$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa File: ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa (raw, json) Hash identifier: jwB9n4XWRy7k4vHnnMruRW1OgmoF2oNLRfem9YwieD8= Subject key identifier: 04:37:BB:97:93:92:3F:56:EF:75:C2:60:A5:78:48:47:57:E5:E3:A4 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F43285848C41B7F5113C0E03AC3BE8480 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 394002 IP address blocks: 64.136.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:7f:51:13:c0:e0:3a:c3:be:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=205d909c-c7d8-4a30-83c5-142e3d61e167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2e:75:2e:46:47:75:11:51:e0:d5:ee:8e:43: f3:ce:24:de:1e:78:44:ac:3a:69:b6:6b:1b:96:a1: 6b:ec:77:b0:af:7f:64:6b:30:90:9c:9b:4a:35:0c: 20:6f:4d:02:2e:8d:d3:ff:6a:84:07:ba:c1:64:d7: b0:ed:e8:d0:71:a6:a8:65:1e:a3:75:9e:3d:4a:38: 85:db:9d:03:dd:0c:d6:51:88:d9:13:34:18:02:ea: 98:53:ed:35:b5:94:70:95:81:65:64:e8:1b:6d:02: 0a:52:3d:1f:d6:fb:00:9e:6b:e2:db:a1:f6:a8:42: 58:a9:df:e9:3b:f0:1b:30:cd:6a:1e:6c:99:b8:89: 8f:2a:3f:7c:7f:17:5e:89:c2:c4:14:dd:ec:b7:0a: e7:31:2f:e1:3c:60:cd:85:49:3a:0b:00:16:c7:ac: fe:84:c0:88:e2:24:d9:27:31:aa:54:08:35:0c:96: 57:75:c1:89:c5:aa:4a:d5:6b:6b:c1:ef:b0:2b:db: 6c:1c:b1:f0:1d:8b:42:91:c6:96:95:d2:21:d4:9c: 21:a2:33:82:f7:3e:ec:e7:2f:dd:e0:c6:47:6d:3f: cb:2f:24:75:23:13:07:b9:3d:67:e6:68:29:ff:af: 5d:dc:fa:16:de:fa:79:ad:a2:88:f5:de:95:81:5e: 31:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:37:BB:97:93:92:3F:56:EF:75:C2:60:A5:78:48:47:57:E5:E3:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ba0f5949-0792-3f7c-9cde-b7e74546e79c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 64.136.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:1b:76:e2:d3:27:aa:60:a7:4f:89:f4:bd:af:18:43:ee:8f: 61:0d:9e:86:e5:f6:8c:86:bf:39:7c:fa:68:28:03:df:c9:47: 51:66:9a:f9:63:db:4a:2c:bb:c5:bb:ff:97:01:19:23:8a:0c: 05:a9:1a:c5:8d:b6:03:53:bb:a2:c0:0c:11:bd:ff:a3:a2:f6: ef:cc:06:d0:dd:ef:cd:28:88:d4:48:5b:e9:5a:2a:81:50:20: 16:d8:bf:c5:4a:fa:e9:dd:45:b4:89:00:44:1e:10:0a:96:f6: a8:ce:1d:ab:25:a8:d4:67:f6:88:b0:33:d3:e3:b3:8d:79:1f: 2d:33:75:82:da:b7:fd:d8:16:b2:2c:ee:05:15:07:96:db:d8: 82:71:89:f2:6d:17:b6:61:04:12:7d:8c:19:07:f5:f9:26:bc: bb:d7:ef:86:36:f7:41:60:fc:ba:cc:b5:4f:c5:c0:68:db:8d: 12:03:db:ce:a1:7d:5a:87:fe:f7:26:08:19:45:3b:ca:69:dd: 4c:88:d1:54:7d:55:e0:45:7a:eb:8a:a1:c5:ad:ce:99:3f:d7: b3:ef:59:29:64:16:13:39:69:17:c0:8f:0b:00:02:7d:12:f7: 8f:5e:6f:d1:c9:4e:98:cb:f1:bb:93:b2:63:0b:db:8a:36:69: 35:95:db:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEG39RE8DgOsO+hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk MjA1ZDkwOWMtYzdkOC00YTMwLTgzYzUtMTQyZTNkNjFlMTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S51LkZHdRFR4NXujkPzziTeHnhErDpptmsb lqFr7Hewr39kazCQnJtKNQwgb00CLo3T/2qEB7rBZNew7ejQcaaoZR6jdZ49SjiF 250D3QzWUYjZEzQYAuqYU+01tZRwlYFlZOgbbQIKUj0f1vsAnmvi26H2qEJYqd/p O/AbMM1qHmyZuImPKj98fxdeicLEFN3stwrnMS/hPGDNhUk6CwAWx6z+hMCI4iTZ JzGqVAg1DJZXdcGJxapK1Wtrwe+wK9tsHLHwHYtCkcaWldIh1JwhojOC9z7s5y/d 4MZHbT/LLyR1IxMHuT1n5mgp/69d3PoW3vp5raKI9d6VgV4x+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQ3u5eTkj9W73XCYKV4SEdX5eOkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvYmEwZjU5NDktMDc5Mi0z ZjdjLTljZGUtYjdlNzQ1NDZlNzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQIhiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwbduLTJ6pgp0+J9L2vGEPuj2ENnobl9oyGvzl8+mgoA9/JR1Fmmvlj 20osu8W7/5cBGSOKDAWpGsWNtgNTu6LADBG9/6Oi9u/MBtDd780oiNRIW+laKoFQ IBbYv8VK+undRbSJAEQeEAqW9qjOHaslqNRn9oiwM9Pjs415Hy0zdYLat/3YFrIs 7gUVB5bb2IJxifJtF7ZhBBJ9jBkH9fkmvLvX74Y290Fg/LrMtU/FwGjbjRID286h fVqH/vcmCBlFO8pp3UyI0VR9VeBFeuuKocWtzpk/17PvWSlkFhM5aRfAjwsAAn0S 949eb9HJTpjL8buTsmML24o2aTWV2/I= -----END CERTIFICATE-----Generated at Tue Apr 8 11:06:22 2025 by rpki-client