$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa File: 10161777-f08a-3671-aa2b-fae57dafad53.roa (raw, json) Hash identifier: YckEDcKiazu5eyn3LfBGy06bp0r+X0WZ09ZWhGsLOdM= Subject key identifier: 12:F3:B3:82:DE:57:DC:3B:4E:BE:21:1D:1C:5B:68:C2:4D:0B:4B:7F Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F43285849350E98FA94EC8117B02FAD80 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 33392 IP address blocks: 209.35.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:98:fa:94:ec:81:17:b0:2f:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=b217ecfd-a59e-4343-8180-ed62a37d0d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:dc:b7:22:9b:d6:2f:d4:a3:d5:52:ff:44:cb: e3:c1:19:91:57:a2:c6:b9:cd:9e:f8:40:f7:0f:7e: cd:a1:17:7f:59:62:08:f0:1e:87:43:a4:3c:8a:35: fc:74:48:c9:fb:eb:f3:9a:8c:75:cb:c6:5b:3f:f2: ba:1d:cd:41:44:27:d2:a8:bd:08:6c:ff:55:59:81: c3:0c:71:6f:1d:7e:0f:2e:54:00:24:59:b2:dd:01: d0:d4:3a:a8:2b:7c:d6:82:9d:b8:ff:df:fc:0d:9c: 83:d3:7b:a3:b0:d9:3a:83:93:97:d9:4f:bc:e9:c5: 2b:42:03:a1:21:95:d1:d0:a5:38:c1:21:30:c7:c2: f5:91:11:b0:78:e6:8f:d5:28:7c:10:d4:6c:68:9a: cc:18:8c:df:81:1d:26:8f:7e:09:2e:87:f0:57:cd: 4c:2c:03:17:41:31:81:03:49:d1:7f:bf:0f:15:a7: d1:eb:86:eb:93:93:f4:cb:be:39:e2:f9:b6:24:cf: 5e:8a:3a:46:24:8a:ab:b7:6f:78:79:9c:cd:d5:75: 6f:61:f9:33:53:d6:55:dc:e3:69:43:57:fe:c4:74: 11:f9:af:64:46:ff:1e:8b:1c:e1:dc:5c:69:96:9b: 21:01:4f:2f:86:9e:c9:0c:4a:07:38:c9:e2:9b:9d: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F3:B3:82:DE:57:DC:3B:4E:BE:21:1D:1C:5B:68:C2:4D:0B:4B:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/10161777-f08a-3671-aa2b-fae57dafad53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 209.35.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:a5:61:88:6b:06:94:14:d7:ed:36:55:1a:06:cf:48:29:11: 92:53:59:dc:ea:87:6c:51:df:f7:0c:bb:d7:d5:25:9f:a3:c9: cf:35:0e:5b:85:78:38:c7:1f:68:a5:1a:9e:53:f9:a4:cd:0c: 00:98:b8:07:97:d2:3f:d0:55:67:f9:c7:5f:76:87:24:02:4f: 96:51:a0:89:4f:4b:68:12:33:ce:cd:c9:e5:35:0c:28:62:ec: 51:fc:ba:a0:88:b2:14:42:4c:81:d5:09:ef:23:38:6c:6a:20: 68:af:99:a4:59:7b:7f:a4:40:20:b3:3f:05:18:77:7e:6a:30: 28:fd:bb:99:12:5a:a8:06:61:19:31:1f:eb:66:48:72:a9:37: 69:e5:d1:72:e7:71:13:e0:ed:a8:4a:4c:67:14:d0:1a:bd:a8: f9:77:54:22:ad:dc:c0:0d:00:33:e6:80:01:89:ff:39:bb:15: 8b:5b:5d:8b:fc:82:c8:5a:a2:72:d9:2f:c7:c7:8b:04:52:99: 53:33:3e:78:fd:a0:ef:a7:e2:b9:a6:33:df:7b:9f:0a:f0:71: 8c:24:db:09:e9:eb:c5:b7:ef:54:89:7c:d4:07:fd:c3:9a:cc: ed:bb:92:7f:c3:f7:54:88:79:f4:52:3e:c4:3c:ca:0b:5f:a2: a0:80:d7:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1Dpj6lOyBF7AvrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk YjIxN2VjZmQtYTU5ZS00MzQzLTgxODAtZWQ2MmEzN2QwZDc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9y3IpvWL9Sj1VL/RMvjwRmRV6LGuc2e+ED3 D37NoRd/WWII8B6HQ6Q8ijX8dEjJ++vzmox1y8ZbP/K6Hc1BRCfSqL0IbP9VWYHD DHFvHX4PLlQAJFmy3QHQ1DqoK3zWgp24/9/8DZyD03ujsNk6g5OX2U+86cUrQgOh IZXR0KU4wSEwx8L1kRGweOaP1Sh8ENRsaJrMGIzfgR0mj34JLofwV81MLAMXQTGB A0nRf78PFafR64brk5P0y7454vm2JM9eijpGJIqrt294eZzN1XVvYfkzU9ZV3ONp Q1f+xHQR+a9kRv8eixzh3FxplpshAU8vhp7JDEoHOMnim533vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLzs4LeV9w7Tr4hHRxbaMJNC0t/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMTAxNjE3NzctZjA4YS0z NjcxLWFhMmItZmFlNTdkYWZhZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0SMDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA6lYYhrBpQU1+02VRoGz0gpEZJTWdzqh2xR3/cMu9fVJZ+jyc81DluF eDjHH2ilGp5T+aTNDACYuAeX0j/QVWf5x192hyQCT5ZRoIlPS2gSM87NyeU1DChi 7FH8uqCIshRCTIHVCe8jOGxqIGivmaRZe3+kQCCzPwUYd35qMCj9u5kSWqgGYRkx H+tmSHKpN2nl0XLncRPg7ahKTGcU0Bq9qPl3VCKt3MANADPmgAGJ/zm7FYtbXYv8 gshaonLZL8fHiwRSmVMzPnj9oO+n4rmmM997nwrwcYwk2wnp68W371SJfNQH/cOa zO27kn/D91SIefRSPsQ8ygtfoqCA11M= -----END CERTIFICATE-----Generated at Mon Apr 28 15:23:50 2025 by rpki-client