$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa File: 8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa (raw, json) Hash identifier: uAT5PbIZrN8nHYL8K73eNLsoc0+D54F70KGCF4Lmr0g= Subject key identifier: 42:BC:AC:C5:9A:50:2E:98:28:18:BE:9F:54:D6:8D:37:84:46:60:58 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F432858481C9A6F79243EE10CB44DF980 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa Signing time: Fri 06 Dec 2024 02:00:39 +0000 ROA not before: Fri 06 Dec 2024 02:00:39 +0000 ROA not after: Thu 06 Mar 2025 02:00:39 +0000 asID: 53508 IP address blocks: 206.255.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:9a:6f:79:24:3e:e1:0c:b4:4d:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Dec 6 02:00:39 2024 GMT Not After : Mar 6 02:00:39 2025 GMT Subject: CN=3f2bd9bf-1eec-4e2a-9d7c-60ebc62848de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:16:08:6e:29:8a:02:43:5c:28:58:b2:6a:19: 1f:18:1d:05:54:9c:2b:e2:99:8e:ec:d7:80:cb:db: 5e:25:dc:67:57:b6:a9:32:5a:2d:e4:c0:a7:b8:ee: cd:f0:70:32:d4:65:c1:34:e3:31:f6:5e:c9:dd:ad: 2e:5a:fa:10:29:06:00:63:a7:70:de:e5:7d:cb:cb: a9:e3:62:b9:98:64:ec:e6:71:06:51:d9:21:d0:1e: b2:a7:6a:7c:40:45:1d:f3:31:50:96:52:ec:f5:48: 28:4e:e5:57:80:94:b7:1d:7a:10:de:29:d6:51:2f: 2f:f5:a4:e5:24:1b:31:1d:ca:ef:eb:d6:8d:d8:ba: 6b:95:1e:4d:52:96:e0:0c:b2:76:47:2f:16:53:8c: 91:72:4d:b5:a1:19:5b:3f:99:ae:b9:d4:92:3f:6b: 8b:12:47:9d:bc:78:76:b1:3d:d8:e6:fb:9c:1f:fb: b1:45:ce:ea:65:d9:9f:0a:68:fa:34:6e:b8:99:01: 11:74:4b:23:55:d7:7d:27:34:a0:48:d1:7e:04:1e: cb:66:5f:97:e2:33:4c:94:ec:42:3f:15:32:f5:95: 1d:a1:9e:33:c3:b0:27:51:9d:e0:bb:fd:15:fa:46: f0:b5:48:e6:23:df:f6:48:e7:25:d9:f7:f8:be:4a: 52:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BC:AC:C5:9A:50:2E:98:28:18:BE:9F:54:D6:8D:37:84:46:60:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:05:72:f0:36:94:08:fe:c0:40:04:ff:ff:c3:10:2d:a6:04: 44:0b:55:85:3d:ca:34:34:5d:d7:5f:66:38:06:ae:db:bf:cb: 21:4a:b3:c6:ce:83:26:01:27:ac:ec:70:41:b6:d8:c2:34:17: db:c1:68:ac:6a:d2:c6:ec:50:36:ec:fb:6d:e9:98:5a:74:74: f4:c5:77:c9:e7:5e:5e:02:99:f9:21:37:90:97:e6:c4:51:e5: 7b:31:ff:16:49:bc:c7:13:0f:35:63:07:87:5b:8a:fa:33:dc: 9b:93:79:2f:65:f6:06:a4:31:11:b6:0f:8d:67:38:ef:39:8e: db:50:82:be:ab:63:32:15:cd:bb:fd:c5:0a:11:f5:a5:cb:05: d5:d6:32:91:76:01:b6:0b:38:32:61:a5:2c:2d:14:fc:1e:14: cd:79:07:ac:71:77:ad:bc:04:6e:63:66:3f:a3:4b:75:16:86: 79:cd:8b:85:93:72:35:cc:63:e1:54:0a:d9:ef:49:7e:c6:c0: a7:8f:99:73:f0:fc:8c:15:82:c4:b4:fe:8e:c6:50:2f:9f:2f: 99:62:94:80:25:83:2d:3e:77:2b:c5:bf:ec:34:93:a7:00:7f: f8:f6:fd:28:84:e6:4d:58:f3:64:a5:b3:48:a1:8d:08:57:2b: 19:10:2e:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmm95JD7hDLRN+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk M2YyYmQ5YmYtMWVlYy00ZTJhLTlkN2MtNjBlYmM2Mjg0OGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBYIbimKAkNcKFiyahkfGB0FVJwr4pmO7NeA y9teJdxnV7apMlot5MCnuO7N8HAy1GXBNOMx9l7J3a0uWvoQKQYAY6dw3uV9y8up 42K5mGTs5nEGUdkh0B6yp2p8QEUd8zFQllLs9UgoTuVXgJS3HXoQ3inWUS8v9aTl JBsxHcrv69aN2LprlR5NUpbgDLJ2Ry8WU4yRck21oRlbP5muudSSP2uLEkedvHh2 sT3Y5vucH/uxRc7qZdmfCmj6NG64mQERdEsjVdd9JzSgSNF+BB7LZl+X4jNMlOxC PxUy9ZUdoZ4zw7AnUZ3gu/0V+kbwtUjmI9/2SOcl2ff4vkpSDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEK8rMWaUC6YKBi+n1TWjTeERmBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvOGJkZGZhMDgtYTBkMC0z ZWY2LThlZTItMzBlMWI4NmJkMmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzv9uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUFcvA2lAj+wEAE///DEC2mBEQLVYU9yjQ0XddfZjgGrtu/yyFKs8bO gyYBJ6zscEG22MI0F9vBaKxq0sbsUDbs+23pmFp0dPTFd8nnXl4CmfkhN5CX5sRR 5Xsx/xZJvMcTDzVjB4dbivoz3JuTeS9l9gakMRG2D41nOO85jttQgr6rYzIVzbv9 xQoR9aXLBdXWMpF2AbYLODJhpSwtFPweFM15B6xxd628BG5jZj+jS3UWhnnNi4WT cjXMY+FUCtnvSX7GwKePmXPw/IwVgsS0/o7GUC+fL5lilIAlgy0+dyvFv+w0k6cA f/j2/SiE5k1Y82Sls0ihjQhXKxkQLlA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:23 2025 by rpki-client