$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/14516a78-5003-3ee4-a230-723f4f86845d.roa File: 14516a78-5003-3ee4-a230-723f4f86845d.roa (raw, json) Hash identifier: 5zN7P0AxOGbC1kdJ7wa8bJxj4WZCW/RXtmzZ+XLX5Kk= Subject key identifier: 0E:A3:BA:C5:BA:3F:C4:B5:65:69:63:DF:C0:5F:52:5A:01:9E:FC:45 Certificate issuer: /CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Certificate serial: 010D0C9F432858487A207748C75B435139324680 Authority key identifier: A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/14516a78-5003-3ee4-a230-723f4f86845d.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 36231 IP address blocks: 199.231.233.0/24 maxlen: 24 2606:f240::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:77:48:c7:5b:43:51:39:32:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba434fb3-146b-4bc5-a8cd-38ddf1603470 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=aff58dea-2c2c-40f7-bb80-1e915f9d38b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:79:8b:6b:5a:e4:6e:75:b6:fd:0d:dc:f1:10: 90:f0:8a:39:be:fe:ce:91:f7:a6:1e:cf:80:12:d3: b0:c5:fe:29:78:ea:3c:83:9e:75:9e:8f:b5:19:b2: 0d:91:d7:db:c0:10:f2:e8:9f:83:cb:11:52:16:00: 9e:ed:d5:78:eb:f0:02:fd:62:9b:7d:ca:10:01:2a: 07:99:2d:37:b3:bd:02:f6:f0:75:1b:25:93:c6:f7: b5:4d:9a:cc:82:42:99:b5:21:f1:ee:57:c3:13:60: c5:57:30:97:43:5b:71:af:26:75:a8:c6:58:1b:35: f3:8a:4e:0a:40:ae:b2:06:c8:7b:14:30:1d:be:e9: e8:8f:79:78:96:9d:9b:84:3b:a6:5d:6f:2b:0b:dd: 1d:ef:2d:ff:f9:6c:5c:87:6a:82:49:b0:66:aa:ab: 6a:fd:24:c8:ce:0a:99:ac:10:69:3d:dd:29:f2:7c: 5d:ba:3e:39:f6:08:dd:33:16:0d:3d:88:65:46:4c: 66:f8:cc:72:e2:4f:34:1d:ba:ac:32:55:37:64:fa: 39:ea:90:35:c1:77:e5:17:2a:c4:23:d6:df:5c:67: bb:7d:01:61:06:dd:3d:18:c1:c2:2c:cb:52:74:9c: 94:16:f3:65:44:2e:7b:df:c0:9b:ba:61:e0:fd:90: df:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A3:BA:C5:BA:3F:C4:B5:65:69:63:DF:C0:5F:52:5A:01:9E:FC:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/14516a78-5003-3ee4-a230-723f4f86845d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470/ba434fb3-146b-4bc5-a8cd-38ddf1603470.crl X509v3 Authority Key Identifier: keyid:A1:E3:10:29:38:AC:67:98:DA:DC:F0:11:4E:C1:B7:64:71:5A:21:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ba434fb3-146b-4bc5-a8cd-38ddf1603470.cer sbgp-ipAddrBlock: critical IPv4: 199.231.233.0/24 IPv6: 2606:f240::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:cf:88:0c:84:20:4b:14:56:44:c0:a9:e0:ba:3d:00:e7:41: f4:a9:66:e6:36:69:40:c5:65:11:8e:9b:76:0f:b4:96:eb:f2: 