$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa File: c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa (raw, json) Hash identifier: RDEaphAIDu758i+Cp5ZpzVoYyK0vdVeP7hYbMXy0+0s= Subject key identifier: 72:91:73:A8:EE:83:8A:AE:E3:7F:9C:00:08:67:D7:CE:9E:00:E0:39 Certificate issuer: /CN=ba2a1fed-6973-4607-a297-20f3f241a739 Certificate serial: 010D0C9F432858495C243CF9D7A786525477EC80 Authority key identifier: 96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 14618 IP address blocks: 192.207.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:3c:f9:d7:a7:86:52:54:77:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2a1fed-6973-4607-a297-20f3f241a739 Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=57a5e7d8-0542-4fa3-a478-8bf063cb0646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:13:c7:53:69:a3:cc:6f:c1:77:f3:f7:12: 3a:1a:7b:bd:18:0f:19:39:1e:83:74:15:92:7c:6b: 7d:a7:b4:e7:ce:c5:f1:03:0c:76:c7:6b:68:7a:08: e9:3b:50:ec:b5:69:3f:95:cf:45:d8:66:f7:40:ab: 01:22:c2:37:ed:ad:cd:bd:15:7b:49:b4:c4:0f:15: ea:75:e6:95:bc:b5:39:4e:5c:d5:b2:6d:b0:cd:4a: ba:96:05:21:62:8e:79:09:c6:2f:e3:a1:6a:5e:7a: 47:1b:b1:c5:ae:c2:38:be:e4:8d:71:fa:54:23:0b: 5b:e3:23:c8:41:69:fc:bc:4e:37:d7:2c:ef:fc:34: 36:14:21:46:32:3f:4b:78:7c:b3:ea:21:0c:b2:99: a4:08:a4:cd:db:8c:30:98:28:a8:57:ec:19:fd:6b: 13:5b:bb:8a:28:35:f5:47:1a:26:1b:32:d6:56:3c: 78:0c:f1:6e:33:59:1e:36:d1:d1:2a:67:89:a6:c6: e7:29:ff:5a:1d:a9:28:f3:32:10:5e:15:92:c7:46: ae:72:dc:e6:7f:17:33:43:0d:36:38:9e:47:e9:05: b7:bb:d8:5b:a3:f6:f2:dc:ce:b1:2c:b3:ff:ad:1e: 9f:4c:21:38:41:ef:3d:86:b4:df:29:99:8b:24:b6: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:91:73:A8:EE:83:8A:AE:E3:7F:9C:00:08:67:D7:CE:9E:00:E0:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl X509v3 Authority Key Identifier: keyid:96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer sbgp-ipAddrBlock: critical IPv4: 192.207.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:50:b5:06:cc:70:3a:e5:b7:2e:4d:00:79:73:8f:1e:e6:6d: 73:25:53:9b:33:ec:77:60:4f:bb:a5:3f:89:aa:db:12:64:21: 61:8f:f4:b2:d6:2f:81:14:35:69:79:1e:10:5f:39:b1:fd:b9: f2:a2:d1:f5:e9:bf:65:d3:cf:df:81:fb:fb:a3:c9:9b:97:be: a4:76:8d:1b:ac:70:85:b6:7e:b6:53:ec:0d:b5:1a:35:aa:b2: c9:f8:53:9f:5a:30:de:03:f8:cd:bb:03:b6:5a:0d:3a:24:ec: e9:6f:0c:0a:52:b9:a7:12:6f:c8:47:41:f3:b3:18:47:6d:ad: 3f:3c:29:60:07:9d:c0:28:73:bc:14:5a:59:3d:af:ec:23:c6: b5:43:27:5d:05:53:dc:3e:b7:18:07:ff:49:20:33:e2:02:59: 70:67:ad:7d:7f:01:e0:96:1e:4d:87:bf:6b:f9:34:02:a5:cb: f1:89:55:77:f8:ee:0c:de:c5:d9:ac:39:12:42:1d:99:f7:2a: 1c:a2:fb:8a:db:d2:7e:1f:4f:81:bc:50:78:f1:32:a1:ce:a3: 8f:3b:bc:78:f4:58:b6:68:84:48:67:b3:9b:41:a5:bd:22:5d: 73:6b:f3:6e:f4:b2:49:e9:43:3b:b0:6c:2f:63:19:d1:8d:1b: 76:d7:a5:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDz516eGUlR37IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyYTFmZWQtNjk3My00NjA3LWEyOTctMjBmM2YyNDFh NzM5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk NTdhNWU3ZDgtMDU0Mi00ZmEzLWE0NzgtOGJmMDYzY2IwNjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle8Tx1Npo8xvwXfz9xI6Gnu9GA8ZOR6DdBWS fGt9p7TnzsXxAwx2x2toegjpO1DstWk/lc9F2Gb3QKsBIsI37a3NvRV7SbTEDxXq deaVvLU5TlzVsm2wzUq6lgUhYo55CcYv46FqXnpHG7HFrsI4vuSNcfpUIwtb4yPI QWn8vE431yzv/DQ2FCFGMj9LeHyz6iEMspmkCKTN24wwmCioV+wZ/WsTW7uKKDX1 RxomGzLWVjx4DPFuM1keNtHRKmeJpsbnKf9aHako8zIQXhWSx0auctzmfxczQw02 OJ5H6QW3u9hbo/by3M6xLLP/rR6fTCE4Qe89hrTfKZmLJLaMowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKRc6jug4qu43+cAAhn186eAOA5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTJh MWZlZC02OTczLTQ2MDctYTI5Ny0yMGYzZjI0MWE3MzkvYzlmODRlYmItZWI5MC0z YjFlLWEzYTYtOWQ5NTU0MGNlOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmEyYTFmZWQtNjk3My00NjA3LWEy OTctMjBmM2YyNDFhNzM5L2JhMmExZmVkLTY5NzMtNDYwNy1hMjk3LTIwZjNmMjQx YTczOS5jcmwwHwYDVR0jBBgwFoAUlrqf3KvN2czFyO1vDzA9ccCNIbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTJhMWZlZC02OTczLTQ2MDctYTI5Ny0yMGYz ZjI0MWE3MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVQtQbMcDrlty5NAHlzjx7mbXMlU5sz7HdgT7ulP4mq2xJkIWGP9LLW L4EUNWl5HhBfObH9ufKi0fXpv2XTz9+B+/ujyZuXvqR2jRuscIW2frZT7A21GjWq ssn4U59aMN4D+M27A7ZaDTok7OlvDApSuacSb8hHQfOzGEdtrT88KWAHncAoc7wU Wlk9r+wjxrVDJ10FU9w+txgH/0kgM+ICWXBnrX1/AeCWHk2Hv2v5NAKly/GJVXf4 7gzexdmsORJCHZn3Khyi+4rb0n4fT4G8UHjxMqHOo487vHj0WLZohEhns5tBpb0i XXNr8270sknpQzuwbC9jGdGNG3bXpZc= -----END CERTIFICATE-----Generated at Sat Apr 19 03:32:10 2025 by rpki-client