$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2f6a563c-3562-3a85-8eff-75f019931c2a.roa File: 2f6a563c-3562-3a85-8eff-75f019931c2a.roa (raw, json) Hash identifier: F+ANG8Y1KOwjmponPuzx53AwlcC1cyx8De6XR+yZi3E= Subject key identifier: 45:76:DC:92:DD:A8:DD:F3:28:47:2E:9C:E8:FA:F8:80:BB:FB:E4:63 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C2E0A38ED24C8CD61480 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2f6a563c-3562-3a85-8eff-75f019931c2a.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 209.127.162.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c2:e0:a3:8e:d2:4c:8c:d6:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=5b11f698-6cc7-4071-91ce-8bbef6a8883c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:fd:4a:60:ef:79:e5:30:6e:99:88:56:d3: b6:07:b1:f8:b5:59:2d:af:55:9a:d2:d6:64:af:94: 0d:4e:0e:97:1d:93:b1:53:e4:7f:78:aa:78:e4:e1: ae:b8:87:f7:08:52:5b:7c:be:ac:23:70:77:94:f1: 3a:78:eb:30:5b:5f:90:83:37:5f:0b:8e:49:46:d3: 81:e5:bb:a5:29:83:92:88:ac:4f:ba:c9:f7:d9:6d: 0b:69:14:2f:2f:5e:5e:3e:5e:2b:d1:43:42:2f:1f: e7:4f:a7:48:d5:a8:36:f3:cd:9c:ea:71:47:98:f7: 83:b1:45:09:2d:51:a3:6e:87:cb:1c:ab:e0:c2:04: 05:08:75:93:af:d7:92:76:f4:69:3c:48:77:5b:85: ba:2a:88:0c:10:d6:a1:df:4d:b5:aa:7d:18:0e:69: b1:66:72:ee:f0:e5:12:a1:16:c7:68:97:32:91:2d: bc:16:86:73:9e:19:73:af:29:22:09:bd:f2:8b:43: 67:c8:8b:88:50:d9:f5:d0:e6:44:54:4e:fb:49:5a: 29:8c:be:3f:06:be:d2:e4:01:36:31:50:5e:f1:2f: ab:06:c0:6e:fc:1a:bf:a2:72:22:df:9c:2b:db:3b: ae:19:6a:49:9f:41:b5:4a:ec:34:16:a1:96:58:47: ba:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:76:DC:92:DD:A8:DD:F3:28:47:2E:9C:E8:FA:F8:80:BB:FB:E4:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/2f6a563c-3562-3a85-8eff-75f019931c2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 209.127.162.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:10:4c:2d:30:25:06:1d:eb:e2:54:49:28:9f:b8:9b:f5:44: 88:f0:15:4e:21:70:d9:c1:65:a5:10:24:b3:96:a5:64:c4:a3: c6:4e:cb:be:f4:5f:e2:eb:ae:e0:bd:c3:34:09:8d:f3:ae:41: ce:f2:ae:d8:9e:c8:bd:48:bb:04:fb:2f:9f:2a:01:af:76:29: b6:eb:4b:10:d3:f0:d7:96:88:eb:79:e7:8b:82:99:66:2b:a7: 07:b1:48:d3:03:cb:5f:8e:8d:69:4d:c1:7b:5c:d5:61:ee:ba: 7f:b2:66:31:c3:65:dd:08:43:90:1f:ed:11:9e:7a:e8:3e:47: 33:1f:dd:c9:4c:84:14:49:9c:5d:c4:a3:d9:65:02:43:f2:48: dc:93:17:13:a7:2d:4c:3e:3e:4d:4f:8b:2a:56:b8:10:a1:19: 8c:81:ab:bb:43:6f:0c:43:d5:82:1d:f8:7e:0b:d8:a0:39:75: 8f:79:dc:08:54:4d:50:fb:e1:8e:6f:46:4f:bf:d7:00:49:cb: 7f:7a:7e:b7:7f:79:f3:cf:54:c8:e8:96:54:10:d4:f0:70:3b: e6:5a:c8:b6:24:dc:31:0a:c2:bf:01:36:25:8d:74:f4:06:d7: 66:4b:44:ff:15:60:f7:20:3c:5a:09:79:70:84:2f:45:5c:ea: 16:fe:5c:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsLgo47STIzWFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NWIxMWY2OTgtNmNjNy00MDcxLTkxY2UtOGJiZWY2YTg4ODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8f9SmDveeUwbpmIVtO2B7H4tVktr1Wa0tZk r5QNTg6XHZOxU+R/eKp45OGuuIf3CFJbfL6sI3B3lPE6eOswW1+QgzdfC45JRtOB 5bulKYOSiKxPusn32W0LaRQvL15ePl4r0UNCLx/nT6dI1ag2882c6nFHmPeDsUUJ LVGjbofLHKvgwgQFCHWTr9eSdvRpPEh3W4W6KogMENah3021qn0YDmmxZnLu8OUS oRbHaJcykS28FoZznhlzrykiCb3yi0NnyIuIUNn10OZEVE77SVopjL4/Br7S5AE2 MVBe8S+rBsBu/Bq/onIi35wr2zuuGWpJn0G1Suw0FqGWWEe6GwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV23JLdqN3zKEcunOj6+IC7++RjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMmY2YTU2M2MtMzU2Mi0z YTg1LThlZmYtNzVmMDE5OTMxYzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0X+iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8QTC0wJQYd6+JUSSifuJv1RIjwFU4hcNnBZaUQJLOWpWTEo8ZOy770 X+LrruC9wzQJjfOuQc7yrtieyL1IuwT7L58qAa92KbbrSxDT8NeWiOt554uCmWYr pwexSNMDy1+OjWlNwXtc1WHuun+yZjHDZd0IQ5Af7RGeeug+RzMf3clMhBRJnF3E o9llAkPySNyTFxOnLUw+Pk1PiypWuBChGYyBq7tDbwxD1YId+H4L2KA5dY953AhU TVD74Y5vRk+/1wBJy396frd/efPPVMjollQQ1PBwO+ZayLYk3DEKwr8BNiWNdPQG 12ZLRP8VYPcgPFoJeXCEL0Vc6hb+XCM= -----END CERTIFICATE-----Generated at Fri Mar 14 13:28:46 2025 by rpki-client