2a:39:58:65:41:ca:4a:1b:43:f2:32:a4:a6:45:de:be:49:85: f9:b1:ef:20:24:60:c4:c2:55:39:72:7e:ac:16:3a:99:b6:89: 54:b8:62:5e:0a:08:a8:1d:a5:e8:82:5e:c4:b2:ce:8a:65:b8: 18:ed:25:67:a7:47:0b:70:3f:1c:1b:fc:fe:1b:5b:00:e5:7b: 77:fe:1c:16:cd:c2:9f:2f:8c:32:9f:21:d8:78:71:45:9b:52: ab:ad:e6:fc:a5:43:e1:57:ec:3f:af:5c:49:c2:39:f5:25:ed: fd:c8:31:c9:68:de:f0:55:9c:a5:c0:c2:91:fe:01:fe:89:94: 4d:cf:5b:bb:bc:08:17:a2:c7:7d:88:c9:2b:a6:7c:cf:30:ac: 9b:7b:fd:fc:d2:53:66:67:27:c4:68:9a:75:85:f9:08:5c:e4: 8b:41:a9:76:e3:88:55:55:f8:c5:92:83:48:13:1c:d0:82:69: 38:2a:dd:43:1d:56:bd:d8:93:d0:f5:3f:23:8a:38:85:7e:1d: 72:7c:c8:a9:03:54:f6:d5:fd:72:11:a7:d9:10:94:50:89:b3: 48:53:cb:89 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEh6IHdIx1tDUTkyRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0MzRmYjMtMTQ2Yi00YmM1LWE4Y2QtMzhkZGYxNjAz NDcwMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk YWZmNThkZWEtMmMyYy00MGY3LWJiODAtMWU5MTVmOWQzOGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHmLa1rkbnW2/Q3c8RCQ8Io5vv7OkfemHs+A EtOwxf4peOo8g551no+1GbINkdfbwBDy6J+DyxFSFgCe7dV46/AC/WKbfcoQASoH mS03s70C9vB1GyWTxve1TZrMgkKZtSHx7lfDE2DFVzCXQ1txryZ1qMZYGzXzik4K QK6yBsh7FDAdvunoj3l4lp2bhDumXW8rC90d7y3/+Wxch2qCSbBmqqtq/STIzgqZ rBBpPd0p8nxduj459gjdMxYNPYhlRkxm+Mxy4k80HbqsMlU3ZPo56pA1wXflFyrE I9bfXGe7fQFhBt09GMHCLMtSdJyUFvNlRC5738CbumHg/ZDfPQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFA6jusW6P8S1ZWlj38BfUloBnvxFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQz NGZiMy0xNDZiLTRiYzUtYThjZC0zOGRkZjE2MDM0NzAvMTQ1MTZhNzgtNTAwMy0z ZWU0LWEyMzAtNzIzZjRmODY4NDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmE0MzRmYjMtMTQ2Yi00YmM1LWE4 Y2QtMzhkZGYxNjAzNDcwL2JhNDM0ZmIzLTE0NmItNGJjNS1hOGNkLTM4ZGRmMTYw MzQ3MC5jcmwwHwYDVR0jBBgwFoAUoeMQKTisZ5ja3PARTsG3ZHFaIQQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYTQzNGZiMy0xNDZiLTRiYzUtYThjZC0zOGRk ZjE2MDM0NzAuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAx+fpMA0E AgACMAcDBQAmBvJAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAIzPiAyEIEsUVkTAqeC6PQDnQfSpZuY2aUDF ZRGOm3YPtJbr8io5WGVBykobQ/IypKZF3r5Jhfmx7yAkYMTCVTlyfqwWOpm2iVS4 Yl4KCKgdpeiCXsSyzopluBjtJWenRwtwPxwb/P4bWwDle3f+HBbNwp8vjDKfIdh4 cUWbUqut5vylQ+FX7D+vXEnCOfUl7f3IMclo3vBVnKXAwpH+Af6JlE3PW7u8CBei x32IySumfM8wrJt7/fzSU2ZnJ8RomnWF+Qhc5ItBqXbjiFVV+MWSg0gTHNCCaTgq 3UMdVr3Yk9D1PyOKOIV+HXJ8yKkDVPbV/XIRp9kQlFCJs0hTy4k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:10 2025 by rpki-client