHFIb3pZ/Lfb9QLVlA3V5o= -----END CERTIFICATE-----Generated at Sat Apr 5 04:36:29 2025 by rpki-client