$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa File: c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa (raw, json) Hash identifier: b5dQ4mq31CS2hpUD+CK+T5DTLafXKbjrE1VwEwQ9BOQ= Subject key identifier: 7F:5F:73:C1:DA:31:F5:87:A7:C2:E1:4E:56:93:E0:FB:69:92:20:56 Certificate issuer: /CN=ba2a1fed-6973-4607-a297-20f3f241a739 Certificate serial: 010D0C9F432858487CEB31F1930E8B3E89A27010 Authority key identifier: 96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa Signing time: Thu 09 Jan 2025 14:00:52 +0000 ROA not before: Thu 09 Jan 2025 14:00:52 +0000 ROA not after: Wed 09 Apr 2025 13:00:52 +0000 asID: 14618 IP address blocks: 192.207.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7c:eb:31:f1:93:0e:8b:3e:89:a2:70:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba2a1fed-6973-4607-a297-20f3f241a739 Validity Not Before: Jan 9 14:00:52 2025 GMT Not After : Apr 9 13:00:52 2025 GMT Subject: CN=555398f5-d4c8-42f0-805f-c43383ff0a64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e2:ad:1c:ce:77:63:29:e8:ca:86:ab:f9:6a: 74:7b:75:c2:56:c9:b1:62:50:1c:54:20:ac:b7:50: a9:a0:89:77:50:54:54:b6:01:e9:01:c1:c5:5d:4f: 2d:5d:b5:e0:d6:72:1a:2a:19:bb:e3:8e:a1:99:c6: 32:28:ec:d0:03:0e:f5:36:98:96:3e:2f:21:5a:a0: e8:2e:b7:58:04:fe:28:5e:4e:1c:4c:7a:cf:e0:26: a7:81:97:6e:73:de:ef:98:46:fd:14:8e:b6:a9:3e: 35:a0:98:9c:c8:fe:f3:01:22:e5:ed:5a:29:ca:20: a5:d2:0f:32:18:02:41:f4:62:16:28:93:15:f4:86: 75:81:3c:45:23:c0:2b:01:8a:04:83:1c:95:19:72: 92:e3:55:36:61:d5:f9:fb:ac:4e:28:7a:8e:4e:d9: f6:7f:7f:87:b5:33:06:1e:b8:f2:c4:31:4a:33:c4: 19:e2:0f:1c:f6:91:8a:70:c4:f3:ec:6b:0e:47:79: d7:25:28:8f:f1:7c:e3:01:e7:41:e5:8b:06:5b:81: f6:19:5e:59:9c:65:a6:2c:7b:73:64:02:4e:5c:11: 9f:02:46:d2:10:23:3e:7f:a0:05:d4:0f:e6:fd:6c: 01:b6:0d:78:6f:ce:63:09:d6:65:29:2d:20:2b:64: 0b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5F:73:C1:DA:31:F5:87:A7:C2:E1:4E:56:93:E0:FB:69:92:20:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/c9f84ebb-eb90-3b1e-a3a6-9d95540ce8df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739/ba2a1fed-6973-4607-a297-20f3f241a739.crl X509v3 Authority Key Identifier: keyid:96:BA:9F:DC:AB:CD:D9:CC:C5:C8:ED:6F:0F:30:3D:71:C0:8D:21:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ba2a1fed-6973-4607-a297-20f3f241a739.cer sbgp-ipAddrBlock: critical IPv4: 192.207.