$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa File: e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa (raw, json) Hash identifier: 7thw8aeB+LwQ2rXDAQYpGtDmo4SSSbWe7dOWdXZuFyQ= Subject key identifier: EA:EE:7F:C4:CD:66:83:0C:80:6F:39:20:5B:7B:A4:FD:5D:39:4C:FC Certificate issuer: /CN=bad5af20-8385-44d4-815f-bb83497d4a0e Certificate serial: 010D0C9F432858496A19A748C019BB715DF5E440 Authority key identifier: 11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa Signing time: Fri 04 Apr 2025 13:00:59 +0000 ROA not before: Fri 04 Apr 2025 13:00:59 +0000 ROA not after: Thu 03 Jul 2025 13:00:59 +0000 asID: 21777 IP address blocks: 206.168.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:19:a7:48:c0:19:bb:71:5d:f5:e4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bad5af20-8385-44d4-815f-bb83497d4a0e Validity Not Before: Apr 4 13:00:59 2025 GMT Not After : Jul 3 13:00:59 2025 GMT Subject: CN=1dd2b907-ccd4-4896-a35e-5a2f5ccb0da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:74:9b:a1:e8:ea:9d:cf:9b:c8:eb:65:ff:47: 31:37:2a:80:d2:b5:9b:f1:d7:8a:2c:99:f0:0d:d6: ba:a1:19:19:4c:89:b7:ad:68:f3:87:c2:6d:38:0e: 3e:26:76:d2:42:d2:18:80:80:b9:b8:a4:03:cc:44: c9:61:79:7d:56:58:4c:eb:9b:0b:4c:1b:a8:75:de: 8e:2a:ed:fb:ea:c3:9c:a7:6e:75:0f:a2:f2:c6:90: 58:50:3b:19:3b:a8:d8:c8:4c:34:b9:09:e8:96:22: f6:b4:ee:51:e2:a2:8e:bb:18:31:00:66:fd:55:aa: c4:4d:43:8e:e1:1b:a2:d3:e0:34:0d:c3:8d:e0:40: 3b:49:c7:e6:6a:1a:39:65:ee:1a:56:ca:a6:9c:93: d4:3f:f8:1d:a3:5b:1d:70:b9:d1:d6:e2:31:44:61: fd:b2:15:06:bd:c9:1d:02:e2:29:cb:4b:dd:77:68: 37:5e:12:74:4f:b2:93:bc:34:f8:8c:c4:d8:a6:2d: 92:c0:ff:e2:7d:b3:b5:f8:a5:7a:c2:d2:e1:7f:23: bc:84:31:f3:02:a5:f9:1a:ea:5d:76:37:d3:0f:8a: 5e:35:67:f7:da:27:a5:62:35:cb:6f:84:9c:0a:ac: f9:18:0f:7f:4b:57:75:f9:c7:d5:d1:1d:b4:80:4d: d8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:EE:7F:C4:CD:66:83:0C:80:6F:39:20:5B:7B:A4:FD:5D:39:4C:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/e68d7bd5-9d30-30b1-a76b-98ef9aeaf8f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e/bad5af20-8385-44d4-815f-bb83497d4a0e.crl X509v3 Authority Key Identifier: keyid:11:AA:70:F3:04:50:A3:AC:82:39:73:14:B6:AD:D6:35:D1:DD:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bad5af20-8385-44d4-815f-bb83497d4a0e.cer sbgp-ipAddrBlock: critical IPv4: 206.168.