$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/2021ca11-bb53-3b76-82ac-95fa09e690a3.roa File: 2021ca11-bb53-3b76-82ac-95fa09e690a3.roa (raw, json) Hash identifier: ibZDPhaC1UYu6N7Ok22KZQIiiIhnexU1xPctkrAQDzk= Subject key identifier: CE:1C:CD:32:CE:27:6F:7F:D8:3B:A6:9A:AB:61:78:54:F9:77:AE:AA Certificate issuer: /CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Certificate serial: 010D0C9F4328584905B6B21A3B5E9EDCE724C1A0 Authority key identifier: 91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/2021ca11-bb53-3b76-82ac-95fa09e690a3.roa Signing time: Thu 27 Feb 2025 14:00:51 +0000 ROA not before: Thu 27 Feb 2025 14:00:51 +0000 ROA not after: Wed 28 May 2025 13:00:51 +0000 asID: 32762 IP address blocks: 192.197.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:05:b6:b2:1a:3b:5e:9e:dc:e7:24:c1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5 Validity Not Before: Feb 27 14:00:51 2025 GMT Not After : May 28 13:00:51 2025 GMT Subject: CN=c35e2a34-2166-44af-8bff-e743a6aecd32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d6:bc:f9:f3:04:fd:7e:c3:27:e8:70:ad:01: f5:7d:85:9a:46:86:74:44:ef:32:5d:12:f6:66:d2: 68:2d:10:6b:23:0b:93:66:70:61:01:79:9b:92:80: 38:79:94:62:b5:c2:43:0a:71:c0:2d:aa:db:c2:6c: 44:39:72:30:15:62:db:48:85:df:e6:93:42:eb:71: d5:b8:08:f7:ae:06:ac:c6:86:b1:17:63:c6:16:a9: c8:55:27:5b:68:2a:c1:60:58:49:5a:23:8e:18:30: 06:45:e1:44:7f:d0:d5:a5:9e:48:3d:8a:5a:0d:1f: 1d:35:41:32:a8:05:eb:1b:6c:94:c0:ea:c7:80:26: 0a:a6:f7:20:59:05:8c:64:da:62:60:a0:40:c9:99: eb:13:c4:05:b4:69:c9:07:a5:61:08:e9:1c:8c:76: f7:88:d2:3b:2f:17:1e:cc:a7:34:6b:7c:10:94:15: be:4c:47:96:b8:f7:fc:82:8f:e4:8e:f4:d2:b3:11: 89:2a:5f:98:40:b2:55:e9:c5:5e:bd:07:ea:d8:fa: 42:e1:bb:05:0e:80:65:87:a1:86:b4:45:39:a3:78: d6:f5:e0:7f:58:27:76:f8:3d:bc:c3:78:6e:36:1a: 04:4a:f1:06:5d:36:a4:fe:5d:b5:61:70:a7:d9:66: 74:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:1C:CD:32:CE:27:6F:7F:D8:3B:A6:9A:AB:61:78:54:F9:77:AE:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/2021ca11-bb53-3b76-82ac-95fa09e690a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.crl X509v3 Authority Key Identifier: keyid:91:A3:22:2D:BE:8B:58:8F:B4:FB:2C:CD:8C:91:DE:16:84:0D:88:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ba5703fc-b0e2-4dd3-abbc-71d08e1c67c5.cer sbgp-ipAddrBlock: critical IPv4: 192.197.