$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0ba38926-bad3-374f-8c49-9231dc94f5e6.roa File: 0ba38926-bad3-374f-8c49-9231dc94f5e6.roa (raw, json) Hash identifier: iojqQpEJOuXlXBu1HhlHhFslsYsr7OIOpoJrG+Z2nGo= Subject key identifier: 6F:D5:C6:6D:C9:72:B1:05:85:AE:59:06:A5:FC:26:B8:F4:74:F0:A7 Certificate issuer: /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Certificate serial: 010D0C9F4328584855D59C1A3E0DDCEE85662F40 Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0ba38926-bad3-374f-8c49-9231dc94f5e6.roa Signing time: Thu 26 Dec 2024 14:00:52 +0000 ROA not before: Thu 26 Dec 2024 14:00:52 +0000 ROA not after: Wed 26 Mar 2025 13:00:52 +0000 asID: 393474 IP address blocks: 64.90.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:55:d5:9c:1a:3e:0d:dc:ee:85:66:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd Validity Not Before: Dec 26 14:00:52 2024 GMT Not After : Mar 26 13:00:52 2025 GMT Subject: CN=769e3842-764e-435d-b5bd-214a32b84590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f0:0f:06:3a:4f:7a:a2:a8:1a:78:a0:c8:2d: 70:e5:5f:21:db:28:07:e5:66:87:b6:3c:1d:01:2a: eb:59:d0:ae:12:51:ea:54:60:9d:cd:2f:1d:27:38: 8d:de:15:60:65:ac:d7:bd:88:aa:f8:ba:79:62:57: c9:44:ad:81:42:2a:09:d0:e2:75:44:71:4d:43:c1: 06:e5:59:79:11:7f:4c:15:17:32:b5:bc:77:d0:51: e6:69:8c:d2:10:51:3f:14:9a:ed:c5:1d:47:a9:b4: 35:42:16:08:1c:fd:26:a3:15:8d:99:f8:16:ab:3e: 66:7a:f4:24:e6:93:1f:39:be:48:a7:44:b4:f4:a3: c6:73:5a:32:ce:85:f7:26:6a:80:4a:74:8c:b7:ca: 57:4d:3d:8b:ce:04:e7:b5:f0:f1:0d:98:a7:87:81: b6:dd:0f:36:3e:1c:81:5a:3d:f8:69:57:53:67:d1: f8:a6:40:ea:40:56:81:65:95:06:1a:19:c2:e4:42: 1d:cb:5d:2f:47:93:29:0b:cb:75:10:77:6d:d0:fb: d7:b7:7c:90:35:09:cc:c2:6c:1e:39:da:3b:72:81: 50:20:4f:99:01:18:8e:ef:a2:5d:f0:c4:fd:dc:92: 6c:32:ea:02:67:1f:64:71:89:ce:e7:89:9f:bd:a0: cb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D5:C6:6D:C9:72:B1:05:85:AE:59:06:A5:FC:26:B8:F4:74:F0:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/0ba38926-bad3-374f-8c49-9231dc94f5e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl X509v3 Authority Key Identifier: keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer sbgp-ipAddrBlock: critical IPv4: 64.90.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:e8:24:6f:e4:d7:d7:17:62:77:4e:b8:f5:9b:2f:5c:18:9b: f0:d1:ca:43:30:bc:e6:f1:e5:d1:1a:28:6d:6e:ce:fd:bf:2d: 6c:80:69:58:7b:65:1b:4b:ce:c8:6a:e8:e2:fe:7c:0f:66:b0: 31:66:6b:24:fa:5e:6a:48:21:c6:70:ce:2e:bf:ff:8a:7c:3e: 60:22:4c:63:47:0c:ef:50:8b:16:f6:26:45:7c:0d:5c:49:63: d2:11:ed:6f:9e:12:ac:90:8f:a6:a1:af:72:18:e0:54:ca:90: 4a:44:7f:72:69:ce:33:ae:45:a4:b1:c3:ec:fe:19:8b:01:7f: 78:c9:ac:1e:d7:fd:a8:6a:c4:97:ee:e8:f7:bf:43:23:68:79: cf:4e:5f:3c:6b:e1:2c:86:53:f7:4b:59:99:ff:5e:cb:ed:d8: 0c:c9:f6:6c:d6:bc:a6:4c:e8:9e:19:09:53:01:c0:94:fb:de: 40:14:00:ec:04:2c:ee:21:20:a9:76:d8:b1:14:95:c7:42:94: 49:28:41:ea:ba:49:e1:af:c4:69:02:a3:4c:bb:33:5b:ac:d8: 0a:e2:67:d1:48:e4:0d:1a:08:be:dd:67:28:cf:40:42:06:b3: 72:ab:5f:04:38:69:07:a6:9e:7b:ae:ba:a5:9a:ba:d7:c9:cd: 52:60:60:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhV1ZwaPg3c7oVmL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTMwMmRjOWMtMTJlOS00YjY2LThjNmQtZTI5OTRhMjFh MWJkMB4XDTI0MTIyNjE0MDA1MloXDTI1MDMyNjEzMDA1MlowLzEtMCsGA1UEAxMk NzY5ZTM4NDItNzY0ZS00MzVkLWI1YmQtMjE0YTMyYjg0NTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfAPBjpPeqKoGnigyC1w5V8h2ygH5WaHtjwd ASrrWdCuElHqVGCdzS8dJziN3hVgZazXvYiq+Lp5YlfJRK2BQioJ0OJ1RHFNQ8EG 5Vl5EX9MFRcytbx30FHmaYzSEFE/FJrtxR1HqbQ1QhYIHP0moxWNmfgWqz5mevQk 5pMfOb5Ip0S09KPGc1oyzoX3JmqASnSMt8pXTT2LzgTntfDxDZinh4G23Q82PhyB Wj34aVdTZ9H4pkDqQFaBZZUGGhnC5EIdy10vR5MpC8t1EHdt0PvXt3yQNQnMwmwe Odo7coFQIE+ZARiO76Jd8MT93JJsMuoCZx9kcYnO54mfvaDLbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG/Vxm3JcrEFha5ZBqX8Jrj0dPCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAy ZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5NGEyMWExYmQvMGJhMzg5MjYtYmFkMy0z NzRmLThjNDktOTIzMWRjOTRmNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTMwMmRjOWMtMTJlOS00YjY2LThj NmQtZTI5OTRhMjFhMWJkL2EzMDJkYzljLTEyZTktNGI2Ni04YzZkLWUyOTk0YTIx YTFiZC5jcmwwHwYDVR0jBBgwFoAUD9wvbjNkX+N70ljHXoRo2VwdIpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hMzAyZGM5Yy0xMmU5LTRiNjYtOGM2ZC1lMjk5 NGEyMWExYmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQFqEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAHoJG/k19cXYndOuPWbL1wYm/DRykMwvObx5dEaKG1uzv2/LWyAaVh7 ZRtLzshq6OL+fA9msDFmayT6XmpIIcZwzi6//4p8PmAiTGNHDO9Qixb2JkV8DVxJ Y9IR7W+eEqyQj6ahr3IY4FTKkEpEf3JpzjOuRaSxw+z+GYsBf3jJrB7X/ahqxJfu 6Pe/QyNoec9OXzxr4SyGU/dLWZn/Xsvt2AzJ9mzWvKZM6J4ZCVMBwJT73kAUAOwE LO4hIKl22LEUlcdClEkoQeq6SeGvxGkCo0y7M1us2AriZ9FI5A0aCL7dZyjPQEIG s3KrXwQ4aQemnnuuuqWautfJzVJgYOA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:55 2025 by rpki-client