$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de1d4553-3188-3d1c-8b8e-987ead59deaa.roa File: de1d4553-3188-3d1c-8b8e-987ead59deaa.roa (raw, json) Hash identifier: KzlIQOgzPrwdiF6W0sECpzd387KKcOB7vC2s5CM0o7A= Subject key identifier: 95:A7:22:54:31:8E:08:48:6C:73:5B:E4:C3:17:43:FD:F1:AD:FB:BC Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849071C099F67A0381DDF481FA0 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de1d4553-3188-3d1c-8b8e-987ead59deaa.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 13335 IP address blocks: 162.158.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1c:09:9f:67:a0:38:1d:df:48:1f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=8b6102a4-432a-4db7-aa8d-b7cca524c5d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:6f:24:f7:41:da:2d:6f:12:f6:b9:be:23:d3: a1:7c:3f:bc:a1:f5:93:24:c8:7c:8f:36:8c:b2:ef: 08:06:65:ff:7d:89:6e:af:e8:38:c1:b8:d5:7c:fb: 0d:60:82:ea:f5:8d:b3:e5:14:10:11:df:7d:f6:ba: 65:7c:13:1d:f7:30:e5:d4:1a:2c:e8:18:91:5d:c5: f2:3a:a4:c9:d0:4a:17:8c:08:de:d6:b6:35:4d:e2: 00:20:6a:b9:cf:f9:26:e0:f1:d3:e3:63:10:d7:ef: a0:53:2b:cf:d9:d8:96:e2:68:da:98:f6:f8:ec:78: 79:6d:40:af:6f:14:c4:42:01:d6:de:b6:4b:51:0d: 73:25:f9:a2:54:83:10:59:f7:98:f8:d9:26:44:9c: 16:50:8d:ae:aa:4e:31:95:f5:1c:ad:46:3f:9f:aa: 0b:3b:29:46:47:8c:dd:59:cf:65:eb:a7:ad:2c:f8: 99:4d:b0:59:5a:be:c2:ef:6f:d9:56:9f:dc:20:75: 07:c0:a4:82:70:41:9e:53:95:56:cd:2f:c1:30:64: 75:85:db:e8:e5:08:4f:76:e2:c9:b6:67:36:ff:ba: 7d:87:8a:89:ac:23:df:6e:44:f2:c8:1d:bc:ac:9d: 46:0e:b7:d0:af:7a:81:56:b2:05:62:63:9a:d8:5d: 01:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:A7:22:54:31:8E:08:48:6C:73:5B:E4:C3:17:43:FD:F1:AD:FB:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/de1d4553-3188-3d1c-8b8e-987ead59deaa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.158.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:be:f0:47:4c:aa:59:59:6a:df:6d:e9:20:f9:42:bc:e2:dd: 52:5d:c6:87:2d:d3:e4:17:bf:ef:5e:35:45:a4:2f:da:cd:89: 20:c7:6f:a0:df:a2:39:ba:b5:2f:d2:ba:9b:d9:6d:8d:83:e1: b7:3f:cd:61:67:d5:50:ab:4f:42:34:e5:0a:a5:9e:ca:8d:58: f1:2f:48:59:d2:c1:f7:87:e3:77:bb:c5:4f:19:8f:22:2a:5d: 9c:a7:38:f5:37:95:63:c2:08:ad:b1:dd:b4:08:d2:d6:12:b4: 72:14:29:49:d4:ce:54:9d:18:64:0c:0c:96:ce:18:97:56:b7: b8:2b:e6:d1:d3:3d:92:0f:34:43:2b:10:15:46:32:6e:f3:09: 17:a0:f9:8f:db:96:62:4b:d0:23:3d:db:18:96:d3:f8:db:51: c2:a8:45:f8:eb:d4:d6:58:81:c9:da:b7:bf:58:5c:34:08:3f: e2:52:2f:0c:83:1f:17:99:a3:69:9b:cf:a6:db:14:35:56:86: 8e:fd:56:ad:44:8a:dd:7c:bf:cd:74:77:6b:c0:50:a6:48:d6: 6e:4a:fb:df:20:e3:0e:98:09:e7:56:ad:99:4b:fc:f3:8a:ab: 93:2e:92:51:30:04:59:ed:fe:97:e9:c9:1c:58:b0:fe:24:85: 2a:a5:3f:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHHAmfZ6A4Hd9IH6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk OGI2MTAyYTQtNDMyYS00ZGI3LWFhOGQtYjdjY2E1MjRjNWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAim8k90HaLW8S9rm+I9OhfD+8ofWTJMh8jzaM su8IBmX/fYlur+g4wbjVfPsNYILq9Y2z5RQQEd999rplfBMd9zDl1Bos6BiRXcXy OqTJ0EoXjAje1rY1TeIAIGq5z/km4PHT42MQ1++gUyvP2diW4mjamPb47Hh5bUCv bxTEQgHW3rZLUQ1zJfmiVIMQWfeY+NkmRJwWUI2uqk4xlfUcrUY/n6oLOylGR4zd Wc9l66etLPiZTbBZWr7C72/ZVp/cIHUHwKSCcEGeU5VWzS/BMGR1hdvo5QhPduLJ tmc2/7p9h4qJrCPfbkTyyB28rJ1GDrfQr3qBVrIFYmOa2F0B8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWnIlQxjghIbHNb5MMXQ/3xrfu8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvZGUxZDQ1NTMtMzE4OC0z ZDFjLThiOGUtOTg3ZWFkNTlkZWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCop40MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH++8EdMqllZat9t6SD5Qrzi3VJdxoct0+QXv+9eNUWkL9rNiSDHb6Df ojm6tS/SupvZbY2D4bc/zWFn1VCrT0I05QqlnsqNWPEvSFnSwfeH43e7xU8ZjyIq XZynOPU3lWPCCK2x3bQI0tYStHIUKUnUzlSdGGQMDJbOGJdWt7gr5tHTPZIPNEMr EBVGMm7zCReg+Y/blmJL0CM92xiW0/jbUcKoRfjr1NZYgcnat79YXDQIP+JSLwyD HxeZo2mbz6bbFDVWho79Vq1Eit18v810d2vAUKZI1m5K+98g4w6YCedWrZlL/POK q5MuklEwBFnt/pfpyRxYsP4khSqlP9w= -----END CERTIFICATE-----Generated at Sat Apr 5 07:44:06 2025 by rpki-client