$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa File: a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa (raw, json) Hash identifier: k2WRJYYlA76J6dPC96E2LzWDJ4NJyzVYpJ0ZNGzk9yE= Subject key identifier: 6B:5A:37:38:07:91:7F:97:27:17:C8:6D:15:77:78:AE:74:C0:80:94 Certificate issuer: /CN=ba461ed6-9748-4005-b669-8946003e1ae1 Certificate serial: 010D0C9F43285848E00653C63835099E24AA2CA0 Authority key identifier: 86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa Signing time: Fri 14 Feb 2025 02:00:39 +0000 ROA not before: Fri 14 Feb 2025 02:00:39 +0000 ROA not after: Thu 15 May 2025 01:00:39 +0000 asID: 4246 IP address blocks: 128.235.0.0/17 maxlen: 17 128.235.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e0:06:53:c6:38:35:09:9e:24:aa:2c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba461ed6-9748-4005-b669-8946003e1ae1 Validity Not Before: Feb 14 02:00:39 2025 GMT Not After : May 15 01:00:39 2025 GMT Subject: CN=e5d43b7c-3e3d-4a83-bd45-2ef1504ddbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:ec:33:86:f5:a2:46:72:da:4f:1e:77:27: 1c:d9:3a:9e:57:f0:b7:be:9d:b6:53:75:f4:98:41: f4:c6:cd:77:33:be:37:71:64:25:92:34:6c:16:80: 04:a9:58:9d:33:ca:0d:8b:bf:52:47:b5:4d:37:8e: 96:a4:bc:25:c9:e8:f3:ae:99:f9:39:3d:e6:35:00: 02:27:31:08:91:1f:07:ae:15:d4:d1:5c:c8:82:37: 98:9f:f9:8c:b2:e6:4f:e9:5b:8c:f9:35:6e:fc:c5: f7:1f:07:65:c0:81:59:13:d0:83:d3:57:f2:66:fe: 84:3f:02:35:92:de:d6:e8:4e:51:cd:e9:54:83:95: 24:03:97:c9:14:d7:91:66:bf:22:27:c6:3c:6d:dc: f4:c3:1d:71:f9:26:fc:2c:b3:ac:a6:cb:24:16:35: 07:c8:4f:1c:8d:6c:6e:3a:82:8a:84:a7:45:82:8a: 5e:a8:39:b2:8e:1a:52:e2:dc:7c:f1:47:46:25:ad: 5b:76:4b:ad:55:62:a8:7b:52:e7:85:f9:74:a4:6f: a5:1e:b0:4a:ca:52:ba:ee:5f:4d:85:92:65:d1:79: 60:b0:b4:c7:ec:d8:ec:fa:43:ac:98:af:21:5e:e9: 59:b8:3c:85:6c:e5:c0:4d:1e:54:eb:e7:a2:63:2e: a0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5A:37:38:07:91:7F:97:27:17:C8:6D:15:77:78:AE:74:C0:80:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/a8a5e5d0-1203-30a1-9c88-3fd3fd06c358.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1/ba461ed6-9748-4005-b669-8946003e1ae1.crl X509v3 Authority Key Identifier: keyid:86:FF:2D:22:FE:C4:48:05:84:E8:92:00:D8:2D:7A:2E:A3:82:9E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ba461ed6-9748-4005-b669-8946003e1ae1.cer sbgp-ipAddrBlock: critical IPv4: 128.235.