$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8a24e5eb-5182-35cf-8092-d182c5fe1122.roa File: 8a24e5eb-5182-35cf-8092-d182c5fe1122.roa (raw, json) Hash identifier: eyfH2eG5CgimBSb/KLtXQZ1SttIdNwf77wZoamZEvNw= Subject key identifier: 48:FC:EE:7C:E9:18:50:FB:C3:36:43:A6:D1:0B:92:E9:31:ED:C2:74 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C1030B2BB4B2C18EB480 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8a24e5eb-5182-35cf-8092-d182c5fe1122.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 142.79.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c1:03:0b:2b:b4:b2:c1:8e:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=c850fafe-1d29-4ab5-9fd6-c92edf6dc830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:d7:bd:92:82:68:0e:52:6e:d3:75:64:5d:b7: ef:ae:88:2f:ab:fc:b1:78:b9:79:27:3c:91:01:e6: 7d:1c:a9:ae:32:f4:5e:52:b2:10:1e:c2:57:2f:af: 0d:36:9e:e7:9a:d0:ac:ce:17:0a:01:22:47:d0:aa: 10:df:57:8c:94:1b:db:0d:48:95:0f:9a:26:5c:71: cf:ab:a0:b6:62:16:2d:a3:d8:8b:e7:bf:42:cc:8c: 63:1d:1c:fd:f4:22:d4:48:bf:3a:45:a9:82:c4:17: 06:d8:4d:50:94:74:33:e6:f5:61:68:d4:14:78:64: fe:05:6e:88:44:ba:29:04:9c:5f:13:a1:10:80:b5: d0:3a:71:bf:1a:3d:0b:09:c1:0b:75:2c:1b:bf:90: 7a:53:08:f9:a0:55:0a:b2:d4:1b:43:3f:d9:e7:55: b2:c6:36:06:a3:3a:b9:bd:e5:6b:db:31:33:9e:f0: f6:3b:97:ab:6f:dd:c8:d0:b2:3c:86:42:69:ca:ce: 1b:7a:b0:66:62:fa:e7:59:e9:d1:8f:77:a6:36:5a: 7d:c2:4b:cd:60:84:3c:18:c7:be:af:c7:d3:8d:6f: 4d:af:b1:39:68:79:2f:44:c2:6b:41:b3:7b:36:de: f4:32:fb:3e:62:17:37:ca:cc:54:81:49:ba:66:27: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FC:EE:7C:E9:18:50:FB:C3:36:43:A6:D1:0B:92:E9:31:ED:C2:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8a24e5eb-5182-35cf-8092-d182c5fe1122.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:16:e9:aa:38:4a:85:f8:16:be:9e:36:64:5e:cb:02:f2:99: c3:a2:c1:7e:62:c9:ca:71:86:f0:2e:bf:7a:c6:d7:57:26:ce: 6c:70:c9:7d:76:97:96:8b:0c:2d:ad:89:c3:fe:b7:d7:56:25: 7c:5e:56:49:a2:e2:0d:ff:d6:20:40:33:54:90:98:ef:41:ec: 5c:a1:74:96:35:5a:62:4a:c9:f7:aa:df:e9:a9:c3:22:64:73: a2:09:39:b6:a4:ec:53:1b:d1:3b:f2:dd:95:a1:f5:c1:65:b4: 5d:ac:7a:69:4e:ab:48:7a:1e:39:91:f5:90:0a:1b:2f:a8:f1: 82:97:bc:f1:e0:57:8a:82:1e:a4:1f:0e:90:11:fc:d1:00:25: f9:c1:9b:a9:5c:66:09:3d:cf:7a:41:9e:cd:4d:3c:fb:c1:50: 06:68:cf:5c:c7:e4:9e:4a:7f:83:ec:f9:ea:74:1b:3a:ac:2e: fa:6b:f5:22:d0:24:18:f0:97:3e:6c:67:cb:f8:c8:82:eb:c5: c5:de:6a:4d:d0:57:71:c4:f4:22:10:b0:6b:22:db:fa:f8:f8: 30:aa:12:d4:17:ae:18:43:4c:4d:38:d4:53:00:c7:17:84:9a: 3f:dc:2c:b5:7d:15:a1:f3:39:a7:78:57:5b:8a:43:c7:2f:ce: 46:31:4a:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsEDCyu0ssGOtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk Yzg1MGZhZmUtMWQyOS00YWI1LTlmZDYtYzkyZWRmNmRjODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNe9koJoDlJu03VkXbfvrogvq/yxeLl5JzyR AeZ9HKmuMvReUrIQHsJXL68NNp7nmtCszhcKASJH0KoQ31eMlBvbDUiVD5omXHHP q6C2YhYto9iL579CzIxjHRz99CLUSL86RamCxBcG2E1QlHQz5vVhaNQUeGT+BW6I RLopBJxfE6EQgLXQOnG/Gj0LCcELdSwbv5B6Uwj5oFUKstQbQz/Z51WyxjYGozq5 veVr2zEznvD2O5erb93I0LI8hkJpys4berBmYvrnWenRj3emNlp9wkvNYIQ8GMe+ r8fTjW9Nr7E5aHkvRMJrQbN7Nt70Mvs+Yhc3ysxUgUm6ZidZUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEj87nzpGFD7wzZDptELkukx7cJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvOGEyNGU1ZWItNTE4Mi0z NWNmLTgwOTItZDE4MmM1ZmUxMTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjk90MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUW6ao4SoX4Fr6eNmReywLymcOiwX5iycpxhvAuv3rG11cmzmxwyX12 l5aLDC2ticP+t9dWJXxeVkmi4g3/1iBAM1SQmO9B7FyhdJY1WmJKyfeq3+mpwyJk c6IJObak7FMb0Tvy3ZWh9cFltF2semlOq0h6HjmR9ZAKGy+o8YKXvPHgV4qCHqQf DpAR/NEAJfnBm6lcZgk9z3pBns1NPPvBUAZoz1zH5J5Kf4Ps+ep0GzqsLvpr9SLQ JBjwlz5sZ8v4yILrxcXeak3QV3HE9CIQsGsi2/r4+DCqEtQXrhhDTE041FMAxxeE mj/cLLV9FaHzOad4V1uKQ8cvzkYxSt8= -----END CERTIFICATE-----Generated at Fri Mar 14 13:37:44 2025 by rpki-client