$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/060d9b45-ec7e-3223-aa62-360e2bf75701.roa File: 060d9b45-ec7e-3223-aa62-360e2bf75701.roa (raw, json) Hash identifier: 0PuxZ9zCdUqXtLiHFJVpdmWiTqeJ4x2U3HMizCw7gDE= Subject key identifier: 51:A1:28:1F:F2:8D:C0:40:C0:C6:3B:31:12:43:22:24:4E:5F:D4:25 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584940394E736EDE7122F222D200 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/060d9b45-ec7e-3223-aa62-360e2bf75701.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 33392 IP address blocks: 216.230.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4e:73:6e:de:71:22:f2:22:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=41d47282-29d4-497b-b96b-9a138029ee03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:04:a5:21:f3:0e:33:e4:7f:c6:ad:5f:f4:0b: 6d:5f:2f:8b:ef:f6:85:ad:47:89:96:c3:f7:5f:1d: 25:63:d9:48:97:02:f8:f5:c2:d3:b2:39:bb:a5:84: 6c:fd:c6:17:88:3d:d1:4c:49:43:dc:69:2e:68:9c: 06:cb:ea:38:fc:bc:80:cf:c7:af:60:ed:7e:6d:45: 69:86:7b:8c:4d:a5:ad:98:0d:a4:39:0f:01:0a:56: 1a:78:6f:19:9d:23:1c:2e:6f:12:30:07:05:ab:90: e4:ba:9e:83:a0:f4:49:9a:56:07:f9:f8:c6:cd:c9: 78:77:28:fc:62:32:c3:3f:69:6f:1a:a5:d8:96:92: 61:01:e2:93:4c:5b:63:7f:5b:f6:6d:8b:6f:67:83: cf:28:df:b0:ba:8d:60:07:b5:80:44:94:13:64:6c: e0:6f:fb:57:f8:f0:e1:1c:0d:3c:11:6d:e8:9d:d2: fe:35:86:50:f3:4c:0b:17:67:79:78:52:79:7c:fd: ca:08:55:8f:83:ae:13:79:aa:13:9e:a6:ac:16:ad: 24:e7:c8:ce:77:8d:6b:3d:ec:3f:0c:24:66:ec:17: f0:6b:fb:40:83:41:d0:b4:2b:73:e2:2c:83:86:14: 7a:0b:a2:42:00:50:a1:92:f8:59:1b:e7:7e:f8:57: 29:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:A1:28:1F:F2:8D:C0:40:C0:C6:3B:31:12:43:22:24:4E:5F:D4:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/060d9b45-ec7e-3223-aa62-360e2bf75701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 216.230.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:43:9f:99:b4:ed:21:59:f6:77:9f:be:e6:0e:17:33:4e:0a: 96:54:3d:24:d2:df:45:b4:0b:49:6a:a5:90:d9:83:f8:73:4c: 4e:49:f0:da:d0:25:9e:1f:7f:3e:77:f1:cc:95:fd:6e:4c:f1: e9:40:75:bf:8b:02:51:cd:45:ec:e7:2c:de:52:41:75:2e:0a: 50:fd:6a:a6:f9:0c:e8:1d:1d:f8:6a:03:f7:89:c8:a4:15:1b: 12:58:9e:d8:b6:a5:64:38:61:e4:af:b9:0f:b1:d0:1a:3b:28: df:83:27:84:c1:a5:27:55:29:16:e0:7d:b9:fd:b0:25:e1:21: cd:3d:63:10:3e:36:19:cd:44:84:f8:ba:a1:c6:c2:a6:bb:6e: 73:5c:3f:12:07:fd:04:4d:47:16:53:ea:9c:02:77:9d:80:0e: a8:8e:f8:7b:1d:9e:8a:9a:28:ec:e2:4c:5d:55:3f:9d:ee:89: 4c:62:2b:f5:0b:e6:b1:e3:c8:40:b6:34:ce:dd:b7:3b:3c:e2: a0:72:a3:d8:51:7e:d5:98:7c:6c:03:07:90:58:61:2c:97:78: ee:68:1e:b9:dd:00:23:08:d7:38:82:89:26:39:c6:d2:97:65: d7:32:20:5d:a3:e9:18:55:4e:ae:3b:7e:39:ec:c3:ef:d5:b4: 8f:32:08:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOU5zbt5xIvIi0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NDFkNDcyODItMjlkNC00OTdiLWI5NmItOWExMzgwMjllZTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlASlIfMOM+R/xq1f9AttXy+L7/aFrUeJlsP3 Xx0lY9lIlwL49cLTsjm7pYRs/cYXiD3RTElD3GkuaJwGy+o4/LyAz8evYO1+bUVp hnuMTaWtmA2kOQ8BClYaeG8ZnSMcLm8SMAcFq5Dkup6DoPRJmlYH+fjGzcl4dyj8 YjLDP2lvGqXYlpJhAeKTTFtjf1v2bYtvZ4PPKN+wuo1gB7WARJQTZGzgb/tX+PDh HA08EW3ondL+NYZQ80wLF2d5eFJ5fP3KCFWPg64TeaoTnqasFq0k58jOd41rPew/ DCRm7Bfwa/tAg0HQtCtz4iyDhhR6C6JCAFChkvhZG+d++Fcp+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGhKB/yjcBAwMY7MRJDIiROX9QlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMDYwZDliNDUtZWM3ZS0z MjIzLWFhNjItMzYwZTJiZjc1NzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlDn5m07SFZ9nefvuYOFzNOCpZUPSTS30W0C0lqpZDZg/hzTE5J8NrQ JZ4ffz538cyV/W5M8elAdb+LAlHNReznLN5SQXUuClD9aqb5DOgdHfhqA/eJyKQV GxJYnti2pWQ4YeSvuQ+x0Bo7KN+DJ4TBpSdVKRbgfbn9sCXhIc09YxA+NhnNRIT4 uqHGwqa7bnNcPxIH/QRNRxZT6pwCd52ADqiO+HsdnoqaKOziTF1VP53uiUxiK/UL 5rHjyEC2NM7dtzs84qByo9hRftWYfGwDB5BYYSyXeO5oHrndACMI1ziCiSY5xtKX ZdcyIF2j6RhVTq47fjnsw+/VtI8yCAA= -----END CERTIFICATE-----Generated at Mon Apr 7 01:08:10 2025 by rpki-client