$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/36c4824c-38fb-301c-8454-da2ad9648693.roa File: 36c4824c-38fb-301c-8454-da2ad9648693.roa (raw, json) Hash identifier: ysPaNP1ZXzGQr6Yhvyf3NFeWDE6rBTquWEkdRl8VbjU= Subject key identifier: F2:A5:0F:35:11:B3:06:35:F9:96:C4:DE:67:62:16:22:95:CF:11:4B Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56CB3DE97B93F1F9B36140 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/36c4824c-38fb-301c-8454-da2ad9648693.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 206.255.128.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:cb:3d:e9:7b:93:f1:f9:b3:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=2eebc645-c5df-4578-b1e5-f63f6ff5f975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:95:35:56:94:91:62:03:98:44:c3:cc:1b: 9f:53:29:04:d4:70:18:51:19:4d:dc:cb:40:30:f0: 52:a7:6f:59:09:31:2a:68:54:0d:2b:16:ef:4b:3d: a1:7b:9a:49:78:22:bb:47:a3:f8:aa:6a:37:94:d5: 83:37:e1:cc:e6:86:c8:46:e6:cf:aa:dc:fe:9b:c6: 00:f1:9e:c3:ef:da:62:46:ef:3c:f8:d5:82:01:db: 52:59:a9:9f:6d:e3:8a:33:c2:87:78:79:32:4f:90: f9:4d:94:3f:c3:46:77:e6:f8:9d:90:03:e6:79:1d: 3a:5c:ce:e1:ed:74:ab:8a:28:b1:c3:6e:c4:34:dc: ba:93:3a:e0:5c:a8:32:1f:95:d0:72:33:25:e4:2b: d2:2e:64:54:d3:36:50:0d:cf:53:45:f2:1f:48:24: 97:3c:f0:1b:2e:7d:4f:70:81:b8:b9:5e:a2:3c:e7: 5c:07:4a:2e:97:3c:64:35:65:e7:2c:4c:33:97:ee: 4d:0a:5d:58:2b:f3:d7:b0:5f:fa:08:5f:3b:2a:cf: 14:f2:ac:74:70:fc:23:61:7e:d3:3c:77:49:7d:af: 86:dd:e3:65:b5:90:66:b3:31:bc:e2:8e:1b:91:57: 3c:c7:d0:c2:74:5b:3c:8a:74:7f:84:43:ae:50:f3: 67:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A5:0F:35:11:B3:06:35:F9:96:C4:DE:67:62:16:22:95:CF:11:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/36c4824c-38fb-301c-8454-da2ad9648693.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:46:3a:79:44:53:10:89:8c:1f:f7:0f:39:c5:74:b2:67:df: a2:f5:2c:5e:18:ac:2d:89:9e:4d:11:e5:ff:d9:9e:34:17:8f: a8:28:d2:47:36:a9:6b:35:9b:46:7e:4c:2d:a2:18:75:79:4a: 96:3a:b9:f3:79:47:eb:89:43:70:36:db:de:c4:b3:db:7f:56: 5f:c1:bf:ac:f9:8e:c7:34:f1:3e:21:d9:92:36:7d:60:a4:76: ae:73:70:df:31:ef:0b:e7:5f:72:6d:8c:31:82:7f:0a:a2:4d: 5d:6f:2e:b6:14:b2:a0:8a:11:70:43:d0:7b:03:ca:8b:64:59: 77:6b:34:68:b5:88:63:aa:81:ce:72:93:56:ee:ef:37:12:23: e2:37:c5:1d:38:fb:f6:c1:f3:7d:d4:a6:82:31:e1:d8:61:79: 0e:22:78:95:51:94:c9:fb:78:bc:cd:42:d6:ef:4c:8e:16:2f: d5:04:21:15:7f:f5:e2:32:11:a4:e6:5b:a8:e0:2f:3b:69:0d: f6:5a:da:e7:21:f1:eb:e6:2c:e8:38:1c:14:c3:2f:5e:76:f4: 72:58:02:be:ae:b3:1f:53:45:fa:d0:57:da:c2:a8:d4:8a:8a: 1a:5c:41:11:12:56:2e:69:c1:2f:f5:07:ee:4e:d7:96:81:b8: 68:c7:5f:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vss96XuT8fmzYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmVlYmM2NDUtYzVkZi00NTc4LWIxZTUtZjYzZjZmZjVmOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYKVNVaUkWIDmETDzBufUykE1HAYURlN3MtA MPBSp29ZCTEqaFQNKxbvSz2he5pJeCK7R6P4qmo3lNWDN+HM5obIRubPqtz+m8YA 8Z7D79piRu88+NWCAdtSWamfbeOKM8KHeHkyT5D5TZQ/w0Z35vidkAPmeR06XM7h 7XSriiixw27ENNy6kzrgXKgyH5XQcjMl5CvSLmRU0zZQDc9TRfIfSCSXPPAbLn1P cIG4uV6iPOdcB0oulzxkNWXnLEwzl+5NCl1YK/PXsF/6CF87Ks8U8qx0cPwjYX7T PHdJfa+G3eNltZBmszG84o4bkVc8x9DCdFs8inR/hEOuUPNn1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKlDzURswY1+ZbE3mdiFiKVzxFLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMzZjNDgyNGMtMzhmYi0z MDFjLTg0NTQtZGEyYWQ5NjQ4NjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdGOnlEUxCJjB/3DznFdLJn36L1LF4YrC2Jnk0R5f/ZnjQXj6go0kc2 qWs1m0Z+TC2iGHV5SpY6ufN5R+uJQ3A2297Es9t/Vl/Bv6z5jsc08T4h2ZI2fWCk dq5zcN8x7wvnX3JtjDGCfwqiTV1vLrYUsqCKEXBD0HsDyotkWXdrNGi1iGOqgc5y k1bu7zcSI+I3xR04+/bB833UpoIx4dhheQ4ieJVRlMn7eLzNQtbvTI4WL9UEIRV/ 9eIyEaTmW6jgLztpDfZa2uch8evmLOg4HBTDL1529HJYAr6usx9TRfrQV9rCqNSK ihpcQRESVi5pwS/1B+5O15aBuGjHX+U= -----END CERTIFICATE-----Generated at Fri Mar 14 09:30:09 2025 by rpki-client