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:62:09:72:c4:b9:e9:2a:ff:02:b5:bb:76:9b:92:3c:25:a4: c4:dc:b3:ec:f2:4d:ec:4c:da:85:84:be:af:82:02:41:2a:37: 88:63:73:c5:5a:d8:81:be:f8:ce:2d:3b:79:41:1f:cd:9a:c8: f5:cc:a5:87:b3:db:35:ec:be:4f:67:86:cf:81:8d:fb:34:6c: 3e:fe:22:be:af:ad:24:fc:89:1d:27:b0:a1:d7:34:05:a7:a0: 5b:09:33:e9:41:ac:1a:a5:08:d8:26:b5:b8:a8:f3:ad:ab:47: 5c:bd:50:54:d8:5a:df:be:a0:19:7d:64:99:35:b6:93:c7:3f: 8e:95:8c:98:1a:54:9d:84:67:7d:83:af:f4:66:9a:34:8c:99: 15:6c:6d:60:3c:59:86:a8:8f:1f:76:3f:0b:13:68:2a:b0:8c: cb:98:47:c9:6b:b6:91:51:28:4e:36:05:a2:a6:d9:9f:c6:4c: 47:87:02:dd:cf:4a:66:1d:e5:43:ba:9f:ee:92:d4:31:1d:56: 76:89:dd:a7:12:18:73:3b:0c:b3:52:6c:6a:d0:75:65:86:11: f5:22:fb:e1:b4:80:dd:c8:3f:a0:29:45:e5:97:20:b4:53:13: 2a:10:16:bf:0d:77:0c:da:68:69:a1:a5:b3:03:3d:65:3b:39: 0e:28:fb:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh86zHxkw6LPomicBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEyYTFmZWQtNjk3My00NjA3LWEyOTctMjBmM2YyNDFh NzM5MB4XDTI1MDEwOTE0MDA1MloXDTI1MDQwOTEzMDA1MlowLzEtMCsGA1UEAxMk NTU1Mzk4ZjUtZDRjOC00MmYwLTgwNWYtYzQzMzgzZmYwYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguKtHM53Yynoyoar+Wp0e3XCVsmxYlAcVCCs t1CpoIl3UFRUtgHpAcHFXU8tXbXg1nIaKhm7446hmcYyKOzQAw71NpiWPi8hWqDo LrdYBP4oXk4cTHrP4CangZduc97vmEb9FI62qT41oJicyP7zASLl7VopyiCl0g8y GAJB9GIWKJMV9IZ1gTxFI8ArAYoEgxyVGXKS41U2YdX5+6xOKHqOTtn2f3+HtTMG HrjyxDFKM8QZ4g8c9pGKcMTz7GsOR3nXJSiP8XzjAedB5YsGW4H2GV5ZnGWmLHtz ZAJOXBGfAkbSECM+f6AF1A/m/WwBtg14b85jCdZlKS0gK2QLJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9fc8HaMfWHp8LhTlaT4PtpkiBWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iYTJh MWZlZC02OTczLTQ2MDctYTI5Ny0yMGYzZjI0MWE3MzkvYzlmODRlYmItZWI5MC0z YjFlLWEzYTYtOWQ5NTU0MGNlOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYmEyYTFmZWQtNjk3My00NjA3LWEy OTctMjBmM2YyNDFhNzM5L2JhMmExZmVkLTY5NzMtNDYwNy1hMjk3LTIwZjNmMjQx YTczOS5jcmwwHwYDVR0jBBgwFoAUlrqf3KvN2czFyO1vDzA9ccCNIbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9iYTJhMWZlZC02OTczLTQ2MDctYTI5Ny0yMGYz ZjI0MWE3MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM/uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9iCXLEuekq/wK1u3abkjwlpMTcs+zyTexM2oWEvq+CAkEqN4hjc8Va 2IG++M4tO3lBH82ayPXMpYez2zXsvk9nhs+Bjfs0bD7+Ir6vrST8iR0nsKHXNAWn oFsJM+lBrBqlCNgmtbio862rR1y9UFTYWt++oBl9ZJk1tpPHP46VjJgaVJ2EZ32D r/RmmjSMmRVsbWA8WYaojx92PwsTaCqwjMuYR8lrtpFRKE42BaKm2Z/GTEeHAt3P SmYd5UO6n+6S1DEdVnaJ3acSGHM7DLNSbGrQdWWGEfUi++G0gN3IP6ApReWXILRT EyoQFr8NdwzaaGmhpbMDPWU7OQ4o+6s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:26 2025 by rpki-client