$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa File: 81af0be6-f23c-30fe-8f01-107b7f0d4738.roa (raw, json) Hash identifier: 9u2GMF/Ozg1C3NDlN8pFkXaZgz+qHbFb/OZ9fLoSHRE= Subject key identifier: D3:AA:B4:90:2F:4B:DD:0F:A6:36:42:F3:3D:F6:B9:AD:AF:3A:2E:31 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C9BFBCD3B1724DF55080 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 206.255.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c9:bf:bc:d3:b1:72:4d:f5:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=04a92e76-884e-462e-8cd9-14de63e751dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:93:cc:f1:77:d7:a8:23:c6:6b:5c:a8:4b:6e: 4c:e5:45:dc:9e:58:72:24:06:d5:1c:1f:06:ab:b9: 91:2a:29:d5:2d:84:de:79:87:c8:1d:cb:58:65:4f: 58:48:3b:5c:00:7d:6c:d3:62:c4:3f:0a:2b:8d:c5: 16:77:00:10:b3:fb:fb:54:f3:a8:cd:3a:9b:ee:d3: 8a:5d:93:0b:91:73:68:44:75:96:03:33:35:6d:0e: 95:13:ea:98:c5:89:c4:e8:fb:4b:5d:51:a0:2b:2d: 31:13:e2:76:b0:1c:84:d9:58:df:9d:92:ba:85:11: 10:99:e8:b3:61:68:27:de:e5:cf:44:f5:09:92:a9: 46:d1:d6:ea:32:04:23:93:ff:32:a2:ca:3b:50:48: 6b:92:40:69:73:3b:dd:1b:bc:3a:c5:43:5a:1f:57: c5:f5:8f:e5:7b:34:38:f1:5c:a5:5d:e0:69:89:31: 3a:2f:c0:59:70:9e:13:1b:23:47:eb:7f:40:42:60: d7:70:7d:72:65:f7:5f:c1:08:57:f9:04:7f:59:01: 1e:ba:b1:8f:2d:be:e2:5f:b9:3a:1f:be:48:f1:7b: 0d:01:81:25:51:a3:7c:87:85:8e:39:12:8a:be:ed: a0:ce:58:84:14:52:84:4a:0b:51:cd:37:8b:ab:48: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:AA:B4:90:2F:4B:DD:0F:A6:36:42:F3:3D:F6:B9:AD:AF:3A:2E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/81af0be6-f23c-30fe-8f01-107b7f0d4738.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:d3:42:88:47:d4:7d:2d:0a:d4:5f:4f:6a:b3:91:e3:55:09: ae:5d:18:f4:cf:77:13:0a:c9:e8:95:6b:d8:b0:b7:ec:59:41: eb:cd:db:dd:de:9f:33:d1:d7:ea:83:36:32:58:fb:a6:4e:b0: c7:db:2e:59:c5:3a:a3:c6:af:70:39:ba:f4:0a:c6:f3:0e:d2: 68:0d:46:c7:06:c1:db:4e:b6:0d:1a:43:b9:9a:e6:ed:83:39: 2c:51:59:8e:18:cf:52:31:ec:12:0b:55:f1:22:01:17:f7:d7: 41:9f:6a:f9:a3:88:8e:25:f9:f6:57:98:18:4d:b3:77:d6:45: 3f:60:7a:ca:88:e4:ca:e9:33:b3:54:c9:ec:d7:fd:87:6d:4a: dc:15:d3:f2:07:a0:07:35:b6:71:89:1b:05:fe:8f:c3:6e:54: fa:ef:f5:5b:0b:91:e9:b7:d0:55:5d:20:dc:41:db:43:39:d9: 8e:9c:7e:0b:b3:85:c5:60:aa:32:50:7c:35:2c:fb:5e:dc:ba: 31:ce:9e:b2:50:42:44:ca:07:3d:9f:0d:2b:61:41:5e:74:c5: 79:42:b1:11:a3:f8:11:0e:03:b7:8b:fe:ee:d8:32:ed:1a:68: ef:bc:17:14:93:46:87:a3:9b:c9:fd:f5:4b:51:a9:2e:33:6b: 9d:c5:4b:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vsm/vNOxck31UIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDRhOTJlNzYtODg0ZS00NjJlLThjZDktMTRkZTYzZTc1MWRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5PM8XfXqCPGa1yoS25M5UXcnlhyJAbVHB8G q7mRKinVLYTeeYfIHctYZU9YSDtcAH1s02LEPworjcUWdwAQs/v7VPOozTqb7tOK XZMLkXNoRHWWAzM1bQ6VE+qYxYnE6PtLXVGgKy0xE+J2sByE2VjfnZK6hREQmeiz YWgn3uXPRPUJkqlG0dbqMgQjk/8yoso7UEhrkkBpczvdG7w6xUNaH1fF9Y/lezQ4 8VylXeBpiTE6L8BZcJ4TGyNH639AQmDXcH1yZfdfwQhX+QR/WQEeurGPLb7iX7k6 H75I8XsNAYElUaN8h4WOORKKvu2gzliEFFKESgtRzTeLq0im5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOqtJAvS90PpjZC8z32ua2vOi4xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvODFhZjBiZTYtZjIzYy0z MGZlLThmMDEtMTA3YjdmMGQ0NzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzv9QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfTQohH1H0tCtRfT2qzkeNVCa5dGPTPdxMKyeiVa9iwt+xZQevN293e nzPR1+qDNjJY+6ZOsMfbLlnFOqPGr3A5uvQKxvMO0mgNRscGwdtOtg0aQ7ma5u2D OSxRWY4Yz1Ix7BILVfEiARf310GfavmjiI4l+fZXmBhNs3fWRT9gesqI5MrpM7NU yezX/YdtStwV0/IHoAc1tnGJGwX+j8NuVPrv9VsLkem30FVdINxB20M52Y6cfguz hcVgqjJQfDUs+17cujHOnrJQQkTKBz2fDSthQV50xXlCsRGj+BEOA7eL/u7YMu0a aO+8FxSTRoejm8n99UtRqS4za53FS1k= -----END CERTIFICATE-----Generated at Fri Mar 14 10:58:40 2025 by rpki-client