$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8e3a54ca-0c07-3623-aaf9-7167e4525d39.roa File: 8e3a54ca-0c07-3623-aaf9-7167e4525d39.roa (raw, json) Hash identifier: cH3JqBzO11aIj9N0Lj2/50gHJ2+TlxCj1DVVdOMnP5k= Subject key identifier: FC:EF:D7:22:D7:DE:A6:35:F1:34:98:B1:7E:42:62:21:C3:7D:74:94 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F432858481C9A7417F6FD9A1AE963C760 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8e3a54ca-0c07-3623-aaf9-7167e4525d39.roa Signing time: Fri 06 Dec 2024 02:00:39 +0000 ROA not before: Fri 06 Dec 2024 02:00:39 +0000 ROA not after: Thu 06 Mar 2025 02:00:39 +0000 asID: 53508 IP address blocks: 206.255.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:1c:9a:74:17:f6:fd:9a:1a:e9:63:c7:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Dec 6 02:00:39 2024 GMT Not After : Mar 6 02:00:39 2025 GMT Subject: CN=30dc1307-05f0-4323-98f4-477fd9231c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:35:44:6c:c7:a6:84:ab:94:ef:d3:d4:5f:74: a5:8d:e0:60:da:51:94:4c:ba:78:b7:b7:ae:58:62: 24:a6:6a:c2:82:e0:ed:5a:af:a6:2e:59:ae:e2:65: 8c:ed:77:7c:1d:a9:08:04:3d:5d:4b:b4:b6:2b:de: 24:0d:77:58:c6:22:09:bb:ed:ba:50:7e:8e:f8:f1: 19:87:56:9b:df:87:4c:01:3b:58:57:8d:48:ca:8e: e9:12:50:e4:5d:e1:ce:8d:86:05:21:65:b1:9f:86: 3c:d8:78:d9:81:d0:47:7c:4d:c6:a6:26:ec:b9:2c: 60:11:17:8f:a7:90:99:dc:c8:2b:d3:72:c4:39:c3: 48:d2:6f:b2:62:97:18:4a:58:35:d3:76:e9:74:ce: bd:d8:47:92:8b:07:70:4a:22:6a:64:5a:04:6e:4c: 67:2c:d9:19:bd:28:4e:b5:dd:69:6c:d7:07:84:a4: d4:b8:a4:1c:e7:73:42:c3:c2:aa:80:52:aa:4c:1e: 26:86:63:3a:0b:f6:bd:26:57:02:88:a5:92:f1:d3: 56:eb:3d:21:bd:dc:d8:67:7e:24:42:c1:09:9b:e9: 65:cc:5a:74:9c:99:23:70:8b:a6:fe:c4:e2:ac:ff: 8f:e2:6c:31:f2:67:88:89:b0:4f:53:48:f8:fc:ce: f0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EF:D7:22:D7:DE:A6:35:F1:34:98:B1:7E:42:62:21:C3:7D:74:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/8e3a54ca-0c07-3623-aaf9-7167e4525d39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f9:98:50:12:b6:91:82:74:cc:d9:3a:9a:12:92:a2:81:11: e6:87:31:66:01:81:c8:ef:77:8a:44:cf:69:0e:d7:a0:b5:47: 6e:cd:bc:95:1e:76:65:b2:cc:71:f6:d4:16:e5:d3:b0:d4:20: 52:d6:9a:8a:da:63:27:f5:78:4b:76:f1:01:1e:43:b8:51:d2: b0:cb:60:04:bc:ab:b1:5c:ac:d4:fa:c7:f8:40:c6:0f:c9:fc: e7:33:6b:3b:c1:17:38:0a:4d:5c:12:1d:04:00:b6:3c:ac:5c: 2a:50:2d:37:aa:9d:b5:78:8f:10:fd:59:6d:be:20:7a:9a:e0: 05:3d:86:11:ed:1c:9a:e2:94:7d:76:a9:70:c6:32:c9:f1:f1: 13:39:17:90:a3:aa:cc:4f:af:6e:c4:b9:23:b0:38:9d:d7:0b: 39:dc:83:d7:5c:bb:e4:7e:f5:56:bd:24:02:86:3f:de:c7:ec: ab:ee:df:79:b9:77:1a:67:4c:43:b9:78:65:bf:2b:82:a7:a6: b7:ca:bd:ea:bb:27:05:53:aa:75:2b:c8:e5:ab:5d:a5:ae:a8: 3b:7c:45:dd:db:03:7b:f2:9e:82:fd:4f:fd:aa:f5:19:52:93: c1:3c:e7:64:22:c7:fb:e4:0e:89:4e:c6:43:4d:9c:46:99:94: ce:cc:7c:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmnQX9v2aGuljx2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk MzBkYzEzMDctMDVmMC00MzIzLTk4ZjQtNDc3ZmQ5MjMxYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDVEbMemhKuU79PUX3SljeBg2lGUTLp4t7eu WGIkpmrCguDtWq+mLlmu4mWM7Xd8HakIBD1dS7S2K94kDXdYxiIJu+26UH6O+PEZ h1ab34dMATtYV41Iyo7pElDkXeHOjYYFIWWxn4Y82HjZgdBHfE3GpibsuSxgEReP p5CZ3Mgr03LEOcNI0m+yYpcYSlg103bpdM692EeSiwdwSiJqZFoEbkxnLNkZvShO td1pbNcHhKTUuKQc53NCw8KqgFKqTB4mhmM6C/a9JlcCiKWS8dNW6z0hvdzYZ34k QsEJm+llzFp0nJkjcIum/sTirP+P4mwx8meIibBPU0j4/M7weQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzv1yLX3qY18TSYsX5CYiHDfXSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvOGUzYTU0Y2EtMGMwNy0z NjIzLWFhZjktNzE2N2U0NTI1ZDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzv/bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH5mFAStpGCdMzZOpoSkqKBEeaHMWYBgcjvd4pEz2kO16C1R27NvJUe dmWyzHH21Bbl07DUIFLWmoraYyf1eEt28QEeQ7hR0rDLYAS8q7FcrNT6x/hAxg/J /OczazvBFzgKTVwSHQQAtjysXCpQLTeqnbV4jxD9WW2+IHqa4AU9hhHtHJrilH12 qXDGMsnx8RM5F5CjqsxPr27EuSOwOJ3XCzncg9dcu+R+9Va9JAKGP97H7Kvu33m5 dxpnTEO5eGW/K4KnprfKveq7JwVTqnUryOWrXaWuqDt8Rd3bA3vynoL9T/2q9RlS k8E852Qix/vkDolOxkNNnEaZlM7MfEQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:45 2025 by rpki-client