$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/66cef13d-dff8-32f0-a25e-7a5331345d1c.roa File: 66cef13d-dff8-32f0-a25e-7a5331345d1c.roa (raw, json) Hash identifier: WAURoaWK15gniQJ7KTZ8h2gl/JoLftCIxSRxQF02bX8= Subject key identifier: EE:BC:FD:2F:70:31:0B:24:66:38:FB:CB:B4:29:2D:2C:F4:5D:B9:45 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584940394E3E45B0FAB523414660 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/66cef13d-dff8-32f0-a25e-7a5331345d1c.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 33392 IP address blocks: 142.202.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4e:3e:45:b0:fa:b5:23:41:46:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=e17c4175-da0a-4638-83f2-d2b9496cfa02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:e0:1b:1b:3d:8b:39:0b:6a:c9:ab:09:56: ab:44:b6:c5:8e:d7:2f:58:ce:ab:89:e5:a0:b0:de: ee:5a:de:85:af:84:db:34:f6:45:5d:53:e6:4f:50: 1f:be:33:7e:f6:13:b4:6b:6a:58:bc:24:41:21:f6: 87:a7:5f:9a:f0:36:ef:93:af:f4:9c:4e:41:94:81: fd:4d:7a:6e:31:00:35:22:35:9d:53:76:89:42:1e: f3:d9:62:5a:ba:e1:0a:f2:ff:d2:8a:1c:7a:73:ff: b7:8f:3e:28:9e:f5:04:72:19:05:9f:11:ea:13:7e: a5:d6:9e:9f:6c:4e:51:4a:b8:ae:8a:82:b6:f3:58: 4d:76:e9:00:d5:36:0e:a5:5f:15:aa:ca:1f:f2:ab: 3c:c8:68:01:79:53:bd:26:1b:e0:e0:41:71:ab:a6: d8:d7:9e:56:4b:9c:dc:ad:ff:a2:96:08:0a:d3:5b: 4e:02:b1:0e:9d:6f:8f:2c:dc:7e:48:9e:5a:ec:4b: 29:f4:87:a6:ec:f4:e9:de:af:a5:d8:4d:7f:d0:41: 2c:fe:31:72:55:26:a2:e8:3d:62:cf:d9:07:7d:53: 82:50:f3:78:cd:0f:6b:40:a4:27:d6:66:28:14:13: 13:04:a8:e7:00:bc:d6:2f:96:04:f7:15:01:d4:5b: 0e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BC:FD:2F:70:31:0B:24:66:38:FB:CB:B4:29:2D:2C:F4:5D:B9:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/66cef13d-dff8-32f0-a25e-7a5331345d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 142.202.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:05:a8:f7:82:47:7b:7c:dc:6e:3c:10:65:ea:b9:e9:65:64: e5:56:19:25:30:89:f4:fe:43:ea:c5:30:2b:47:6e:35:2f:cb: 91:94:eb:5c:73:71:23:1a:96:95:13:94:e8:e9:42:36:fa:73: 33:bc:3f:72:07:e3:d3:5b:bc:09:2b:ec:d8:11:be:a4:30:94: 0e:0c:d7:fc:cb:43:53:ce:64:be:ce:6a:bf:eb:5f:52:a6:f2: 4a:81:ca:23:dd:4b:a5:c8:a0:cf:81:da:79:84:75:33:21:73: 41:c6:31:ca:77:b0:32:26:6a:e6:f5:91:9a:7d:67:d1:b6:5a: 20:e4:1d:43:6d:f0:09:5a:82:a0:17:ca:5c:8e:93:3b:24:ff: 69:06:27:f1:7d:f6:41:ae:fc:43:5f:1c:cd:bf:9b:37:81:6f: 65:7c:26:d0:9c:9e:e3:46:c2:4f:b1:79:bb:08:31:4a:5c:1a: d7:ed:67:a8:d6:7a:75:55:e2:57:55:82:07:12:e2:28:af:f7: 44:5c:5d:00:bb:ce:49:b1:db:db:b8:d9:f7:44:63:57:9d:15: f6:c8:06:19:2f:c1:06:62:65:61:7d:d3:c6:78:b1:38:00:f1: fc:ea:65:d1:88:64:a4:69:b4:33:e2:3f:33:a6:0b:dc:d7:90: 13:0f:9b:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOU4+RbD6tSNBRmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk ZTE3YzQxNzUtZGEwYS00NjM4LTgzZjItZDJiOTQ5NmNmYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMDgGxs9izkLasmrCVarRLbFjtcvWM6rieWg sN7uWt6Fr4TbNPZFXVPmT1AfvjN+9hO0a2pYvCRBIfaHp1+a8Dbvk6/0nE5BlIH9 TXpuMQA1IjWdU3aJQh7z2WJauuEK8v/Sihx6c/+3jz4onvUEchkFnxHqE36l1p6f bE5RSriuioK281hNdukA1TYOpV8Vqsof8qs8yGgBeVO9Jhvg4EFxq6bY155WS5zc rf+ilggK01tOArEOnW+PLNx+SJ5a7Esp9Iem7PTp3q+l2E1/0EEs/jFyVSai6D1i z9kHfVOCUPN4zQ9rQKQn1mYoFBMTBKjnALzWL5YE9xUB1FsO9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO68/S9wMQskZjj7y7QpLSz0XblFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvNjZjZWYxM2QtZGZmOC0z MmYwLWEyNWUtN2E1MzMxMzQ1ZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjspwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMFqPeCR3t83G48EGXquellZOVWGSUwifT+Q+rFMCtHbjUvy5GU61xz cSMalpUTlOjpQjb6czO8P3IH49NbvAkr7NgRvqQwlA4M1/zLQ1POZL7Oar/rX1Km 8kqByiPdS6XIoM+B2nmEdTMhc0HGMcp3sDImaub1kZp9Z9G2WiDkHUNt8AlagqAX ylyOkzsk/2kGJ/F99kGu/ENfHM2/mzeBb2V8JtCcnuNGwk+xebsIMUpcGtftZ6jW enVV4ldVggcS4iiv90RcXQC7zkmx29u42fdEY1edFfbIBhkvwQZiZWF908Z4sTgA 8fzqZdGIZKRptDPiPzOmC9zXkBMPm/U= -----END CERTIFICATE-----Generated at Thu Apr 17 19:44:30 2025 by rpki-client