$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/ba3881cb-2f10-3529-8a0a-02382642e417.roa File: ba3881cb-2f10-3529-8a0a-02382642e417.roa (raw, json) Hash identifier: s3tdMu1R8lzqCbd0hlXtTm5jAlnwMuC10s+tKp+9Rkg= Subject key identifier: 76:E7:C3:4E:96:B5:D5:76:8D:5D:A9:80:73:5E:E9:42:88:37:68:43 Certificate issuer: /CN=1f2c87d8-024d-4346-b284-d9791df623fe Certificate serial: 010D0C9F4328584A0D6A8C5A367C704DB5CD2200 Authority key identifier: BA:74:4B:3C:63:17:17:CD:C7:38:71:9D:91:B6:85:59:BE:39:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/ba3881cb-2f10-3529-8a0a-02382642e417.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 14618 IP address blocks: 65.61.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:8c:5a:36:7c:70:4d:b5:cd:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f2c87d8-024d-4346-b284-d9791df623fe Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=228cb42b-4f16-46b3-b0d4-8c064a90a797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5c:6d:09:34:cc:2c:44:56:fc:7b:75:df:95: 47:9f:0d:c3:e5:14:58:38:a8:d8:a0:ee:fe:1a:4f: 06:09:3b:5b:25:56:ef:66:a0:c1:76:f9:6d:60:a6: 62:fb:0d:75:7e:3b:3f:ca:3f:67:11:62:d1:68:fe: 3c:f6:9c:6e:c8:3a:f0:66:0d:b5:6b:f4:1f:2e:ba: 31:7b:ae:ea:78:40:8f:3d:78:1c:36:76:c6:04:3e: 1f:8c:2a:a0:08:0d:31:65:c0:3c:77:e8:5e:55:5c: 86:81:9e:7c:f9:cb:34:4e:fb:da:f0:68:8b:3b:cf: 57:c1:d1:72:49:01:ca:c7:9b:65:7f:f1:e9:5b:d5: 5f:7a:39:7b:70:c7:39:ba:d1:36:9f:48:fa:f9:65: b6:05:33:04:6e:85:7e:ce:5c:6c:74:d5:b8:08:e4: 6f:79:ec:9e:ab:cb:11:2d:f8:44:06:ce:f8:12:54: ef:9e:74:38:b0:49:50:e9:1b:46:e7:4e:38:35:00: 54:4a:47:3f:d7:2e:e0:61:8d:3f:f5:7f:f1:fb:b2: 8f:32:ff:a8:71:ed:f1:50:b2:8c:e1:35:e5:19:72: bf:89:a7:01:de:b4:17:c9:b0:45:19:86:a1:7f:e8: e4:29:67:89:7b:17:85:b3:60:aa:9c:15:d8:9a:47: f4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E7:C3:4E:96:B5:D5:76:8D:5D:A9:80:73:5E:E9:42:88:37:68:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/ba3881cb-2f10-3529-8a0a-02382642e417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.crl X509v3 Authority Key Identifier: keyid:BA:74:4B:3C:63:17:17:CD:C7:38:71:9D:91:B6:85:59:BE:39:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe.cer sbgp-ipAddrBlock: critical IPv4: 65.61.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:c6:ee:1d:f0:c0:6d:3a:df:9a:56:ed:44:93:54:c8:a7:35: 39:6c:81:8a:fa:79:a2:a1:ae:af:af:ad:89:d9:60:55:99:d9: 3b:1d:ad:41:8e:9a:33:92:d2:8a:19:e6:4f:30:eb:72:6f:54: e7:a1:bc:ec:76:e0:85:5d:a1:a3:a1:a0:b7:f0:8a:db:27:c1: dc:a1:18:87:64:6a:50:a4:c9:e7:65:b9:b6:be:2a:d5:6c:20: d1:bd:b9:66:7a:0b:11:4b:07:67:b1:0e:80:50:a0:41:0b:75: 8a:12:19:d7:9c:8c:79:fd:08:c5:24:32:43:10:9c:83:a0:51: 18:42:2d:06:61:67:12:09:48:7d:c5:b0:39:c5:38:1d:84:df: f1:62:eb:e3:17:ad:51:48:21:50:d9:98:ff:b7:34:7c:05:43: d9:d6:98:61:b4:b2:db:c4:59:e7:4f:31:da:12:13:bd:ed:62: 01:f9:3b:c7:83:94:69:49:06:00:6b:0d:7d:17:0e:4e:ff:fc: f4:4f:83:0e:b7:05:dc:10:f2:79:f1:98:39:88:fd:6a:81:ad: 1c:37:b9:87:20:dd:6b:e6:cb:b7:50:6e:c8:1a:37:ee:40:26: 28:76:90:b5:14:ff:30:68:1f:ac:b6:e2:b1:4a:07:43:fa:7e: d5:f1:9d:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaoxaNnxwTbXNIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYyYzg3ZDgtMDI0ZC00MzQ2LWIyODQtZDk3OTFkZjYy M2ZlMB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk MjI4Y2I0MmItNGYxNi00NmIzLWIwZDQtOGMwNjRhOTBhNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVxtCTTMLERW/Ht135VHnw3D5RRYOKjYoO7+ Gk8GCTtbJVbvZqDBdvltYKZi+w11fjs/yj9nEWLRaP489pxuyDrwZg21a/QfLrox e67qeECPPXgcNnbGBD4fjCqgCA0xZcA8d+heVVyGgZ58+cs0Tvva8GiLO89XwdFy SQHKx5tlf/HpW9Vfejl7cMc5utE2n0j6+WW2BTMEboV+zlxsdNW4CORveeyeq8sR LfhEBs74ElTvnnQ4sElQ6RtG5044NQBUSkc/1y7gYY0/9X/x+7KPMv+oce3xULKM 4TXlGXK/iacB3rQXybBFGYahf+jkKWeJexeFs2CqnBXYmkf0wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbnw06WtdV2jV2pgHNe6UKIN2hDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjJj ODdkOC0wMjRkLTQzNDYtYjI4NC1kOTc5MWRmNjIzZmUvYmEzODgxY2ItMmYxMC0z NTI5LThhMGEtMDIzODI2NDJlNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWYyYzg3ZDgtMDI0ZC00MzQ2LWIy ODQtZDk3OTFkZjYyM2ZlLzFmMmM4N2Q4LTAyNGQtNDM0Ni1iMjg0LWQ5NzkxZGY2 MjNmZS5jcmwwHwYDVR0jBBgwFoAUunRLPGMXF83HOHGdkbaFWb45HWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjJjODdkOC0wMjRkLTQzNDYtYjI4NC1kOTc5 MWRmNjIzZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQT00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzG7h3wwG0635pW7USTVMinNTlsgYr6eaKhrq+vrYnZYFWZ2TsdrUGO mjOS0ooZ5k8w63JvVOehvOx24IVdoaOhoLfwitsnwdyhGIdkalCkyedluba+KtVs ING9uWZ6CxFLB2exDoBQoEELdYoSGdecjHn9CMUkMkMQnIOgURhCLQZhZxIJSH3F sDnFOB2E3/Fi6+MXrVFIIVDZmP+3NHwFQ9nWmGG0stvEWedPMdoSE73tYgH5O8eD lGlJBgBrDX0XDk7//PRPgw63BdwQ8nnxmDmI/WqBrRw3uYcg3Wvmy7dQbsgaN+5A Jih2kLUU/zBoH6y24rFKB0P6ftXxnY4= -----END CERTIFICATE-----Generated at Sat Jun 7 17:26:47 2025 by rpki-client