$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb3609ed-de1e-3e8d-9cde-308ba4bce004.roa File: cb3609ed-de1e-3e8d-9cde-308ba4bce004.roa (raw, json) Hash identifier: EobSRBJ4SSdYRSKYZ3Bg45kH36h8e6dWr5UGibsPiOo= Subject key identifier: 8C:94:B0:7F:F7:05:43:EA:54:95:7D:AD:0C:FC:39:93:93:BB:7F:28 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849E7BA901F02E25088457D4500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb3609ed-de1e-3e8d-9cde-308ba4bce004.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 13335 IP address blocks: 162.159.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:90:1f:02:e2:50:88:45:7d:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=a50219e7-89eb-4eb9-b6ed-b4114b75d628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:99:1b:9b:a7:1e:8d:19:fb:df:da:06:a4:e8: 5a:bd:86:7c:1c:bc:72:87:c6:09:a7:77:48:41:ed: 38:b4:d4:49:52:0e:2f:f4:9c:75:4e:07:f0:02:6e: 31:d0:1d:ad:00:bc:22:1f:aa:5b:7a:b5:da:81:4d: d3:b7:20:6d:31:f3:9f:1e:e5:cb:ff:56:fb:f6:f6: c8:ca:66:23:ec:a3:54:01:07:ac:3d:9d:13:5b:e1: 11:a8:23:62:06:61:db:1c:f6:42:a5:23:77:17:3a: d8:2d:7a:c4:d8:55:1f:55:70:26:37:9b:bc:16:30: 9c:55:c2:11:a9:44:14:7d:53:b5:77:4a:8c:bb:d7: e4:01:08:1c:b7:1d:1e:e2:8a:b5:81:f0:15:f1:e4: 0d:cb:11:38:a2:59:1b:2a:ea:cb:30:8b:e9:89:21: 56:c6:46:32:17:4b:52:0a:2a:a8:b1:f8:ce:3b:be: d9:dd:cd:76:60:97:81:a9:83:ba:cf:9b:4f:66:26: 91:82:4c:39:b7:a3:6c:48:4f:32:84:5d:c0:2b:2c: b3:a8:de:c8:a0:33:31:99:21:e7:4d:6b:d7:d5:79: a4:32:4b:89:c1:11:e5:fd:83:76:2d:12:24:68:ea: cc:58:41:b5:db:c3:1a:b7:79:33:c0:1d:44:31:0d: cc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:94:B0:7F:F7:05:43:EA:54:95:7D:AD:0C:FC:39:93:93:BB:7F:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cb3609ed-de1e-3e8d-9cde-308ba4bce004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:e6:4e:81:08:06:95:a4:cf:2a:bb:a0:7b:4e:f3:20:58:ba: 25:c3:2d:6b:1a:aa:9e:d4:1f:9f:08:35:a2:03:52:2e:8c:bd: 68:b4:92:a5:37:77:61:a3:ee:16:c0:d6:32:2a:7e:b5:32:f6: 00:d6:95:94:d9:88:2a:ed:7a:44:4c:af:be:2b:65:8b:ca:71: 19:fe:fd:19:82:61:8d:82:3a:8f:12:f8:18:ad:69:d1:06:c1: de:48:38:ef:dc:16:93:df:bb:eb:d1:98:e5:40:b1:a8:1d:43: 52:d3:72:12:b3:7c:fb:53:b1:fc:d2:0d:29:20:50:0c:1a:88: 28:d8:87:56:db:7f:b7:c0:48:3f:6c:7c:ac:d6:65:66:6a:68: 25:8b:92:7f:cf:56:97:c9:43:be:8e:df:63:70:84:4e:7a:ef: 1d:b5:28:b0:47:eb:f1:ba:ff:5f:7a:0c:f6:94:6f:1b:d6:8a: 12:a8:77:a0:82:95:90:40:2e:c2:12:60:4f:be:8a:c4:31:2c: 9c:21:c0:f0:5f:da:5d:bf:2c:5b:d2:42:2a:83:d6:dd:b2:a3: 5c:15:8b:3e:99:77:b0:a1:f2:43:09:39:ae:29:6d:11:19:c8: 7e:d4:e2:62:ed:31:04:51:6b:93:45:65:c9:9e:33:d9:84:bd: d6:2a:fc:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnupAfAuJQiEV9RQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk YTUwMjE5ZTctODllYi00ZWI5LWI2ZWQtYjQxMTRiNzVkNjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZkbm6cejRn739oGpOhavYZ8HLxyh8YJp3dI Qe04tNRJUg4v9Jx1TgfwAm4x0B2tALwiH6pberXagU3TtyBtMfOfHuXL/1b79vbI ymYj7KNUAQesPZ0TW+ERqCNiBmHbHPZCpSN3FzrYLXrE2FUfVXAmN5u8FjCcVcIR qUQUfVO1d0qMu9fkAQgctx0e4oq1gfAV8eQNyxE4olkbKurLMIvpiSFWxkYyF0tS CiqosfjOO77Z3c12YJeBqYO6z5tPZiaRgkw5t6NsSE8yhF3AKyyzqN7IoDMxmSHn TWvX1XmkMkuJwRHl/YN2LRIkaOrMWEG128Mat3kzwB1EMQ3M4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyUsH/3BUPqVJV9rQz8OZOTu38oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2IzNjA5ZWQtZGUxZS0z ZThkLTljZGUtMzA4YmE0YmNlMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAop8KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDmToEIBpWkzyq7oHtO8yBYuiXDLWsaqp7UH58INaIDUi6MvWi0kqU3 d2Gj7hbA1jIqfrUy9gDWlZTZiCrtekRMr74rZYvKcRn+/RmCYY2COo8S+BitadEG wd5IOO/cFpPfu+vRmOVAsagdQ1LTchKzfPtTsfzSDSkgUAwaiCjYh1bbf7fASD9s fKzWZWZqaCWLkn/PVpfJQ76O32NwhE567x21KLBH6/G6/196DPaUbxvWihKod6CC lZBALsISYE++isQxLJwhwPBf2l2/LFvSQiqD1t2yo1wViz6Zd7Ch8kMJOa4pbREZ yH7U4mLtMQRRa5NFZcmeM9mEvdYq/Ks= -----END CERTIFICATE-----Generated at Thu Jun 5 18:35:50 2025 by rpki-client