$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c825b164-e3f2-3fab-bbc5-83923900b1c3.roa File: c825b164-e3f2-3fab-bbc5-83923900b1c3.roa (raw, json) Hash identifier: emEQLMYfJP5EnENveIlo66HFPn+AevT7nEmWbfwSWpw= Subject key identifier: 4B:D2:11:C7:E4:3B:A3:17:F1:6E:A8:06:F3:9B:9A:2A:4E:37:53:1D Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849088184B38F014F3424E03500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c825b164-e3f2-3fab-bbc5-83923900b1c3.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 13335 IP address blocks: 162.158.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:84:b3:8f:01:4f:34:24:e0:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=a31cab77-dc9a-4b82-89c6-072ff9223269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:60:99:23:34:a8:55:90:06:2d:76:d3:1a:d4: db:b0:c7:8d:0a:36:c1:ff:54:d4:b8:da:2b:5d:e0: 67:e1:78:4d:d2:da:1c:e9:f0:3a:c4:f0:da:57:1b: c4:59:49:a1:80:e7:49:5e:54:e9:1b:9c:03:45:2c: a2:45:ca:1e:b8:47:de:a7:51:31:5c:2c:38:13:b8: af:29:d1:9b:e3:06:fc:82:05:5b:ae:47:76:bd:84: dd:ce:2f:1a:22:0e:64:fd:62:91:76:97:d2:5f:5e: 76:4d:42:35:32:4b:79:99:53:30:7a:d8:8a:9f:17: e8:56:69:8d:4c:04:0d:bc:cf:5a:1e:c4:71:85:c5: c4:73:61:3d:1c:8b:97:d5:5f:c2:5a:7d:ae:20:ff: 5a:db:92:93:20:64:51:fa:b3:71:5f:6c:93:1a:b0: c6:be:a1:65:71:c0:bf:8d:e6:c7:6d:31:6e:14:6e: 74:68:63:da:eb:2b:a4:f4:4b:4a:3a:a5:52:11:50: 25:2f:cf:08:61:9c:eb:66:ac:b0:b8:ab:a7:93:b9: 7f:6a:5e:de:73:e1:36:90:16:14:ef:aa:9e:cd:b0: 13:23:32:1a:1d:10:00:58:0a:7f:33:96:c1:7d:b1: a8:14:56:a4:aa:75:2c:4b:62:29:a3:02:cd:89:88: 57:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D2:11:C7:E4:3B:A3:17:F1:6E:A8:06:F3:9B:9A:2A:4E:37:53:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/c825b164-e3f2-3fab-bbc5-83923900b1c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.226.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:12:71:ab:a8:35:8d:e0:3d:ca:79:74:7f:51:4a:f4:9e:6e: f9:bf:44:12:6a:69:83:04:4a:3a:8d:f4:7d:e0:48:b6:c4:07: bb:b8:b7:27:c6:90:93:46:08:16:f2:50:74:a8:79:1a:0b:ea: 80:9c:9a:d1:b5:16:3d:ec:39:a7:3b:2f:2a:71:8b:a2:c0:59: 36:7e:8c:d8:7a:c3:a3:aa:02:e5:11:c5:85:61:52:4a:28:53: a7:00:f9:76:e2:fc:24:e4:00:bf:53:94:c7:5f:22:84:64:27: 16:00:99:b1:12:8c:90:a6:25:a0:da:cb:9b:30:ed:0b:42:9c: eb:14:ad:be:27:18:a7:30:46:ff:c3:d8:1c:5b:ea:b3:ec:4e: 3e:73:3a:ac:21:de:bc:13:5e:41:f5:3b:41:f5:f6:92:cf:ee: eb:f9:37:48:4b:b2:60:18:6f:24:a0:1d:38:3e:f1:13:be:ec: be:90:2f:5d:52:2e:be:69:65:42:80:5f:8d:87:33:f6:26:dc: dd:9d:65:85:0a:e4:0e:b2:91:e3:33:74:36:54:97:15:56:f6: 75:10:76:83:51:b1:f4:a1:8e:b1:69:46:8f:05:57:3f:e9:8f: 30:5d:e2:22:ee:f9:80:35:50:a9:3b:01:e1:36:b3:0f:53:f3: a6:ba:88:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgYSzjwFPNCTgNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YTMxY2FiNzctZGM5YS00YjgyLTg5YzYtMDcyZmY5MjIzMjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGCZIzSoVZAGLXbTGtTbsMeNCjbB/1TUuNor XeBn4XhN0toc6fA6xPDaVxvEWUmhgOdJXlTpG5wDRSyiRcoeuEfep1ExXCw4E7iv KdGb4wb8ggVbrkd2vYTdzi8aIg5k/WKRdpfSX152TUI1Mkt5mVMwetiKnxfoVmmN TAQNvM9aHsRxhcXEc2E9HIuX1V/CWn2uIP9a25KTIGRR+rNxX2yTGrDGvqFlccC/ jebHbTFuFG50aGPa6yuk9EtKOqVSEVAlL88IYZzrZqywuKunk7l/al7ec+E2kBYU 76qezbATIzIaHRAAWAp/M5bBfbGoFFakqnUsS2IpowLNiYhXwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvSEcfkO6MX8W6oBvObmipON1MdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvYzgyNWIxNjQtZTNmMi0z ZmFiLWJiYzUtODM5MjM5MDBiMWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop7iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsScauoNY3gPcp5dH9RSvSebvm/RBJqaYMESjqN9H3gSLbEB7u4tyfG kJNGCBbyUHSoeRoL6oCcmtG1Fj3sOac7Lypxi6LAWTZ+jNh6w6OqAuURxYVhUkoo U6cA+Xbi/CTkAL9TlMdfIoRkJxYAmbESjJCmJaDay5sw7QtCnOsUrb4nGKcwRv/D 2Bxb6rPsTj5zOqwh3rwTXkH1O0H19pLP7uv5N0hLsmAYbySgHTg+8RO+7L6QL11S Lr5pZUKAX42HM/Ym3N2dZYUK5A6ykeMzdDZUlxVW9nUQdoNRsfShjrFpRo8FVz/p jzBd4iLu+YA1UKk7AeE2sw9T86a6iMk= -----END CERTIFICATE-----Generated at Sat Apr 5 10:15:34 2025 by rpki-client