$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa File: 2a622dab-3a0e-3d38-8261-020cde7acaa2.roa (raw, json) Hash identifier: 8uq+30V07RJUpydDZzlwJcLW2+JxRAN9Sw4mOntWPhY= Subject key identifier: 06:2D:38:31:CC:EE:A5:7D:E3:B6:B3:CA:53:65:AB:EE:05:BE:9A:05 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584A146571ACCB7884BD53473930 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa Signing time: Wed 04 Jun 2025 13:01:04 +0000 ROA not before: Wed 04 Jun 2025 13:01:04 +0000 ROA not after: Tue 02 Sep 2025 13:01:04 +0000 asID: 33392 IP address blocks: 192.149.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:14:65:71:ac:cb:78:84:bd:53:47:39:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Jun 4 13:01:04 2025 GMT Not After : Sep 2 13:01:04 2025 GMT Subject: CN=9bebf659-6ea4-4cf0-a5f1-29ee7a191e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4e:c4:ad:a0:24:ff:22:b4:bb:05:45:71:d7: bb:2c:e3:30:0c:d6:5f:36:fb:7c:4f:42:68:0e:c8: c4:36:ec:08:86:f7:4d:5a:ba:48:33:41:55:2c:69: 47:e9:38:88:61:57:4c:88:6e:9a:8b:4a:3a:00:f2: ff:f3:0c:ec:79:9e:11:fc:d6:16:81:0a:f5:11:f1: bd:4f:9c:0b:a3:3a:aa:c0:45:0e:fe:3d:20:2d:f1: 50:9f:9c:fb:72:8e:cf:bc:07:20:6a:41:7d:14:78: d1:10:68:42:d2:a0:5c:94:f5:81:35:98:5e:5d:49: 12:b1:7b:7f:16:e4:03:1a:fb:8d:40:d7:b4:aa:b8: 19:8e:99:b1:aa:85:4a:af:8b:a8:86:2f:9f:74:73: c3:79:43:f1:e6:4b:53:f6:11:54:2c:96:f3:83:ad: 1c:b6:bc:c1:2c:14:e0:ff:0b:68:11:90:92:5d:eb: e6:94:8c:98:8c:0e:80:3f:e6:85:29:c1:c0:59:1e: 42:1c:fe:f0:03:ac:1d:e7:71:1e:78:bd:95:56:96: 12:f7:03:17:34:ff:d6:19:b4:ac:97:63:b7:3e:c5: f0:99:d1:10:a8:75:13:97:ae:0a:ec:fe:55:23:b9: 81:03:b8:d3:38:b0:25:ef:46:c3:57:60:34:93:cc: 38:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:2D:38:31:CC:EE:A5:7D:E3:B6:B3:CA:53:65:AB:EE:05:BE:9A:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 192.149.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:63:e2:17:cb:8e:d3:0a:de:f6:c5:fd:6c:7b:a5:e1:66:92: b7:fc:50:0b:3a:ef:b0:76:59:55:0d:88:ed:fd:3d:5d:95:01: 0c:99:69:da:30:4c:3b:6f:f8:38:24:3c:c1:96:80:ff:bc:2e: 8a:6f:f4:93:0e:f7:41:35:8d:34:e7:1b:ee:f5:27:eb:fc:1c: 74:49:9e:89:91:ae:77:9f:eb:f5:59:00:6d:99:22:c6:35:17: dd:ea:27:d1:11:7b:3f:7d:e0:21:23:76:29:44:08:a4:7b:36: 09:14:6f:b0:cd:71:d6:3f:48:cf:73:12:fc:64:6c:1d:4a:de: da:f7:68:7e:e4:75:03:48:e0:ad:ca:0b:a1:15:9c:0e:0a:27: 5f:7c:6d:3f:01:c8:6f:0a:71:af:d1:8e:ee:a5:a3:fd:a0:43: c5:45:ca:2c:98:64:8a:88:1e:58:be:5a:36:c1:2f:af:01:7a: f0:53:b6:67:0c:50:e9:fd:12:da:6d:9e:59:0f:67:66:db:8f: 4f:f2:d0:e7:c4:a1:4e:8f:4d:cf:cf:87:67:0f:9d:7d:09:1d: ee:99:86:93:20:2f:35:5e:47:2b:51:16:fc:99:10:21:87:20: 22:00:cf:56:c4:8f:ef:7e:e6:38:1d:a2:d4:1d:22:68:1c:eb: 51:f7:c2:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZXGsy3iEvVNHOTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk OWJlYmY2NTktNmVhNC00Y2YwLWE1ZjEtMjllZTdhMTkxZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE7EraAk/yK0uwVFcde7LOMwDNZfNvt8T0Jo DsjENuwIhvdNWrpIM0FVLGlH6TiIYVdMiG6ai0o6APL/8wzseZ4R/NYWgQr1EfG9 T5wLozqqwEUO/j0gLfFQn5z7co7PvAcgakF9FHjREGhC0qBclPWBNZheXUkSsXt/ FuQDGvuNQNe0qrgZjpmxqoVKr4uohi+fdHPDeUPx5ktT9hFULJbzg60ctrzBLBTg /wtoEZCSXevmlIyYjA6AP+aFKcHAWR5CHP7wA6wd53EeeL2VVpYS9wMXNP/WGbSs l2O3PsXwmdEQqHUTl64K7P5VI7mBA7jTOLAl70bDV2A0k8w4awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYtODHM7qV947azylNlq+4FvpoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvMmE2MjJkYWItM2EwZS0z ZDM4LTgyNjEtMDIwY2RlN2FjYWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJUuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtj4hfLjtMK3vbF/Wx7peFmkrf8UAs677B2WVUNiO39PV2VAQyZadow TDtv+DgkPMGWgP+8Lopv9JMO90E1jTTnG+71J+v8HHRJnomRrnef6/VZAG2ZIsY1 F93qJ9ERez994CEjdilECKR7NgkUb7DNcdY/SM9zEvxkbB1K3tr3aH7kdQNI4K3K C6EVnA4KJ198bT8ByG8Kca/Rju6lo/2gQ8VFyiyYZIqIHli+WjbBL68BevBTtmcM UOn9EtptnlkPZ2bbj0/y0OfEoU6PTc/Ph2cPnX0JHe6ZhpMgLzVeRytRFvyZECGH ICIAz1bEj+9+5jgdotQdImgc61H3wtc= -----END CERTIFICATE-----Generated at Tue Jun 17 15:42:18 2025 by rpki-client