$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8311f4-991c-34d1-b153-b3185b728d85.roa File: ae8311f4-991c-34d1-b153-b3185b728d85.roa (raw, json) Hash identifier: e1OXZzKNddeTAIqtU30u2NxfmYYZWUVrdHTZUpy7fGU= Subject key identifier: 9D:9C:19:AF:F0:56:95:0E:09:4B:44:9F:85:72:56:E1:02:85:31:46 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E65511A92177313890917A80 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8311f4-991c-34d1-b153-b3185b728d85.roa Signing time: Mon 19 May 2025 01:00:48 +0000 ROA not before: Mon 19 May 2025 01:00:48 +0000 ROA not after: Sun 17 Aug 2025 01:00:48 +0000 asID: 13335 IP address blocks: 108.162.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e6:55:11:a9:21:77:31:38:90:91:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 01:00:48 2025 GMT Not After : Aug 17 01:00:48 2025 GMT Subject: CN=010b9a22-c12b-41bf-960b-5e75a5a22fc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d5:2e:61:21:a6:af:8f:08:af:f2:ff:89:65: 7f:45:39:04:16:f3:d1:41:c7:6a:e6:4a:20:5e:fb: 5f:22:8f:e8:63:a9:46:51:f3:84:18:d1:4d:5f:ee: 99:67:34:6f:7f:d2:e8:c1:29:a9:d4:7a:dc:58:8e: cc:4c:5a:f7:68:62:27:b0:83:b4:c7:08:79:69:39: 80:59:a2:bd:61:e5:0b:17:ce:60:38:14:92:d6:8b: 0f:d7:f7:e2:80:1e:5d:70:4d:75:19:57:41:41:96: 61:c6:a9:a5:e5:f3:ee:94:92:5d:3a:d9:ac:5d:02: 95:59:20:25:b6:6b:96:ec:0b:12:68:a0:95:4a:10: 72:3d:db:4b:df:cd:8c:94:4f:d7:4d:c0:fc:ef:b9: 40:d2:1d:48:9f:e1:59:1d:75:5a:0b:97:b8:3e:eb: f5:93:65:2b:42:43:d4:59:3c:d4:37:09:63:d1:75: cf:f8:d4:6e:0a:2c:ac:90:8f:62:40:88:c6:47:07: 22:a8:26:47:d6:80:77:bd:bc:3f:49:69:57:2e:0e: 56:0a:ed:62:cb:94:dc:72:fd:6e:6e:63:28:04:be: 71:ad:f8:f7:72:a5:1e:eb:e0:99:50:e1:7c:3f:53: 06:c5:69:0d:e4:e4:ca:00:bd:cc:61:41:d9:e1:a4: ed:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9C:19:AF:F0:56:95:0E:09:4B:44:9F:85:72:56:E1:02:85:31:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/ae8311f4-991c-34d1-b153-b3185b728d85.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 108.162.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:d3:63:47:f2:62:87:01:89:1e:ba:b2:fc:fe:4d:69:d3:d6: 2a:0d:30:49:ff:1a:82:97:07:77:cf:45:48:16:b9:ce:fc:1e: df:e3:ff:58:9d:07:b6:bf:05:1b:6d:d2:3b:06:87:18:8e:bb: 70:75:96:df:b6:59:4e:b7:2d:9d:41:e6:19:0e:7a:db:3e:a4: ba:57:75:72:3f:39:45:42:8b:5a:93:93:9c:ed:00:ac:77:25: 34:62:24:db:56:03:75:16:7c:4b:a7:d7:a7:37:72:fe:91:f0: b7:d1:0d:dc:31:15:60:d1:eb:8f:fa:cb:9e:f0:8f:cd:e3:47: 69:c2:1b:d7:5a:4c:7e:a9:49:b1:46:21:63:2b:e5:84:8c:0e: 0c:69:5b:6c:bb:c3:0b:8e:6e:32:e7:1e:fd:f1:b0:b9:93:20: ed:b1:eb:8c:d3:cb:89:66:62:5a:62:66:60:06:85:b5:a0:7a: 14:8a:35:f2:00:64:96:4c:a6:90:72:bf:0d:31:34:ad:64:f7: ce:0d:c4:ed:f5:af:69:9c:59:9f:cc:2c:7e:09:06:94:8b:78: c7:0a:4f:6b:99:2a:e4:05:50:f4:ae:7e:95:d9:fd:6e:a2:31: aa:d8:7b:d1:7e:c2:1f:7e:87:43:2c:73:1a:36:93:e8:f6:48: 0f:dc:2e:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVRGpIXcxOJCReoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk MDEwYjlhMjItYzEyYi00MWJmLTk2MGItNWU3NWE1YTIyZmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntUuYSGmr48Ir/L/iWV/RTkEFvPRQcdq5kog XvtfIo/oY6lGUfOEGNFNX+6ZZzRvf9LowSmp1HrcWI7MTFr3aGInsIO0xwh5aTmA WaK9YeULF85gOBSS1osP1/figB5dcE11GVdBQZZhxqml5fPulJJdOtmsXQKVWSAl tmuW7AsSaKCVShByPdtL382MlE/XTcD877lA0h1In+FZHXVaC5e4Puv1k2UrQkPU WTzUNwlj0XXP+NRuCiyskI9iQIjGRwciqCZH1oB3vbw/SWlXLg5WCu1iy5Tccv1u bmMoBL5xrfj3cqUe6+CZUOF8P1MGxWkN5OTKAL3MYUHZ4aTtTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2cGa/wVpUOCUtEn4VyVuEChTFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYWU4MzExZjQtOTkxYy0z NGQxLWIxNTMtYjMxODViNzI4ZDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKLuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfTY0fyYocBiR66svz+TWnT1ioNMEn/GoKXB3fPRUgWuc78Ht/j/1id B7a/BRtt0jsGhxiOu3B1lt+2WU63LZ1B5hkOets+pLpXdXI/OUVCi1qTk5ztAKx3 JTRiJNtWA3UWfEun16c3cv6R8LfRDdwxFWDR64/6y57wj83jR2nCG9daTH6pSbFG IWMr5YSMDgxpW2y7wwuObjLnHv3xsLmTIO2x64zTy4lmYlpiZmAGhbWgehSKNfIA ZJZMppByvw0xNK1k984NxO31r2mcWZ/MLH4JBpSLeMcKT2uZKuQFUPSufpXZ/W6i MarYe9F+wh9+h0Mscxo2k+j2SA/cLq0= -----END CERTIFICATE-----Generated at Thu Jun 5 18:39:58 2025 by rpki-client