$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa File: aae70563-797d-34b1-9db2-9978daa04520.roa (raw, json) Hash identifier: 1xdF2fGuZ7bkjffdXbTsiGGtR39fhrCTXTYOt8LHGq4= Subject key identifier: 79:D8:F7:60:75:5D:EF:86:B9:86:F5:FE:B7:99:A3:90:9D:09:64:75 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C9AEF506135EE0279E00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 206.255.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c9:ae:f5:06:13:5e:e0:27:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=200d622c-2bff-48e6-9465-c5b85665861b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f1:bd:7c:b4:33:05:dc:cb:c8:74:eb:b9:66: e1:43:3d:67:c7:96:6a:7a:d7:4a:83:4b:c4:cc:2c: b4:94:e6:b9:22:fd:7d:ec:26:ef:6f:e9:bd:17:1b: f4:c7:95:3e:05:3e:2a:9f:d4:7b:d3:45:4f:21:c7: b6:01:75:03:9b:cf:f2:15:09:8b:eb:56:8e:2b:c8: b9:f8:97:78:31:59:74:f9:cf:76:0f:4d:ed:1b:cb: 6c:45:22:22:86:84:a2:76:bb:2b:ac:59:29:39:5a: d8:37:9d:a9:f0:45:7c:1a:37:b4:12:2e:16:b8:f8: 01:07:9d:58:a7:4b:97:b9:90:eb:52:03:8b:87:5f: 82:9e:10:6a:ee:11:a9:47:43:a5:52:69:0c:db:0d: 39:21:c7:42:14:de:9c:d6:5f:f8:1c:5f:05:e1:56: d8:42:e3:dc:ab:a3:c6:65:fc:e1:35:83:e0:e3:74: 87:6a:a0:64:d7:44:84:ba:88:6e:73:b2:77:be:87: 81:6a:17:11:dd:bb:7d:8f:a0:6d:1e:4b:a8:16:99: 56:31:9c:dc:7f:80:6a:33:a7:d8:5a:99:c7:79:97: 68:43:f8:cc:ba:a1:e2:81:13:53:9c:04:6f:18:af: 3b:63:fd:dc:28:73:ec:f8:ed:71:bf:f9:93:5c:ad: 82:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D8:F7:60:75:5D:EF:86:B9:86:F5:FE:B7:99:A3:90:9D:09:64:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/aae70563-797d-34b1-9db2-9978daa04520.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ec:ec:3e:0e:13:1e:64:01:1c:94:bf:13:68:f3:1c:4c:5c: a5:e3:3c:ba:f2:14:28:f4:f7:50:df:1d:27:43:88:2a:cd:4c: c5:d7:18:e5:aa:b4:2a:30:88:33:ab:44:5b:7b:8e:e4:3e:53: 61:ab:49:e3:33:b1:f2:e0:e4:e6:41:03:7d:cd:58:4a:d7:e9: 4a:d7:0d:16:23:ac:e2:36:c8:d7:ad:92:14:ba:97:78:a9:33: 73:87:c0:e7:e2:10:03:ff:3c:70:09:06:62:99:39:f4:0a:7d: 2e:2a:87:62:56:65:1e:22:52:db:1d:cf:6d:f6:e6:9f:8d:af: b4:53:17:e1:2b:96:4a:f0:77:9f:68:26:62:40:93:32:2e:14: a9:9d:ff:86:74:e6:9a:5c:19:30:5f:cf:20:7e:35:c0:41:b7: 22:17:09:f6:85:48:1e:c5:55:93:ca:82:f8:bb:49:05:74:ad: 07:7e:7a:72:1d:f7:1b:d9:36:14:17:73:0d:d0:a6:2d:8f:d2: 58:c0:89:fa:e1:07:af:ed:c6:be:2a:6d:41:ec:45:f0:eb:c0: 01:3e:4f:8e:7c:77:63:5b:d4:06:c2:21:7a:51:e8:d7:d5:b8: 53:08:0b:a2:5e:d9:11:5f:fe:0d:6a:5a:aa:f2:22:86:45:7c: 7a:35:7d:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vsmu9QYTXuAnngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjAwZDYyMmMtMmJmZi00OGU2LTk0NjUtYzViODU2NjU4NjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vG9fLQzBdzLyHTruWbhQz1nx5ZqetdKg0vE zCy0lOa5Iv197Cbvb+m9Fxv0x5U+BT4qn9R700VPIce2AXUDm8/yFQmL61aOK8i5 +Jd4MVl0+c92D03tG8tsRSIihoSidrsrrFkpOVrYN52p8EV8Gje0Ei4WuPgBB51Y p0uXuZDrUgOLh1+CnhBq7hGpR0OlUmkM2w05IcdCFN6c1l/4HF8F4VbYQuPcq6PG ZfzhNYPg43SHaqBk10SEuohuc7J3voeBahcR3bt9j6BtHkuoFplWMZzcf4BqM6fY WpnHeZdoQ/jMuqHigRNTnARvGK87Y/3cKHPs+O1xv/mTXK2CHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHnY92B1Xe+GuYb1/reZo5CdCWR1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYWFlNzA1NjMtNzk3ZC0z NGIxLTlkYjItOTk3OGRhYTA0NTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzv9IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDs7D4OEx5kARyUvxNo8xxMXKXjPLryFCj091DfHSdDiCrNTMXXGOWq tCowiDOrRFt7juQ+U2GrSeMzsfLg5OZBA33NWErX6UrXDRYjrOI2yNetkhS6l3ip M3OHwOfiEAP/PHAJBmKZOfQKfS4qh2JWZR4iUtsdz2325p+Nr7RTF+Erlkrwd59o JmJAkzIuFKmd/4Z05ppcGTBfzyB+NcBBtyIXCfaFSB7FVZPKgvi7SQV0rQd+enId 9xvZNhQXcw3Qpi2P0ljAifrhB6/txr4qbUHsRfDrwAE+T458d2Nb1AbCIXpR6NfV uFMIC6Je2RFf/g1qWqryIoZFfHo1fQA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:31:37 2025 by rpki-client