$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa File: bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa (raw, json) Hash identifier: h+2cPOuZLjZgVzi9g8VrYLkdNXZIpZ7hTR/ggtrY+Qk= Subject key identifier: 1E:A7:21:91:7E:90:D1:E0:D7:AE:92:10:18:6F:8B:FC:43:9C:57:0E Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F432858496A19A756DA41FF7C0DEC1D80 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 25779 IP address blocks: 206.168.9.0/24 maxlen: 24 207.174.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:a7:56:da:41:ff:7c:0d:ec:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=b9e8380a-0248-421f-8b67-4a81c778367b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c3:bf:18:a6:3c:8c:66:bf:dd:d9:59:e5:a3: 58:36:f6:6e:22:2b:17:12:07:d7:33:9c:01:e5:be: 44:57:8c:eb:c3:80:f5:37:3b:ad:fe:f0:9b:1e:89: 95:3d:14:1f:d6:92:96:04:f3:18:fb:bf:a8:63:01: 4d:a3:89:81:91:53:8a:3b:f8:9d:34:e3:b1:f8:21: 48:35:3d:ec:85:bc:f3:09:c4:cf:33:17:af:50:7a: d0:92:6b:fe:0b:91:72:e4:76:4c:91:57:95:c2:dc: c4:89:f7:85:f9:b3:45:30:db:ae:f9:9b:a6:8a:28: 36:49:be:cd:26:c6:49:e4:39:4a:d9:2c:14:3b:2d: e4:9d:9a:e4:74:96:4e:ca:c5:78:0d:99:8d:73:10: 5f:72:d6:6f:40:ff:eb:6b:db:fd:08:71:96:85:f2: 89:c0:fe:8f:9e:fd:f9:e7:e1:89:90:75:63:93:62: bc:a5:c5:73:98:8c:05:76:80:38:fd:d0:b5:77:f2: 37:18:6f:1f:6b:ff:46:c7:09:ba:ff:3b:27:48:c4: 09:4e:4a:b6:bc:d9:c7:ae:fc:d6:10:a1:42:86:d4: a3:4d:bf:a9:8d:ea:f4:d7:e5:b9:c1:c9:fa:14:33: 05:25:06:b3:4e:8a:6e:0c:c5:50:dd:25:0c:be:d4: eb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A7:21:91:7E:90:D1:E0:D7:AE:92:10:18:6F:8B:FC:43:9C:57:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bf6d3f93-c0b9-383a-b50b-8df33b8a1878.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 206.168.9.0/24 207.174.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:62:14:ea:26:f1:61:f5:0b:d9:e6:df:e7:de:54:e9:31:f4: e8:6a:e0:0c:a7:6f:26:44:b4:9e:27:eb:0a:df:dc:d3:d3:e1: b2:58:75:27:5d:cc:54:54:ac:f2:a6:ed:6a:c5:4a:ca:00:4b: dd:0a:f3:4a:99:3b:f8:0e:3a:9f:07:c4:63:a8:41:83:ee:2c: 23:62:eb:73:ae:27:68:9b:1a:2b:1f:18:35:0d:3a:45:b4:36: 21:06:04:9a:db:d5:10:18:ff:95:2f:2d:f7:6b:30:e1:35:55: ec:be:01:0d:bd:4c:c8:1f:97:be:94:04:36:7e:0d:7e:d7:4a: 2a:61:64:d4:d9:11:fa:42:48:e1:ec:f6:a9:c3:f5:9a:70:9b: 5a:cf:83:d3:e6:dc:ef:e1:92:99:d9:a7:4e:3b:67:8d:02:dc: da:f7:38:17:9b:75:0d:20:de:61:b9:1b:d7:45:9a:37:2d:3f: 0d:6f:49:a1:31:06:6b:de:59:59:15:68:1c:ad:ae:24:5d:14: 77:78:43:cf:72:61:ba:6a:94:cd:89:e9:29:eb:ec:27:a6:b7: d4:ee:b3:65:2b:e5:49:dc:36:bd:00:7a:ed:fe:4e:c5:0e:bd: 81:40:0c:96:06:a8:cc:89:48:d9:93:0a:c9:c5:8d:bc:33:b4: a5:8e:7d:56 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElqGadW2kH/fA3sHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk YjllODM4MGEtMDI0OC00MjFmLThiNjctNGE4MWM3NzgzNjdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8O/GKY8jGa/3dlZ5aNYNvZuIisXEgfXM5wB 5b5EV4zrw4D1Nzut/vCbHomVPRQf1pKWBPMY+7+oYwFNo4mBkVOKO/idNOOx+CFI NT3shbzzCcTPMxevUHrQkmv+C5Fy5HZMkVeVwtzEifeF+bNFMNuu+Zumiig2Sb7N JsZJ5DlK2SwUOy3knZrkdJZOysV4DZmNcxBfctZvQP/ra9v9CHGWhfKJwP6Pnv35 5+GJkHVjk2K8pcVzmIwFdoA4/dC1d/I3GG8fa/9Gxwm6/zsnSMQJTkq2vNnHrvzW EKFChtSjTb+pjer01+W5wcn6FDMFJQazTopuDMVQ3SUMvtTr/wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFB6nIZF+kNHg166SEBhvi/xDnFcOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvYmY2ZDNmOTMtYzBiOS0z ODNhLWI1MGItOGRmMzNiOGExODc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzqgJAwQA z67KMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAKBiFOom8WH1C9nm3+feVOkx9Ohq4AynbyZEtJ4n6wrf3NPT 4bJYdSddzFRUrPKm7WrFSsoAS90K80qZO/gOOp8HxGOoQYPuLCNi63OuJ2ibGisf GDUNOkW0NiEGBJrb1RAY/5UvLfdrMOE1Vey+AQ29TMgfl76UBDZ+DX7XSiphZNTZ EfpCSOHs9qnD9Zpwm1rPg9Pm3O/hkpnZp047Z40C3Nr3OBebdQ0g3mG5G9dFmjct Pw1vSaExBmveWVkVaBytriRdFHd4Q89yYbpqlM2J6Snr7Cemt9Tus2Ur5UncNr0A eu3+TsUOvYFADJYGqMyJSNmTCsnFjbwztKWOfVY= -----END CERTIFICATE-----Generated at Sat Apr 12 00:24:59 2025 by rpki-client