$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/bbcd4540-be10-3ce9-9ec5-900c3ae2ff90.roa File: bbcd4540-be10-3ce9-9ec5-900c3ae2ff90.roa (raw, json) Hash identifier: 4j/8czW28L3aa7auqFtG9fpW01c2LsxzPH9DAuzIvDw= Subject key identifier: 12:65:F2:A5:B1:1B:84:C3:AF:36:BA:5B:50:2A:9B:32:0D:87:3C:FB Certificate issuer: /CN=0ad2b3c4-a64c-4afd-b0df-103361339550 Certificate serial: 010D0C9F43285848CB164B9F4EC4B84806B85B40 Authority key identifier: B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/bbcd4540-be10-3ce9-9ec5-900c3ae2ff90.roa Signing time: Thu 06 Feb 2025 14:00:52 +0000 ROA not before: Thu 06 Feb 2025 14:00:52 +0000 ROA not after: Wed 07 May 2025 13:00:52 +0000 asID: 11287 IP address blocks: 163.182.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:cb:16:4b:9f:4e:c4:b8:48:06:b8:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ad2b3c4-a64c-4afd-b0df-103361339550 Validity Not Before: Feb 6 14:00:52 2025 GMT Not After : May 7 13:00:52 2025 GMT Subject: CN=66e28694-3f92-4181-8f55-875b4956e6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ca:30:84:aa:08:43:4b:e0:35:64:49:18:a2: 4c:d3:05:99:f4:bb:df:1d:56:38:c5:2a:d4:42:a7: 97:1f:ed:d8:12:9e:4c:34:ce:1d:af:47:b8:7c:e1: af:1b:11:3a:b1:a5:61:05:2c:0f:ea:f8:c9:b0:28: 40:d9:69:8b:1b:9c:3b:68:bd:af:8c:db:12:39:57: 75:9d:23:30:f9:3d:82:b2:38:1d:c2:f3:55:b4:13: cc:59:c8:4e:c7:9c:f3:15:e6:1e:a5:7e:be:92:6d: f6:34:2b:4a:65:56:03:ac:c4:9f:41:a3:97:0e:29: 56:2c:20:80:57:e8:34:c9:bd:27:4c:b7:78:e8:2a: d3:f3:cd:17:c7:e1:a1:78:31:52:28:2a:fb:86:f2: e7:54:46:84:e6:cf:51:63:1c:40:0f:12:95:33:9f: 08:4a:77:94:21:0b:bd:81:29:99:11:30:24:19:49: 50:a6:f7:51:a6:85:85:9c:58:90:ad:13:5d:7d:4c: c7:e7:c7:15:68:17:ea:cb:b2:72:e7:ce:1e:99:07: bb:af:e1:12:8b:60:6e:15:ca:41:27:bc:a4:0c:27: 72:5e:9b:f9:ac:ad:2e:04:ed:2c:9d:b1:98:08:54: f7:1e:66:73:97:19:33:2c:eb:5e:85:35:61:21:eb: 79:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:65:F2:A5:B1:1B:84:C3:AF:36:BA:5B:50:2A:9B:32:0D:87:3C:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/bbcd4540-be10-3ce9-9ec5-900c3ae2ff90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550/0ad2b3c4-a64c-4afd-b0df-103361339550.crl X509v3 Authority Key Identifier: keyid:B8:DE:C1:C3:64:52:F0:42:07:DB:3E:84:A4:35:F9:05:C1:BF:3B:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0ad2b3c4-a64c-4afd-b0df-103361339550.cer sbgp-ipAddrBlock: critical IPv4: 163.182.