$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa File: 3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa (raw, json) Hash identifier: O11QWAm+EODxHBJhZaa4rIplgS/eq7VhCJHVHBGxe/w= Subject key identifier: 87:B9:52:B6:0C:23:B0:6B:B3:F6:16:7D:28:71:93:17:89:5F:0E:3E Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C8F844FDA4D0A0F6E300 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 24.244.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c8:f8:44:fd:a4:d0:a0:f6:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=7e8e0b13-e624-41b0-a4fb-e430161e51bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:81:11:d4:d9:b5:17:28:33:5f:0b:f0:d7:99: c2:79:f3:70:f1:b1:6a:68:3d:3c:99:e2:fd:bb:b8: 4a:29:b9:e4:fa:79:91:69:de:02:36:52:5b:3e:e0: 3b:19:d5:5e:79:3b:3e:01:21:e4:a5:b0:4d:b0:d9: 10:d2:35:a1:b6:b3:b5:26:ba:f3:0b:b3:55:27:62: 7a:c2:d1:75:d8:4b:d8:63:a0:bc:6b:9a:c8:73:7b: b6:89:b7:0e:0a:3b:e2:f3:ed:53:0a:bc:cb:93:f4: 04:a8:07:8b:b2:e6:18:2b:c1:ca:7e:e4:57:57:7e: 4a:da:10:b2:30:38:6c:ea:7a:c8:03:62:8f:90:ef: c3:e1:9b:d4:72:2e:dd:63:66:92:b9:12:6e:2e:ae: e7:0c:d7:94:21:32:29:c1:b7:2c:f1:37:42:72:e7: ee:62:18:1e:54:54:4d:f9:cc:72:03:76:e2:e3:bb: 68:dd:4b:ad:44:38:e6:1d:e5:dc:51:2a:55:22:e9: 1a:66:17:5a:da:0b:df:d8:5e:2c:0e:57:1c:e8:1d: f5:5e:a0:ad:29:e9:d9:e7:b6:2e:58:a9:5f:31:e2: 85:25:1f:0d:58:c6:b0:17:ad:e4:9a:88:d0:96:bd: 5e:bd:31:b3:87:81:4e:75:3b:a4:85:c3:80:7e:8c: 3e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B9:52:B6:0C:23:B0:6B:B3:F6:16:7D:28:71:93:17:89:5F:0E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/3af14c3f-e3e7-3332-b9bb-9d97fa5e8db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.244.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:4d:82:13:3d:e8:9b:e3:04:30:62:47:e0:eb:5d:a9:46:24: 8d:09:28:5f:5c:b2:c4:46:d1:89:95:a2:91:49:8b:bc:29:80: da:fd:43:4c:1d:72:49:fb:3f:20:47:d3:da:10:60:60:dc:05: e7:aa:84:53:8b:7b:54:c6:74:b4:a1:50:7e:36:a3:6f:00:5b: 39:48:49:ed:f8:86:25:4a:ec:3d:a8:ca:8e:75:6f:52:5b:b1: a6:59:f9:af:78:9e:da:47:bb:51:cd:dc:f4:07:6b:02:69:60: d8:d4:53:f3:59:8e:cb:1a:d2:69:ae:d7:2a:b2:b0:31:bc:e8: 3f:dd:a8:d7:cb:5d:ac:98:ff:ec:f5:22:7d:85:4a:ba:99:ec: e6:1c:e4:07:3a:80:ba:4c:d3:d2:47:3f:87:6c:4e:41:be:3e: 45:c6:07:95:2e:77:6c:4a:e8:96:37:e2:38:bf:b6:a2:af:05: 49:54:0d:f4:b6:5c:b5:fb:56:5e:b5:b4:7c:9a:19:5f:4c:a2: c7:93:5f:44:85:6f:c4:f5:ae:7b:88:d9:63:1c:06:4a:f5:92: 14:3d:71:36:76:d9:39:c4:1f:7c:a5:f7:db:49:dd:15:c3:0e: 0c:05:76:ee:16:12:98:4a:3c:8b:92:eb:b5:a8:a5:67:a1:72: 55:98:29:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vsj4RP2k0KD24wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk N2U4ZTBiMTMtZTYyNC00MWIwLWE0ZmItZTQzMDE2MWU1MWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IER1Nm1FygzXwvw15nCefNw8bFqaD08meL9 u7hKKbnk+nmRad4CNlJbPuA7GdVeeTs+ASHkpbBNsNkQ0jWhtrO1JrrzC7NVJ2J6 wtF12EvYY6C8a5rIc3u2ibcOCjvi8+1TCrzLk/QEqAeLsuYYK8HKfuRXV35K2hCy MDhs6nrIA2KPkO/D4ZvUci7dY2aSuRJuLq7nDNeUITIpwbcs8TdCcufuYhgeVFRN +cxyA3bi47to3UutRDjmHeXcUSpVIukaZhda2gvf2F4sDlcc6B31XqCtKenZ57Yu WKlfMeKFJR8NWMawF63kmojQlr1evTGzh4FOdTukhcOAfow+aQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIe5UrYMI7Brs/YWfShxkxeJXw4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvM2FmMTRjM2YtZTNlNy0z MzMyLWI5YmItOWQ5N2ZhNWU4ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGPRqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHdNghM96JvjBDBiR+DrXalGJI0JKF9cssRG0YmVopFJi7wpgNr9Q0wd ckn7PyBH09oQYGDcBeeqhFOLe1TGdLShUH42o28AWzlISe34hiVK7D2oyo51b1Jb saZZ+a94ntpHu1HN3PQHawJpYNjUU/NZjssa0mmu1yqysDG86D/dqNfLXayY/+z1 In2FSrqZ7OYc5Ac6gLpM09JHP4dsTkG+PkXGB5Uud2xK6JY34ji/tqKvBUlUDfS2 XLX7Vl61tHyaGV9MoseTX0SFb8T1rnuI2WMcBkr1khQ9cTZ22TnEH3yl99tJ3RXD DgwFdu4WEphKPIuS67WopWehclWYKbM= -----END CERTIFICATE-----Generated at Fri Apr 18 07:41:35 2025 by rpki-client