$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5ec967e-1193-3091-9cf4-6fa098697602.roa File: b5ec967e-1193-3091-9cf4-6fa098697602.roa (raw, json) Hash identifier: OSUvvOvuDYa/eMroi6x7oqjDqn5osoVhEjAJ4jfV7iY= Subject key identifier: 90:62:CE:A5:D7:14:0E:E3:B5:07:87:63:B6:30:94:4D:93:9A:AB:26 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F432858471A8FB4C655ABD7D72D738A00 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5ec967e-1193-3091-9cf4-6fa098697602.roa Signing time: Tue 03 Sep 2024 12:00:00 +0000 ROA not before: Tue 03 Sep 2024 12:00:00 +0000 ROA not after: Fri 19 Dec 2025 05:00:00 +0000 asID: 13335 IP address blocks: 162.158.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:1a:8f:b4:c6:55:ab:d7:d7:2d:73:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Sep 3 12:00:00 2024 GMT Not After : Dec 19 05:00:00 2025 GMT Subject: CN=b9f1b102-09ef-4d88-8951-05e5df60e98b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:88:d6:d2:9c:a8:ec:b6:71:2c:d3:73:58:9d: 56:92:90:e2:b6:19:07:08:d0:aa:3b:4b:95:03:59: ec:ff:2b:ac:62:48:7b:99:99:5a:e4:e4:bd:00:7b: 21:20:5f:f4:90:6f:7f:fd:ba:cc:c5:7f:e5:b6:c0: 37:9f:67:36:50:99:07:5d:aa:32:81:bf:39:d8:7a: 66:67:0d:af:b0:4f:a6:1c:86:ba:4c:79:d8:56:41: f4:57:85:80:fd:cf:4c:3f:2d:f3:27:f3:25:6d:82: ac:c3:77:ce:fe:55:f9:9d:f8:de:cf:6e:56:75:fc: 18:07:eb:4d:bc:e8:de:52:fa:d1:60:5e:ef:55:cc: 24:df:57:59:21:ed:59:ca:0c:5e:1f:9b:d8:84:6b: 6f:b7:b8:91:e7:6b:dc:ed:93:b3:b5:ac:0b:b7:ef: 5d:bb:cc:27:6a:56:bd:83:63:27:6b:74:36:1f:27: fe:e0:7f:98:d7:bf:6c:d9:f7:75:6f:ab:de:09:fd: 8f:8b:7a:5e:e8:39:24:53:6a:64:66:fc:77:2a:6f: 4a:50:d6:89:0b:ef:11:c5:ff:af:53:17:cc:9b:f2: 75:03:d5:58:e1:82:b3:cb:9b:07:cf:22:95:2a:ce: ac:c6:9d:80:fc:9e:25:77:fa:6d:18:92:f6:1e:19: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:62:CE:A5:D7:14:0E:E3:B5:07:87:63:B6:30:94:4D:93:9A:AB:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b5ec967e-1193-3091-9cf4-6fa098697602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:f0:7f:f1:34:5c:9a:9a:9a:2e:af:34:7d:84:c0:e1:29:93: 90:f5:18:f2:9d:f5:e9:64:66:ce:86:5b:6d:04:f6:4d:5e:92: 2f:01:3e:7c:98:2b:8c:57:7d:42:dc:c7:b9:2f:1b:8a:6a:79: ab:1c:19:29:bc:ad:39:e6:77:74:f8:69:0a:e8:b1:08:7c:c9: 20:34:be:c9:1f:ad:23:36:6f:37:57:47:ae:14:03:da:96:b7: e4:7a:1d:90:a1:20:53:6a:92:94:87:61:66:b6:4e:7f:ad:31: 1b:b2:36:53:0e:f8:91:49:c6:f0:d2:46:65:d3:b1:10:ad:1e: 60:9b:27:45:d1:0f:ca:87:43:a4:df:64:15:c9:9a:52:a2:2a: e6:39:6b:1f:0b:7d:8f:de:e9:73:2d:6c:39:91:ee:37:cf:05: 5b:44:04:73:8a:bd:e7:a2:8b:f0:03:02:32:0b:4e:04:de:e6: 40:46:03:ef:09:4b:f9:8c:74:88:2d:04:db:ed:b7:f6:7e:5e: 4c:b0:ba:14:fa:c1:10:ed:e4:ca:7a:a3:ef:b5:a8:72:b5:c1: a0:c3:ca:11:b0:0c:15:24:4d:2b:d1:da:a7:8e:71:b4:96:59: af:cd:06:89:bd:57:2f:7f:b6:13:a9:00:c3:17:75:8b:75:f6: bb:66:09:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcaj7TGVavX1y1zigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI0MDkwMzEyMDAwMFoXDTI1MTIxOTA1MDAwMFowLzEtMCsGA1UEAxMk YjlmMWIxMDItMDllZi00ZDg4LTg5NTEtMDVlNWRmNjBlOThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYjW0pyo7LZxLNNzWJ1WkpDithkHCNCqO0uV A1ns/yusYkh7mZla5OS9AHshIF/0kG9//brMxX/ltsA3n2c2UJkHXaoygb852Hpm Zw2vsE+mHIa6THnYVkH0V4WA/c9MPy3zJ/MlbYKsw3fO/lX5nfjez25WdfwYB+tN vOjeUvrRYF7vVcwk31dZIe1ZygxeH5vYhGtvt7iR52vc7ZOztawLt+9du8wnala9 g2Mna3Q2Hyf+4H+Y179s2fd1b6veCf2Pi3pe6DkkU2pkZvx3Km9KUNaJC+8Rxf+v UxfMm/J1A9VY4YKzy5sHzyKVKs6sxp2A/J4ld/ptGJL2HhmRPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBizqXXFA7jtQeHY7YwlE2TmqsmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYjVlYzk2N2UtMTE5My0z MDkxLTljZjQtNmZhMDk4Njk3NjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop71MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHLwf/E0XJqami6vNH2EwOEpk5D1GPKd9elkZs6GW20E9k1eki8BPnyY K4xXfULcx7kvG4pqeascGSm8rTnmd3T4aQrosQh8ySA0vskfrSM2bzdXR64UA9qW t+R6HZChIFNqkpSHYWa2Tn+tMRuyNlMO+JFJxvDSRmXTsRCtHmCbJ0XRD8qHQ6Tf ZBXJmlKiKuY5ax8LfY/e6XMtbDmR7jfPBVtEBHOKveeii/ADAjILTgTe5kBGA+8J S/mMdIgtBNvtt/Z+XkywuhT6wRDt5Mp6o++1qHK1waDDyhGwDBUkTSvR2qeOcbSW Wa/NBom9Vy9/thOpAMMXdYt19rtmCSI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:24 2025 by rpki-client