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:a6:46:0d:3d:e8:4e:1d:b2:0b:a2:6d:70:5f:d4:56:21:a0: 6c:a1:c0:67:45:54:ab:2b:74:6a:09:ec:4a:39:33:12:e1:f7: ae:cc:f0:76:42:a5:ab:7f:b5:6e:cf:36:25:8e:f0:bf:88:dc: f0:32:38:40:51:88:84:c1:7e:1d:a4:c0:d4:74:21:bd:36:c0: a5:d1:49:50:32:c7:ac:00:52:2e:ac:b2:06:4e:43:5b:c2:df: b1:2a:8f:b8:43:95:7d:13:35:01:f9:53:b8:ac:c8:0d:f8:e3: 31:7f:8f:55:68:48:1a:7d:33:1c:ad:44:8c:b2:8c:51:ae:34: ac:48:7f:8e:91:9e:19:54:d2:f6:ac:99:17:58:79:f0:cd:d2: 5d:68:54:29:9c:4e:e5:dd:4d:5c:97:b8:3f:cf:9f:e8:6b:73: 55:5e:18:be:9d:6f:c0:03:d8:cc:e3:4e:81:a1:d6:0b:71:c4: 3e:3b:55:16:f2:b1:ae:e1:0d:92:a3:cf:1d:32:fa:03:53:51: fa:00:64:75:13:14:26:24:ea:55:15:e1:ec:a2:d2:37:22:e9: b3:21:9b:90:d7:7c:9f:26:89:ca:76:4f:12:84:85:26:30:f5: 82:4b:55:75:8d:06:22:44:07:24:ee:e6:88:69:44:61:af:13: 13:49:29:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjLFkufTsS4SAa4W0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFkMmIzYzQtYTY0Yy00YWZkLWIwZGYtMTAzMzYxMzM5 NTUwMB4XDTI1MDIwNjE0MDA1MloXDTI1MDUwNzEzMDA1MlowLzEtMCsGA1UEAxMk NjZlMjg2OTQtM2Y5Mi00MTgxLThmNTUtODc1YjQ5NTZlNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMowhKoIQ0vgNWRJGKJM0wWZ9LvfHVY4xSrU QqeXH+3YEp5MNM4dr0e4fOGvGxE6saVhBSwP6vjJsChA2WmLG5w7aL2vjNsSOVd1 nSMw+T2CsjgdwvNVtBPMWchOx5zzFeYepX6+km32NCtKZVYDrMSfQaOXDilWLCCA V+g0yb0nTLd46CrT880Xx+GheDFSKCr7hvLnVEaE5s9RYxxADxKVM58ISneUIQu9 gSmZETAkGUlQpvdRpoWFnFiQrRNdfUzH58cVaBfqy7Jy584emQe7r+ESi2BuFcpB J7ykDCdyXpv5rK0uBO0snbGYCFT3HmZzlxkzLOtehTVhIet5JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJl8qWxG4TDrza6W1AqmzINhzz7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYWQy YjNjNC1hNjRjLTRhZmQtYjBkZi0xMDMzNjEzMzk1NTAvYmJjZDQ1NDAtYmUxMC0z Y2U5LTllYzUtOTAwYzNhZTJmZjkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGFkMmIzYzQtYTY0Yy00YWZkLWIw ZGYtMTAzMzYxMzM5NTUwLzBhZDJiM2M0LWE2NGMtNGFmZC1iMGRmLTEwMzM2MTMz OTU1MC5jcmwwHwYDVR0jBBgwFoAUuN7Bw2RS8EIH2z6EpDX5BcG/O24wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYWQyYjNjNC1hNjRjLTRhZmQtYjBkZi0xMDMz NjEzMzk1NTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAo7bnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGmRg096E4dsguibXBf1FYhoGyhwGdFVKsrdGoJ7Eo5MxLh967M8HZC pat/tW7PNiWO8L+I3PAyOEBRiITBfh2kwNR0Ib02wKXRSVAyx6wAUi6ssgZOQ1vC 37Eqj7hDlX0TNQH5U7isyA344zF/j1VoSBp9MxytRIyyjFGuNKxIf46RnhlU0vas mRdYefDN0l1oVCmcTuXdTVyXuD/Pn+hrc1VeGL6db8AD2MzjToGh1gtxxD47VRby sa7hDZKjzx0y+gNTUfoAZHUTFCYk6lUV4eyi0jci6bMhm5DXfJ8micp2TxKEhSYw 9YJLVXWNBiJEByTu5ohpRGGvExNJKbE= -----END CERTIFICATE-----Generated at Sat Apr 12 00:28:36 2025 by rpki-client