$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/456c2cd9-454a-3d06-9031-8440b4842af7.roa File: 456c2cd9-454a-3d06-9031-8440b4842af7.roa (raw, json) Hash identifier: 301SjPaTPt2VZ/NajErosWPkRC1/1qWV5yKf7P8dhVM= Subject key identifier: A3:D5:8F:12:44:18:E4:6F:74:91:09:48:B0:41:53:95:81:40:CF:54 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C9ED4D6CE1E4DDD57B00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/456c2cd9-454a-3d06-9031-8440b4842af7.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 206.255.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c9:ed:4d:6c:e1:e4:dd:d5:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=9ff03604-d43c-4a19-a237-f1a5a2977742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d4:31:1c:24:28:75:50:8f:4e:11:07:ed:8b: 74:e0:ef:d5:b9:33:fd:b9:d9:a4:21:fc:83:8f:af: 4b:63:07:b0:fb:6e:a4:d0:d6:20:ec:06:8e:73:44: 9f:aa:56:27:5a:00:f5:2c:d3:42:82:38:03:44:21: 5e:09:3c:75:e0:6f:08:33:7d:97:2c:06:d4:b9:c2: 1d:6b:ad:ca:c4:a2:57:4c:45:de:bd:69:3a:03:34: 8c:28:85:af:97:f4:39:95:c1:52:cd:48:6f:a1:e3: eb:b0:5e:e4:de:9a:89:19:30:6e:9f:e6:14:4b:7b: 3a:e5:1b:00:ea:09:da:9b:21:e8:83:e2:f9:89:8a: db:ce:c9:ae:6e:b1:c9:31:13:c9:63:12:ab:ed:7e: c6:ff:0f:00:df:14:23:be:4c:dc:30:ed:e9:9c:a9: fb:d9:0d:54:d0:e0:34:8f:8a:73:b6:cd:32:a4:9c: 26:db:2c:c0:19:49:ef:32:01:af:86:80:a5:3b:e2: d9:dd:ef:e4:6e:03:8a:5b:b4:16:a0:ad:fe:3a:35: 44:ef:36:a9:57:6d:b4:24:da:d7:ff:ad:fd:33:21: fd:04:89:a6:f3:9e:f1:1f:b3:92:f8:e7:3c:54:3c: 5c:89:2e:a6:ff:64:93:f0:2a:9e:56:3d:17:47:ef: 40:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:D5:8F:12:44:18:E4:6F:74:91:09:48:B0:41:53:95:81:40:CF:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/456c2cd9-454a-3d06-9031-8440b4842af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.188.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:55:07:a7:1e:4f:aa:52:e5:9e:c4:a0:df:e3:8e:94:f0:89: a9:e1:bd:54:78:e2:8c:fe:f0:40:4a:94:04:e9:86:02:80:b4: 92:71:5f:b5:63:df:f9:cd:66:62:46:38:a2:a2:89:15:a0:35: 88:60:9e:a0:c4:26:f7:a4:c4:f1:ac:5d:17:df:cb:d4:a2:30: 48:4c:27:c4:1e:68:d6:82:68:39:d8:3a:8e:cd:d1:b6:c4:ce: 12:7b:4c:41:5c:b6:21:ab:db:63:ff:fe:2b:61:cc:eb:e5:5b: 29:85:32:51:e9:13:67:fe:3b:bc:37:d7:2e:88:30:2f:ec:27: 08:70:60:a7:a2:a1:02:cb:44:96:e6:da:2c:0f:14:61:41:df: 54:73:9c:ec:35:b2:55:e3:39:26:94:d3:91:0c:40:3a:ef:4f: 0b:21:cc:bb:d5:3b:fa:2b:99:b5:aa:a3:8a:b8:13:25:ff:b8: 50:ea:eb:a2:bc:83:05:47:bb:d5:65:5f:94:29:d3:45:78:be: 32:7c:3d:58:7c:9f:21:b8:7c:33:e4:84:7f:9d:22:e2:76:4c: 24:09:aa:fd:6a:32:75:03:6f:97:05:c1:06:9c:65:59:a6:00: 95:75:01:3e:43:97:9f:0d:2c:b0:7f:d3:4b:0b:73:ad:a6:88: d7:02:bf:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsntTWzh5N3VewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk OWZmMDM2MDQtZDQzYy00YTE5LWEyMzctZjFhNWEyOTc3NzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9QxHCQodVCPThEH7Yt04O/VuTP9udmkIfyD j69LYwew+26k0NYg7AaOc0SfqlYnWgD1LNNCgjgDRCFeCTx14G8IM32XLAbUucId a63KxKJXTEXevWk6AzSMKIWvl/Q5lcFSzUhvoePrsF7k3pqJGTBun+YUS3s65RsA 6gnamyHog+L5iYrbzsmubrHJMRPJYxKr7X7G/w8A3xQjvkzcMO3pnKn72Q1U0OA0 j4pzts0ypJwm2yzAGUnvMgGvhoClO+LZ3e/kbgOKW7QWoK3+OjVE7zapV220JNrX /639MyH9BImm857xH7OS+Oc8VDxciS6m/2ST8CqeVj0XR+9A6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPVjxJEGORvdJEJSLBBU5WBQM9UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvNDU2YzJjZDktNDU0YS0z ZDA2LTkwMzEtODQ0MGI0ODQyYWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv+8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5VB6ceT6pS5Z7EoN/jjpTwianhvVR44oz+8EBKlATphgKAtJJxX7Vj 3/nNZmJGOKKiiRWgNYhgnqDEJvekxPGsXRffy9SiMEhMJ8QeaNaCaDnYOo7N0bbE zhJ7TEFctiGr22P//ithzOvlWymFMlHpE2f+O7w31y6IMC/sJwhwYKeioQLLRJbm 2iwPFGFB31RznOw1slXjOSaU05EMQDrvTwshzLvVO/ormbWqo4q4EyX/uFDq66K8 gwVHu9VlX5Qp00V4vjJ8PVh8nyG4fDPkhH+dIuJ2TCQJqv1qMnUDb5cFwQacZVmm AJV1AT5Dl58NLLB/00sLc62miNcCv7k= -----END CERTIFICATE-----Generated at Fri Mar 14 08:58:40 2025 by rpki-client