$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa File: 33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa (raw, json) Hash identifier: D3Z00JM2ijxCTK+Z5DL3feWuvp1DW9qz7HGbiJ+Q1Rc= Subject key identifier: 30:FB:94:84:9E:06:D4:38:3D:E4:15:9D:9C:F2:8B:21:F9:41:E0:8B Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C111A6E110760C713A18 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 142.79.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c1:11:a6:e1:10:76:0c:71:3a:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=4b3ce20b-3f49-4072-928c-b8776a757ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:cc:94:25:ac:52:48:b3:f3:30:9e:10:55: 7a:f0:92:1e:8a:6f:58:d7:45:b6:0c:ff:f2:0d:8b: bf:5e:95:0f:1a:75:bd:19:f5:08:0b:6a:b7:98:64: 2d:1a:7f:03:ca:a3:0a:b4:d3:75:85:0d:57:18:d5: 74:03:ed:61:cf:32:59:89:2f:2c:ad:f1:64:6a:b5: 14:e3:74:cc:4c:70:1f:ca:83:a1:2c:34:a9:ff:07: 6c:b9:0c:d0:70:79:27:4b:0a:79:14:88:44:83:8f: d0:2f:59:e1:e3:cf:52:a9:71:8e:e3:16:d4:52:61: fa:9e:21:33:55:94:00:1f:c3:6c:35:27:01:77:96: 24:28:6a:62:db:ea:18:e7:79:be:61:c3:3f:d0:1c: f2:47:20:f9:b1:b5:85:92:8d:73:2e:96:1c:0e:1f: b8:87:eb:fa:1f:24:9f:b9:23:93:f8:67:0f:0a:d2: bb:ad:89:79:23:2d:a4:59:54:9b:21:36:ac:e5:f8: bf:28:da:ce:6a:6f:e7:d7:dc:e3:54:55:d2:72:c0: a2:ce:7b:ca:7d:87:2d:b1:32:25:3a:f2:6f:26:85: 75:83:97:ee:86:50:b4:6d:23:82:84:a1:a9:cd:08: 95:59:94:b1:b6:43:a3:dc:d9:1f:eb:a7:f1:25:bf: 0d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:FB:94:84:9E:06:D4:38:3D:E4:15:9D:9C:F2:8B:21:F9:41:E0:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/33d4d00a-952d-3bbc-9d17-2eaf22032eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.124.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8b:4e:0f:6d:0d:e3:02:e1:2c:75:6d:91:df:80:fe:cd:d6: be:f9:cd:c7:2a:00:72:bd:4d:45:0d:9b:f6:82:89:a0:33:b3: 9e:e6:88:1f:6b:86:0a:c9:10:dd:ff:7d:f6:9e:f9:85:d5:13: 50:2c:fe:30:78:60:63:1e:f3:48:a7:74:c8:66:73:e3:a3:fd: 33:bf:0e:ab:64:20:61:e8:74:3b:b0:ef:7f:eb:47:2e:2d:b0: 5a:31:86:c3:4f:a2:c7:d3:40:42:d0:42:e4:61:e9:0f:f8:a7: cc:e9:2d:bd:ab:d7:a0:4a:83:e4:e3:35:79:27:d0:90:83:62: c1:05:61:16:fe:e0:42:fd:19:c0:1d:34:5e:02:57:86:b1:d1: 6d:8b:35:e3:83:be:18:9f:5f:1b:28:71:aa:a6:b7:d6:5a:db: b3:44:ea:93:da:94:56:11:90:ef:0b:7c:bc:fe:0f:8b:0c:fd: e3:f0:b7:d8:f5:b3:a6:8c:7a:1a:98:ad:7a:cb:54:60:42:67: 3a:4d:04:c0:2c:45:c1:4c:0a:4c:02:57:7a:59:13:e5:a1:50: e9:b7:e7:38:fb:bc:72:55:eb:42:61:38:e2:f1:76:93:87:24: 71:7e:28:c0:1e:e7:73:1a:e5:7a:57:32:7b:e0:d5:52:51:0b: 84:9c:41:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsERpuEQdgxxOhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGIzY2UyMGItM2Y0OS00MDcyLTkyOGMtYjg3NzZhNzU3ZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt57MlCWsUkiz8zCeEFV68JIeim9Y10W2DP/y DYu/XpUPGnW9GfUIC2q3mGQtGn8DyqMKtNN1hQ1XGNV0A+1hzzJZiS8srfFkarUU 43TMTHAfyoOhLDSp/wdsuQzQcHknSwp5FIhEg4/QL1nh489SqXGO4xbUUmH6niEz VZQAH8NsNScBd5YkKGpi2+oY53m+YcM/0BzyRyD5sbWFko1zLpYcDh+4h+v6HySf uSOT+GcPCtK7rYl5Iy2kWVSbITas5fi/KNrOam/n19zjVFXScsCiznvKfYctsTIl OvJvJoV1g5fuhlC0bSOChKGpzQiVWZSxtkOj3Nkf66fxJb8NuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDD7lISeBtQ4PeQVnZzyiyH5QeCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMzNkNGQwMGEtOTUyZC0z YmJjLTlkMTctMmVhZjIyMDMyZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjk98MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqLTg9tDeMC4Sx1bZHfgP7N1r75zccqAHK9TUUNm/aCiaAzs57miB9r hgrJEN3/ffae+YXVE1As/jB4YGMe80indMhmc+Oj/TO/DqtkIGHodDuw73/rRy4t sFoxhsNPosfTQELQQuRh6Q/4p8zpLb2r16BKg+TjNXkn0JCDYsEFYRb+4EL9GcAd NF4CV4ax0W2LNeODvhifXxsocaqmt9Za27NE6pPalFYRkO8LfLz+D4sM/ePwt9j1 s6aMehqYrXrLVGBCZzpNBMAsRcFMCkwCV3pZE+WhUOm35zj7vHJV60JhOOLxdpOH JHF+KMAe53Ma5XpXMnvg1VJRC4ScQc4= -----END CERTIFICATE-----Generated at Fri Apr 18 07:40:21 2025 by rpki-client