$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa File: 4424548c-9e14-33ec-919d-7d3e1baa168f.roa (raw, json) Hash identifier: uxCi2OBASwKgkmFt3WPIW5nJfXfThyZF9YZvx78EZ5M= Subject key identifier: 41:38:F1:6F:D2:5B:DC:C1:DD:06:0B:50:D4:C9:A2:96:E2:17:A2:DC Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56CB2FD11BF303580DA380 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 206.255.120.0/21 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:cb:2f:d1:1b:f3:03:58:0d:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=8ddf3840-8648-4a14-8a50-444570d06b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:10:07:2e:15:da:a1:28:a5:d9:6f:f7:18:60: 44:a4:38:7a:ff:16:3a:7e:78:1f:c9:ea:79:c4:31: 8c:69:fd:84:63:59:e7:51:ab:e2:c0:43:22:0c:51: 81:83:66:d5:8d:03:c0:3f:7c:8b:1b:e6:07:80:b1: ec:80:a7:c3:6a:9b:24:ec:92:87:aa:cf:74:97:64: b4:a5:74:03:74:29:dc:2a:68:44:cd:0b:b7:0b:4b: 43:42:00:02:35:33:db:9f:6f:5d:fa:09:72:7f:d0: 2c:aa:f9:73:91:a2:f8:d0:d8:90:d9:4d:52:4a:1b: 31:bb:55:b0:1e:81:2c:a8:2c:f4:7b:55:47:df:d9: aa:a1:87:29:9a:65:8c:19:88:bf:9b:fe:34:c2:a5: 27:d8:89:ab:ab:4f:fe:51:a3:08:93:11:18:f0:30: 5e:af:e0:25:1c:64:ca:c5:28:46:02:10:9c:08:70: 65:83:d0:01:8f:01:28:7a:57:9d:8f:75:25:37:79: c9:a3:2d:00:86:2e:04:4e:27:fb:46:4c:a1:7f:0a: 43:17:f5:d6:68:11:ce:5e:fb:ad:e8:01:39:56:6a: 72:b5:86:fe:bc:c9:d9:e8:47:f1:ad:7e:ed:0c:89: ab:b2:d9:ea:b8:41:d0:89:81:cd:d5:b9:36:49:13: 27:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:38:F1:6F:D2:5B:DC:C1:DD:06:0B:50:D4:C9:A2:96:E2:17:A2:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/4424548c-9e14-33ec-919d-7d3e1baa168f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:c6:a8:e7:be:bc:7a:82:02:02:96:7c:ff:02:cd:28:82:f9: 21:d0:50:a3:79:cb:dd:58:0f:12:6d:7e:9a:4b:69:88:45:7d: 1c:db:22:d9:0b:4f:d7:8a:27:9e:33:92:e3:40:72:f6:9e:ce: e3:ca:54:d8:33:db:5d:cf:d0:b8:8e:06:17:b9:1a:4c:49:25: 66:a4:32:36:bc:20:fa:45:af:bc:39:ba:95:a2:96:b0:ea:72: 42:88:f8:10:f2:7c:c0:97:b4:cc:0f:7f:d1:20:b2:dd:bd:be: 28:9b:51:78:8f:f5:d9:4b:5b:80:09:77:d1:50:52:c6:51:d5: ce:ed:df:28:a3:9e:6c:1e:4f:63:6e:76:10:f4:58:3d:54:2d: 9b:50:1e:64:6a:16:89:92:ed:6b:43:e7:8b:43:d3:a2:b1:10: ba:b3:f0:8b:c2:bc:ec:fa:43:32:5a:bf:33:e1:67:23:81:2c: 95:ac:2f:96:2c:11:d7:0f:8a:99:2f:75:bd:f9:22:7e:95:46: 1b:0b:cd:b8:81:ab:93:d1:da:f9:d1:44:46:c2:6e:6a:84:ee: 08:31:c8:a7:b0:4e:7a:1f:30:db:c7:07:2e:59:2a:4c:b7:00: 85:ca:44:19:66:1d:ad:86:88:2c:88:a3:24:08:75:12:21:f2: a6:56:17:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vssv0RvzA1gNo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk OGRkZjM4NDAtODY0OC00YTE0LThhNTAtNDQ0NTcwZDA2YjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRAHLhXaoSil2W/3GGBEpDh6/xY6fngfyep5 xDGMaf2EY1nnUaviwEMiDFGBg2bVjQPAP3yLG+YHgLHsgKfDapsk7JKHqs90l2S0 pXQDdCncKmhEzQu3C0tDQgACNTPbn29d+glyf9AsqvlzkaL40NiQ2U1SShsxu1Ww HoEsqCz0e1VH39mqoYcpmmWMGYi/m/40wqUn2Imrq0/+UaMIkxEY8DBer+AlHGTK xShGAhCcCHBlg9ABjwEoeledj3UlN3nJoy0Ahi4ETif7RkyhfwpDF/XWaBHOXvut 6AE5VmpytYb+vMnZ6EfxrX7tDImrstnquEHQiYHN1bk2SRMnwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEE48W/SW9zB3QYLUNTJopbiF6LcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNDQyNDU0OGMtOWUxNC0z M2VjLTkxOWQtN2QzZTFiYWExNjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/GqOe+vHqCAgKWfP8CzSiC+SHQUKN5y91YDxJtfppLaYhFfRzbItkL T9eKJ54zkuNAcvaezuPKVNgz213P0LiOBhe5GkxJJWakMja8IPpFr7w5upWilrDq ckKI+BDyfMCXtMwPf9Egst29viibUXiP9dlLW4AJd9FQUsZR1c7t3yijnmweT2Nu dhD0WD1ULZtQHmRqFomS7WtD54tD06KxELqz8IvCvOz6QzJavzPhZyOBLJWsL5Ys EdcPipkvdb35In6VRhsLzbiBq5PR2vnRREbCbmqE7ggxyKewTnofMNvHBy5ZKky3 AIXKRBlmHa2GiCyIoyQIdRIh8qZWF4Y= -----END CERTIFICATE-----Generated at Fri Mar 14 10:53:38 2025 by rpki-client