$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9adc3c9-9f0c-3314-b2aa-0f1b44c205e1.roa File: d9adc3c9-9f0c-3314-b2aa-0f1b44c205e1.roa (raw, json) Hash identifier: dj6ps3qFS8wq8hnnqwX++p5GCsmuJqDKOyRnI5xk+K8= Subject key identifier: F2:DC:BD:0A:F4:5B:7C:59:98:D6:9B:33:BB:C5:36:BB:8D:11:2A:BE Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584854703207BC3E1D3E7AAA7560 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9adc3c9-9f0c-3314-b2aa-0f1b44c205e1.roa Signing time: Thu 26 Dec 2024 02:00:40 +0000 ROA not before: Thu 26 Dec 2024 02:00:40 +0000 ROA not after: Wed 26 Mar 2025 01:00:40 +0000 asID: 33392 IP address blocks: 192.149.44.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:54:70:32:07:bc:3e:1d:3e:7a:aa:75:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Dec 26 02:00:40 2024 GMT Not After : Mar 26 01:00:40 2025 GMT Subject: CN=8a0641c4-ca6c-44c3-87bb-c4ab28b2b983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ed:4e:97:f4:53:09:44:1d:b7:9d:bc:2b:65: dc:b7:9d:35:b1:1b:da:c2:ea:8f:0c:27:98:53:6f: 35:ac:98:6f:a3:d3:0b:66:8c:9d:1c:10:e3:f5:5c: 5a:5e:d1:cb:92:0b:de:af:dc:81:27:f8:0f:a8:26: 13:82:7d:22:a9:a8:c5:02:e0:a6:21:9f:02:79:d2: 27:39:ad:16:4f:8b:d4:3a:ca:d9:41:e0:c0:14:63: c5:5a:da:7a:75:5a:69:bd:c1:51:d5:76:14:23:3b: 4c:89:a4:d1:3f:36:f2:42:28:51:90:8b:3e:02:87: 45:20:c4:e7:a2:7c:65:ff:95:7b:88:af:c3:af:39: ad:bc:d1:4c:2b:ec:a4:01:0a:38:50:fe:0e:76:c2: b7:f2:98:c2:de:57:0e:66:47:4f:2e:ee:38:69:cb: e4:03:a6:4b:80:74:82:fe:81:9e:00:cc:e3:93:16: 09:05:2c:9a:e9:8c:45:4f:c3:b2:40:c1:6a:69:20: 43:81:c8:b4:a3:60:e2:14:0c:87:bd:b9:ad:b2:de: 7a:2c:f6:c5:b0:de:b1:c4:81:47:a2:7c:8d:c7:a4: 61:b1:c5:3b:76:81:21:f2:b3:b3:52:a8:8a:5b:f9: 93:92:6d:63:63:c1:7d:09:af:27:a7:fe:40:2b:df: a3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DC:BD:0A:F4:5B:7C:59:98:D6:9B:33:BB:C5:36:BB:8D:11:2A:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/d9adc3c9-9f0c-3314-b2aa-0f1b44c205e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f5:e3:a7:49:83:eb:b3:b3:1b:93:d4:18:6d:0d:5d:1f:c2: d4:a3:15:50:66:c8:f7:b4:eb:a7:67:48:d1:99:37:5d:42:21: a8:d1:9e:72:80:0b:9b:66:0f:db:65:e7:37:d4:1f:34:a5:f4: b0:1e:d1:28:78:81:e4:84:07:5e:b1:c1:8c:4d:74:de:ed:00: 4f:cb:57:09:cb:31:78:ef:09:a6:af:a6:b5:00:92:d7:ff:54: 9d:58:d2:8a:34:5e:6f:24:6e:e9:bf:64:b3:7f:13:ae:0f:5a: de:34:09:52:15:d0:87:53:96:83:ff:24:d5:4a:24:64:63:1d: f3:35:25:74:2f:69:57:e2:37:e6:9f:46:57:2e:36:b5:fe:2c: b0:64:cc:ac:57:03:c5:c2:e2:95:2c:ca:bc:45:c0:bc:72:af: 9a:94:d2:8c:9a:b1:55:fb:d0:1a:53:f7:d3:ff:fa:47:58:0c: bb:b4:31:53:4e:de:69:54:f9:1a:0e:13:f3:8b:84:e1:26:8e: 9b:db:ed:66:fa:ee:c3:16:a6:2f:cd:d5:0a:e9:13:91:ef:7b: dd:ba:7d:e5:5f:93:26:11:87:43:9e:0b:66:0c:c1:4a:20:23: c9:fb:b9:2f:a5:d3:1a:72:a3:e7:6b:5d:2c:f8:f1:e7:44:c1: 97:b3:c2:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhUcDIHvD4dPnqqdWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI0MTIyNjAyMDA0MFoXDTI1MDMyNjAxMDA0MFowLzEtMCsGA1UEAxMk OGEwNjQxYzQtY2E2Yy00NGMzLTg3YmItYzRhYjI4YjJiOTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+1Ol/RTCUQdt528K2Xct501sRvawuqPDCeY U281rJhvo9MLZoydHBDj9VxaXtHLkgver9yBJ/gPqCYTgn0iqajFAuCmIZ8CedIn Oa0WT4vUOsrZQeDAFGPFWtp6dVppvcFR1XYUIztMiaTRPzbyQihRkIs+AodFIMTn onxl/5V7iK/DrzmtvNFMK+ykAQo4UP4OdsK38pjC3lcOZkdPLu44acvkA6ZLgHSC /oGeAMzjkxYJBSya6YxFT8OyQMFqaSBDgci0o2DiFAyHvbmtst56LPbFsN6xxIFH onyNx6RhscU7doEh8rOzUqiKW/mTkm1jY8F9Ca8np/5AK9+jRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPLcvQr0W3xZmNabM7vFNruNESq+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvZDlhZGMzYzktOWYwYy0z MzE0LWIyYWEtMGYxYjQ0YzIwNWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwJUsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIr146dJg+uzsxuT1BhtDV0fwtSjFVBmyPe066dnSNGZN11CIajRnnKA C5tmD9tl5zfUHzSl9LAe0Sh4geSEB16xwYxNdN7tAE/LVwnLMXjvCaavprUAktf/ VJ1Y0oo0Xm8kbum/ZLN/E64PWt40CVIV0IdTloP/JNVKJGRjHfM1JXQvaVfiN+af RlcuNrX+LLBkzKxXA8XC4pUsyrxFwLxyr5qU0oyasVX70BpT99P/+kdYDLu0MVNO 3mlU+RoOE/OLhOEmjpvb7Wb67sMWpi/N1QrpE5Hve926feVfkyYRh0OeC2YMwUog I8n7uS+l0xpyo+drXSz48edEwZezwvI= -----END CERTIFICATE-----Generated at Sun Feb 16 20:13:21 2025 by rpki-client