$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/898c2fae-9cc9-3ba9-90a5-85af8b5b4f13.roa File: 898c2fae-9cc9-3ba9-90a5-85af8b5b4f13.roa (raw, json) Hash identifier: BQ96OmDjDcy5TPCdGBFjIc58fP9ul0HWxyTziu9C5og= Subject key identifier: 32:1A:88:16:51:BE:1A:4F:2E:C5:5C:AA:FB:6B:37:0D:E5:71:71:E7 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C0F3DC8DADA164BC9300 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/898c2fae-9cc9-3ba9-90a5-85af8b5b4f13.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 142.79.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c0:f3:dc:8d:ad:a1:64:bc:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=075c72a8-e3de-4ea4-93ba-a735662c03bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e7:72:00:11:b9:b3:f1:be:67:05:f5:3c:ad: 09:c5:af:34:ec:f5:1c:64:76:44:58:ae:e3:e9:a4: 46:fb:b8:c7:40:0f:e9:7c:2c:b9:39:87:c4:10:e2: 93:53:32:32:db:06:5f:d4:a9:a6:13:6f:e1:32:03: e1:8a:d4:6e:46:3b:5f:ba:e5:2c:42:20:7f:75:b3: 86:15:1a:c4:be:05:08:3c:e4:ed:54:e5:41:a9:5a: 69:20:08:61:09:3c:62:82:5a:c9:2d:0d:fc:73:ba: 80:09:9e:61:a8:8d:2f:f3:f6:de:de:49:b4:53:1d: 64:7b:cf:c0:d0:84:df:6f:34:d3:a7:b4:f4:c0:35: de:21:ca:0f:cf:bb:6b:a3:51:0e:7e:b0:02:40:a3: 12:19:dc:e4:0e:2b:ac:28:26:17:c2:cf:3c:6a:39: 94:27:ae:be:a7:5c:a7:e0:c7:94:67:c9:56:60:cc: d0:67:75:26:df:f0:00:f4:17:ff:95:3e:a3:87:58: ea:a3:69:6e:8b:f8:3a:31:d6:8d:ea:fd:7a:7a:2f: 22:92:a0:b1:5f:b4:ba:75:9d:b2:24:bd:17:b0:55: 1c:11:fd:e1:ed:90:b5:d3:c1:55:7e:e4:6d:9d:dc: 69:b0:2e:60:63:a9:d0:af:55:54:43:ef:74:fb:7a: c0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:1A:88:16:51:BE:1A:4F:2E:C5:5C:AA:FB:6B:37:0D:E5:71:71:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/898c2fae-9cc9-3ba9-90a5-85af8b5b4f13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:bf:42:cb:6f:a1:54:17:85:31:f8:53:3a:28:f0:22:6c:5d: 06:42:a8:16:78:fc:73:1d:5a:1f:93:a0:9c:5a:03:a4:7c:8a: 92:83:85:c3:5d:22:bd:ca:8a:42:1f:4a:0b:68:a3:b9:af:f4: 1e:7c:8a:eb:d8:01:ca:09:04:b1:0f:24:ee:b6:f2:4c:33:2a: de:1d:3f:cc:20:e8:58:f7:ea:c4:06:18:35:1a:ee:f2:e0:e3: 90:37:98:92:a0:e9:cc:57:c7:64:ce:84:e2:11:fa:6a:d7:a6: 75:ef:ea:25:55:8d:d6:99:f4:4d:1a:1e:54:35:ae:9f:fb:69: 4f:03:e5:fe:5f:64:7f:7b:a5:1d:33:ba:93:51:39:41:5b:c1: c8:a0:9e:95:5b:64:9d:4d:f2:5b:eb:f0:c1:c8:45:75:44:1d: 5b:42:3b:fa:74:09:49:e3:dc:0c:1f:1e:b4:2a:ef:85:ea:ae: 52:96:08:cf:d4:b2:fd:b7:9f:5b:cc:31:55:07:f2:2e:c8:d2: 72:42:40:35:34:68:dc:23:25:ab:a5:19:22:11:b2:d7:1d:0a: d9:53:b4:8a:83:af:1d:c7:b0:f4:70:40:d2:04:c1:6a:79:ec: 39:94:22:85:eb:91:5b:88:5c:18:24:10:9c:ac:f2:2b:54:0c: cb:f2:f0:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsDz3I2toWS8kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDc1YzcyYTgtZTNkZS00ZWE0LTkzYmEtYTczNTY2MmMwM2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnedyABG5s/G+ZwX1PK0Jxa807PUcZHZEWK7j 6aRG+7jHQA/pfCy5OYfEEOKTUzIy2wZf1KmmE2/hMgPhitRuRjtfuuUsQiB/dbOG FRrEvgUIPOTtVOVBqVppIAhhCTxiglrJLQ38c7qACZ5hqI0v8/be3km0Ux1ke8/A 0ITfbzTTp7T0wDXeIcoPz7tro1EOfrACQKMSGdzkDiusKCYXws88ajmUJ66+p1yn 4MeUZ8lWYMzQZ3Um3/AA9Bf/lT6jh1jqo2lui/g6MdaN6v16ei8ikqCxX7S6dZ2y JL0XsFUcEf3h7ZC108FVfuRtndxpsC5gY6nQr1VUQ+90+3rA1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIaiBZRvhpPLsVcqvtrNw3lcXHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvODk4YzJmYWUtOWNjOS0z YmE5LTkwYTUtODVhZjhiNWI0ZjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjk9sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi/QstvoVQXhTH4Uzoo8CJsXQZCqBZ4/HMdWh+ToJxaA6R8ipKDhcNd Ir3KikIfSgtoo7mv9B58iuvYAcoJBLEPJO628kwzKt4dP8wg6Fj36sQGGDUa7vLg 45A3mJKg6cxXx2TOhOIR+mrXpnXv6iVVjdaZ9E0aHlQ1rp/7aU8D5f5fZH97pR0z upNROUFbwcignpVbZJ1N8lvr8MHIRXVEHVtCO/p0CUnj3AwfHrQq74XqrlKWCM/U sv23n1vMMVUH8i7I0nJCQDU0aNwjJaulGSIRstcdCtlTtIqDrx3HsPRwQNIEwWp5 7DmUIoXrkVuIXBgkEJys8itUDMvy8K4= -----END CERTIFICATE-----Generated at Sat Apr 19 12:26:35 2025 by rpki-client