$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa File: 09435df8-02ac-3656-b5c3-baaac1dd687b.roa (raw, json) Hash identifier: aTW6TG/nuig3/tKrt/BlVJUQpOaiEulM9bZK85wsTHs= Subject key identifier: 74:9A:62:37:23:84:57:EA:38:4A:3E:8E:E3:33:0F:18:D3:F5:08:DA Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C186C0A466896F4CE520 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 206.255.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c1:86:c0:a4:66:89:6f:4c:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=2adea0bc-da94-4fb4-80b5-17cacfbd1820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:89:48:26:df:05:dd:83:04:97:60:e3:f0:82: 53:f8:ec:b2:60:21:6f:1b:94:0c:ba:43:cd:a9:bc: 72:d2:30:bc:88:11:51:0a:f2:11:a9:35:fb:7c:ce: 33:93:2f:a5:33:3e:85:20:28:64:7d:40:96:fa:8f: a6:c3:23:de:17:4a:a8:c9:2f:b3:9d:4a:9b:20:e8: d6:ba:9f:0a:e4:38:22:54:17:05:34:b9:f3:bb:af: 9e:2b:9f:f8:dc:3b:33:69:93:8b:f4:3e:9c:d5:27: 43:1a:16:c6:2c:e0:20:7e:c1:1d:0a:72:96:0c:7d: 94:5e:ce:d7:5a:e6:dc:69:90:33:44:d8:4c:df:2b: e6:b6:8d:af:47:d2:19:6a:8a:12:84:7b:93:8a:4c: bf:c9:3c:b2:8b:d3:c2:01:91:24:0d:68:9f:f7:5b: 1a:ba:9d:f5:40:ad:a7:e4:09:8d:00:74:59:3e:d1: 06:ba:54:9d:e6:ae:5e:0d:0d:4d:ad:25:6b:fc:cf: a2:23:e6:cc:64:e7:df:66:83:cd:bb:af:c4:c0:2d: 76:24:9d:b1:b4:35:58:b0:b8:f2:73:96:1a:71:85: d4:eb:61:7d:88:db:ef:d9:98:65:01:38:b1:b0:eb: e9:4d:1c:ac:6c:45:d8:11:4e:f1:9f:0c:b1:9a:ad: e2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9A:62:37:23:84:57:EA:38:4A:3E:8E:E3:33:0F:18:D3:F5:08:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/09435df8-02ac-3656-b5c3-baaac1dd687b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:f5:4a:b6:49:74:72:1a:4c:0d:ea:ad:4b:58:6f:08:44:e9: 55:25:36:25:cf:13:ac:70:5a:ab:a0:97:c8:d5:4d:33:c6:7f: 73:11:0a:95:85:7d:23:c5:b1:a2:f4:09:b5:40:aa:07:cf:cc: f7:b9:88:78:ce:72:62:f0:07:78:9c:47:6c:2f:77:51:95:b4: 10:a3:03:b0:02:f7:87:8f:27:b1:de:75:42:ac:0e:6c:10:30: 72:dc:b4:a2:70:fb:35:67:30:b7:b2:74:11:c7:59:22:b7:02: b5:a3:7c:6a:1b:cb:00:4f:97:eb:f6:61:b7:ea:0b:18:68:b4: 84:27:7e:41:fd:54:67:b0:9f:cb:10:14:5e:94:ed:bc:82:d7: cd:eb:d5:ad:1b:6b:00:ef:54:29:56:fd:16:66:f3:ae:cc:71: 8f:1f:dc:e6:db:f5:52:b3:a1:f4:f9:eb:fb:a4:81:f4:b0:02: d3:79:59:e5:81:c8:74:d2:c8:ae:c2:22:5b:65:5b:07:c2:44: 98:27:2d:c9:53:c7:4f:a4:3f:16:ba:f7:89:e7:86:ea:14:83: a1:a2:0f:aa:95:04:af:96:25:ed:43:67:c9:ba:2b:0e:1d:ac: 40:49:67:77:a9:f6:dc:fe:b6:86:f1:f4:a9:44:28:ed:bf:24: bc:fe:50:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsGGwKRmiW9M5SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmFkZWEwYmMtZGE5NC00ZmI0LTgwYjUtMTdjYWNmYmQxODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIlIJt8F3YMEl2Dj8IJT+OyyYCFvG5QMukPN qbxy0jC8iBFRCvIRqTX7fM4zky+lMz6FIChkfUCW+o+mwyPeF0qoyS+znUqbIOjW up8K5DgiVBcFNLnzu6+eK5/43DszaZOL9D6c1SdDGhbGLOAgfsEdCnKWDH2UXs7X WubcaZAzRNhM3yvmto2vR9IZaooShHuTiky/yTyyi9PCAZEkDWif91saup31QK2n 5AmNAHRZPtEGulSd5q5eDQ1NrSVr/M+iI+bMZOffZoPNu6/EwC12JJ2xtDVYsLjy c5YacYXU62F9iNvv2ZhlATixsOvpTRysbEXYEU7xnwyxmq3iowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSaYjcjhFfqOEo+juMzDxjT9QjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMDk0MzVkZjgtMDJhYy0z NjU2LWI1YzMtYmFhYWMxZGQ2ODdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj1SrZJdHIaTA3qrUtYbwhE6VUlNiXPE6xwWqugl8jVTTPGf3MRCpWF fSPFsaL0CbVAqgfPzPe5iHjOcmLwB3icR2wvd1GVtBCjA7AC94ePJ7HedUKsDmwQ MHLctKJw+zVnMLeydBHHWSK3ArWjfGobywBPl+v2YbfqCxhotIQnfkH9VGewn8sQ FF6U7byC183r1a0bawDvVClW/RZm867McY8f3Obb9VKzofT56/ukgfSwAtN5WeWB yHTSyK7CIltlWwfCRJgnLclTx0+kPxa694nnhuoUg6GiD6qVBK+WJe1DZ8m6Kw4d rEBJZ3ep9tz+tobx9KlEKO2/JLz+UCU= -----END CERTIFICATE-----Generated at Fri Mar 14 08:46:22 2025 by rpki-client