$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/ba3881cb-2f10-3529-8a0a-02382642e417.roa File: ba3881cb-2f10-3529-8a0a-02382642e417.roa (raw, json) Hash identifier: 72DcYR9ZAoQVlAQ7dC3PKrTQu/D3MwBn8hUJ9OVuFHc= Subject key identifier: A3:A7:28:E0:65:00:A8:2E:B5:ED:61:37:BE:CB:EF:C5:37:8B:24:32 Certificate issuer: /CN=1f2c87d8-024d-4346-b284-d9791df623fe Certificate serial: 010D0C9F432858484EDACD8C53CF85CFC62A8480 Authority key identifier: BA:74:4B:3C:63:17:17:CD:C7:38:71:9D:91:B6:85:59:BE:39:1D:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/ba3881cb-2f10-3529-8a0a-02382642e417.roa Signing time: Tue 24 Dec 2024 02:00:38 +0000 ROA not before: Tue 24 Dec 2024 02:00:38 +0000 ROA not after: Mon 24 Mar 2025 01:00:38 +0000 asID: 14618 IP address blocks: 65.61.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4e:da:cd:8c:53:cf:85:cf:c6:2a:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f2c87d8-024d-4346-b284-d9791df623fe Validity Not Before: Dec 24 02:00:38 2024 GMT Not After : Mar 24 01:00:38 2025 GMT Subject: CN=676ab05f-529e-4bd8-98f4-b740a4be3577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:03:cf:61:c6:43:9d:eb:79:ff:d7:66:64:39: 1c:b5:2e:4f:1a:ca:0d:c9:c4:e8:8e:db:7a:cc:62: 6d:37:f0:0c:62:f0:29:0a:80:cf:24:7b:11:9e:93: 72:c5:79:5a:dd:25:41:83:e7:82:6f:96:83:36:2c: d9:59:64:7f:b6:41:8c:bd:94:86:40:c7:51:b7:23: 64:c9:67:36:92:e3:f9:2c:04:74:be:26:ee:6c:67: ef:0f:33:b6:7c:bc:10:64:9c:6d:0a:58:55:59:23: 7e:7c:a7:3c:3b:d2:76:37:b0:d7:5c:68:1b:2f:27: 80:09:dd:cd:c9:cd:17:8e:0f:41:5e:1f:ce:54:84: 38:a1:8f:82:63:2e:d7:5f:15:d6:d1:88:57:84:59: 33:da:0e:2f:b8:2e:95:22:a5:7b:e3:70:2c:6a:1f: db:99:e4:2a:25:f3:11:0d:2e:31:33:0d:49:4b:bb: 29:6f:6c:c4:77:39:e8:fb:4e:27:23:4b:9a:6e:e2: 96:21:11:80:17:07:13:87:7f:65:8f:65:d2:7a:e6: 1b:d7:96:0d:2b:46:ee:c5:fc:14:51:87:07:89:f8: 21:a4:c1:6e:a1:c4:9b:26:91:f2:f9:ea:91:bc:e9: 22:56:42:66:00:f2:1c:47:a0:a5:c5:ec:f2:47:9e: be:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A7:28:E0:65:00:A8:2E:B5:ED:61:37:BE:CB:EF:C5:37:8B:24:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/ba3881cb-2f10-3529-8a0a-02382642e417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe/1f2c87d8-024d-4346-b284-d9791df623fe.crl X509v3 Authority Key Identifier: keyid:BA:74:4B:3C:63:17:17:CD:C7:38:71:9D:91:B6:85:59:BE:39:1D:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1f2c87d8-024d-4346-b284-d9791df623fe.cer sbgp-ipAddrBlock: critical IPv4: 65.61.52.