$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa File: ba09dfad-31a3-31a1-8d98-b0cec5949829.roa (raw, json) Hash identifier: CZ49oDGWDfyTHViQ8Dd7bfcg8gTu/9UEpLtawOMo5aw= Subject key identifier: 44:BB:23:8A:D2:5D:A5:85:25:2B:2E:94:C2:FC:47:31:2A:BF:5E:AB Certificate issuer: /CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Certificate serial: 010D0C9F4328584858A04F6F6DAF58CC85C02800 Authority key identifier: B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 30041 IP address blocks: 66.218.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:4f:6f:6d:af:58:cc:85:c0:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ba8bdd0-6c7f-47b7-b427-6e2b454fa343 Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=cd9237ea-3c1c-4a95-9a9b-b148ff1adfe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:36:7f:cd:92:7c:ba:33:bf:5a:8b:47:6d:59: 51:0f:fa:34:64:57:92:36:e5:f4:32:5e:24:ad:18: 6f:f0:5a:ed:0c:aa:e3:9d:b6:7e:19:5f:8f:1a:bb: eb:ef:da:51:b7:d4:b6:d1:aa:aa:88:cb:2e:b1:23: d3:ad:64:58:bd:5c:67:1e:07:0e:2b:5a:17:fb:bf: 2d:d3:37:f4:de:bc:4b:3f:8e:9f:c7:4a:ee:ab:69: 7f:c5:4e:d9:57:99:62:16:72:d1:a7:1f:b4:0c:d6: 15:2a:2a:ed:a8:d6:40:46:4f:d5:fb:29:e8:3f:46: 40:8e:ec:4f:44:a1:34:8f:f5:e4:5b:fd:01:67:a3: 4c:df:30:e0:27:92:ed:fe:09:36:6f:1a:8c:11:a5: 80:97:01:c1:bb:93:fb:05:4c:42:bc:a8:ff:cd:fe: ca:95:8d:7a:f4:83:e9:cd:72:b7:79:5d:c1:80:9d: 66:ad:a4:f3:88:96:de:6b:97:a0:35:c9:3b:e1:90: 7c:69:70:15:50:cb:1e:db:a7:0d:c4:70:a7:09:f2: 43:79:38:32:02:78:0d:50:3e:bd:0a:ee:f5:b2:3d: e3:4a:d4:37:aa:dc:7a:66:d3:9d:32:db:16:f5:64: ad:6d:3e:62:a6:24:db:a7:c1:0e:a0:5f:c8:3f:c8: cc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:BB:23:8A:D2:5D:A5:85:25:2B:2E:94:C2:FC:47:31:2A:BF:5E:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/ba09dfad-31a3-31a1-8d98-b0cec5949829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.crl X509v3 Authority Key Identifier: keyid:B1:68:F7:B7:D0:4E:A3:97:A4:72:56:E3:33:90:A0:5D:4A:F1:2B:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9ba8bdd0-6c7f-47b7-b427-6e2b454fa343.cer sbgp-ipAddrBlock: critical IPv4: 66.218.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:58:c4:ee:70:8f:60:79:bf:39:d2:98:68:07:de:86:08:05: 2e:fc:eb:0a:c7:0f:12:62:42:af:5d:38:3b:e0:78:17:26:d7: a6:9f:d2:ad:bb:15:e3:be:7e:fc:e1:ae:e3:93:c2:11:c7:6f: 9b:93:9a:26:25:af:a8:ca:c5:38:c6:6f:89:8e:5d:63:01:06: 0b:f5:70:de:5a:ec:50:19:58:da:48:fd:14:bf:b9:26:ee:1e: 4a:22:09:96:b4:24:12:3c:bb:a2:3c:ae:e6:8c:d9:da:52:46: 0e:75:98:86:cc:b7:ea:7f:e7:07:5a:ca:a3:f5:11:ce:d4:20: 26:ab:69:c7:04:7f:9a:b6:9f:ef:d2:0d:7a:51:59:c1:d1:37: f5:08:d4:1b:49:34:00:59:cb:27:72:f0:5b:dc:20:a0:05:6a: 87:13:4f:33:ea:0d:c8:d2:78:f7:2a:45:51:0a:7e:92:80:1d: ce:7d:1a:2e:8d:a2:27:3f:ec:15:c1:ef:73:a7:c2:4b:46:d8: f6:04:49:cb:81:31:fd:06:00:6f:5c:a1:02:10:82:7c:24:4c: 7c:ff:fc:8d:21:af:9e:6d:b6:53:5c:7f:6d:cf:e3:95:39:ed: 40:76:6d:1a:5d:d4:fa:cf:fc:e9:08:98:3e:cc:f4:4a:88:ab: 5b:c7:18:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoE9vba9YzIXAKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWJhOGJkZDAtNmM3Zi00N2I3LWI0MjctNmUyYjQ1NGZh MzQzMB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk Y2Q5MjM3ZWEtM2MxYy00YTk1LTlhOWItYjE0OGZmMWFkZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozZ/zZJ8ujO/WotHbVlRD/o0ZFeSNuX0Ml4k rRhv8FrtDKrjnbZ+GV+PGrvr79pRt9S20aqqiMsusSPTrWRYvVxnHgcOK1oX+78t 0zf03rxLP46fx0ruq2l/xU7ZV5liFnLRpx+0DNYVKirtqNZARk/V+ynoP0ZAjuxP RKE0j/XkW/0BZ6NM3zDgJ5Lt/gk2bxqMEaWAlwHBu5P7BUxCvKj/zf7KlY169IPp zXK3eV3BgJ1mraTziJbea5egNck74ZB8aXAVUMse26cNxHCnCfJDeTgyAngNUD69 Cu71sj3jStQ3qtx6ZtOdMtsW9WStbT5ipiTbp8EOoF/IP8jMJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFES7I4rSXaWFJSsulML8RzEqv16rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4 YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJiNDU0ZmEzNDMvYmEwOWRmYWQtMzFhMy0z MWExLThkOTgtYjBjZWM1OTQ5ODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWJhOGJkZDAtNmM3Zi00N2I3LWI0 MjctNmUyYjQ1NGZhMzQzLzliYThiZGQwLTZjN2YtNDdiNy1iNDI3LTZlMmI0NTRm YTM0My5jcmwwHwYDVR0jBBgwFoAUsWj3t9BOo5ekclbjM5CgXUrxK0AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85YmE4YmRkMC02YzdmLTQ3YjctYjQyNy02ZTJi NDU0ZmEzNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQtogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdYxO5wj2B5vznSmGgH3oYIBS786wrHDxJiQq9dODvgeBcm16af0q27 FeO+fvzhruOTwhHHb5uTmiYlr6jKxTjGb4mOXWMBBgv1cN5a7FAZWNpI/RS/uSbu HkoiCZa0JBI8u6I8ruaM2dpSRg51mIbMt+p/5wdayqP1Ec7UICaraccEf5q2n+/S DXpRWcHRN/UI1BtJNABZyydy8FvcIKAFaocTTzPqDcjSePcqRVEKfpKAHc59Gi6N oic/7BXB73OnwktG2PYEScuBMf0GAG9coQIQgnwkTHz//I0hr55ttlNcf23P45U5 7UB2bRpd1PrP/OkImD7M9EqIq1vHGIg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:58 2025 by rpki-client