$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9100553e-9dda-370f-9c2d-8c5195e4e885.roa File: 9100553e-9dda-370f-9c2d-8c5195e4e885.roa (raw, json) Hash identifier: jNUhQY2KR0SOUZot1DDCHk446NxDIecDiAVYAlSayr8= Subject key identifier: B7:5E:42:55:10:B7:D9:FA:6E:48:0A:62:27:E5:C1:35:E1:00:21:9A Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848F4F6A6C5B5FB416594B2AAC0 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9100553e-9dda-370f-9c2d-8c5195e4e885.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 53508 IP address blocks: 206.255.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f6:a6:c5:b5:fb:41:65:94:b2:aa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=728e16be-2df5-4591-9472-59ff1aa1cc02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b2:24:ff:0e:59:7a:40:1e:78:e2:ee:df:3a: 2d:3c:ad:6a:7b:b5:17:f0:bb:ca:e4:45:58:c0:a3: f3:7c:56:45:c2:ec:f6:28:bc:18:9a:7a:cd:36:41: f6:44:9a:be:17:07:0f:c0:b5:f2:60:87:ee:97:33: 54:45:f2:a4:e9:e0:5c:1d:cd:33:db:b6:0d:b9:f4: 14:50:ca:50:c0:97:4e:9a:f4:e8:80:f9:53:cb:4a: a1:19:23:c3:b6:47:62:41:c6:71:dd:92:0e:9d:4b: 74:35:22:6b:4e:ee:90:ba:b8:97:fe:4d:bf:f6:17: e3:23:26:f1:7e:b3:6c:ae:ba:8c:24:3b:10:d5:92: ef:52:f0:94:10:36:fb:e0:c6:f9:13:3c:eb:38:55: 25:01:86:ca:97:e0:44:cf:70:79:1f:32:f6:10:20: 2b:da:81:6c:e9:fc:35:94:25:78:fe:70:e0:09:b8: 7c:02:4e:c0:84:97:64:cf:ca:c8:16:ef:c9:5a:b5: b8:1f:f8:31:0a:d7:aa:91:ef:0c:f3:e4:d8:29:bf: d5:25:5b:a1:d3:3e:d7:c8:66:ab:6f:25:63:e6:bb: b1:52:fa:cb:10:d5:2b:3e:a1:2e:e5:4c:23:69:25: c5:c3:e7:9e:d9:99:23:6d:0e:46:5c:ef:7a:f9:a7: dd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5E:42:55:10:B7:D9:FA:6E:48:0A:62:27:E5:C1:35:E1:00:21:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/9100553e-9dda-370f-9c2d-8c5195e4e885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:c8:e8:0e:ce:1d:f8:ea:8a:6e:13:cf:cc:35:1f:aa:f0:27: 2a:ce:00:3a:24:7f:26:55:07:d5:cf:01:49:0e:e2:41:fd:2c: 7b:58:4a:cf:bb:f7:7f:31:92:92:c5:f3:a4:22:32:1e:7e:26: c9:5f:72:0f:d8:9a:c4:16:67:be:a9:c1:2b:79:33:22:d8:2e: 0b:d2:94:b5:f7:a5:43:47:d9:06:72:65:d3:eb:be:f0:0f:78: 6a:20:0d:4a:ae:c9:bb:af:1f:b6:bf:63:d8:36:a0:9d:14:29: e8:9a:70:ec:e6:40:4f:30:80:85:5d:52:3b:60:10:54:57:83: 64:28:01:3e:21:e3:ba:cd:2b:84:41:af:d7:29:94:f1:9e:df: ba:25:54:2f:59:76:7a:18:24:0c:25:59:0d:35:78:f3:a1:f9: 47:3d:ae:5c:d4:98:2b:78:31:89:98:e7:79:9b:2f:b8:17:be: 76:f6:33:83:9d:9d:9d:c9:91:72:e6:cf:a0:79:57:11:eb:97: d3:51:31:42:ea:0b:98:89:3e:5b:35:f4:12:c2:e6:e9:f5:e3: 28:d3:7b:2f:a5:f0:3d:b1:5a:d7:72:5d:3f:88:18:f8:0e:5a: bb:b4:58:fc:08:b8:62:dc:cc:4c:ef:12:31:04:3d:e7:9b:61: ca:5a:2a:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qbFtftBZZSyqsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk NzI4ZTE2YmUtMmRmNS00NTkxLTk0NzItNTlmZjFhYTFjYzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7Ik/w5ZekAeeOLu3zotPK1qe7UX8LvK5EVY wKPzfFZFwuz2KLwYmnrNNkH2RJq+FwcPwLXyYIfulzNURfKk6eBcHc0z27YNufQU UMpQwJdOmvTogPlTy0qhGSPDtkdiQcZx3ZIOnUt0NSJrTu6QuriX/k2/9hfjIybx frNsrrqMJDsQ1ZLvUvCUEDb74Mb5EzzrOFUlAYbKl+BEz3B5HzL2ECAr2oFs6fw1 lCV4/nDgCbh8Ak7AhJdkz8rIFu/JWrW4H/gxCteqke8M8+TYKb/VJVuh0z7XyGar byVj5ruxUvrLENUrPqEu5UwjaSXFw+ee2ZkjbQ5GXO96+afdFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdeQlUQt9n6bkgKYiflwTXhACGaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvOTEwMDU1M2UtOWRkYS0z NzBmLTljMmQtOGM1MTk1ZTRlODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDI6A7OHfjqim4Tz8w1H6rwJyrOADokfyZVB9XPAUkO4kH9LHtYSs+7 938xkpLF86QiMh5+Jslfcg/YmsQWZ76pwSt5MyLYLgvSlLX3pUNH2QZyZdPrvvAP eGogDUquybuvH7a/Y9g2oJ0UKeiacOzmQE8wgIVdUjtgEFRXg2QoAT4h47rNK4RB r9cplPGe37olVC9ZdnoYJAwlWQ01ePOh+Uc9rlzUmCt4MYmY53mbL7gXvnb2M4Od nZ3JkXLmz6B5VxHrl9NRMULqC5iJPls19BLC5un14yjTey+l8D2xWtdyXT+IGPgO Wru0WPwIuGLczEzvEjEEPeebYcpaKoQ= -----END CERTIFICATE-----Generated at Fri Mar 14 11:11:03 2025 by rpki-client