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:22:81:4a:58:d3:d2:46:47:c1:58:a9:c3:05:a2:eb:78:46: 0d:99:b7:18:fd:70:84:ee:bb:10:d0:01:3f:38:3a:6c:c9:3e: 29:b9:90:48:8a:48:70:45:e3:b1:b1:2c:b0:06:1b:d9:65:11: 63:39:fd:6e:38:c7:70:af:91:4b:38:d9:40:b8:80:50:1b:02: 50:e1:0b:dd:cc:b4:53:da:af:88:b0:ad:57:d9:ec:79:c2:3f: af:2d:4d:1a:5c:0f:d1:6b:38:02:3b:5d:83:c2:c2:46:36:06: 94:93:76:c9:9b:b7:3c:4e:fc:86:11:96:76:8a:71:19:10:84: ae:67:98:c0:8f:26:ec:67:a8:61:44:d8:56:35:16:8e:a8:70: c1:e3:e9:88:c4:20:a5:cf:48:eb:49:03:7c:77:92:6b:39:e1: e3:3d:42:8d:55:07:5b:03:12:f0:82:97:a1:b7:aa:ac:ac:49: 53:18:d1:54:0c:9d:b7:01:dc:93:26:ad:da:87:06:f3:8c:bf: 9c:5b:cb:3d:28:27:15:64:f7:95:74:10:91:2f:b7:8e:14:03: d2:a8:b0:ba:18:b3:c7:b8:e3:5c:26:e6:07:cc:44:4e:09:1e: a7:e9:c1:5a:5d:70:be:3e:dd:22:60:50:b0:50:e6:20:a9:4d: 67:d6:d4:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqGadIwBm7cV315EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFkNWFmMjAtODM4NS00NGQ0LTgxNWYtYmI4MzQ5N2Q0 YTBlMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk MWRkMmI5MDctY2NkNC00ODk2LWEzNWUtNWEyZjVjY2IwZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3Sboejqnc+byOtl/0cxNyqA0rWb8deKLJnw Dda6oRkZTIm3rWjzh8JtOA4+JnbSQtIYgIC5uKQDzETJYXl9VlhM65sLTBuodd6O Ku376sOcp251D6LyxpBYUDsZO6jYyEw0uQnoliL2tO5R4qKOuxgxAGb9VarETUOO 4Rui0+A0DcON4EA7Scfmaho5Ze4aVsqmnJPUP/gdo1sdcLnR1uIxRGH9shUGvckd AuIpy0vdd2g3XhJ0T7KTvDT4jMTYpi2SwP/ifbO1+KV6wtLhfyO8hDHzAqX5Gupd djfTD4peNWf32ielYjXLb4ScCqz5GA9/S1d1+cfV0R20gE3YRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOruf8TNZoMMgG85IFt7pP1dOUz8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1 YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgzNDk3ZDRhMGUvZTY4ZDdiZDUtOWQzMC0z MGIxLWE3NmItOThlZjlhZWFmOGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmFkNWFmMjAtODM4NS00NGQ0LTgx NWYtYmI4MzQ5N2Q0YTBlL2JhZDVhZjIwLTgzODUtNDRkNC04MTVmLWJiODM0OTdk NGEwZS5jcmwwHwYDVR0jBBgwFoAUEapw8wRQo6yCOXMUtq3WNdHdOZQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYWQ1YWYyMC04Mzg1LTQ0ZDQtODE1Zi1iYjgz NDk3ZDRhMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqhhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIigUpY09JGR8FYqcMFout4Rg2Ztxj9cITuuxDQAT84OmzJPim5kEiK SHBF47GxLLAGG9llEWM5/W44x3CvkUs42UC4gFAbAlDhC93MtFPar4iwrVfZ7HnC P68tTRpcD9FrOAI7XYPCwkY2BpSTdsmbtzxO/IYRlnaKcRkQhK5nmMCPJuxnqGFE 2FY1Fo6ocMHj6YjEIKXPSOtJA3x3kms54eM9Qo1VB1sDEvCCl6G3qqysSVMY0VQM nbcB3JMmrdqHBvOMv5xbyz0oJxVk95V0EJEvt44UA9KosLoYs8e441wm5gfMRE4J HqfpwVpdcL4+3SJgULBQ5iCpTWfW1CY= -----END CERTIFICATE-----Generated at Fri Apr 11 21:41:29 2025 by rpki-client