$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/b83d1899-3dcb-3502-bcaf-926f684064ef.roa File: b83d1899-3dcb-3502-bcaf-926f684064ef.roa (raw, json) Hash identifier: yhGv9b9z0e7Ro+KB3BWmaw/d1W7iVWOE8HSWnevfoQk= Subject key identifier: 46:B3:C2:D3:45:45:9B:BA:77:1B:F7:78:06:2F:CC:9A:B1:61:1F:0C Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584940394E4DFCF0C5D2A17F3F40 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/b83d1899-3dcb-3502-bcaf-926f684064ef.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 33392 IP address blocks: 208.103.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4e:4d:fc:f0:c5:d2:a1:7f:3f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=5ac1385c-f7ae-4614-baef-026b83058b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:7d:02:c7:4f:41:47:51:57:54:fd:a8:de: ff:c1:c0:44:01:77:56:ee:53:6c:1d:8f:25:bc:58: 1f:25:b2:46:56:ee:3a:5c:45:c4:fa:6a:f5:0d:38: 26:2f:e9:9d:27:9e:23:be:c0:31:0d:21:4c:19:02: 7f:36:b6:e4:73:b6:e0:90:fd:0c:f3:9e:2c:de:d8: 77:66:b5:5b:8b:c6:13:14:27:6c:fa:5c:9d:65:78: 89:26:72:ef:44:fe:03:a7:a4:33:6a:99:2d:e9:b1: 27:90:fc:da:09:51:90:39:d6:1e:b4:5f:cb:c2:59: b5:6e:23:73:6d:b4:60:8b:b5:a9:3e:c4:e2:6c:e7: c1:72:fd:a0:e8:1a:73:a3:73:e4:97:eb:55:66:16: 84:fe:37:28:36:b4:68:65:dc:ad:90:f6:11:d5:16: 71:68:c5:fd:fe:54:89:04:eb:eb:15:34:54:d5:b3: aa:42:3e:69:53:76:42:45:2d:df:3a:a4:70:a1:2f: 56:20:85:ea:47:92:ce:37:b8:58:72:39:f1:93:a5: c0:0b:5b:c2:4f:25:f8:4f:11:92:a1:c0:ff:8c:43: af:9d:59:6b:e9:c7:94:27:ad:68:1f:09:b9:4f:83: 0a:b9:58:3d:1d:b5:f2:dd:dc:09:fa:de:42:ef:82: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B3:C2:D3:45:45:9B:BA:77:1B:F7:78:06:2F:CC:9A:B1:61:1F:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/b83d1899-3dcb-3502-bcaf-926f684064ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 208.103.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:40:fb:33:3f:39:93:84:b6:7e:58:a0:1f:30:15:92:fe:a3: fe:ee:22:17:85:83:3b:0a:f6:b8:e1:e9:d0:06:b9:94:06:0c: e3:5d:61:57:4c:5a:21:ca:95:8a:bb:2f:54:eb:e2:f8:e7:2a: a9:b5:49:cb:89:ab:66:08:26:bb:98:52:5b:97:2d:67:eb:b1: 3c:32:13:09:4d:43:2d:f9:7a:3d:52:45:1a:c8:32:c0:cb:d1: 75:7b:5b:e8:03:5c:fb:0d:a6:a9:65:cd:dd:62:27:93:18:08: 5d:00:d1:91:d2:39:4d:39:2f:2a:27:2a:00:26:92:ee:c0:c6: 9f:2c:c3:4d:8f:91:40:b3:85:25:22:be:0d:cf:3f:6a:e1:fb: 5e:44:fa:db:c0:26:62:bd:00:54:20:07:f1:5a:00:29:9c:a9: be:4f:a6:59:16:4a:db:cd:53:2c:4e:25:7e:fa:ef:94:2f:23: e9:61:f3:8e:38:47:35:83:f9:e1:ac:13:c9:17:e6:5c:e4:93: 28:bb:47:ef:24:fc:b3:50:ff:59:25:c3:3f:12:03:68:c4:da: bb:a7:49:0a:f4:b6:64:07:62:95:04:04:ff:d9:9f:c7:83:7e: ef:03:f9:82:76:29:3c:85:44:d2:6b:61:e2:48:a9:38:56:54: ef:30:6c:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOU5N/PDF0qF/P0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk NWFjMTM4NWMtZjdhZS00NjE0LWJhZWYtMDI2YjgzMDU4YjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW99AsdPQUdRV1T9qN7/wcBEAXdW7lNsHY8l vFgfJbJGVu46XEXE+mr1DTgmL+mdJ54jvsAxDSFMGQJ/Nrbkc7bgkP0M854s3th3 ZrVbi8YTFCds+lydZXiJJnLvRP4Dp6Qzapkt6bEnkPzaCVGQOdYetF/Lwlm1biNz bbRgi7WpPsTibOfBcv2g6Bpzo3Pkl+tVZhaE/jcoNrRoZdytkPYR1RZxaMX9/lSJ BOvrFTRU1bOqQj5pU3ZCRS3fOqRwoS9WIIXqR5LON7hYcjnxk6XAC1vCTyX4TxGS ocD/jEOvnVlr6ceUJ61oHwm5T4MKuVg9HbXy3dwJ+t5C74ILWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEazwtNFRZu6dxv3eAYvzJqxYR8MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYjgzZDE4OTktM2RjYi0z NTAyLWJjYWYtOTI2ZjY4NDA2NGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GeUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1A+zM/OZOEtn5YoB8wFZL+o/7uIheFgzsK9rjh6dAGuZQGDONdYVdM WiHKlYq7L1Tr4vjnKqm1ScuJq2YIJruYUluXLWfrsTwyEwlNQy35ej1SRRrIMsDL 0XV7W+gDXPsNpqllzd1iJ5MYCF0A0ZHSOU05LyonKgAmku7Axp8sw02PkUCzhSUi vg3PP2rh+15E+tvAJmK9AFQgB/FaACmcqb5PplkWStvNUyxOJX7675QvI+lh8444 RzWD+eGsE8kX5lzkkyi7R+8k/LNQ/1klwz8SA2jE2runSQr0tmQHYpUEBP/Zn8eD fu8D+YJ2KTyFRNJrYeJIqThWVO8wbLc= -----END CERTIFICATE-----Generated at Mon Apr 7 01:08:06 2025 by rpki-client