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:3b:df:2e:fc:c0:bd:9a:6d:bd:5f:5f:cb:d0:ba:45:8f:58: c4:3a:90:e7:79:63:d7:da:94:5e:cc:85:0d:9c:b6:ef:79:5a: e7:25:48:10:16:d9:4c:d2:31:a4:dc:ca:68:78:fd:40:19:0c: a1:68:d7:46:61:c3:12:0c:d9:7f:10:ca:9d:ee:31:82:18:8e: 2f:9e:00:d3:e7:24:97:c3:35:df:2d:9b:28:a6:48:2d:74:6e: fa:b3:37:71:b5:a4:16:30:5d:dd:a0:8a:dd:0b:e4:8f:63:5f: 13:e9:6b:de:24:7d:31:82:3a:f0:67:31:d9:df:10:93:6b:4e: a1:82:e2:d3:0e:ae:ae:5d:8f:e3:a8:96:9e:25:7d:88:74:96: bb:21:01:04:ca:a2:e5:17:57:5f:3d:87:91:9f:1d:72:eb:d0: 91:a6:03:b7:5a:b3:bc:cc:9c:e9:39:58:0f:56:84:47:57:c8: 69:31:8c:41:0f:90:19:f9:b6:75:00:af:ba:c7:14:b6:60:67: a6:a4:28:8b:64:4b:83:c8:70:bc:d4:7a:27:2d:43:f6:99:da: e4:2b:b2:24:7b:16:6e:b8:7e:42:fe:49:95:24:3c:94:d8:93: a2:38:a0:08:3f:09:3d:db:e7:d7:d0:c2:5e:93:8f:d1:05:5f: d9:c3:b2:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhO2s2MU8+Fz8YqhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWYyYzg3ZDgtMDI0ZC00MzQ2LWIyODQtZDk3OTFkZjYy M2ZlMB4XDTI0MTIyNDAyMDAzOFoXDTI1MDMyNDAxMDAzOFowLzEtMCsGA1UEAxMk Njc2YWIwNWYtNTI5ZS00YmQ4LTk4ZjQtYjc0MGE0YmUzNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwPPYcZDnet5/9dmZDkctS5PGsoNycTojtt6 zGJtN/AMYvApCoDPJHsRnpNyxXla3SVBg+eCb5aDNizZWWR/tkGMvZSGQMdRtyNk yWc2kuP5LAR0vibubGfvDzO2fLwQZJxtClhVWSN+fKc8O9J2N7DXXGgbLyeACd3N yc0Xjg9BXh/OVIQ4oY+CYy7XXxXW0YhXhFkz2g4vuC6VIqV743Asah/bmeQqJfMR DS4xMw1JS7spb2zEdzno+04nI0uabuKWIRGAFwcTh39lj2XSeuYb15YNK0buxfwU UYcHifghpMFuocSbJpHy+eqRvOkiVkJmAPIcR6ClxezyR56+JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOnKOBlAKgute1hN77L78U3iyQyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZjJj ODdkOC0wMjRkLTQzNDYtYjI4NC1kOTc5MWRmNjIzZmUvYmEzODgxY2ItMmYxMC0z NTI5LThhMGEtMDIzODI2NDJlNDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWYyYzg3ZDgtMDI0ZC00MzQ2LWIy ODQtZDk3OTFkZjYyM2ZlLzFmMmM4N2Q4LTAyNGQtNDM0Ni1iMjg0LWQ5NzkxZGY2 MjNmZS5jcmwwHwYDVR0jBBgwFoAUunRLPGMXF83HOHGdkbaFWb45HWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZjJjODdkOC0wMjRkLTQzNDYtYjI4NC1kOTc5 MWRmNjIzZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQT00MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACc73y78wL2abb1fX8vQukWPWMQ6kOd5Y9falF7MhQ2ctu95WuclSBAW 2UzSMaTcymh4/UAZDKFo10ZhwxIM2X8Qyp3uMYIYji+eANPnJJfDNd8tmyimSC10 bvqzN3G1pBYwXd2git0L5I9jXxPpa94kfTGCOvBnMdnfEJNrTqGC4tMOrq5dj+Oo lp4lfYh0lrshAQTKouUXV189h5GfHXLr0JGmA7das7zMnOk5WA9WhEdXyGkxjEEP kBn5tnUAr7rHFLZgZ6akKItkS4PIcLzUeictQ/aZ2uQrsiR7Fm64fkL+SZUkPJTY k6I4oAg/CT3b59fQwl6Tj9EFX9nDslc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:07 2025 by rpki-client