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:44:fb:b1:34:d9:d9:7f:72:06:5f:92:64:07:7a:d1:2e:6f: f0:7f:f0:67:1a:64:72:1e:db:f6:d2:ac:b7:60:53:a5:1e:85: 12:65:13:80:d5:9e:97:ec:42:bb:c6:78:aa:e3:cc:6b:c4:7a: 44:54:ba:85:aa:47:39:a5:5e:e2:11:cb:37:8a:b6:84:af:ba: e4:c9:fb:58:18:d0:e8:37:14:0a:62:58:8b:d8:aa:28:a7:ab: f8:16:e7:b7:2c:47:3f:0e:79:78:3f:d4:3f:d8:98:8a:ed:f3: 5f:88:15:0d:55:b6:73:26:1e:4e:13:51:84:2f:57:26:21:27: 2c:ed:a9:23:28:de:2c:df:ad:e0:0f:0e:e5:af:1d:b9:5f:70: e1:94:bd:7b:a2:09:bb:14:7e:10:d0:25:c9:b5:95:73:d8:96: a8:f6:13:b3:94:1d:6b:ab:c7:94:e8:25:9a:07:72:f0:84:f9: 92:9d:0e:4f:0f:af:31:ed:3f:a9:59:ca:57:c8:69:0a:f0:c8: ba:f5:94:9f:11:9d:a6:1d:0f:44:5e:06:b7:16:1e:30:e5:f3: ea:e4:f2:b8:d4:b6:00:a4:d3:ed:3a:44:68:f0:bf:65:89:a4: 44:a1:bf:29:40:74:f6:3a:90:be:18:44:c1:b6:8b:b7:4a:ef: c1:f5:95:2f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjgBlPGODUJniSqLKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE0NjFlZDYtOTc0OC00MDA1LWI2NjktODk0NjAwM2Ux YWUxMB4XDTI1MDIxNDAyMDAzOVoXDTI1MDUxNTAxMDAzOVowLzEtMCsGA1UEAxMk ZTVkNDNiN2MtM2UzZC00YTgzLWJkNDUtMmVmMTUwNGRkYmFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl7sM4b1okZy2k8edycc2TqeV/C3vp22U3X0 mEH0xs13M743cWQlkjRsFoAEqVidM8oNi79SR7VNN46WpLwlyejzrpn5OT3mNQAC JzEIkR8HrhXU0VzIgjeYn/mMsuZP6VuM+TVu/MX3HwdlwIFZE9CD01fyZv6EPwI1 kt7W6E5RzelUg5UkA5fJFNeRZr8iJ8Y8bdz0wx1x+Sb8LLOspsskFjUHyE8cjWxu OoKKhKdFgopeqDmyjhpS4tx88UdGJa1bdkutVWKoe1Lnhfl0pG+lHrBKylK67l9N hZJl0XlgsLTH7Njs+kOsmK8hXulZuDyFbOXATR5U6+eiYy6glQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGtaNzgHkX+XJxfIbRV3eK50wICUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2 MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2MDAzZTFhZTEvYThhNWU1ZDAtMTIwMy0z MGExLTljODgtM2ZkM2ZkMDZjMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmE0NjFlZDYtOTc0OC00MDA1LWI2 NjktODk0NjAwM2UxYWUxL2JhNDYxZWQ2LTk3NDgtNDAwNS1iNjY5LTg5NDYwMDNl MWFlMS5jcmwwHwYDVR0jBBgwFoAUhv8tIv7ESAWE6JIA2C16LqOCnnUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYTQ2MWVkNi05NzQ4LTQwMDUtYjY2OS04OTQ2 MDAzZTFhZTEuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgOswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAc0T7sTTZ2X9yBl+SZAd60S5v8H/wZxpkch7b9tKst2BTpR6FEmUTgNWe l+xCu8Z4quPMa8R6RFS6hapHOaVe4hHLN4q2hK+65Mn7WBjQ6DcUCmJYi9iqKKer +BbntyxHPw55eD/UP9iYiu3zX4gVDVW2cyYeThNRhC9XJiEnLO2pIyjeLN+t4A8O 5a8duV9w4ZS9e6IJuxR+ENAlybWVc9iWqPYTs5Qda6vHlOglmgdy8IT5kp0OTw+v Me0/qVnKV8hpCvDIuvWUnxGdph0PRF4GtxYeMOXz6uTyuNS2AKTT7TpEaPC/ZYmk RKG/KUB09jqQvhhEwbaLt0rvwfWVLw== -----END CERTIFICATE-----Generated at Thu Mar 13 19:06:08 2025 by rpki-client