$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa File: acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa (raw, json) Hash identifier: lHfCh5txc8tyQYygpVYVeeGwDFfilumDuOv7PGQeZCA= Subject key identifier: FB:D7:21:4F:32:63:8F:27:D0:38:94:A0:52:0F:DE:6D:D0:8D:D1:72 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F43285849350E98DDD0F2D52DFE0D3580 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 36511 IP address blocks: 209.35.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:98:dd:d0:f2:d5:2d:fe:0d:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=4c2a1205-a235-40a0-be6d-f0f494398acb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:de:f7:9f:b3:68:1d:aa:35:84:97:4f:4e:99: 5e:d1:2f:1d:18:b8:6a:9c:42:79:84:36:5d:68:61: 87:3e:b2:b3:2d:24:ec:12:c1:15:47:c0:40:d5:7c: ec:02:1a:b8:57:6d:62:dd:e2:cc:0d:6b:f5:60:45: 3a:9a:d8:62:29:97:93:b2:1d:66:e0:2d:82:a4:26: 05:fa:f1:ac:4b:a3:e3:fa:13:fb:cf:2c:9b:36:be: 30:ef:df:45:73:7a:6b:fe:02:bd:52:c7:a0:c7:97: bb:1e:b6:03:c1:89:4d:1a:70:e6:8a:53:4a:08:5c: 8c:7d:f9:a9:87:21:2f:94:c1:9b:c2:60:3a:28:6c: b8:33:be:68:3d:da:25:32:fc:23:52:4b:6f:b8:74: 74:0c:37:2b:01:7f:3a:f1:50:2c:84:c9:40:23:26: 81:ec:77:92:da:74:4f:15:40:fe:0f:ab:6c:e9:66: 4f:19:19:1a:4e:5e:15:84:ff:e8:62:84:63:b7:09: 97:85:b9:0d:df:07:15:aa:e5:e9:4b:2f:15:1b:ab: bc:e7:9f:bb:a4:06:4c:05:34:be:84:4b:b6:0d:87: 84:8b:43:31:23:e1:37:a4:b4:a8:04:61:dc:2b:9d: 39:5e:3c:46:6e:15:69:18:bc:7d:0d:53:89:db:9f: cd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D7:21:4F:32:63:8F:27:D0:38:94:A0:52:0F:DE:6D:D0:8D:D1:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/acdb3943-1fe0-343f-b5ff-c798e9fd4032.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:75:d9:d1:b5:84:89:9e:2a:9c:67:2b:c8:93:f0:7b:ec:6f: d5:29:53:c8:67:f3:8e:7d:56:8b:1b:3c:14:4a:22:eb:92:1e: 05:33:bb:87:6c:0c:f0:19:58:4e:06:7b:9b:02:0b:f3:b1:95: 4b:49:89:05:4e:44:24:53:f3:c8:39:46:01:54:f4:5f:ef:7a: 14:31:a4:ef:df:46:94:3f:38:14:3b:f8:ca:1e:5e:c1:12:16: df:77:83:9b:5b:61:d4:92:eb:90:53:ef:f6:c2:f1:55:10:02: 9f:e8:0b:d6:b2:72:8d:e0:58:2b:47:d0:d8:93:ce:a2:f5:2f: ae:b8:a8:ad:a2:4a:8b:06:8b:3d:8a:c6:40:56:8e:ca:e7:cc: 92:12:27:5b:21:4f:03:69:f6:ac:ec:c0:c8:9f:38:29:4c:f2: ec:a0:44:c4:b9:d0:d5:fc:51:8a:d8:2e:c4:71:f7:89:5d:69: e7:c3:4f:f8:30:a9:fd:51:12:ce:92:11:32:b2:c5:8a:52:13: 9e:9f:e1:5e:ba:f8:95:12:db:b7:83:97:79:d5:f7:42:99:3d: 22:75:2b:b2:bf:a1:ae:83:02:de:b6:c8:b2:02:a8:d1:05:29: a9:3e:30:f9:ad:c2:93:7f:f3:7a:c8:e6:61:d0:62:c2:a3:02: de:7a:1a:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dpjd0PLVLf4NNYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk NGMyYTEyMDUtYTIzNS00MGEwLWJlNmQtZjBmNDk0Mzk4YWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt73n7NoHao1hJdPTple0S8dGLhqnEJ5hDZd aGGHPrKzLSTsEsEVR8BA1XzsAhq4V21i3eLMDWv1YEU6mthiKZeTsh1m4C2CpCYF +vGsS6Pj+hP7zyybNr4w799Fc3pr/gK9Usegx5e7HrYDwYlNGnDmilNKCFyMffmp hyEvlMGbwmA6KGy4M75oPdolMvwjUktvuHR0DDcrAX868VAshMlAIyaB7HeS2nRP FUD+D6ts6WZPGRkaTl4VhP/oYoRjtwmXhbkN3wcVquXpSy8VG6u855+7pAZMBTS+ hEu2DYeEi0MxI+E3pLSoBGHcK505XjxGbhVpGLx9DVOJ25/NIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPvXIU8yY48n0DiUoFIP3m3QjdFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYWNkYjM5NDMtMWZlMC0z NDNmLWI1ZmYtYzc5OGU5ZmQ0MDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl12dG1hImeKpxnK8iT8Hvsb9UpU8hn8459VosbPBRKIuuSHgUzu4ds DPAZWE4Ge5sCC/OxlUtJiQVORCRT88g5RgFU9F/vehQxpO/fRpQ/OBQ7+MoeXsES Ft93g5tbYdSS65BT7/bC8VUQAp/oC9ayco3gWCtH0NiTzqL1L664qK2iSosGiz2K xkBWjsrnzJISJ1shTwNp9qzswMifOClM8uygRMS50NX8UYrYLsRx94ldaefDT/gw qf1REs6SETKyxYpSE56f4V66+JUS27eDl3nV90KZPSJ1K7K/oa6DAt62yLICqNEF Kak+MPmtwpN/83rI5mHQYsKjAt56GkE= -----END CERTIFICATE-----Generated at Mon Apr 7 05:47:05 2025 by rpki-client