$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/15d3685b-a7d7-3a80-b431-2e7b74bade90.roa File: 15d3685b-a7d7-3a80-b431-2e7b74bade90.roa (raw, json) Hash identifier: HoshUnmpS8UBjZKEy4euuxijUoQcVPFFPm65UoAkI1g= Subject key identifier: F0:00:0E:21:73:20:2F:CF:81:69:9E:EC:EA:37:37:D1:71:B7:C8:61 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C9F9C70C53A705537280 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/15d3685b-a7d7-3a80-b431-2e7b74bade90.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 206.255.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c9:f9:c7:0c:53:a7:05:53:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=68367a05-3678-4a19-bf41-d1a95a9e99a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:36:86:60:4c:12:f6:a1:75:c5:2c:fe:81:d0: 66:50:21:2d:11:f3:24:6b:3c:92:25:e7:5c:b6:3e: 09:4f:02:e4:57:7c:a2:64:94:b2:03:b5:ad:9e:d1: 21:e3:61:05:24:ca:fa:7d:c1:53:46:5c:9a:92:ac: 2e:2d:f4:e8:52:6c:30:d4:74:f8:6c:1e:b5:e2:3a: 67:87:e9:0e:4c:a8:5a:63:10:39:9d:44:f2:94:82: 3f:bd:31:de:18:61:a3:73:4d:e3:3b:ce:31:33:31: 0a:14:16:fa:24:5f:94:4a:10:35:2a:03:6e:89:ef: 6c:8e:a9:d2:d3:d0:ab:32:65:ee:4c:b2:ee:31:c8: fd:2b:65:bd:99:45:3d:ac:75:47:36:ca:98:86:05: 28:22:c9:af:e8:71:8a:d6:16:30:2c:7a:2d:f0:03: 68:31:c9:24:12:37:9f:a6:67:8d:8b:ba:d7:54:2e: a4:d6:a9:66:4a:6b:96:f4:d0:da:05:e8:98:bc:31: 59:d8:d5:48:0e:d5:c7:df:6d:07:c1:30:90:5a:df: 2a:81:3e:f0:d8:35:ad:fd:2e:57:8f:c3:c3:c9:f5: 3f:37:bf:cc:8b:32:35:8c:47:08:96:e7:4d:45:66: 1b:7e:20:eb:98:86:74:cc:bb:31:ec:f3:9a:19:cf: 6e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:00:0E:21:73:20:2F:CF:81:69:9E:EC:EA:37:37:D1:71:B7:C8:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/15d3685b-a7d7-3a80-b431-2e7b74bade90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.192.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:91:5d:20:da:da:a7:a3:1a:f1:20:01:fa:de:f5:f1:ea:8c: b5:64:62:74:e9:90:10:a8:f1:9a:9a:27:1a:59:f7:18:20:2e: cf:0b:fd:3a:94:78:13:59:80:16:2b:66:c5:26:4d:59:f9:cd: 2e:87:ff:be:41:37:d3:53:a8:8e:86:5b:03:18:c1:01:d9:41: 80:82:c2:de:e5:c3:e6:79:be:de:68:70:1b:9a:93:7e:31:36: 5c:2a:f6:0a:97:e5:40:22:8d:c1:2b:dd:84:47:89:78:fe:c7: 6a:e1:9c:07:9d:4a:4a:dd:ab:5b:0b:0b:48:2b:40:e6:2b:29: e3:27:46:05:f3:7f:8f:89:61:25:43:3f:76:a9:2b:f4:b5:eb: ac:8c:76:c4:a6:1c:bd:69:c7:92:d2:83:0d:39:b6:03:60:07: 68:68:54:41:11:ac:13:27:1c:9c:d6:eb:63:46:32:21:18:c1: ea:fc:ea:27:9f:2a:6e:99:39:c4:e2:29:ed:06:38:d6:7a:8b: 4d:8a:d2:fa:61:ea:f5:92:e7:24:ac:cf:51:eb:7f:38:50:48: 65:a2:f9:5e:41:cb:2a:0d:d5:29:a9:e4:f8:f2:69:a2:bb:61: 26:b4:62:0b:7c:46:97:f6:db:ee:60:f6:0b:d6:f9:b0:98:c7: 74:61:9b:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vsn5xwxTpwVTcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NjgzNjdhMDUtMzY3OC00YTE5LWJmNDEtZDFhOTVhOWU5OWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTaGYEwS9qF1xSz+gdBmUCEtEfMkazySJedc tj4JTwLkV3yiZJSyA7WtntEh42EFJMr6fcFTRlyakqwuLfToUmww1HT4bB614jpn h+kOTKhaYxA5nUTylII/vTHeGGGjc03jO84xMzEKFBb6JF+UShA1KgNuie9sjqnS 09CrMmXuTLLuMcj9K2W9mUU9rHVHNsqYhgUoIsmv6HGK1hYwLHot8ANoMckkEjef pmeNi7rXVC6k1qlmSmuW9NDaBeiYvDFZ2NVIDtXH320HwTCQWt8qgT7w2DWt/S5X j8PDyfU/N7/MizI1jEcIludNRWYbfiDrmIZ0zLsx7POaGc9uGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAADiFzIC/PgWme7Oo3N9Fxt8hhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMTVkMzY4NWItYTdkNy0z YTgwLWI0MzEtMmU3Yjc0YmFkZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuRXSDa2qejGvEgAfre9fHqjLVkYnTpkBCo8ZqaJxpZ9xggLs8L/TqU eBNZgBYrZsUmTVn5zS6H/75BN9NTqI6GWwMYwQHZQYCCwt7lw+Z5vt5ocBuak34x Nlwq9gqX5UAijcEr3YRHiXj+x2rhnAedSkrdq1sLC0grQOYrKeMnRgXzf4+JYSVD P3apK/S166yMdsSmHL1px5LSgw05tgNgB2hoVEERrBMnHJzW62NGMiEYwer86ief Km6ZOcTiKe0GONZ6i02K0vph6vWS5ySsz1HrfzhQSGWi+V5ByyoN1Smp5PjyaaK7 YSa0Ygt8Rpf22+5g9gvW+bCYx3Rhm0c= -----END CERTIFICATE-----Generated at Fri Apr 18 07:38:48 2025 by rpki-client