$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a1b1d79c-ab46-35ce-8c97-2053ed447262.roa File: a1b1d79c-ab46-35ce-8c97-2053ed447262.roa (raw, json) Hash identifier: 7zwqTEByF60bLpB2Ia4V2OcyZMnkr1p5QaUOrYXcp1I= Subject key identifier: 2B:EC:6F:B4:D3:AA:2E:E5:CD:F3:BF:BE:63:4F:78:1F:7E:D0:48:66 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F43285849350E980241E056539F0D0EA0 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a1b1d79c-ab46-35ce-8c97-2053ed447262.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 36511 IP address blocks: 192.149.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:98:02:41:e0:56:53:9f:0d:0e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=bce2450a-9e93-433e-af35-4f134d79632c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c9:4a:e2:18:a8:56:40:35:bd:c4:84:42:4b: 72:22:47:07:97:ed:fb:10:28:03:69:c0:8a:6b:5e: 80:6d:65:62:55:07:2f:dc:2f:0d:5b:d2:48:76:d1: dc:51:8e:5d:d1:c8:d4:70:f4:c7:3f:63:40:d7:72: 24:9b:a2:60:f0:26:fe:32:ea:b7:b2:08:02:ea:08: bb:04:50:2d:5e:5e:b1:7e:92:49:f8:b5:0c:1c:1a: fd:70:a0:01:29:3a:5f:19:fb:b0:f7:4a:a4:e5:7c: 78:5b:71:59:a4:26:aa:1e:de:23:ce:1c:59:3f:b2: 6f:3e:67:2e:08:62:dd:90:cf:12:b8:17:fe:9d:b2: 73:47:b2:55:a6:d5:2d:e7:dd:fa:56:a2:36:3c:c4: 30:e0:81:43:5a:bc:ee:83:3d:dc:92:19:72:e6:dd: fb:c1:53:c5:b2:a9:2b:5f:d6:45:48:5d:9e:be:89: 6a:a0:9a:41:44:1c:7b:bb:b5:39:b4:87:97:0c:6a: 16:1f:2e:72:58:90:c9:e9:ed:d4:f0:d9:70:a9:55: 94:56:7a:34:d3:5c:ac:c5:7e:64:2e:20:b8:9a:d4: c3:18:ec:67:a2:4e:74:5a:a4:94:dc:78:cf:10:0d: 25:e1:07:c8:99:db:64:02:24:15:c2:aa:70:98:0d: bd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EC:6F:B4:D3:AA:2E:E5:CD:F3:BF:BE:63:4F:78:1F:7E:D0:48:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/a1b1d79c-ab46-35ce-8c97-2053ed447262.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:44:df:03:ad:90:72:ea:a3:1b:5e:d8:e7:95:11:0a:36:9c: 69:a1:d4:07:ee:a6:5d:44:50:d2:af:a8:24:b8:61:01:fc:71: 9c:d8:2b:a9:36:93:ce:9c:6e:86:00:ea:7b:70:64:40:d6:24: cb:71:5f:f0:28:9f:97:e9:f4:2d:37:ba:4b:09:7c:92:42:c9: 49:b1:fc:f3:5a:65:ca:46:45:9a:d1:57:89:ad:19:a5:88:1e: 31:25:a5:1b:8d:b5:41:c8:67:e0:99:0e:6a:56:ab:b3:27:93: 80:e6:fb:6e:98:9f:ec:e7:84:88:74:23:a2:58:a4:7a:a7:7e: 25:d0:2a:c8:b7:60:51:02:97:07:3e:95:f3:70:5c:1a:97:da: 7e:3a:db:50:e5:c1:26:0b:df:49:bf:80:37:de:c8:65:42:57: 5f:75:a9:a4:5b:27:ad:8c:0f:af:57:5d:ad:81:3a:70:b0:6e: 1f:b6:d9:a4:6e:a0:c5:dd:fc:9d:16:05:8c:57:7f:b1:6d:4b: e2:37:0d:fe:13:bd:56:39:26:1d:b0:de:5d:c9:93:70:98:8d: 2c:12:23:c9:75:03:8d:68:70:11:b1:a5:27:9d:52:ef:78:b8: df:4c:35:39:17:b3:fd:9f:8f:31:a8:8b:83:34:b0:31:d7:96: ce:52:db:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpgCQeBWU58NDqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YmNlMjQ1MGEtOWU5My00MzNlLWFmMzUtNGYxMzRkNzk2MzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuclK4hioVkA1vcSEQktyIkcHl+37ECgDacCK a16AbWViVQcv3C8NW9JIdtHcUY5d0cjUcPTHP2NA13Ikm6Jg8Cb+Muq3sggC6gi7 BFAtXl6xfpJJ+LUMHBr9cKABKTpfGfuw90qk5Xx4W3FZpCaqHt4jzhxZP7JvPmcu CGLdkM8SuBf+nbJzR7JVptUt5936VqI2PMQw4IFDWrzugz3ckhly5t37wVPFsqkr X9ZFSF2evolqoJpBRBx7u7U5tIeXDGoWHy5yWJDJ6e3U8NlwqVWUVno001ysxX5k LiC4mtTDGOxnok50WqSU3HjPEA0l4QfImdtkAiQVwqpwmA29FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvsb7TTqi7lzfO/vmNPeB9+0EhmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYTFiMWQ3OWMtYWI0Ni0z NWNlLThjOTctMjA1M2VkNDQ3MjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNE3wOtkHLqoxte2OeVEQo2nGmh1Afupl1EUNKvqCS4YQH8cZzYK6k2 k86cboYA6ntwZEDWJMtxX/Aon5fp9C03uksJfJJCyUmx/PNaZcpGRZrRV4mtGaWI HjElpRuNtUHIZ+CZDmpWq7Mnk4Dm+26Yn+znhIh0I6JYpHqnfiXQKsi3YFEClwc+ lfNwXBqX2n4621DlwSYL30m/gDfeyGVCV191qaRbJ62MD69XXa2BOnCwbh+22aRu oMXd/J0WBYxXf7FtS+I3Df4TvVY5Jh2w3l3Jk3CYjSwSI8l1A41ocBGxpSedUu94 uN9MNTkXs/2fjzGoi4M0sDHXls5S23c= -----END CERTIFICATE-----Generated at Mon Apr 7 05:46:09 2025 by rpki-client