$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa File: 39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa (raw, json) Hash identifier: M53P70rrvWMr1tk7ZeUlN08SlfygtG5DOF66jiwv2NM= Subject key identifier: EE:65:F9:E7:E9:7A:4D:38:90:3B:28:D0:1D:6A:31:68:2D:42:94:21 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C0A173572F76195A8C40 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 24.89.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c0:a1:73:57:2f:76:19:5a:8c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=276fa0da-9d46-44d9-8181-716ebc6606d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:19:3b:a5:02:39:84:e5:e6:0c:75:4d:e8:1d: e8:88:14:5e:f6:89:b9:dc:33:3e:5e:55:42:9f:7f: 74:a5:85:10:dc:e5:8e:98:6d:a0:af:e4:57:b5:0e: 5d:a8:34:7b:73:c7:59:c0:0a:f4:94:cf:45:fd:ff: a0:45:b2:78:9f:01:54:f6:e6:f3:68:c6:5e:bd:92: ae:4a:b7:2d:df:47:34:b1:cd:90:cd:51:8e:66:4e: 7f:49:2f:69:5e:cc:27:cc:d7:cc:28:6e:9f:c3:82: 06:1f:69:54:56:55:a5:30:57:30:c6:ac:42:14:db: 8b:a5:5e:aa:bc:4f:e4:bc:9b:13:9a:dd:ef:ab:23: 5c:ab:f6:9b:a6:91:b3:0e:c1:e7:9d:bd:47:89:be: bb:96:36:a8:16:5d:72:57:a2:4c:a5:62:e4:da:04: 4b:71:89:74:43:a1:d4:db:ba:c5:75:68:66:8f:44: cd:2d:84:d7:0f:b1:a8:dd:b9:72:53:50:cc:91:70: dc:eb:74:43:cf:9a:e5:f9:e2:c7:01:67:81:7f:94: 91:48:34:19:95:90:14:18:9a:a2:c5:6c:14:35:a7: 3c:ea:85:36:49:73:c0:a0:0e:a2:59:22:0c:bb:89: 67:a4:ad:39:20:c8:af:3c:32:68:2c:87:c1:d8:11: 52:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:65:F9:E7:E9:7A:4D:38:90:3B:28:D0:1D:6A:31:68:2D:42:94:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/39a3c335-38d7-3c81-ab5c-b46ffe7b5ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.56.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:fa:cc:9a:f9:09:fb:fb:c6:29:5a:64:2a:8e:70:d0:d8:f1: b0:c9:c1:1f:f0:24:92:3c:e5:b8:30:52:83:ac:3f:90:22:2f: f4:12:59:23:f4:91:6a:c5:12:75:18:fe:7f:d3:75:6a:3d:32: e8:94:cd:0d:21:76:27:e0:a1:b0:c0:b7:48:97:59:43:2f:21: 1d:b4:ae:08:ca:8e:2e:75:c5:d7:17:e0:17:32:44:ba:14:e0: f3:95:29:10:8b:e3:61:95:c0:5a:89:b1:a5:d7:ed:3c:a6:7a: 87:be:f1:51:dc:6f:5f:dd:b1:ee:fd:76:f6:d2:c2:ed:1f:fa: 39:7a:a8:58:73:5f:3b:d1:30:c7:43:99:5b:14:de:35:29:4e: d7:a5:72:e2:b6:eb:88:9a:c8:9e:99:f1:ce:43:22:e4:c1:f8: 3e:6f:5a:ed:a8:7c:1d:dd:86:38:08:79:e7:2b:f9:bb:cc:9c: e9:69:46:13:c9:db:70:f6:d0:1c:e4:32:ef:c0:44:0f:f7:fd: 75:fd:b7:27:3c:8a:94:61:0d:12:d3:41:3e:49:37:b5:0a:20: 2c:25:81:fb:50:1a:53:67:9b:a0:69:82:21:d9:7c:bf:48:a9: 21:45:9f:06:e4:7e:61:25:08:3f:0e:e8:69:92:27:41:54:bc: e9:cc:f1:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsChc1cvdhlajEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk Mjc2ZmEwZGEtOWQ0Ni00NGQ5LTgxODEtNzE2ZWJjNjYwNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxk7pQI5hOXmDHVN6B3oiBRe9om53DM+XlVC n390pYUQ3OWOmG2gr+RXtQ5dqDR7c8dZwAr0lM9F/f+gRbJ4nwFU9ubzaMZevZKu Srct30c0sc2QzVGOZk5/SS9pXswnzNfMKG6fw4IGH2lUVlWlMFcwxqxCFNuLpV6q vE/kvJsTmt3vqyNcq/abppGzDsHnnb1Hib67ljaoFl1yV6JMpWLk2gRLcYl0Q6HU 27rFdWhmj0TNLYTXD7Go3blyU1DMkXDc63RDz5rl+eLHAWeBf5SRSDQZlZAUGJqi xWwUNac86oU2SXPAoA6iWSIMu4lnpK05IMivPDJoLIfB2BFSmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5l+efpek04kDso0B1qMWgtQpQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvMzlhM2MzMzUtMzhkNy0z YzgxLWFiNWMtYjQ2ZmZlN2I1YWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGFk4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC36zJr5Cfv7xilaZCqOcNDY8bDJwR/wJJI85bgwUoOsP5AiL/QSWSP0 kWrFEnUY/n/TdWo9MuiUzQ0hdifgobDAt0iXWUMvIR20rgjKji51xdcX4BcyRLoU 4POVKRCL42GVwFqJsaXX7Tymeoe+8VHcb1/dse79dvbSwu0f+jl6qFhzXzvRMMdD mVsU3jUpTtelcuK264iayJ6Z8c5DIuTB+D5vWu2ofB3dhjgIeecr+bvMnOlpRhPJ 23D20BzkMu/ARA/3/XX9tyc8ipRhDRLTQT5JN7UKICwlgftQGlNnm6BpgiHZfL9I qSFFnwbkfmElCD8O6GmSJ0FUvOnM8d4= -----END CERTIFICATE-----Generated at Fri Mar 14 10:57:25 2025 by rpki-client