$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/66cef13d-dff8-32f0-a25e-7a5331345d1c.roa File: 66cef13d-dff8-32f0-a25e-7a5331345d1c.roa (raw, json) Hash identifier: yViOCLYy0JQHWhnWu3ekJPeqrRcGFAyYjfiWkanLk18= Subject key identifier: AD:15:21:2C:95:E3:3F:8C:66:42:9A:AA:9C:D4:91:46:CD:E4:8F:CB Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F432858485F9AE6B6F2F962B0B453FE80 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/66cef13d-dff8-32f0-a25e-7a5331345d1c.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 33392 IP address blocks: 142.202.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Feb 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:e6:b6:f2:f9:62:b0:b4:53:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=cf7caebe-477d-4204-b8a5-6887eabdeb93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dd:84:b0:12:41:b1:4d:c3:9d:e7:3a:2c:29: 8e:ea:93:5c:86:26:d7:cc:a2:22:01:a3:dc:6a:2d: 52:f4:d7:bc:91:db:d6:e1:92:bd:5e:c7:f3:e7:36: ab:64:e4:92:9c:6d:1a:aa:5e:d5:2e:59:5e:8d:10: 1e:15:e3:52:cd:ab:73:21:77:98:40:4d:f5:bf:d3: b1:3f:cc:e0:ed:07:f4:07:9f:9d:00:90:4a:7d:b4: 9f:d4:4f:9c:00:ae:57:68:9b:89:98:b3:2a:ee:90: 4e:ee:6a:8a:0b:29:d5:c3:84:06:d0:1b:9b:89:28: e8:7b:f7:e8:58:25:7c:3b:6a:18:90:29:51:7e:db: 1c:81:5d:55:8e:9c:ee:87:74:b8:cb:d0:d4:81:f9: 94:4c:3e:42:20:b7:ff:d7:8d:9a:93:a8:e1:f4:31: 0a:7f:18:59:0d:cf:b2:a7:39:f9:a0:3c:60:8e:dc: 64:f4:c9:a9:15:c6:0c:e5:2c:db:c4:8d:2d:1f:9f: ee:89:b0:ad:24:40:57:e0:79:5a:54:5a:cf:14:57: 98:c9:a9:11:18:17:3f:6b:cc:a2:06:26:0d:3c:7e: 5d:a0:0d:8e:77:f8:f3:55:3f:98:64:53:34:c7:46: 4a:a6:94:1e:37:fe:34:3a:e0:b1:9f:f5:06:2f:00: 70:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:15:21:2C:95:E3:3F:8C:66:42:9A:AA:9C:D4:91:46:CD:E4:8F:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/66cef13d-dff8-32f0-a25e-7a5331345d1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 142.202.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:eb:29:bd:01:cf:04:e8:f3:8e:e9:2f:9e:d7:35:c1:3e:87: a1:67:96:94:3f:84:5d:2d:14:94:3c:99:91:12:f5:5c:dc:91: 9e:27:f9:b8:9e:b1:fc:29:9b:0a:9b:3f:4a:5c:82:f4:c3:09: 15:e9:bf:e4:eb:b5:1e:e5:bf:59:3e:62:96:0d:51:9e:d7:93: 0f:70:7f:be:50:83:11:2b:94:9e:77:17:63:91:e9:97:c2:c1: a5:d1:dd:36:7b:9c:88:d8:a3:ce:d6:64:8a:97:cd:80:ef:53: 63:47:ce:cc:3f:08:73:1c:09:9f:12:79:1b:79:e6:25:47:de: fa:2c:8b:bf:d0:12:d4:88:23:ff:1b:4e:52:b5:54:b1:92:98: c0:6f:96:a7:d9:84:8d:d5:ff:20:6f:61:fb:48:2c:21:24:1a: c1:86:02:ac:09:f9:b7:33:e5:6d:fe:0b:98:e5:7e:db:4e:9a: 0c:86:34:23:23:87:a2:24:f5:eb:64:83:ce:b7:6a:4e:c4:47: 44:50:25:c9:de:47:52:60:1c:09:f2:a0:7c:59:0d:8f:62:66: 86:ad:c3:ad:f2:b7:03:e1:f2:41:e3:70:90:79:c1:78:50:a1: 98:aa:82:f7:ca:d7:23:b6:ea:a5:ec:14:61:1f:ec:7b:ba:82: c2:ed:21:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmua28vlisLRT/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk Y2Y3Y2FlYmUtNDc3ZC00MjA0LWI4YTUtNjg4N2VhYmRlYjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t2EsBJBsU3Dnec6LCmO6pNchibXzKIiAaPc ai1S9Ne8kdvW4ZK9Xsfz5zarZOSSnG0aql7VLllejRAeFeNSzatzIXeYQE31v9Ox P8zg7Qf0B5+dAJBKfbSf1E+cAK5XaJuJmLMq7pBO7mqKCynVw4QG0BubiSjoe/fo WCV8O2oYkClRftscgV1Vjpzuh3S4y9DUgfmUTD5CILf/142ak6jh9DEKfxhZDc+y pzn5oDxgjtxk9MmpFcYM5SzbxI0tH5/uibCtJEBX4HlaVFrPFFeYyakRGBc/a8yi BiYNPH5doA2Od/jzVT+YZFM0x0ZKppQeN/40OuCxn/UGLwBw0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0VISyV4z+MZkKaqpzUkUbN5I/LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvNjZjZWYxM2QtZGZmOC0z MmYwLWEyNWUtN2E1MzMxMzQ1ZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjspwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbrKb0BzwTo847pL57XNcE+h6FnlpQ/hF0tFJQ8mZES9VzckZ4n+bie sfwpmwqbP0pcgvTDCRXpv+TrtR7lv1k+YpYNUZ7Xkw9wf75QgxErlJ53F2OR6ZfC waXR3TZ7nIjYo87WZIqXzYDvU2NHzsw/CHMcCZ8SeRt55iVH3vosi7/QEtSII/8b TlK1VLGSmMBvlqfZhI3V/yBvYftILCEkGsGGAqwJ+bcz5W3+C5jlfttOmgyGNCMj h6Ik9etkg863ak7ER0RQJcneR1JgHAnyoHxZDY9iZoatw63ytwPh8kHjcJB5wXhQ oZiqgvfK1yO26qXsFGEf7Hu6gsLtIaU= -----END CERTIFICATE-----Generated at Sun Feb 16 20:22:59 2025 by rpki-client