$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa File: b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa (raw, json) Hash identifier: dDC3Xbm2sKg6vs3PyJ/RgssemFNOrvj3cz7gEsNY9D8= Subject key identifier: 7E:C3:DC:AF:F3:FB:C7:BD:91:4C:C1:1E:D6:D1:67:1C:A9:EC:23:DD Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C8D3F40CC6C6E72D6000 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 24.89.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c8:d3:f4:0c:c6:c6:e7:2d:60:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=0227a8f6-6ee2-47db-8426-7732e494ef7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:88:8f:e8:e9:31:50:1d:cc:9c:5c:6c:c1:c8: 9e:11:57:6d:5c:73:b7:9a:03:95:f7:b4:ad:88:4c: 15:fa:c3:b8:df:8b:4c:bb:eb:2f:1a:30:cb:72:38: fd:2d:0d:16:7b:07:06:90:6a:76:da:ca:aa:66:f4: d6:bb:de:c6:f2:8a:84:37:fe:65:83:27:50:a8:73: 7b:28:15:37:cd:75:72:e9:56:39:8d:11:67:3c:c2: 59:18:7d:76:7f:15:ad:43:4d:92:9f:99:07:48:4c: c5:9d:38:03:43:01:99:11:5f:ea:98:b4:44:76:c0: d6:29:2b:aa:c9:13:73:c2:cd:de:4f:50:8a:11:41: 2c:6e:57:4e:f2:28:80:79:66:ff:78:c3:d5:d3:a5: 0a:f2:ae:ab:07:58:f5:78:cd:1b:c8:63:f1:4a:9b: fe:f6:a2:cd:52:21:00:d3:6e:66:8c:36:a9:26:de: 6e:66:51:98:c7:54:bd:ab:38:38:c1:6d:e3:a4:21: b4:49:c4:ad:3c:7e:c5:a9:aa:db:94:28:63:e2:4c: 8e:dd:c5:c3:80:04:47:d3:50:25:96:47:a8:80:6a: 0f:85:82:48:06:7b:49:5d:bf:53:9c:57:7e:37:2e: 4d:65:db:06:c7:4e:88:61:51:73:1e:af:b6:fd:42: 8e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:C3:DC:AF:F3:FB:C7:BD:91:4C:C1:1E:D6:D1:67:1C:A9:EC:23:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/b4e7f5cf-daa4-3c6d-925c-2c89820f6668.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 24.89.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:8e:53:64:a4:c6:ee:d6:87:f6:62:a4:70:8f:5a:81:f6:e8: dc:40:64:ee:3d:d1:ee:dc:a8:db:2a:d7:48:b3:59:7b:79:5e: 23:06:5e:a9:68:cc:41:41:12:75:ab:1e:df:b9:6c:98:43:33: e7:97:b9:da:04:6c:7d:d3:90:09:b3:7e:57:06:7e:60:44:cd: f7:b8:91:1b:21:f7:97:e8:77:8b:1d:2a:1e:68:f4:9b:72:8d: 3f:18:e6:03:85:bb:b7:63:c3:b6:40:d3:0e:c2:13:1b:ea:08: 08:a4:3c:2a:45:0a:6c:33:a4:73:bb:65:d3:8d:bf:43:99:bb: 15:b4:7c:5b:fe:36:75:7a:c2:7c:01:bf:a5:ef:bb:eb:cd:eb: 8b:f5:ec:9a:e4:73:dc:1b:e5:65:6f:96:98:a7:1c:5d:d4:c1: 84:0e:fa:cc:29:f9:da:24:44:09:be:a6:b7:ef:b1:94:c0:13: be:43:3b:6d:0f:e8:3c:64:8c:6e:f7:56:07:34:ee:c0:a3:26: 59:60:1b:6f:f3:4f:f1:c2:f2:9b:6c:8d:23:a1:c7:bd:ca:74: d4:3a:31:bb:1d:72:f5:a9:4f:94:ca:89:00:f0:fa:3c:ab:aa: d0:59:5e:18:ac:8e:a0:a8:59:1e:03:74:11:e5:f8:d4:50:d0: c5:48:ac:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsjT9AzGxuctYAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDIyN2E4ZjYtNmVlMi00N2RiLTg0MjYtNzczMmU0OTRlZjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioiP6OkxUB3MnFxswcieEVdtXHO3mgOV97St iEwV+sO434tMu+svGjDLcjj9LQ0WewcGkGp22sqqZvTWu97G8oqEN/5lgydQqHN7 KBU3zXVy6VY5jRFnPMJZGH12fxWtQ02Sn5kHSEzFnTgDQwGZEV/qmLREdsDWKSuq yRNzws3eT1CKEUEsbldO8iiAeWb/eMPV06UK8q6rB1j1eM0byGPxSpv+9qLNUiEA 025mjDapJt5uZlGYx1S9qzg4wW3jpCG0ScStPH7FqarblChj4kyO3cXDgARH01Al lkeogGoPhYJIBntJXb9TnFd+Ny5NZdsGx06IYVFzHq+2/UKOgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7D3K/z+8e9kUzBHtbRZxyp7CPdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYjRlN2Y1Y2YtZGFhNC0z YzZkLTkyNWMtMmM4OTgyMGY2NjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDGFkoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaOU2Skxu7Wh/ZipHCPWoH26NxAZO490e7cqNsq10izWXt5XiMGXqlo zEFBEnWrHt+5bJhDM+eXudoEbH3TkAmzflcGfmBEzfe4kRsh95fod4sdKh5o9Jty jT8Y5gOFu7djw7ZA0w7CExvqCAikPCpFCmwzpHO7ZdONv0OZuxW0fFv+NnV6wnwB v6Xvu+vN64v17Jrkc9wb5WVvlpinHF3UwYQO+swp+dokRAm+prfvsZTAE75DO20P 6DxkjG73Vgc07sCjJllgG2/zT/HC8ptsjSOhx73KdNQ6MbsdcvWpT5TKiQDw+jyr qtBZXhisjqCoWR4DdBHl+NRQ0MVIrNc= -----END CERTIFICATE-----Generated at Fri Apr 18 07:43:53 2025 by rpki-client