$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/ba9e25e8-7fc8-3a0f-807f-2e3ff87c3301.roa File: ba9e25e8-7fc8-3a0f-807f-2e3ff87c3301.roa (raw, json) Hash identifier: 7AHM/M2ceK+51wnKTObPZF4O+qEGWt/gjP+viqtai6M= Subject key identifier: 1D:06:8B:C3:A3:C8:94:04:26:D8:5A:D5:14:B9:31:D9:0A:B2:5E:23 Certificate issuer: /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Certificate serial: 010D0C9F43285848F65BCBBBB088F9ACA312D100 Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/ba9e25e8-7fc8-3a0f-807f-2e3ff87c3301.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16904 IP address blocks: 66.242.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:cb:bb:b0:88:f9:ac:a3:12:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=d02fe934-e12a-411f-8aed-ce91611527b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bc:00:3b:56:5a:91:8c:f5:f3:4f:25:cc:e4: d3:1b:40:c9:6b:7b:c1:30:67:8b:ae:8e:30:1e:d2: 5c:61:21:91:eb:45:26:93:49:0a:46:d8:be:5e:4c: e1:0e:d7:b1:55:be:ee:ae:e8:f7:db:f4:7f:dc:d8: 24:be:03:86:f1:c1:14:ab:e8:42:55:b8:bb:22:2c: 1f:dc:89:33:51:c3:5f:80:8c:67:4c:58:ca:02:32: 22:ae:8a:b7:f4:9d:5e:5a:16:b2:b7:c5:2a:e7:ab: 3d:a0:54:d8:7f:03:fc:fe:ff:f7:2a:c7:b1:d8:0a: 69:f7:be:b7:a5:01:a2:f8:16:94:ee:87:1f:0e:8a: ad:59:ce:7b:6f:7a:19:2b:ad:8d:b4:8d:f2:f3:ce: 1d:9e:0f:0b:8c:1f:8d:8c:25:3e:57:6a:69:9c:14: c9:fc:0a:03:9b:8f:e5:2e:f1:32:a3:10:56:7a:71: ca:7b:c2:94:2a:ce:09:52:f3:72:f0:75:c6:35:0a: 5e:fb:f1:47:74:05:58:26:4b:d0:3e:a2:c8:fa:aa: 4a:9a:ff:6d:69:d4:fd:cc:db:0d:37:c9:37:69:79: 09:99:b1:73:f8:4c:49:d9:25:50:1e:c9:47:13:29: ab:0b:d1:af:7e:d2:8a:ba:8c:5a:d8:10:c8:74:bb: 13:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:06:8B:C3:A3:C8:94:04:26:D8:5A:D5:14:B9:31:D9:0A:B2:5E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/ba9e25e8-7fc8-3a0f-807f-2e3ff87c3301.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl X509v3 Authority Key Identifier: keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer sbgp-ipAddrBlock: critical IPv4: 66.242.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:b4:07:4b:c5:bf:2b:65:1e:5d:35:46:3f:7c:b7:08:d2:1d: 6d:74:2f:22:5c:55:3e:20:74:03:41:ff:01:1a:72:2d:a5:5f: 3e:f3:26:7a:4b:48:9e:59:f4:74:c3:d3:8b:b6:68:d9:98:2f: 2c:16:7c:47:24:56:dd:82:2d:ad:55:b8:8c:15:86:a4:eb:57: 7e:e3:b3:e6:18:af:f7:91:13:e2:8c:a6:25:fd:f9:14:04:eb: 29:e9:79:4a:37:9d:08:89:fa:a9:ad:4f:23:7d:b0:93:7f:9a: 2d:26:97:e3:84:a1:5f:8c:6d:8e:7f:9f:f2:56:ef:2f:88:88: 4e:94:3f:1b:7c:c5:16:3e:67:03:e8:61:f2:cb:8b:e4:f1:9a: df:61:18:4e:18:07:72:ca:e9:36:52:29:14:b7:78:cd:be:d7: aa:be:2d:52:80:40:29:df:ee:56:4d:cb:5a:f3:76:3a:1e:5f: 80:8e:25:ff:cd:1d:6a:e4:9a:8a:4d:d7:a6:ff:8f:64:41:dc: 0a:e2:ce:c7:07:3b:70:be:19:69:97:ea:e8:22:81:0d:c5:e0: 87:08:a2:a9:52:40:93:d5:76:04:2a:6c:99:b5:11:b8:f3:e6: a2:a4:d0:12:c1:9f:34:85:03:46:7a:2f:d0:10:e9:fc:e0:61: 3a:6e:be:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W8u7sIj5rKMS0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx MzFiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk ZDAyZmU5MzQtZTEyYS00MTFmLThhZWQtY2U5MTYxMTUyN2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7wAO1ZakYz1808lzOTTG0DJa3vBMGeLro4w HtJcYSGR60Umk0kKRti+XkzhDtexVb7uruj32/R/3NgkvgOG8cEUq+hCVbi7Iiwf 3IkzUcNfgIxnTFjKAjIiroq39J1eWhayt8Uq56s9oFTYfwP8/v/3Ksex2App9763 pQGi+BaU7ocfDoqtWc57b3oZK62NtI3y884dng8LjB+NjCU+V2ppnBTJ/AoDm4/l LvEyoxBWenHKe8KUKs4JUvNy8HXGNQpe+/FHdAVYJkvQPqLI+qpKmv9tadT9zNsN N8k3aXkJmbFz+ExJ2SVQHslHEymrC9GvftKKuoxa2BDIdLsT8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0Gi8OjyJQEJtha1RS5MdkKsl4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1 YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYmE5ZTI1ZTgtN2ZjOC0z YTBmLTgwN2YtMmUzZmY4N2MzMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGS0B0vFvytlHl01Rj98twjSHW10LyJcVT4gdANB/wEaci2lXz7zJnpL SJ5Z9HTD04u2aNmYLywWfEckVt2CLa1VuIwVhqTrV37js+YYr/eRE+KMpiX9+RQE 6ynpeUo3nQiJ+qmtTyN9sJN/mi0ml+OEoV+MbY5/n/JW7y+IiE6UPxt8xRY+ZwPo YfLLi+Txmt9hGE4YB3LK6TZSKRS3eM2+16q+LVKAQCnf7lZNy1rzdjoeX4COJf/N HWrkmopN16b/j2RB3ArizscHO3C+GWmX6ugigQ3F4IcIoqlSQJPVdgQqbJm1Ebjz 5qKk0BLBnzSFA0Z6L9AQ6fzgYTpuvjY= -----END CERTIFICATE-----Generated at Sun Apr 13 02:44:52 2025 by rpki-client