$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f828895-8770-30d0-a73c-138eff4e0c30.roa File: 8f828895-8770-30d0-a73c-138eff4e0c30.roa (raw, json) Hash identifier: GwLB0yeWsTqmfpbWYMHzft7e3LWCssHDJv9TIqrc3jo= Subject key identifier: 10:76:57:1C:39:52:9F:6E:B5:51:19:F7:96:E2:B5:3B:B3:E0:0E:08 Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae Certificate serial: 010D0C9F43285849D9C4F4C6200DE13F075C8500 Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f828895-8770-30d0-a73c-138eff4e0c30.roa Signing time: Wed 14 May 2025 13:01:03 +0000 ROA not before: Wed 14 May 2025 13:01:03 +0000 ROA not after: Tue 12 Aug 2025 13:01:03 +0000 asID: 13335 IP address blocks: 162.159.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d9:c4:f4:c6:20:0d:e1:3f:07:5c:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae Validity Not Before: May 14 13:01:03 2025 GMT Not After : Aug 12 13:01:03 2025 GMT Subject: CN=12789bdf-f34e-4656-9fd1-d490873e109e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:62:a6:c5:da:26:43:7d:e3:ae:1d:f9:78:1d: e0:4a:31:d4:24:f8:97:a2:ee:b9:27:8a:eb:83:ba: c6:e6:c6:03:b2:e0:ce:83:10:1f:05:89:89:a5:f5: 77:f1:fa:55:23:a7:5e:77:6c:2a:23:4d:4f:a4:1b: 96:1f:5b:f7:fd:16:ce:d5:9a:6c:6c:2f:de:86:24: 69:86:85:25:ad:11:11:9d:04:88:ea:89:08:93:1c: bf:23:cf:7a:0c:78:51:37:c3:b0:6e:84:e1:cd:6b: 90:af:34:5e:8d:3b:5d:0a:7b:c1:f3:a9:bf:70:38: 63:85:ee:80:a9:7e:c0:12:de:43:30:1d:c4:a1:09: cb:d7:9b:d4:2e:7b:4f:6c:87:34:ce:d2:3a:50:2a: ef:bf:fc:66:64:52:80:2b:ea:7c:bf:4f:7b:e2:ef: ac:de:b4:c3:73:38:00:e9:94:59:f2:12:be:de:f7: bc:32:76:84:c5:53:6d:3b:04:64:f5:f8:c5:65:a1: e9:ec:8d:74:e6:40:e5:54:42:c9:13:f6:b2:72:6c: e2:75:78:fc:16:6b:a8:d2:0b:d7:ea:57:c1:77:4e: 2b:69:4f:3a:d0:98:7e:fc:f9:03:f3:b6:6c:32:35: 3c:f1:dd:3c:8f:0f:9d:49:73:36:3a:b6:03:fa:54: dc:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:76:57:1C:39:52:9F:6E:B5:51:19:F7:96:E2:B5:3B:B3:E0:0E:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/8f828895-8770-30d0-a73c-138eff4e0c30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl X509v3 Authority Key Identifier: keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer sbgp-ipAddrBlock: critical IPv4: 162.159.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:8e:c2:7e:5f:f9:ff:12:8e:5b:7d:41:fb:03:68:72:57:b4: 54:c4:4f:84:54:ef:f8:9d:1a:d2:16:d0:8b:64:c6:aa:14:e7: 1d:45:0d:26:8a:f5:c2:79:b8:eb:0f:88:0a:04:0c:30:88:25: 5d:13:d2:73:fb:7d:87:6a:27:ed:fa:ed:0f:8b:4c:f0:00:2d: 8d:ea:e2:56:2f:fb:14:5f:d5:42:ef:48:ae:be:ee:75:1e:69: f8:96:52:9d:fb:fa:0c:a4:b2:23:fb:47:42:c1:11:3b:49:20: 46:90:7c:ee:12:d9:32:df:44:03:b3:9c:12:9a:e7:e9:4a:bd: fa:c7:48:e7:8d:ba:92:0e:f5:78:de:06:68:a3:ae:ba:32:2d: 2c:b3:e1:06:e4:e9:e4:2a:d4:ac:5c:65:f4:14:a8:d3:1b:17: 6a:b5:46:53:d5:35:77:00:93:af:f3:df:72:dd:80:4b:4e:cc: cf:cc:92:66:f3:15:43:1b:bb:c0:ba:e6:6f:4c:01:5d:34:95: 8f:66:d9:a5:4f:32:2e:f9:0d:ac:7b:c9:28:96:29:98:81:fa: 44:88:df:a7:54:83:75:c1:94:46:75:89:12:f3:ef:93:70:a3: ae:f6:e8:a7:3d:24:6b:ca:83:70:9a:1a:59:4a:35:cd:3b:0b: ac:f1:ca:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZxPTGIA3hPwdchQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw ZmFlMB4XDTI1MDUxNDEzMDEwM1oXDTI1MDgxMjEzMDEwM1owLzEtMCsGA1UEAxMk MTI3ODliZGYtZjM0ZS00NjU2LTlmZDEtZDQ5MDg3M2UxMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmKmxdomQ33jrh35eB3gSjHUJPiXou65J4rr g7rG5sYDsuDOgxAfBYmJpfV38fpVI6ded2wqI01PpBuWH1v3/RbO1ZpsbC/ehiRp hoUlrRERnQSI6okIkxy/I896DHhRN8OwboThzWuQrzRejTtdCnvB86m/cDhjhe6A qX7AEt5DMB3EoQnL15vULntPbIc0ztI6UCrvv/xmZFKAK+p8v0974u+s3rTDczgA 6ZRZ8hK+3ve8MnaExVNtOwRk9fjFZaHp7I105kDlVELJE/aycmzidXj8Fmuo0gvX 6lfBd04raU860Jh+/PkD87ZsMjU88d08jw+dSXM2OrYD+lTcdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBB2Vxw5Up9utVEZ95bitTuz4A4IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvOGY4Mjg4OTUtODc3MC0z MGQwLWE3M2MtMTM4ZWZmNGUwYzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2 M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEop/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWOwn5f+f8Sjlt9QfsDaHJXtFTET4RU7/idGtIW0ItkxqoU5x1FDSaK 9cJ5uOsPiAoEDDCIJV0T0nP7fYdqJ+367Q+LTPAALY3q4lYv+xRf1ULvSK6+7nUe afiWUp37+gyksiP7R0LBETtJIEaQfO4S2TLfRAOznBKa5+lKvfrHSOeNupIO9Xje BmijrroyLSyz4Qbk6eQq1KxcZfQUqNMbF2q1RlPVNXcAk6/z33LdgEtOzM/Mkmbz FUMbu8C65m9MAV00lY9m2aVPMi75Dax7ySiWKZiB+kSI36dUg3XBlEZ1iRLz75Nw o6726Kc9JGvKg3CaGllKNc07C6zxyl8= -----END CERTIFICATE-----Generated at Tue Jul 1 19:08:33 2025 by rpki-client