$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa File: 8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa (raw, json) Hash identifier: tJYXfYK72uYYBd5z2IdXPDLrZmYIt4mI2SfOKzhhBss= Subject key identifier: 5B:78:C2:1A:40:04:41:1F:97:79:F6:AA:35:CE:5B:F4:B9:74:CF:E5 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C9CFFC13A179949AE3A0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 206.255.110.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c9:cf:fc:13:a1:79:94:9a:e3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=a41db778-f646-4ced-9153-e72d1ec148b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:29:ae:d9:00:87:c6:bd:42:ee:d3:37:2f:c5: 59:d2:da:47:92:6a:e4:ec:6f:21:a2:f8:7c:27:4a: 67:5e:d3:22:c0:5c:5f:99:d9:a0:86:a5:19:18:b5: 34:73:08:80:33:97:92:91:da:1d:96:01:04:b8:97: 80:43:e5:9f:bd:01:e5:09:4b:50:9f:ef:ce:e4:65: 85:67:75:96:d5:77:c7:80:7f:05:28:1f:51:67:2d: 4e:24:72:33:3a:13:98:33:99:23:02:d3:59:f7:23: 69:10:e3:e0:b7:f7:2a:67:7f:87:50:74:90:a6:70: 72:ae:8c:7e:f8:96:d5:20:54:00:bd:12:ea:6b:c2: 1c:ee:23:3a:46:cd:54:f1:ad:d7:c7:7a:42:ea:8c: 1a:ec:23:ee:e0:42:95:44:02:6c:3a:b1:a0:bc:69: c4:d2:4a:c7:5a:7c:c1:31:75:d3:77:b2:ef:36:7b: 60:a5:8d:fd:62:5d:5e:46:6e:ba:b5:b6:a4:52:63: 7a:84:40:ee:00:aa:b3:b9:ea:7c:43:51:0c:ba:7a: 5f:91:a5:49:27:ba:3f:f2:97:99:b8:06:a8:5e:20: b2:5d:8b:e6:4f:ad:c2:72:df:80:6b:66:e6:57:25: 6d:c5:d7:4d:6f:80:83:3f:a4:45:d9:36:50:c5:2a: 58:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:78:C2:1A:40:04:41:1F:97:79:F6:AA:35:CE:5B:F4:B9:74:CF:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8bddfa08-a0d0-3ef6-8ee2-30e1b86bd2d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.110.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:53:3f:6c:39:af:f1:36:01:a2:75:cf:71:1d:1a:97:20:1d: 96:fc:98:c7:79:dc:b7:24:c2:df:4d:29:bd:9d:5a:d1:fe:5f: 56:64:64:19:9b:39:49:75:25:d3:92:b7:ad:f2:21:cb:55:60: 63:a5:d3:c2:c2:0b:47:c7:89:cb:6d:f5:08:5a:33:91:c7:9f: 33:49:9e:23:8f:ef:f7:0b:bf:e3:76:83:a7:8d:2a:d7:44:44: c3:74:74:c5:fe:64:28:76:cf:fd:44:df:6a:04:d2:bf:60:da: 69:6d:53:5c:b9:2c:fd:52:b1:30:35:e6:d3:63:2a:e9:c7:bf: 7c:1f:fd:c6:9c:56:9c:93:2a:4c:6d:f0:06:71:da:64:28:08: 88:c1:60:de:b3:32:ba:ad:96:ce:bb:b8:f3:3b:4e:64:57:1e: 61:97:73:02:6a:b4:f1:99:88:1e:97:8d:4d:0c:28:50:aa:4d: 36:c4:27:9d:65:50:78:a8:b7:35:57:a6:a1:60:c2:e9:3e:4e: 59:84:79:08:38:f5:12:59:84:2d:06:43:d6:8c:5a:59:5e:4d: 90:b8:d4:93:33:ca:eb:2d:54:04:f7:a0:3d:b4:65:46:da:ed: 74:c8:c6:96:0c:99:23:29:c0:31:0d:27:f4:ef:a4:9a:2d:31: cd:7e:59:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsnP/BOheZSa46AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YTQxZGI3NzgtZjY0Ni00Y2VkLTkxNTMtZTcyZDFlYzE0OGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCmu2QCHxr1C7tM3L8VZ0tpHkmrk7G8hovh8 J0pnXtMiwFxfmdmghqUZGLU0cwiAM5eSkdodlgEEuJeAQ+WfvQHlCUtQn+/O5GWF Z3WW1XfHgH8FKB9RZy1OJHIzOhOYM5kjAtNZ9yNpEOPgt/cqZ3+HUHSQpnByrox+ +JbVIFQAvRLqa8Ic7iM6Rs1U8a3Xx3pC6owa7CPu4EKVRAJsOrGgvGnE0krHWnzB MXXTd7LvNntgpY39Yl1eRm66tbakUmN6hEDuAKqzuep8Q1EMunpfkaVJJ7o/8peZ uAaoXiCyXYvmT63Cct+Aa2bmVyVtxddNb4CDP6RF2TZQxSpYVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt4whpABEEfl3n2qjXOW/S5dM/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvOGJkZGZhMDgtYTBkMC0z ZWY2LThlZTItMzBlMWI4NmJkMmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzv9uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxTP2w5r/E2AaJ1z3EdGpcgHZb8mMd53Lckwt9NKb2dWtH+X1ZkZBmb OUl1JdOSt63yIctVYGOl08LCC0fHictt9QhaM5HHnzNJniOP7/cLv+N2g6eNKtdE RMN0dMX+ZCh2z/1E32oE0r9g2mltU1y5LP1SsTA15tNjKunHv3wf/cacVpyTKkxt 8AZx2mQoCIjBYN6zMrqtls67uPM7TmRXHmGXcwJqtPGZiB6XjU0MKFCqTTbEJ51l UHiotzVXpqFgwuk+TlmEeQg49RJZhC0GQ9aMWlleTZC41JMzyustVAT3oD20ZUba 7XTIxpYMmSMpwDENJ/TvpJotMc1+WVo= -----END CERTIFICATE-----Generated at Fri Mar 14 09:52:02 2025 by rpki-client