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:f5:7e:eb:84:95:22:47:a2:65:5a:a5:06:2e:c3:be:66:f2: 20:e4:75:1c:12:47:b7:c0:a3:d9:39:9e:aa:e5:a0:df:52:76: ed:7f:7a:e9:8e:40:c5:6b:3f:34:d2:0e:42:df:47:c7:9b:1e: e7:27:ed:2c:3d:49:0b:fa:b9:a6:46:45:77:ad:57:19:1e:c3: fb:df:84:05:ae:33:c7:c1:23:27:f7:99:84:ad:ed:a1:4a:a3: a9:2e:cb:72:a9:10:84:c7:9e:53:51:1c:b4:bb:f9:ad:22:7d: 8a:c5:31:40:13:5f:63:38:7f:25:13:6a:39:5f:9d:81:5e:77: 55:3c:b9:20:58:cb:45:8c:2c:30:b4:12:f6:ee:d3:5d:12:f4: 89:f1:8a:dc:72:e9:42:b5:45:2a:e6:42:bc:f4:07:b1:ec:4f: 0e:5f:31:7c:94:7e:4d:d7:df:02:f2:19:ff:bf:39:27:85:09: 18:27:90:29:cc:15:f5:10:96:ef:7d:6f:18:a1:d7:7d:11:8f: 9a:70:a4:a7:ce:17:43:78:74:0c:61:db:52:11:15:f7:3e:ed: 0d:ba:5c:c9:3a:80:c1:6b:12:b6:ed:83:ed:03:4c:44:e4:25: a8:a2:a7:1e:19:d2:3d:44:1d:73:8a:cc:5f:ec:02:50:9e:f2: dc:2e:18:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtrIaO16e3OckwaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE1NzAzZmMtYjBlMi00ZGQzLWFiYmMtNzFkMDhlMWM2 N2M1MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk YzM1ZTJhMzQtMjE2Ni00NGFmLThiZmYtZTc0M2E2YWVjZDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9a8+fME/X7DJ+hwrQH1fYWaRoZ0RO8yXRL2 ZtJoLRBrIwuTZnBhAXmbkoA4eZRitcJDCnHALarbwmxEOXIwFWLbSIXf5pNC63HV uAj3rgasxoaxF2PGFqnIVSdbaCrBYFhJWiOOGDAGReFEf9DVpZ5IPYpaDR8dNUEy qAXrG2yUwOrHgCYKpvcgWQWMZNpiYKBAyZnrE8QFtGnJB6VhCOkcjHb3iNI7Lxce zKc0a3wQlBW+TEeWuPf8go/kjvTSsxGJKl+YQLJV6cVevQfq2PpC4bsFDoBlh6GG tEU5o3jW9eB/WCd2+D28w3huNhoESvEGXTak/l21YXCn2WZ0lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4czTLOJ29/2DummqtheFT5d66qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3 MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQwOGUxYzY3YzUvMjAyMWNhMTEtYmI1My0z Yjc2LTgyYWMtOTVmYTA5ZTY5MGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmE1NzAzZmMtYjBlMi00ZGQzLWFi YmMtNzFkMDhlMWM2N2M1L2JhNTcwM2ZjLWIwZTItNGRkMy1hYmJjLTcxZDA4ZTFj NjdjNS5jcmwwHwYDVR0jBBgwFoAUkaMiLb6LWI+0+yzNjJHeFoQNiAswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iYTU3MDNmYy1iMGUyLTRkZDMtYWJiYy03MWQw OGUxYzY3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwMVaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKj1fuuElSJHomVapQYuw75m8iDkdRwSR7fAo9k5nqrloN9Sdu1/eumO QMVrPzTSDkLfR8ebHucn7Sw9SQv6uaZGRXetVxkew/vfhAWuM8fBIyf3mYSt7aFK o6kuy3KpEITHnlNRHLS7+a0ifYrFMUATX2M4fyUTajlfnYFed1U8uSBYy0WMLDC0 Evbu010S9Inxitxy6UK1RSrmQrz0B7HsTw5fMXyUfk3X3wLyGf+/OSeFCRgnkCnM FfUQlu99bxih130Rj5pwpKfOF0N4dAxh21IRFfc+7Q26XMk6gMFrErbtg+0DTETk Jaiipx4Z0j1EHXOKzF/sAlCe8twuGMI= -----END CERTIFICATE-----Generated at Fri Mar 14 13:23:01 2025 by rpki-client