$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa File: b39705dc-aa8e-3894-ae97-fe60e59e609d.roa (raw, json) Hash identifier: wudZWT36ImMIZ0HlfOMTvHGttZYeEDMxiA7WEM3T3bE= Subject key identifier: 9C:A8:49:21:66:DD:74:E4:CF:35:E6:23:9A:57:34:EB:84:3E:9D:52 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C17A51EAA67075539F80 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 206.255.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c1:7a:51:ea:a6:70:75:53:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=d2129686-9c93-4e19-916b-296026e4f203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b8:0e:12:ed:58:6b:d2:8b:32:d5:3c:fb:c1: bb:a2:7c:64:c9:94:ae:f6:c3:e3:4b:30:21:81:90: 9e:ff:05:5f:67:cf:14:c7:30:6f:19:5b:d5:11:1c: 79:02:3f:be:c4:4a:66:98:92:2c:9f:2f:77:54:5c: 57:f7:ed:08:84:28:f4:ba:69:d5:35:9f:f5:f3:18: 70:23:3b:88:3d:4f:63:69:14:49:22:17:f2:3a:90: 37:99:9f:2d:27:16:84:a7:28:ae:ca:3c:e4:a6:3e: cb:73:51:9d:dd:5e:d8:65:93:7e:14:ae:25:ca:34: ba:d4:c5:ac:2f:c2:ba:a1:04:b5:fd:e8:1c:af:05: 89:04:5e:6a:12:69:9f:99:34:c4:ed:ff:7e:1a:2e: e0:6d:0f:1a:2f:60:d4:c7:89:6c:7d:af:8a:8d:c7: 9e:15:4d:a6:d1:53:ae:a6:50:fd:6b:07:82:c3:a2: e7:e4:e8:8a:32:52:66:b1:78:d5:38:6f:af:fb:ae: 13:a7:7e:70:d9:f3:60:33:04:49:44:f3:d8:b8:98: 49:8f:a8:10:4c:12:a7:43:68:c9:76:42:73:3d:46: 22:13:e9:5c:6f:d8:46:88:95:7c:71:43:6f:cd:ed: 64:a6:c9:8a:9e:8f:2d:04:51:4f:71:08:a1:ec:35: a7:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A8:49:21:66:DD:74:E4:CF:35:E6:23:9A:57:34:EB:84:3E:9D:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b39705dc-aa8e-3894-ae97-fe60e59e609d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 206.255.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:15:c5:36:21:69:d0:91:a7:ff:1e:fb:f3:d9:f6:fa:a6:1a: f5:90:c3:7a:b8:6e:93:7e:88:40:64:88:1b:74:dd:ea:b1:fc: f4:a5:9a:23:3c:4a:b0:ad:53:05:69:4c:9f:ae:0e:64:50:cd: c6:ee:60:bd:ae:ac:ed:1f:e4:57:d9:03:a2:68:07:b5:5d:b7: 5e:f4:96:1d:0b:ce:3f:f6:49:6a:c8:dd:8b:f3:2f:9e:dc:34: 4c:9e:69:8b:e8:30:61:2d:18:ba:ad:28:2f:a7:e8:0c:47:02: 4c:e1:3e:85:d9:5e:66:29:a6:8b:bb:d0:41:b0:d4:cd:38:12: 18:37:d6:6e:92:0d:1b:15:d8:62:48:5c:88:65:80:d8:45:b0: 85:8c:d3:27:69:e0:2f:ee:1d:c2:7c:a7:a3:bb:9a:ec:bc:2b: 3d:0a:11:90:5d:75:ab:24:c1:d7:94:de:28:48:50:1b:7e:13: 00:ec:a4:a8:a9:4b:5f:de:bd:89:66:6c:bf:e5:7c:ce:8d:a2: 0a:09:91:a5:0c:38:df:4b:1b:b0:e6:77:83:b7:d4:39:da:f0: a7:27:f2:1c:b3:36:0b:36:11:a2:ad:ed:ec:71:fe:65:0a:d4: e6:49:01:b0:31:9a:3a:ea:f2:40:2c:30:2b:fc:ae:03:d7:a3: 8e:92:27:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsF6UeqmcHVTn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDIxMjk2ODYtOWM5My00ZTE5LTkxNmItMjk2MDI2ZTRmMjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7gOEu1Ya9KLMtU8+8G7onxkyZSu9sPjSzAh gZCe/wVfZ88UxzBvGVvVERx5Aj++xEpmmJIsny93VFxX9+0IhCj0umnVNZ/18xhw IzuIPU9jaRRJIhfyOpA3mZ8tJxaEpyiuyjzkpj7Lc1Gd3V7YZZN+FK4lyjS61MWs L8K6oQS1/egcrwWJBF5qEmmfmTTE7f9+Gi7gbQ8aL2DUx4lsfa+KjceeFU2m0VOu plD9aweCw6Ln5OiKMlJmsXjVOG+v+64Tp35w2fNgMwRJRPPYuJhJj6gQTBKnQ2jJ dkJzPUYiE+lcb9hGiJV8cUNvze1kpsmKno8tBFFPcQih7DWnswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyoSSFm3XTkzzXmI5pXNOuEPp1SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYjM5NzA1ZGMtYWE4ZS0z ODk0LWFlOTctZmU2MGU1OWU2MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzv/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIgVxTYhadCRp/8e+/PZ9vqmGvWQw3q4bpN+iEBkiBt03eqx/PSlmiM8 SrCtUwVpTJ+uDmRQzcbuYL2urO0f5FfZA6JoB7Vdt170lh0Lzj/2SWrI3YvzL57c NEyeaYvoMGEtGLqtKC+n6AxHAkzhPoXZXmYppou70EGw1M04Ehg31m6SDRsV2GJI XIhlgNhFsIWM0ydp4C/uHcJ8p6O7muy8Kz0KEZBddaskwdeU3ihIUBt+EwDspKip S1/evYlmbL/lfM6NogoJkaUMON9LG7Dmd4O31Dna8Kcn8hyzNgs2EaKt7exx/mUK 1OZJAbAxmjrq8kAsMCv8rgPXo46SJ38= -----END CERTIFICATE-----Generated at Fri Apr 18 07:49:41 2025 by rpki-client