$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f10e38-41db-39e7-9dd2-6470003e2f8d.roa File: a7f10e38-41db-39e7-9dd2-6470003e2f8d.roa (raw, json) Hash identifier: HcndjvQIuixQp/x3BDdC8WGzs9lbkHFT7NP98rt5ZZc= Subject key identifier: 36:8B:71:AD:9B:47:84:3F:1E:90:C5:9F:F1:AA:1F:3F:9D:8F:5A:44 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071C0AC996A7EDE09D92CF00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f10e38-41db-39e7-9dd2-6470003e2f8d.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 162.158.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1c:0a:c9:96:a7:ed:e0:9d:92:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=35591f9a-4e5c-40c8-a48f-1c9c0c27edcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:58:5a:df:ff:fe:c8:49:7d:d4:f3:eb:96:d3: 78:c3:8b:08:e3:d3:8c:fd:73:fa:5f:74:f8:b5:5e: 39:0f:ba:52:56:6d:65:fb:9a:85:70:d4:0f:b4:d4: 16:53:55:44:bc:c2:0b:c2:6a:c7:3c:69:8e:08:ea: 1b:d5:51:ce:fa:ca:4c:21:10:53:99:81:93:d3:61: 7c:86:88:f5:4c:d0:af:a6:80:6a:c2:2c:e2:eb:8d: 84:2a:3f:a8:75:e6:93:bc:d3:47:c0:18:3f:af:c9: c4:db:5e:5e:2b:eb:7b:13:5b:a9:24:e9:ac:9c:82: b9:94:3b:99:30:4e:ba:37:92:e7:08:ca:d6:4c:0d: eb:a1:08:a1:01:51:62:80:b3:8f:e8:d8:74:a5:5b: 79:d9:07:1a:d7:c6:1e:66:06:0f:39:60:b4:2b:c0: c1:92:0f:66:66:af:3e:47:c2:44:34:da:e9:93:b6: ce:46:c2:9d:1f:f6:8d:95:5a:2c:53:ca:af:44:c3: 7b:25:21:9f:04:2f:c7:7d:10:fa:27:ad:3b:68:2d: d3:8a:2a:76:2a:3b:b2:30:3b:88:bd:19:1e:dc:3b: fa:6a:25:25:77:73:10:f6:de:d9:bf:e7:33:89:49: f2:a4:8c:09:01:dc:1c:99:0d:bb:f0:ec:9c:96:0f: 1f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:8B:71:AD:9B:47:84:3F:1E:90:C5:9F:F1:AA:1F:3F:9D:8F:5A:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/a7f10e38-41db-39e7-9dd2-6470003e2f8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:78:43:67:c9:93:77:39:4b:40:ef:36:dc:b2:90:fe:4b:0d: b1:5e:a6:1c:df:fd:10:9a:23:1b:be:42:07:d7:c8:bd:a4:d6: 4c:02:77:d2:8c:66:58:e0:36:71:b9:4a:9a:31:79:82:e7:e5: 7f:87:15:5a:44:ea:fc:3d:78:ac:be:ae:f0:82:e3:a8:e0:87: a0:97:b9:57:11:42:e5:44:bb:be:c1:1c:39:b7:8c:68:70:5c: b0:8c:0f:f7:91:db:1e:66:93:be:1e:db:3c:1d:3e:26:47:fa: dc:c5:39:9c:3d:91:c6:8a:8d:20:25:c0:69:0b:9a:61:9a:c9: 58:96:22:72:da:4d:46:52:24:98:af:80:2e:c2:b3:3c:09:7f: 04:4e:b6:4d:90:39:61:b4:9b:8d:f9:7d:77:14:7b:a8:0f:d6: ca:aa:f1:e1:ff:fc:4f:ca:a4:b2:0c:12:4e:09:ce:a8:0a:a4: 70:6b:77:02:0c:b3:40:ad:00:d7:72:fe:5d:b6:43:85:ac:5f: 29:6f:44:69:c7:c1:6d:dc:d8:cf:09:2b:69:a4:27:a6:9f:04: 2d:c1:2d:c5:50:31:d8:1b:24:f0:de:06:11:4f:43:34:ef:b4: 28:ce:10:e0:c9:3d:5c:f2:82:3a:aa:d7:0c:ce:ec:d6:16:93: 01:92:dd:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHArJlqft4J2SzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk MzU1OTFmOWEtNGU1Yy00MGM4LWE0OGYtMWM5YzBjMjdlZGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFha3//+yEl91PPrltN4w4sI49OM/XP6X3T4 tV45D7pSVm1l+5qFcNQPtNQWU1VEvMILwmrHPGmOCOob1VHO+spMIRBTmYGT02F8 hoj1TNCvpoBqwizi642EKj+odeaTvNNHwBg/r8nE215eK+t7E1upJOmsnIK5lDuZ ME66N5LnCMrWTA3roQihAVFigLOP6Nh0pVt52Qca18YeZgYPOWC0K8DBkg9mZq8+ R8JENNrpk7bORsKdH/aNlVosU8qvRMN7JSGfBC/HfRD6J607aC3Tiip2KjuyMDuI vRke3Dv6aiUld3MQ9t7Zv+cziUnypIwJAdwcmQ278Oyclg8fkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDaLca2bR4Q/HpDFn/GqHz+dj1pEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYTdmMTBlMzgtNDFkYi0z OWU3LTlkZDItNjQ3MDAwM2UyZjhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop5MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK94Q2fJk3c5S0DvNtyykP5LDbFephzf/RCaIxu+QgfXyL2k1kwCd9KM ZljgNnG5SpoxeYLn5X+HFVpE6vw9eKy+rvCC46jgh6CXuVcRQuVEu77BHDm3jGhw XLCMD/eR2x5mk74e2zwdPiZH+tzFOZw9kcaKjSAlwGkLmmGayViWInLaTUZSJJiv gC7CszwJfwROtk2QOWG0m435fXcUe6gP1sqq8eH//E/KpLIMEk4JzqgKpHBrdwIM s0CtANdy/l22Q4WsXylvRGnHwW3c2M8JK2mkJ6afBC3BLcVQMdgbJPDeBhFPQzTv tCjOEODJPVzygjqq1wzO7NYWkwGS3QA= -----END CERTIFICATE-----Generated at Sat Apr 5 04:30:07 2025 by rpki-client