$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa File: 3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa (raw, json) Hash identifier: dEBBPZByflKZEiBNXtyG3otgAMBysf8wELGY5Rf1Qhc= Subject key identifier: 44:8D:69:F2:ED:9B:2A:62:D0:78:BF:1A:58:E2:16:88:14:39:86:91 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F43285848547032E234CCAD47A6974200 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 33392 IP address blocks: 209.35.0.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:32:e2:34:cc:ad:47:a6:97:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=8b6902c8-b5dd-49ca-88c5-c880e0990c38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:31:93:4c:fd:17:9d:8a:d2:fd:d7:0a:08: 79:12:35:ce:1c:84:76:66:8b:bd:86:7e:3b:85:48: a3:ed:54:a3:50:5d:0b:86:b8:d8:ef:28:89:d2:78: f6:89:8a:16:03:4d:b7:09:4e:f7:5c:20:6c:df:c9: 4b:fc:46:42:37:14:b7:7a:28:41:ff:f6:1f:e0:9b: be:1c:aa:e0:a5:b3:fa:2c:df:18:1b:4c:92:8e:4a: 08:07:b9:f8:64:11:7f:eb:b4:48:2c:0f:45:eb:ed: 27:f9:a7:c9:1b:26:d5:7d:aa:ab:15:7d:55:d5:a9: fd:0b:0e:87:d9:44:db:dc:a0:69:e4:d2:5e:25:1e: f6:2a:b6:b8:52:e7:cf:4d:9e:6a:34:5c:36:d1:d8: 2b:7f:a6:ba:db:6d:9f:64:c9:71:ee:53:6a:dd:38: bb:b2:2e:e9:0c:fd:3c:6a:08:74:b4:89:c1:cc:92: 2c:d1:25:4d:26:47:59:e9:24:04:fe:22:1d:b4:97: 0e:98:b6:39:7f:a1:bd:fd:da:7d:dd:aa:8f:55:42: 22:06:ab:9f:99:06:7f:3d:00:84:59:6f:49:d9:9c: 39:a3:fc:5c:4e:e2:72:01:33:bf:93:79:90:ac:a6: d9:ef:df:3b:d9:85:bd:82:f7:37:bb:f4:86:e3:87: bb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8D:69:F2:ED:9B:2A:62:D0:78:BF:1A:58:E2:16:88:14:39:86:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/3f0825e7-e80f-3eb2-81c7-75d7989473fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.0.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:90:25:0d:22:75:2a:85:19:c8:e7:a1:be:f9:1a:5a:02:fd: f0:3e:e4:07:8b:6c:67:02:7c:a8:33:13:3f:4a:e1:28:88:f8: 44:87:98:2f:90:80:07:88:09:8f:ba:7e:51:3b:0e:f2:09:be: e4:e9:91:0a:de:d2:06:41:d7:89:34:93:cb:b8:67:f8:04:9a: 08:50:38:98:aa:68:ab:04:d8:76:2e:3d:55:16:64:66:37:89: d6:fb:a0:5f:3e:c4:1c:6f:81:fd:81:a2:8c:0d:39:73:40:ed: cf:8f:ed:49:41:98:a3:5b:99:61:1d:c5:03:91:cd:de:fa:e6: cf:64:68:d2:f4:42:65:8c:34:b5:92:be:75:9e:d3:21:1d:fd: 79:fe:ce:6d:29:39:23:b7:e2:5d:33:30:98:0f:c7:f2:1c:1d: d0:44:03:66:d6:be:4e:84:b1:73:fe:5a:b5:89:b5:79:5a:b1: fd:a7:21:83:8a:46:e0:1e:50:e5:0e:9c:eb:26:3c:41:45:5f: 67:f2:a0:bb:85:16:6d:23:de:63:b0:5a:97:df:3b:67:15:f0: fb:62:4b:5f:30:f0:24:e9:b4:ce:07:bf:e6:c3:06:5b:27:ca: f4:ac:17:c8:85:0b:a0:19:e1:48:fa:61:2d:a8:65:90:4b:53: e8:c4:fb:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcDLiNMytR6aXQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk OGI2OTAyYzgtYjVkZC00OWNhLTg4YzUtYzg4MGUwOTkwYzM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtUxk0z9F52K0v3XCgh5EjXOHIR2Zou9hn47 hUij7VSjUF0LhrjY7yiJ0nj2iYoWA023CU73XCBs38lL/EZCNxS3eihB//Yf4Ju+ HKrgpbP6LN8YG0ySjkoIB7n4ZBF/67RILA9F6+0n+afJGybVfaqrFX1V1an9Cw6H 2UTb3KBp5NJeJR72Kra4UufPTZ5qNFw20dgrf6a6222fZMlx7lNq3Ti7si7pDP08 agh0tInBzJIs0SVNJkdZ6SQE/iIdtJcOmLY5f6G9/dp93aqPVUIiBqufmQZ/PQCE WW9J2Zw5o/xcTuJyATO/k3mQrKbZ79872YW9gvc3u/SG44e7qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESNafLtmypi0Hi/GljiFogUOYaRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvM2YwODI1ZTctZTgwZi0z ZWIyLTgxYzctNzVkNzk4OTQ3M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0SMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuQJQ0idSqFGcjnob75GloC/fA+5AeLbGcCfKgzEz9K4SiI+ESHmC+Q gAeICY+6flE7DvIJvuTpkQre0gZB14k0k8u4Z/gEmghQOJiqaKsE2HYuPVUWZGY3 idb7oF8+xBxvgf2BoowNOXNA7c+P7UlBmKNbmWEdxQORzd765s9kaNL0QmWMNLWS vnWe0yEd/Xn+zm0pOSO34l0zMJgPx/IcHdBEA2bWvk6EsXP+WrWJtXlasf2nIYOK RuAeUOUOnOsmPEFFX2fyoLuFFm0j3mOwWpffO2cV8PtiS18w8CTptM4Hv+bDBlsn yvSsF8iFC6AZ4Uj6YS2oZZBLU+jE+wQ= -----END CERTIFICATE-----Generated at Sun Feb 16 20:46:55 2025 by rpki-client