$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa File: bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa (raw, json) Hash identifier: D15shrUTuiyhVt9TIZWGuaNhJmxnYdUA9t1HF2JEorY= Subject key identifier: 92:44:47:F0:86:47:0B:2B:BC:71:0F:49:0C:42:0A:01:AF:20:5C:92 Certificate issuer: /CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Certificate serial: 010D0C9F43285848FD56C246ADBD589BB6895F00 Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 53508 IP address blocks: 142.79.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c2:46:ad:bd:58:9b:b6:89:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=2a6bf890-3997-48c8-8aea-1590ee4e4357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:dd:07:64:32:e6:be:3c:a6:45:97:78:33:46: 58:a2:14:10:37:0e:a6:6e:72:68:69:81:36:3e:2c: 13:bd:23:da:f6:98:d5:80:c9:36:4f:a5:3f:16:57: 40:6b:da:69:1b:1f:ad:13:89:5e:a0:f8:25:03:67: 32:ef:05:72:ac:c2:b8:a8:97:67:d2:87:b9:03:ce: e0:47:85:8f:e6:98:85:7a:b0:8b:b9:75:f7:91:09: 95:0f:2b:c6:77:c3:6f:ef:4b:4d:43:5e:57:75:7f: 40:b2:3e:ba:5d:37:88:25:b7:20:e4:8a:4e:4a:aa: a3:af:8c:d3:c4:23:6f:b8:4d:78:f5:58:d5:fb:f4: 88:a9:50:6b:3c:99:b2:32:fc:52:3c:1f:06:a2:ec: 0b:c5:e8:d8:e8:b4:dd:d4:6f:12:da:3f:1e:99:c6: b4:37:a9:98:3b:4f:5a:7b:69:c3:4a:74:11:49:1a: 36:5a:20:f6:05:ff:fd:98:40:71:79:ed:28:ae:bc: 31:a8:4c:50:e5:be:14:8b:85:23:45:7d:eb:b0:ab: 87:0d:02:f9:ea:2a:ce:8c:e9:4a:d1:a7:28:62:0a: 40:3f:10:55:54:49:8a:ed:cb:ce:a2:06:af:48:79: 33:43:9a:6f:cc:ef:0e:cd:c0:6c:4e:1c:c7:32:19: 5b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:44:47:F0:86:47:0B:2B:BC:71:0F:49:0C:42:0A:01:AF:20:5C:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bed1dd50-d36b-3af3-ade0-a9f8d474bcb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl X509v3 Authority Key Identifier: keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer sbgp-ipAddrBlock: critical IPv4: 142.79.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:30:62:a8:46:c7:9a:c9:33:f5:b7:cf:67:84:53:73:9a:c8: d8:e9:f7:09:e4:58:1f:67:5c:f3:ef:69:b0:6f:b0:67:8f:b7: f2:e1:8b:16:94:27:ce:b2:9a:86:f5:86:7d:a3:72:1a:41:dc: 75:b7:2f:63:7e:81:23:76:4b:c0:59:62:06:66:0d:36:e2:45: 98:e6:a3:43:2d:12:bf:d4:11:95:44:b2:9d:3c:5e:cb:a8:bb: 10:e0:4f:12:4d:19:f8:93:37:54:57:7d:ae:b8:e1:1b:ee:a2: 7d:ad:2c:5e:36:a7:d1:c7:20:f2:7c:39:22:80:a5:1c:57:a2: 02:49:2c:87:c4:f7:f5:82:9d:22:54:51:66:aa:e8:01:e9:50: ca:1c:5a:2f:3a:99:3d:8b:87:4e:fc:4b:7a:6c:26:f4:c0:92: db:31:54:b8:09:3d:f7:6f:b4:77:2d:19:ce:d7:4d:48:c4:9b: 00:f2:0f:c3:c6:ee:10:d3:c5:d6:ff:f3:ce:14:6b:71:ac:a9: 37:b1:3b:97:b6:04:e4:36:96:53:93:4d:62:ea:e1:84:a4:45: 8a:56:8a:fc:75:35:e2:24:8d:e9:0c:24:67:84:55:fd:d3:8a: 82:d8:00:bb:81:de:3a:a6:9a:0f:ee:c5:53:cb:c0:21:3f:40: d9:d2:90:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsJGrb1Ym7aJXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNhODJkZDktZWVhNy00NzU2LWI0MjAtOTYwZGZiZTQz NmMzMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MmE2YmY4OTAtMzk5Ny00OGM4LThhZWEtMTU5MGVlNGU0MzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvN0HZDLmvjymRZd4M0ZYohQQNw6mbnJoaYE2 PiwTvSPa9pjVgMk2T6U/FldAa9ppGx+tE4leoPglA2cy7wVyrMK4qJdn0oe5A87g R4WP5piFerCLuXX3kQmVDyvGd8Nv70tNQ15XdX9Asj66XTeIJbcg5IpOSqqjr4zT xCNvuE149VjV+/SIqVBrPJmyMvxSPB8GouwLxejY6LTd1G8S2j8emca0N6mYO09a e2nDSnQRSRo2WiD2Bf/9mEBxee0orrwxqExQ5b4Ui4UjRX3rsKuHDQL56irOjOlK 0acoYgpAPxBVVEmK7cvOogavSHkzQ5pvzO8OzcBsThzHMhlbuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJER/CGRwsrvHEPSQxCCgGvIFySMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4 MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBkZmJlNDM2YzMvYmVkMWRkNTAtZDM2Yi0z YWYzLWFkZTAtYTlmOGQ0NzRiY2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYmNhODJkZDktZWVhNy00NzU2LWI0 MjAtOTYwZGZiZTQzNmMzL2JjYTgyZGQ5LWVlYTctNDc1Ni1iNDIwLTk2MGRmYmU0 MzZjMy5jcmwwHwYDVR0jBBgwFoAUyrimHnY0wTCAiarYWGHqOLodQPQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iY2E4MmRkOS1lZWE3LTQ3NTYtYjQyMC05NjBk ZmJlNDM2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjk94MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMwYqhGx5rJM/W3z2eEU3OayNjp9wnkWB9nXPPvabBvsGePt/LhixaU J86ymob1hn2jchpB3HW3L2N+gSN2S8BZYgZmDTbiRZjmo0MtEr/UEZVEsp08Xsuo uxDgTxJNGfiTN1RXfa644Rvuon2tLF42p9HHIPJ8OSKApRxXogJJLIfE9/WCnSJU UWaq6AHpUMocWi86mT2Lh078S3psJvTAktsxVLgJPfdvtHctGc7XTUjEmwDyD8PG 7hDTxdb/884Ua3GsqTexO5e2BOQ2llOTTWLq4YSkRYpWivx1NeIkjekMJGeEVf3T ioLYALuB3jqmmg/uxVPLwCE/QNnSkP8= -----END CERTIFICATE-----Generated at Fri Apr 18 07:41:51 2025 by rpki-client